Police Virus, back again!

[dombooth]

Can you not double check where he's been with ieviewer, or ffviewer etc?

Forgot about that before I removed them, balls.

Dom

 

[HFultzjr]

done Boot into safe mode
done Run MBAR
done M/B Quick Scan
done Run ComboFix
done Boot into normal mode
done Run RogueKiller
done M/B again
done HitmanPro
done ESET Online Scanner

LOTS of tracking cookies from p0rn sites.

Trojan.Siredef.C
Trojan.FakeMS

Dom

There is your answer!

Sandboxie a web browser for his porn surfing only. Configure to auto empty when program ends or upon shutdown.

Use regular browser when he is not surfing for porn or other highly questionable sites.

 

[ABTECH]

LOTS of tracking cookies from p0rn sites.

Trojan.Siredef.C
Trojan.FakeMS

Dom

Well if he is going to keep browsing those sites he is going to keep getting infected. Make sure to kill the system restore points and have him install Malwarebytes Pro it might help. He may have a Flash or Java vulnerability. Which browser does he use mainly?

 

[dombooth]

There is your answer!

Sandboxie a web browser for his porn surfing only. Configure to auto empty when program ends or upon shutdown.

Use regular browser when he is not surfing for porn or other highly questionable sites.

Will do, thanks.

Dom

 

[dombooth]

Well if he is going to keep browsing those sites he is going to keep getting infected. Make sure to kill the system restore points and have him install Malwarebytes Pro it might help. He may have a Flash or Java vulnerability. Which browser does he use mainly?

Removed all restore points,
created 1 new restore point,
He's got MB Pro
Flash/Java etc all up to date.

He uses Chrome.

Dom

 

[HFultzjr]

Will do, thanks.

Dom

One other thing.....

Make sure he doesn't download anything while sandboxed or let anything run outside the sandbox. That would only defeat it's purpose.

 

[dombooth]

One other thing.....

Make sure he doesn't download anything while sandboxed or let anything run outside the sandbox. That would only defeat it's purpose.

Thanks.

Does sandbox still run after the 30 days or does it need to be paid for?

Dom

 

[HFultzjr]

Thanks.

Does sandbox still run after the 30 days or does it need to be paid for?

Dom

It still runs, just gives you a nag screen and not all the options.

It is well worth the price for the full version.....lasts a lifetime....no renewals.

Highly recommend trying for 30 days then look at the paid version.

 

[dombooth]

It still runs, just gives you a nag screen and not all the options.

It is well worth the price for the full version.....lasts a lifetime....no renewals.

Highly recommend trying for 30 days then look at the paid version.

Yeah I'll let him try it for 30 days and see what he thinks.

Dom

 

[HFultzjr]

Yeah I'll let him try it for 30 days and see what he thinks.

Dom

Also,

Make sure to show him how to right click the running icon and select "Terminate All Programs" when he gets in a pinch. I've seen a few things trying to linger but this will get rid of them all. If he doesn't do this, they will be gone on a re-boot.

 

[dombooth]

Also,

Make sure to show him how to right click the running icon and select "Terminate All Programs" when he gets in a pinch. I've seen a few things trying to linger but this will get rid of them all. If he doesn't do this, they will be gone on a re-boot.

I will do, thanks.

Dom