±Recent Visitors

Recent Visitors to Com-Central!

±User Info-big


Welcome Anonymous

Nickname
Password

Membership:
Latest: HighestAce
New Today: 0
New Yesterday: 0
Overall: 6648

People Online:
Members: 0
Visitors: 558
Total: 558
Who Is Where:
 Visitors:
01: Downloads
02: Photo Gallery
03: Community Forums
04: Community Forums
05: Photo Gallery
06: Community Forums
07: Community Forums
08: Downloads
09: Photo Gallery
10: Community Forums
11: Photo Gallery
12: Community Forums
13: Photo Gallery
14: Home
15: Your Account
16: Community Forums
17: Community Forums
18: Home
19: Community Forums
20: Community Forums
21: Statistics
22: Community Forums
23: Photo Gallery
24: Photo Gallery
25: Community Forums
26: Photo Gallery
27: Community Forums
28: Downloads
29: Downloads
30: Home
31: Community Forums
32: Home
33: Community Forums
34: Community Forums
35: Downloads
36: Community Forums
37: Member Screenshots
38: Community Forums
39: Community Forums
40: Community Forums
41: News
42: News
43: Photo Gallery
44: Downloads
45: Community Forums
46: Downloads
47: Photo Gallery
48: Member Screenshots
49: Photo Gallery
50: Statistics
51: Photo Gallery
52: Downloads
53: Photo Gallery
54: Community Forums
55: Community Forums
56: Home
57: Photo Gallery
58: Photo Gallery
59: Community Forums
60: News Archive
61: Photo Gallery
62: Community Forums
63: Community Forums
64: Downloads
65: Community Forums
66: Downloads
67: Community Forums
68: Community Forums
69: Photo Gallery
70: Community Forums
71: Community Forums
72: Photo Gallery
73: Community Forums
74: Community Forums
75: Community Forums
76: Member Screenshots
77: Community Forums
78: Photo Gallery
79: Community Forums
80: Community Forums
81: Home
82: Photo Gallery
83: Community Forums
84: Community Forums
85: Community Forums
86: Member Screenshots
87: Community Forums
88: Community Forums
89: Community Forums
90: Community Forums
91: Community Forums
92: Home
93: Community Forums
94: Community Forums
95: Community Forums
96: Member Screenshots
97: Home
98: Member Screenshots
99: Community Forums
100: Photo Gallery
101: Community Forums
102: Community Forums
103: Community Forums
104: Photo Gallery
105: Member Screenshots
106: Home
107: Downloads
108: Statistics
109: Community Forums
110: Community Forums
111: Home
112: Home
113: News
114: Photo Gallery
115: Community Forums
116: Community Forums
117: News Archive
118: Photo Gallery
119: Community Forums
120: Community Forums
121: Community Forums
122: Photo Gallery
123: Home
124: Community Forums
125: Photo Gallery
126: Community Forums
127: News
128: Community Forums
129: Community Forums
130: Community Forums
131: Member Screenshots
132: Home
133: Statistics
134: Downloads
135: Community Forums
136: Community Forums
137: Community Forums
138: Downloads
139: Photo Gallery
140: Home
141: Community Forums
142: Community Forums
143: Community Forums
144: Community Forums
145: Downloads
146: Community Forums
147: Home
148: Community Forums
149: Community Forums
150: Community Forums
151: Community Forums
152: Community Forums
153: Home
154: Community Forums
155: Photo Gallery
156: News
157: Community Forums
158: Community Forums
159: Statistics
160: Community Forums
161: Community Forums
162: Home
163: Community Forums
164: Downloads
165: Member Screenshots
166: Community Forums
167: Photo Gallery
168: Photo Gallery
169: Community Forums
170: Community Forums
171: Community Forums
172: Community Forums
173: Community Forums
174: Community Forums
175: Community Forums
176: Community Forums
177: Your Account
