Windows 7 Forums


Reply
Thread Tools

Nasty malware! AVG free not killing it.

 
 
jigsawpuzzl jigsawpuzzl is offline
New Member
Join Date: Sep 2010
Posts: 14
Thanked: 0
 
      09-05-2010
Hi, New member and no pic etc as I'm now paranoid! I have had miscellaneous problems with 2 new pcs with W7 since April...and have found Adware180.Solutions repeatedly now on the 2nd (a 32 bit - the 1st was a Dell 64 bit) and deleted it (as it was already in the virus vault of AVG 9 free and I couldn't see how to delete it from there). It seems to be hijacking a number of my other programs (if that's the right term..) they act up in odd ways and eg, my Clickfree transformer (used for back up) instals (is meant to I believe) an autorun download on the pc so that the back up starts when I plug in the gadget and an external hard drive to the pc. As it is misbehaving (sending me a reminder everytime I boot) I went to clear this...and found duplicate applications for other things in my download folder..eg Rapport (Bank etc protection), and my Netgear wizard (which had also been behaving oddly, eg cutting in and reconnecting the wireless internet connection on booting up) - but I can find NO Clickfree application in downloads or programs. My photoshop Elements 8 has also played up from the start - this also has an autorun I think to check the registry for new photos...
As I delete Adware.180Solutions shut down the pc and then reboot (manually) and run a scan straightaway and it reappears I know it must be something nasty...it may be attacking my hard drive too as after previous problems booting, the local shop replaced the hard drive (and had ghosted the data across - so all the data was the same) and it seemed to work fine for a while - can "a virus" destroy a hard drive as well as corrupt files?
The virus file is a registry key. SDK type "core".HKU\S-1-5-21-1305305394875-2801006857-1732038897-1001\software\SAC. It is very clever as it hides any evidence from the event logs and also turned off the "check for enhanced unwanted programs" in AVG free. Dell spent months and my time and money telling me it wasn't Malware (if it was on that pc too) - so I bought a new pc...and they didin't think it was Malware either! But this weekend has convinced me once and for all...
The local shop told me it started innocuously but the company has been shut for over a year and it has been corrupted.....I suspect I need professional help here - but any tips anyone?? Have you heard of it? I've always had a McAfee protection then AVG more recently when I continued having problems. It seemed this got through...is it a rootkit and what should be done now? I will of course be upgrading to a full version of eg. AVG when the shops open but would that get rid of this? Should I avoid using the pc as more files will be corrupted? (I'm doing this on my old Vista pc which has come up clean on the AVG scan)
Sorry this is SO long. I'd be grateful for any advice from some techies out there!
Cheers

Jigsawpuzzl
 
Reply With Quote
 
 
 
 
roban roban is offline
Established Member
roban's Avatar
Join Date: Nov 2009
Location: East Hampton, NY
Posts: 217
Thanked: 39
Send a message via ICQ to roban Send a message via MSN to roban Send a message via Yahoo to roban
 
      09-05-2010
AVG Free does not give you real time protection. Install Malwarebytes and Microsoft Security Essentials after uninstalling AVG.
 
Reply With Quote
 
TrainableMan TrainableMan is offline
^ The World's First ^
TrainableMan's Avatar
Join Date: May 2010
Location: PA, USA
Posts: 4,654
Thanked: 887
 
      09-05-2010
Before you bother trying to uninstall and install new anti-virus you need to get rid of any infections. I have heard of some viruses that do effect the harddrive controller, so yes it's possible to harm the harddrive. Viruses can also be designed to attach themselves to valid programs and when you run the program it branches to their code, does its' damage and then transfers control back to the program.

I would suggest you read about and then try RKill. Also know that a virus can be stored in memory, on a CD/DVD, on a flash drive, and on a harddrive, or be in a webpage so any media you plug in can infect (or reinfect) you. That is why you need an active virus scanner as Roban is suggesting; but as I said get clean first.
 
