Desktop Security 2010

[why_me]

I have a dangerous toolbox that I use to fix this type of thing up. Not for the faint of heart. I wish I was closer to you so I could fix you up.

[AGlocker]

Russ, I checked with the guys in the NOC. Their response guide has the same manual clean up procedures that I had posted. They did mention that all the procedures have to take place in the same log in. Every time you log in it replicates itself under a different name. You got a nasty one.

why_me's suggestion about using a simple user account instead of an admin is about the only way to minimize this kind of malware. He knows stuff.

[Bone Stockman]

Lynn, the manual procedure worked with the stuff that was there, but none of those .dll entries existed, and a lot of the other stuff wasn't there either (like there was no process to stop). I've spent 2 nights screwing with this damn thing rather than screwing my wife, and I'm sick of it. I'm gonna try to get all the TTS stuff off of it tonight, then reformat the drive and start from scratch.

It really irks me that McAfee didn't stop it and can't get rid of it.

[thrasher]

Originally Posted by '05Train

Lynn, the manual procedure worked with the stuff that was there, but none of those .dll entries existed, and a lot of the other stuff wasn't there either (like there was no process to stop). I've spent 2 nights screwing with this damn thing rather than screwing my wife, and I'm sick of it. I'm gonna try to get all the TTS stuff off of it tonight, then reformat the drive and start from scratch.

It really irks me that McAfee didn't stop it and can't get rid of it.

That's usually the best way, Russ.

Personally, I have my computers set up to make a backup image of the entire system weekly using MS ImageX. If I ever have an issue (such as the one you're dealing with, or a disk failure) I don't think I can resolve in a couple of hours, I wipe the disk (mil spec) and restore the latest image to disk and be back up and running in a couple or three hours. No need in reinstalling any software.

[Bone Stockman]

OK, explain "image". Does that just duplicate the entire hard drive on an exterior storage device? If so, that sounds like a really good idea. What are you using to wipe the disk?

[Parks]

A squeegee...

[thrasher]

Originally Posted by '05Train

OK, explain "image". Does that just duplicate the entire hard drive on an exterior storage device? If so, that sounds like a really good idea. What are you using to wipe the disk?

Yes, a disk image is basically a replica of your disk. The time it takes to create the image is related to how large and how much data is on your disk and how fragmented it is. The bottleneck in writing the image is the USB connection to external drive its writing to. MS ImageX writes WIM file format, and there is a lot that you can use it for. Read more about it: http://en.wikipedia.org/wiki/Windows_Imaging_Format

I don't know if MS ImageX is available at a retail level. I am a software engineer. There are other imaging software packages, though, that work well... like ghost image.

I don't recall which low level wiping software I'm using, but I'll check when I get home tonight.... There are a few of them out there. A wipe might be overkill for what you want,... a simple format (or better yet low level format) would work too.

[thrasher]

Silly me.

It appears that you already have MS ImageX, as it is installed as part of the windows os. However, it will need to be run from a bootable CD/DVD which has access to external drives since the os can't be running (because of file locking) when you make the image.

I'd check into an image create/restore software (in the form of a bootable CD/DVD) that utilizes ImageX or Ghost Image for the low level work.

[AGlocker]

Originally Posted by thrasher

I am a software engineer.