A little about **** and computer repair

-

TrailBeast

AKA Mopars4us on Youtube
Joined
Mar 11, 2011
Messages
22,492
Reaction score
12,039
Location
Arizona
I do (own the company) computer service and repair for a living and am one of the top techs in the area for Malware, Virus, and Windows OS trouble shooting.
We get people all the time that come to us for Malware/virus infections and we clean thier systems up and give very effective tools for prevention and removal.
Today, for example I have a guy come back after two weeks saying his Firefox home page used to be MSN and suddenly it changed to "Buump Me.com" and won't stay if he changes it back to MSN.
Also he complains that these "OUTRAGEOUSLY OFFENSIVE" popups are always coming up in his Firefox page no matter where he goes on the internet.

Obviously he is infected with something again right?
Well, sort of in a way but what was causing it all was a program that he apparently downloaded that installed an extension in Firefox called NetVideoHunter.

Now normally, NetVideoHunter is a legit/semi legit free program for downloading video's from Youtube, Myspace and a multitude of other sites with videos on thier pages. (Basically a .flv capture program) for Flash videos.

Well, again I have to say most things that say free on the internet come with a price of some kind.
Usually advertizments, popups, and even other un solicited programs.
In this guy's case he was using it to download **** video's, so guess what his popups were geared towards?

His complaint was "I just had this computer cleaned up two weeks ago, and here we are again. Isn't there something you can do to keep this from happening, or do we need to take it to someone else?"

Now, this question makes a firestorm of responses fly through my head like "If you insist on downloading **** and don't learn to protect your system, or at least learn what can happen when you do, then don't ***** at me that you keep doing the same thing and get the same result."

Or, Even free **** has a price.
Or, the problem is you looking up and downloading ****, and you would still get it infected even if you took it somewhere else.


What I actually say is, "yes it was infected again" and this is the charges this time. (then hand them the bill)
Then they say "How does this keep happening?" to which I reply "Usually from certain websites like recipe sites, sports sites, celebrity sites and/or other questionable sites" (And sometimes for no apparent reason at all)
I try to avoid directly pointing out that the 150 temp files in Windows history that have **** site addresses like "teenagewhores.com" to this 65 year old guy in front of his wife is directly why he is infected again. :D
AND that the video downloader he uses to download video's of Father/Daughter incest is why he gets the "OUTRAGEOUSLY OFFENSIVE"
Pop ups.

Sometimes it's best to just "Take your medicine son" and not try to blame your computer repair person for not doing the job right.:D
 
Just think you have a repeat customer!! I doubt the wife doesn't know though.

Man I don't know how you could answer him with a straight face!!! Lawrence
 
lol The guys at work say give a male a computer and sooner or later he will screw it up looking at nasty stuff.
 
lol The guys at work say give a male a computer and sooner or later he will screw it up looking at nasty stuff.

Imagine what one of our taxi companies ends up with.
(bunch of guys on computers all night)

They aren't working obviously.
 
Speaking of malware, I have been having a lot of problems lately with Windows XP. My computer all but locks up, with the disk light on constantly and the hard drive beating itself to death. After investigation, I find it is Windows doing some kind of scan for malware of all things. This file was uploaded by Windows Update. I disable Updates and a couple of days later I'm having a similar problem. Its Windows Security Essentials doing some similar scan. So, I turn that off. It keeps coming back! So, when I boot the computer, I open task manager and kill both processes - At least three times before it finally dies. I think MS wants me to get mad and throw this computer in the back yard so they can sell me Windows 8. Tried it, hated it, got rid of it!
Sorry, didn't mean to hijack the thread. I just thought everybody would be looking at the **** thread.
 
download two free programs.for xp...

Ccleaner...and Smartdeffragger....

went installing these programs...read what they want to install...like the free extras...just say no...

then click on start and go to run...type in MSCONFIG...click on start up tab...

look at all the crap that starts up with your computer...unclick everything except your virus programs...
 
then click on start and go to run...type in MSCONFIG...click on start up tab...

look at all the crap that starts up with your computer...unclick everything except your virus programs...

Thanks Tony! This tip changed my start up time from four minutes to one!
 
Thanks Tony! This tip changed my start up time from four minutes to one!

It also turned of any software updaters, printer monitoring software, picture downloaders for camera's, wireless network device software, and most anything else you might need to be running in the background.

It works obviously, but it a pretty generic solution that can have other consequences.

(For example, people that use Kodak Easy Share with thier camera's)
You won't be easy sharing anymore with it turned off.
 
I try to avoid directly pointing out that the 150 temp files in Windows history that have **** site addresses like "teenagewhores.com" to this 65 year old guy in front of his wife is directly why he is infected again. :D
AND that the video downloader he uses to download video's of Father/Daughter incest is why he gets the "OUTRAGEOUSLY OFFENSIVE"
Pop ups.

Sometimes it's best to just "Take your medicine son" and not try to blame your computer repair person for not doing the job right.:D


Maybe hand him a card for a doctor that can cure "tennis elbow".... :tongue9:
 
This guy's computer isn't the only thing that's infected. lol I clicked on a Viagra ad through my e-mail. My junk folder is always full.
Without setting up a different account and changing my address it can't be fixed.
 
It also turned of any software updaters, printer monitoring software, picture downloaders for camera's, wireless network device software, and most anything else you might need to be running in the background.

It works obviously, but it a pretty generic solution that can have other consequences.

Yeah, but I can go back in and turn stuff on as needed rather than having it running in the background all the time. Always pissed me off that so many programs that I didn't really use started up on their own every time.
 