178: Community Forums
179: Member Screenshots
180: Community Forums
181: Photo Gallery
182: Downloads
183: Community Forums
184: Photo Gallery
185: Photo Gallery
186: Community Forums
187: Community Forums
188: Photo Gallery
189: News
190: Community Forums
191: Community Forums
192: Home
193: News
194: Community Forums
195: Statistics
196: Photo Gallery
197: Photo Gallery
198: Downloads
199: Community Forums
200: Home
201: Downloads
202: Home
203: Home
204: Your Account
205: Community Forums
206: Community Forums
207: Community Forums
208: Community Forums
209: Community Forums
210: Community Forums
211: Photo Gallery
212: Downloads
213: Community Forums
214: Community Forums
215: Community Forums
216: Member Screenshots
217: Home
218: Community Forums
219: Community Forums
220: Community Forums
221: Downloads
222: Community Forums
223: Community Forums
224: Member Screenshots
225: Community Forums
226: Member Screenshots
227: Community Forums
228: Home
229: Downloads
230: Community Forums
231: Your Account
232: Photo Gallery
233: Community Forums
234: Downloads
235: Statistics
236: Community Forums
237: Downloads
238: Community Forums
239: Community Forums
240: Downloads
241: Downloads
242: Community Forums
243: Community Forums
244: Downloads
245: Community Forums
246: Member Screenshots
247: Community Forums
248: Community Forums
249: Community Forums
250: Home
251: Community Forums
252: Photo Gallery
253: Downloads
254: Community Forums
255: Home
256: Community Forums
257: Your Account
258: Tell a Friend
259: Photo Gallery
260: Home
261: News Archive
262: Home
263: Community Forums
264: Member Screenshots
265: Your Account
266: Community Forums
267: Photo Gallery
268: Photo Gallery
269: Community Forums
270: Home
271: Photo Gallery
272: Photo Gallery
273: Community Forums
274: Home
275: Statistics
276: Photo Gallery
277: Community Forums
278: Statistics
279: Community Forums
280: Community Forums
281: News
282: Home
283: Downloads
284: Community Forums
285: Home
286: Community Forums
287: Community Forums
288: Community Forums
289: Community Forums
290: Community Forums
291: Photo Gallery
292: Photo Gallery
293: Community Forums
294: Community Forums
295: Community Forums
296: Home
297: Community Forums
298: Community Forums
299: News Archive
300: Home
301: Home
302: Your Account
303: Community Forums
304: Community Forums
305: Community Forums
306: Community Forums
307: Community Forums
308: Photo Gallery
309: Home
310: Community Forums
311: Statistics
312: Home
313: Photo Gallery
314: Community Forums
315: Downloads
316: News
317: Member Screenshots
318: Community Forums
319: News Archive
320: Community Forums
321: Community Forums
322: Community Forums
323: Photo Gallery
324: Community Forums
325: Downloads
326: Community Forums
327: Community Forums
328: Community Forums
329: Photo Gallery
330: Community Forums
331: Community Forums
332: Photo Gallery
333: Community Forums
334: Community Forums
335: News
336: Community Forums
337: Community Forums
338: Home
339: Community Forums
340: Community Forums
341: Community Forums
342: Community Forums
343: Home
344: Member Screenshots
345: Community Forums
346: Home
347: Community Forums
348: Photo Gallery
349: Community Forums
350: Community Forums
351: Community Forums
352: Downloads
353: Community Forums
354: News Archive
355: Member Screenshots
356: Member Screenshots
357: Community Forums
358: Community Forums
359: Community Forums
360: Member Screenshots
361: Community Forums
362: Community Forums
363: Community Forums
364: Photo Gallery