Reply With Quote
 
jigsawpuzzl jigsawpuzzl is offline
New Member
Join Date: Sep 2010
Posts: 14
Thanked: 0
 
      09-05-2010
Thanks trainable man...this is scary stuff...I didn't realise AVG free didn't have real time protection - and will get the full version which I hope does...I DO have Malwarebytes though and nothing at all has come up in those scans yet...I think I must take the pc back to the shop as I'd prefer them to have the responsibility...- and hope they really find it this time rather than wiping the hard drive and getting me to rebuild again...as I've done that so many times since April I've lost count! I'll pass on the Rkill suggestion. The virus seems to have attached itself to something I use all the time, such as the Netgear..or My Microsoft office or Clickfree at least...as these were the only things running when it wouldn't reboot after the last strip down and I'd only reloaded my emails, eg Outlook - though 2 windows PAT files (I think) did come across from Clickfree - and these were in different categories in various back ups which struck me as odd eg once they were classified as artwork and another as email.....(Clickfree uses categories to store, view and restore files eg text, photos, spreadsheets etc). How I long for a trouble free life!!!
I've been scanning any memory sticks, and hard drives I plug in..though I think I forgot to check the camera memory cards...and they showed clean but I guess you are saying that AVG may not be working properly...and McAfee wasn't either...and I did try Avira I think for a while...SIGH! Thanks anyhow for your help. I'll avoid the pc for the rest of the day.

Jigsawpuzzl
 
Reply With Quote
 
TrainableMan TrainableMan is offline
^ The World's First ^
TrainableMan's Avatar
Join Date: May 2010
Location: PA, USA
Posts: 4,654
Thanked: 887
 
      09-05-2010
No virus protection can be 100% effective, that is why it has to be updated regularly. I have never used AVG personally and I'm sure some users may use it w/o problem but others on this forum have seen AVG can itself cause system slowdowns and Blue Screens. Your system may not be infected at all but instead is experiencing problems with AVG; that is why roban told you to uninstall it and I believe that is where you should start.
This forum does not recommend purchasing the paid AVG either. The official forum recommendation is exactly what roban said. I was simply suggesting that you run rkill first to see if it could find an already existing virus before you then install Microsoft Security Essentials.
I think the store may well find nothing and simply charge you more money. There are very few guarantees in computer software because they can simply say you got it off the internet or from a flash drive, camera, etc they didn't have; you need to step up and take charge. Try uninstalling AVG. Try running rkill and see if it finds anything. Then install MSE. Run a complete MSE scan. Run a malwarebytes scan. Come back and tell us the results.
 
Reply With Quote
 
catilley1092 catilley1092 is offline
Win 7/Linux Mint Lover
catilley1092's Avatar
Join Date: Nov 2009
Location: North Carolina, USA
Posts: 3,507
Thanked: 511
 
      09-06-2010
AVG, although I realize it's a very popular downloaded software, is NOT recommended for Windows 7, regardless of what program that says it is. I've read way too many forum posts the last couple of years, where the computer can hardly run, and the AV that's usually installed is AVG. I've even personally repaired a computer that AVG had rendered almost useless.

I myself run and recommend MSE, along with Malwarebytes, and have only had one problem, and that was from viewing porn sites with an unknown browser to me at that time (Safari). I mistakenly placed my trust in their "Safe Search" function, and paid dearly for it. It won't happen again.

roban and TrainableMan gave you good advice, if you step up to the plate and take charge of your computer issues yourself, you can save big money, and learn while doing it. You shouldn't need to go to a shop for virus removal, I personally believe that you're being taken for your money, I can see the grins on their faces as you're approaching the shop. An honest computer repair shop doesn't need to rely on crooked methods to make big bucks, they stay busy doing honest work.

Download MSE & Malwarebytes, uninstall AVG, run RKill, then install MSE & Malwarebytes, update them and run them until they report it's clean. It's very simple to do.

And welcome to the forum, jigsawpuzzl! I just noticed that you're a new member. You can really learn a lot here, if you really want to. Computers can appear intimidating to some, but when you learn to do your own maintenance, you're in control. It is not difficult to uninstall an AV and install a new one. There are many tutorials on this site for your use, check them out, and save some money.

