Haiti Earthquake Malware

[DainBramaged]

Hot on the heels of the earthquake in Haiti the rogue AV/AntiVir 2010 people have once again poisoned Google search. If you are searching for information about the disaster be very careful of the links you click on. Do not download anything that tells you that you have a virus or malware or that your computer is under attack





http://www.moosoft.com/blog/

[tekisui]

1. Effin' a-holes.

[Nikki Stone1]

5. Some people are just shit.

Thanks for posting this.

[IndianaGreen]

2. Thanks for the info, DainBramaged

K&R

:kick:

[gateley]

3. I can't understand people sometimes. What miserable human beings. And by

that, I hope they're miserable.

[DainBramaged]

4. Remember this is about those who are the poorest among us

and mankind is as unsympathetic to the plight of the poor as wild animals are to the injured. The difference is we try to make up for them.




:hug:

[blondeatlast]

6. Excellent advice; I've been duped before. Thank you. nt

[customerserviceguy]

7. A computer that I just fixed last month

got infected with this shit again. I would perform the most unspeakable tortures against virus writers!

[HopeHoops]

8. If you get it, reboot into safe mode WITH NETWORK and download Anti-Malware.

It is by Malwarebytes - www.malwarebytes.org/mbam.php

They have a free version that will fix the AV problem (which is a MAJOR problem), and they also have a paid version ($25) that includes real-time scanning. Just download the free version while in safe mode (which doesn't allow AV to run) and run a quick scan. It should take care of it and you can reboot normally after that.

AV is terrible. It slipped past Norton 360 on one of my machines and disabled Task Manager among other things. It puts up a persistent window that is always on top asking you to buy the product (which doesn't exist) and keeps putting up pop-ups out of the system tray that look like normal Windows messages. Then it took over IE and started pulling up porn site screens (which through research I learned were fake anyway). The machine was basically useless until Anti-Malware nuked AV. It is also hard to track down manually because it creates a file name with a random stream of characters. Nasty thing, that.