365: Statistics
366: Community Forums
367: Community Forums
368: Community Forums
369: Community Forums
370: Home
371: News
372: Member Screenshots
373: Community Forums
374: Community Forums
375: Community Forums
376: Community Forums
377: Photo Gallery
378: Home
379: Community Forums
380: Home
381: Your Account
382: Home
383: Member Screenshots
384: Member Screenshots
385: Photo Gallery
386: Statistics
387: Community Forums
388: Home
389: Home
390: News Archive
391: News
392: Downloads
393: Photo Gallery
394: Community Forums
395: Statistics
396: Member Screenshots
397: Downloads
398: Community Forums
399: Photo Gallery
400: Community Forums
401: Community Forums
402: Photo Gallery
403: Community Forums
404: Home
405: Community Forums
406: News
407: Community Forums
408: Community Forums
409: Home
410: Home
411: Photo Gallery
412: News
413: Community Forums
414: Photo Gallery
415: Community Forums
416: Statistics
417: Photo Gallery
418: Home
419: Member Screenshots
420: Community Forums
421: Home
422: Community Forums
423: Photo Gallery
424: Statistics
425: Community Forums
426: Photo Gallery
427: Community Forums
428: Community Forums
429: Community Forums
430: Community Forums
431: Community Forums
432: Community Forums
433: Community Forums
434: Community Forums
435: Community Forums
436: Photo Gallery
437: Home
438: Member Screenshots
439: Community Forums
440: Photo Gallery
441: Community Forums
442: Community Forums
443: Community Forums
444: Downloads
445: Community Forums
446: Community Forums
447: Home
448: Community Forums
449: Your Account
450: Community Forums
451: Community Forums
452: Home
453: Home
454: Community Forums
455: Community Forums
456: Community Forums
457: Community Forums
458: Community Forums
459: Community Forums
460: Photo Gallery
461: Home
462: Photo Gallery
463: Photo Gallery
464: Home
465: Community Forums
466: Home
467: Community Forums
468: Community Forums
469: Home
470: Home
471: Community Forums
472: Community Forums
473: Community Forums
474: Community Forums
475: Statistics
476: News
477: Community Forums
478: Home
479: Home
480: Photo Gallery
481: Community Forums
482: Downloads
483: Community Forums
484: Member Screenshots
485: Photo Gallery
486: Community Forums
487: Member Screenshots
488: Photo Gallery
489: Downloads
490: Community Forums
491: Community Forums
492: Home
493: Community Forums
494: Community Forums
495: Member Screenshots
496: Community Forums
497: Community Forums
498: News
499: Home
500: Photo Gallery
501: Community Forums
502: Community Forums
503: Photo Gallery
504: Community Forums
505: Community Forums
506: Community Forums
507: Community Forums
508: Community Forums
509: Downloads
510: Home
511: Home
512: Community Forums
513: Your Account
514: Home
515: Community Forums
516: Downloads
517: Photo Gallery
518: Community Forums
519: News
520: Statistics
521: Home
522: Community Forums
523: Community Forums
524: Photo Gallery
525: Home
526: Home
527: Downloads
528: Community Forums
529: Member Screenshots
530: Community Forums
531: Community Forums
532: Your Account
533: Community Forums
534: Community Forums
535: Member Screenshots
536: Downloads
537: Member Screenshots
538: Community Forums
539: Community Forums
540: Downloads
541: Member Screenshots
542: Home
543: Community Forums
544: Photo Gallery
545: Home
546: Member Screenshots
547: Community Forums
548: Downloads
549: Home
550: Photo Gallery
551: Community Forums
552: Downloads
553: Home
554: Community Forums
555: Community Forums
556: News
557: Statistics
558: Community Forums