Best of Luck,
Cat
 
Reply With Quote
 
Elmer BeFuddled Elmer BeFuddled is offline
Resident eejit
Elmer BeFuddled's Avatar
Join Date: Jun 2010
Location: Durham UK
Posts: 1,050
Thanked: 203
Send a message via Skype™ to Elmer BeFuddled
 
      09-06-2010
I'll go along with all that the others have said but I'd just add that when uninstalling AV products, if they leave any "bits" behind (they will!) these can interfere with your new security programs.

You need to make sure all traces of the removed program have really been removed. You can get total uninstaller tools for most AV programs, you'll need to run the AVG one (obviously). This link has a list of most AV uninstallers with links to downloads. This is the latest listing I found with a quick Google search.
 
Reply With Quote
 
jigsawpuzzl jigsawpuzzl is offline
New Member
Join Date: Sep 2010
Posts: 14
Thanked: 0
 
      09-07-2010
Oh dear! Thank you for your advice guys...but I've only just got into see your posts...the shop first thing in response to my email last night said they would wipe everything again and I'd be best to stay away from my back ups as it was reinfecting...ie I had to lose all my data! I couldn't believe this and didn't think yet another rebuild was the answer...so I contacted my bank's Rapport help (Trusteer) and they told me it wasn't really their issue and to go for Microsoft essentials so I was ready to do that, especially after your advice but didn't feel comfortable when they said "programs don't clash" when I asked if it was compatble with AVG...so I phoned AVG who said yes it would of course conflict...and I bought their full package for a year with their help to remove the virus....3 hours, theychecked lots of sections of the pc visually on a screen share and manually deleted various temp and other files and ran a pcsafety clean and it does seem to have gone (it had attached to an application - or copy of one, that was legitimate) they then checked if my recent issues remained (they didn't) The help was very thorough - and with the tweaks to my start up apps (ie restricting them to the minimum) the pc seems much quicker at the moment..... I felt a bit more cash was worth saving my data when it was offered....I suspect if I'd been on this forum more I'd have grown in confidence and felt like tackling it with your suggestions (I almost did...)...and I'll keep in mind what you suggested for when my license runs out...especially if AVG DOES slow the pc. As the misc problems seemed to grow back over a few weeks after previous"cleans" I'll relax after a month I think! The full AVG version has the real-time scanning that was mentioned...I guess that may slow the pc, but we'll see...I've gone and done it now
Thanks again and I look forward to getting to know you better!
 
Reply With Quote
 
jigsawpuzzl jigsawpuzzl is offline
New Member
Join Date: Sep 2010
Posts: 14
Thanked: 0
 
      09-07-2010
Forgot to say I have had Malwarebytes for a little while and nothing was showing on those scans.....
 
Reply With Quote
 
TrainableMan TrainableMan is offline
^ The World's First ^
TrainableMan's Avatar
Join Date: May 2010
Location: PA, USA
Posts: 4,654
Thanked: 887
 
      09-07-2010
No you cannot run AVG and MSE together.

Also if you have flash drives or external HDs you need to disable autorun and thoroughly scan the contents, otherwise you will likely reinfect yourself. Also disable autorun on your CD/DVD and scan and backup CD/DVDs or just toss them in the trash if you can do without them.

For anyone else reading this post trying to decide what to do, please just try the MSE solution; do not pay the people who left a virus get on your machine in the first place, money to upgrade.
 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Kill persistent malware processes before running your security software Nibiru2012 Security 8 11-27-2010 06:35 AM
Macrium Reflect Free clifford_cooley Free Software Database 1 08-17-2010 05:06 AM
Google serves twice the amount of malware as Bing, Twitter and Yahoo! Nibiru2012 Security 6 07-30-2010 10:11 PM
Macrium Reflect: The fastest disk imaging software is now available as a free edition Nibiru2012 Software 4 03-13-2010 10:50 PM
Paragon Backup app Free till tuesday SIW2 Software 1 01-18-2010 02:30 PM


All times are GMT +1. The time now is 06:46 PM.
W7Forums is an independent website and is not affiliated with Microsoft Corporation.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33