Virus... again

Codger_64

Codger_64

Moderator
Joined
Oct 8, 2004
Messages
62,324
I could have it beat down, but I don't think so. Have any of you heard of siegare virus? It mimics a windows virus alert and takes over the browser, only allowing you to go to their phony site siegare dot com to purchase their phony spyware program. It got by my avast (Avast did get the root-thingy each time I booted), and it got by my malwarebytes. It prevented me from doing a malwarebytes scan until I punched into it as the computer was booting. It then located and quarantined the list of siegare junk. But it was back on reboot and malwarebytes wouldn't recognize it. So... I went another route. On my third try, I did a restore. That seems to have worked. But I am afraid the damn virus is still somewhere in my computer and will pop back out when I least expect it. I did do a malwarebytes update after the restore, and avast updates constantly (or so they tell me).

So how do I scrub and flush this crap for good? I am not computer savvy for doodly. When I google the virus name several tech sites pop up, but I am skeered to open them and follow their advice. Will the junk come back if I do a defrag? A disc cleanup? Halp!
 
These fake AVs are a real pain.

http://blog.teesupport.com/how-to-guide-remove-siegare-com-siegare-removal-guide/#more-15971

lists the infected areas for you to follow up on.

Rkill is handy to have around. This is a startup program that kills known malware at computer boot time so you can delete them. Keep it updated and keep some of the rkill variants (different names, different extension) around too as many malware now target rkill

Doesn't work every time but is a good tool to have in your arsenal.
 
Seriously once you get it worked out consider setting up so you can dual boot with Ubuntu Linux as well. That way you can become familiar with both OS. My Vista has been down for 6 months and I dont miss it. Ubuntu is about as operator friendly as anything from MS these days. Cant remember the last time I needed the Command Line.
 
I remember the last time I used the command line. It was June, 1991. :o

I think I have defeated the crap for now. The only thing left is a problem with windows xp, a reminder of the lat time I got a virus. All the way from boot, I get pop-up windows like "service.exe bad image", and on it goes until all of my icons have appeared.

Yeah, I need my own personal programmer to do routine maintenance on my computer. All of the "pros" around here seem to be wannabes, and they charge hefty fees (to my way of thinking).
 
Seriously, though, it might be worthwhile to try Linux.

If your needs are modest, it should work out just fine.

A live-cd is an easy way to see if it's right for you.
 
Last time I had a virus I got Spybot, search and destroy.
It was the only one that worked for me.
 
Not to troll on this helpful troubleshooting thread of your re-accuring PC headache, but you might consider an Apple computer.
Iv'e been using Macs for years, and can attest this stuff doesn't happen with them... yet anyways! (Hey, you never know, anything's possible) ;)
Best of luck whatever you do.
 
Download and run (in safe mode) a product called combofix. You can download it from bleepingcomputer.com
 
xbxb said:
How's it going Codger did you get it fixed?
Click to expand...

Yes, everything but the whatchamacallit that is causing the pop-ups on boot. Evidently some image recognition file in Win-XP got deleted. The icons still work OK though. It is just a PITA to have to click "ok" on each popup.

And I will have another computer before too long loaded with the important files recovered from my previous computer. Then I just have to add the documents from this one and I should be golden for a while.

What I really need is a "White Knight" program. It responds to viral attacks by sending out a image of the White Knight which melts down the virus host computer. Literally melts. I think I read about it in a Larry Bond novel. Sounded like a good idea to me.
 
I gotta agree with some others, either Mac or Ubuntu, and you can kiss virii goodbye. And you don't have to use the command line!

(I've been using it in Unix since 1979, so I'm biased....)
 
You must log in or register to reply here.
Back
Top