Staff Online:

No staff members are online!
Neighbor caught a bug.... :: Archived
This is a forum for Software related items such as OS', Virus notices, cool or free programs, etc. Gaming software should go in the gaming folder pertaining to the current info.
Post new topic    Revive this topic    Printer Friendly Page     Forum Index ›  Software

Topic Archived View previous topic :: View next topic  
Author Message
JG300-Ascout
Power User

Offline Offline
Joined: Jan 05, 2005
Posts: 6257
Location: Cyberspace
PostPosted: Tue Aug 10, 2010 8:34 pm
Post subject: Neighbor caught a bug....

Next door neighbor contracted "wuausclt.exe" bug, that affects several system files. Tried to help him out (he's using Firefox and Windows on a laptop. Windows of a version I'm not familiar with). Has no AV, so I tried to do a system restore, but the bug saw right through my little trick and bumps from that page in a fraction of a second. Tries to sell you a wipe for it's own virus.

Next move is to "reset to as system was new", if we can. He doesn't have any special apps on there so only some image files will be lost, if even those. Not critical.

Any other ideas?

_________________
"All facts go to clearly prove that Shades is a thrice-cursed traitor & mentally deranged person steeped in inveterate enmity toward mankind"
Back to top
View user's profile Photo Gallery
Shades
Forum Tree-Rat

Offline Offline
Joined: Mar 07, 2005
Posts: 6475
Location: 3rd Branch up, 'Ye Olde Oak', Green Wood.
PostPosted: Tue Aug 10, 2010 9:01 pm
Post subject: Re: Neighbor caught a bug....

I don't think it's a virus (but it could become one, or more).
It sounds more like adware.
Whatever he does, he MUST NOT click the link to the anti-virus it's trying to sell.
The trouble with that stuff is that it could be relatively harmless in itself, but they tend to also have a secondary package which can install a trojan subsequently to download more serious stuff by clicking their link.

I looked it up in the Symantec database and it's apparently quite adept at chainging registry files.
THIS might help (although it's not quite the same name as yours, with the 's' missing).

I would do the following in sequence:-

1) get good anti-virus, spyware, and firewall ready.

2) Clean disk of everything. Wipe it. There's nothing left on there you want because it's highly likely that thing will have left roots that will just re-install it, or worse, in a few weeks.
Save any important files to DVD for repair later.

3) Start again.

4) Install appropriate security.

5) Load DVD to drive and check for viruses before transferring any old files.

I had one of these a couple of years ago (my fault, I was clicking a sequence of messages without looking and clicked one of these without even seeing it. It was resident in my System Restore memory so, every time I cleaned it out, it would simply re-install itself (and a trojan I can't remember the name of) from there.

One thing, if your friend is still adamant about not bothering with security, just point out how easy it is for someone to take control of his computer, use it as a zombie, and start downlowing (for example) child porn. If someone does, he'd be responsible until and unless he can prove it wasn't him.
He should get security.

_________________
Skwerl's place.

Com-Central's cutest, fluffiest, twitchiest, tail.
CPU > Intel i9-9900k (o/c 4.9GHz); COOLING > BeQuiet! Dark Rock Pro 4;
MOBO > ASUS PRIME Z390-A; RAM > 2x32GB Corsair LPX 2666MHz;
GPU > Gigabyte GEFORCE GTX650Ti PCI-e 3.0 2Gb GDDR5;
AUDIO > Creative X-Fi Xtreme Music (plus - Universal Audio UAD2 Quad Custom accelerator);
HDD > 3x1TB+ M.2. SSDs; LCD > DELL - S2419HGF (1920x1080);
PSU > 650W be quiet Straight Power 11 - 80+ Gold;
CASE > BeQuiet! SILENT BASE 601; OS > Windows 11 Home Advanced (64-bit).
Back to top
View user's profile Visit poster's website ICQ Number
JG300-Ascout
Power User

Offline Offline
Joined: Jan 05, 2005
Posts: 6257
Location: Cyberspace
PostPosted: Tue Aug 10, 2010 11:00 pm
Post subject: Re: Neighbor caught a bug....

Thanks,

I already admonished him about some form of protection and browser settings. It was, in all likelihood, wide open...just used for wife's "facebook". Rolling Eyes

...apart from 7 Y.O. daughter playing a game which also led to an....unsavory link.

I think he needs to wipe it and institute some serious controls.