It doesn't have to be ****. Nothing is really free.
A couple weeks ago I found a free download of shop manual for 86 Ranger labeled ranger.pdf, download was actually a .rar that extracted to .exe . I deleted all of it.
I've found its usually those who never use the right mouse button who make big mistakes with the left mouse button.
 
Meanwhile, I jus' keep on usin' Linux.................

(Hell, USB sticks are large enough you can put the entire "live" runnable and installable version "on a stick")

http://www.linuxmint.com/
 
Meanwhile, I jus' keep on usin' Linux.................

(Hell, USB sticks are large enough you can put the entire "live" runnable and installable version "on a stick")

http://www.linuxmint.com/

I gave up on trying to get THAT os to run. No video card support, no printer support, no either-net support etc etc etc....I will pass....Thank You very much....
 
Doug I've been running this now for years

Started with "a bunch" of playing around, ran SUSE for awhile, then switched to Ubuntu. Ubuntu and I had a big huge problem when they foisted the awful, the terrible, the "Unity" desktop on "us." Been using Mint ever since.

Only thing I use Winhozed for is stuff I can't figure out how to do in Linux. That amounts to a few times a year. I do use Xtra Putrid on a little dual boot laptop for programming my EFI That is all I use that one for.............this one

http://www.forabodiesonly.com/mopar/showthread.php?t=243060

Even it is dual boot Mint/ XP. I boot into Mint to download any updates, transfer to the XP partition, and then use that for EFI. I also have some other utilities on there such as for the Innovate O2 module, etc, and the now unused Commander 950
 
When a 65 year old man is visiting teenagewhores.com and downloading father daughter incest videos, I wouldnt hesitate pointing it out even in front of the old nasty perverts wife.
 
Yeah, but I can go back in and turn stuff on as needed rather than having it running in the background all the time. Always pissed me off that so many programs that I didn't really use started up on their own every time.

Thats great Brian, most don't have a clue how to do that.
I hate how everything comes with a bunch of other BS too.
I just noticed today that my favorite antivirus program changed it's installation options to where it does not give a choice about installing a couple of extras and was kind of annoyed by it.



It doesn't have to be ****. Nothing is really free.
A couple weeks ago I found a free download of shop manual for 86 Ranger labeled ranger.pdf, download was actually a .rar that extracted to .exe . I deleted all of it.
I've found its usually those who never use the right mouse button who make big mistakes with the left mouse button.

I hear that! :D
There are a lot of clues to be had just by mousing over something and watching the status bar in the browser even, but a lot don't know that either.
There are a ton of free stuff out there, but the user needs to know what they are seeing (Like your exe when it should have just been a file)


Meanwhile, I jus' keep on usin' Linux.................

(Hell, USB sticks are large enough you can put the entire "live" runnable and installable version "on a stick")

http://www.linuxmint.com/

Del, the other day I was repairing a computer that was infected, and I even found where the infection was on the hard drive but it wouldn't let me delete, rename, or move it. (in use) and nothing in processes to kill it.
NO tools would run as it had control over .exe AND .com files to block anything from running.
So I used the Ubuntu disk and booted into the demo and then navigated to where the infection was stored in the windows installation and deleted the entire folder.
Rebooted into windows and the infection wasn't running anymore, and finished cleaning the system up with the usual tools.

I don't use Linux on a regular basis, but it sure can help even just to fix windows.
 
Del, the other day I was repairing a computer that was infected, and I even found where the infection was on the hard drive but it wouldn't let me delete, rename, or move it. (in use) and nothing in processes to kill it.
NO tools would run as it had control over .exe AND .com files to block anything from running.
So I used the Ubuntu disk and booted into the demo and then navigated to where the infection was stored in the windows installation and deleted the entire folder.
Rebooted into windows and the infection wasn't running anymore, and finished cleaning the system up with the usual tools.

I don't use Linux on a regular basis, but it sure can help even just to fix windows.

Have you ever heard of a program called rkill? It is a little program designed by the fine folks at bleepingcomputer.com that is designed to kill any running processes that may be blocking legitimate security programs from running. If not, check it out. I've had great success with it in the past for specifically the issues you stated above.
 
Have you ever heard of a program called rkill? It is a little program designed by the fine folks at bleepingcomputer.com that is designed to kill any running processes that may be blocking legitimate security programs from running. If not, check it out. I've had great success with it in the past for specifically the issues you stated above.

I use Rkill all the time, and NPE.exe (Norton's Power Eraser) is pretty decent for a program from Norton.

I have a pretty extensive collection of programs that I use on a fairly regular basis.

Sometimes an infection will stop Rkill (or whatever) from running and renaming the tool to somebs.com instead of exe will not work either.
One of the things I found was that most infections (besides a root kit) will start up a little bit after windows loads the desktop and if you can get Rkill, for example to run before the infection loads you just might get the jump on it.

A trick I use is to rename the tool to spoolsv.exe and copy it over the real spoolsv.exe in the Windows system32 folder and then reboot.
spoolsv.exe is a file for the Windows printer service that loads early on in the bootup process, so it will start the tool at that point in the startup of windows when windows thinks it is loading the print spooler service.
The infection is not running yet, so the tool runs and does it's job to kill the infection temporarily so other tools can finish the job.

Everything is changing pretty fast and some tricks that used to work don't any more and other ways of getting ahead of the infections need to be used.
It's a constant battle between creators of this crap and the people and software that remove it.
 
Regardless of how clean you made your computer...all your searches are being recorded by the Borg at the NSA so they can create some law one day to use that information against anyone they wish.......probably and most likely will be enforced by the IRS given the latest current events concerning abuse of power and authority.

If they want you bad enough they will find a way with the stroke of a pen or the click of a mouse.
 
-
Back
Top