_________________
"All facts go to clearly prove that Shades is a thrice-cursed traitor & mentally deranged person steeped in inveterate enmity toward mankind"
Back to top
View user's profile Photo Gallery
piney
Power User

Offline Offline
Joined: Jan 24, 2006
Posts: 2330
Location: Republic of Southern New Jersey
PostPosted: Tue Aug 10, 2010 11:47 pm
Post subject: Re: Neighbor caught a bug....

from another forum

"I spent the morning trying to get rid of a virus called AV Security. It tells you that you are infected and the only way out is to buy the AV Security software ($50 for a 3 month license!) This is bogus, they are really after a credit card number. It came right through my AVG free antivirus. I googled it and found it is really running amuck and very hard to delete in that it disables ALL the executables in your Windows files and all your apps like Photoshop, FSDS, FSX, etc. I solved the problem by restoring to yesterday noon (July 3, 2010). "
The Bad news is you may have picked it up days or even weeks ago, one of the newest tricks they are using is a dorman period and or a wait time before the malware payload is released. I had a system infected in March that had been offline for almost 3 weeks and the user triggered the payload part way though the first day back to work after their vacation. In that case the system was off line but powered up while the user was away, when they reutrned the system received a security patch the first thing after they logged in, a complete system scan found nothing (normal procedure for Trend Micro - after any update it runs a full system scan).

The user had still not connected to our Intranet let alone the Internet, however they ran a report and saved it in HTML format, when they double clicked on the html file to open it ie was the program that opened the report, and poof the scareware Infection message, Luckly they were smart enough to pull the plug and call me before they did anything. After some serious investigating I foumd the file that had carried the payload, it had been dormant for almost a month. I was able to clean it with some serious effort and as far as I can tell it was using a cookie counter to trigger the payload, simply stated it went wild when the number of stored cookies reached a specifec amount the payload was released and the next time ie was started the message appears.

I am not trying to scare you or anyone, I just want to point out even if it appears you were infected by a specific site, or had only visited a few in a specific period of time, it is not absolute proof, of the cause you might have picked up the bug weeks ago and something you did or some external signal set it loose."

HTH

"
"

_________________
The only good skwerril is a dead un
Back to top
View user's profile Send e-mail
Shades
Forum Tree-Rat

Offline Offline
Joined: Mar 07, 2005
Posts: 6475
Location: 3rd Branch up, 'Ye Olde Oak', Green Wood.
PostPosted: Wed Aug 11, 2010 7:31 am
Post subject: Re: Neighbor caught a bug....

This is a good description/explanation of what you're dealing with;
www.symantec.com/norto...id=mislead

www.symantec.com/conne...w-me-money

www.symantec.com/conne...ney-part-2

www.symantec.com/conne...ney-part-3

www.symantec.com/conne...rt-tipping

Also, I still can't find anything on the file you list but "wuauclt.exe" seems to be a required file for Windows to update.
This may just be a file where the actual problem has been detected;These things will evolve and re-install themselves in a number of new places each time you find /remove them from another.
That makes it very hard to remove all traces of it, not to mention any damage it's already done to your registry which a simple anti-virus won't fix.

_________________
Skwerl's place.

Com-Central's cutest, fluffiest, twitchiest, tail.
CPU > Intel i9-9900k (o/c 4.9GHz); COOLING > BeQuiet! Dark Rock Pro 4;
MOBO > ASUS PRIME Z390-A; RAM > 2x32GB Corsair LPX 2666MHz;
GPU > Gigabyte GEFORCE GTX650Ti PCI-e 3.0 2Gb GDDR5;
AUDIO > Creative X-Fi Xtreme Music (plus - Universal Audio UAD2 Quad Custom accelerator);
HDD > 3x1TB+ M.2. SSDs; LCD > DELL - S2419HGF (1920x1080);
PSU > 650W be quiet Straight Power 11 - 80+ Gold;
CASE > BeQuiet! SILENT BASE 601; OS > Windows 11 Home Advanced (64-bit).
Back to top
View user's profile Visit poster's website ICQ Number
Display posts from previous:   
Post new topic    Revive this topic    Printer Friendly Page    Forum Index ›  Software
Page 1 of 1
All times are GMT - 6 Hours

Archive Revive
Username:
This is an archived topic - your reply will not be appended here.
Instead, a new topic will be generated in the active forum.
The new topic will provide a reference link to this archived topic.