Ghosts in the machine, WTF?!?!?!?

amulford
amulford Posts: 5,020
edited May 2011 in The Clubhouse
A little while ago, my DARLING daughter tried to download Skype on my computer from some effed up site. It wasn't Skype and she got me infected with some nasty assed virus that had me really messed up.

One of the results from this little episode was I lost all of my favorites. I'm talking ten years worth of website finds I saved for various reasons. I was wondering if maybe they might still be on here and recoverable.

The other nifty little by product is I am getting web commercials audio spooling up over and over. I will be in another room, nothing is open, and this crap will kick off and it sounds like someone is in the office. It's almost cause some bullet holes a couple of nights.

What the hell is going on??? I'm ready to blow this POS up....
Post edited by amulford on

Comments

  • txcoastal1
    txcoastal1 Posts: 13,271
    edited May 2011
    http://www.galvestoncs.com/index.php?option=com_content&view=article&id=61&Itemid=73

    This is a sister company to mine safely download Cleaner, malware bytes, super this are
    Try malware and super first...once loaded and updated run them in "Safe mode" its slow but much more effective

    Good luck
    2-channel: Modwright KWI-200 Integrated, Dynaudio C1-II Signatures
    Desktop rig: LSi7, Polk 110sub, Dayens Ampino amp, W4S DAC/pre, Sonos, JRiver
    Gear on standby: Melody 101 tube pre, Unison Research Simply Italy Integrated
    Gone to new homes: (Matt Polk's)Threshold Stasis SA12e monoblocks, Pass XA30.5 amp, Usher MD2 speakers, Dynaudio C4 platinum speakers, Modwright LS100 (voltz), Simaudio 780D DAC

    erat interfectorem cesar et **** dictatorem dicere a
  • bobman1235
    bobman1235 Posts: 10,822
    edited May 2011
    This is why we BACK UP people. Especially simple things like bookmarks, just save them to Dropbox or something. Seriously, NO backup at all, of even something that simple? You deserve to lose it all.
    If you will it, dude, it is no dream.
  • AsSiMiLaTeD
    AsSiMiLaTeD Posts: 11,726
    edited May 2011
    That remark does seem a bit out of character for bobman, he's normally a very reasonable person. He's right about backing up your stuff, but clearly wrong about 'you deserve to lose it all'.
  • bobman1235
    bobman1235 Posts: 10,822
    edited May 2011
    amulford wrote: »
    I do have a backup somewhere, buttmunch. I'm asking a question.

    Really?
    amulford wrote:
    I lost all of my favorites. I'm talking ten years worth of website finds I saved for various reasons. I was wondering if maybe they might still be on here and recoverable.

    Sorry for ... reading exactly what you said.
    If you will it, dude, it is no dream.
  • renowilliams
    renowilliams Posts: 920
    edited May 2011
    I know some pretty smart people who,when it comes to their computers are complete dolts. There always comming to me to fix issues just like this. It doesn't matter what I do to educate them on backing data up, they never listen. So I understand Bobman's frustration. A couple practices to follow to help ensure data won't be lost in the future;

    1. Never,and I mean never let your kids on your main computer (nothing can screw you up faster than a teenager on your computer).

    2. Find a way to back up your data that works for you,whether that be a backup drive or server and an imaging program like Norton Ghost or Acronis or some online solution. (keep in mind that these are useless if you don't do frequent backups)

    3. Get Malwarbytes and Super Anti Syware and keep them updated and do frequent scans.
    "They're always talking about my drinking, but never mention my thirst" Oscar Wilde


    Pre-Amp: Anthem AVM 20
    Amp: Carver TFM-35
    Amp: Rotel RB-870BX
    Fronts : SDA 1B w/ RDO-194s
    T.V.:Plasma TC-P54G25
    Bluray: Oppo BDP-93
    Speaker Cables: MIT Terminater
    Interconnect Cables:DH Labs Silver Sonic BL-1isonic
  • amulford
    amulford Posts: 5,020
    edited May 2011
    Bobman, I apologize. I was hoping that someone might have an easier solution the me trying to find my old backup. Maybe the data is there, but I'm looking in the wrong place. That's not the thing that has me most concerned, though...

    That being said, what's the deal with these damn commercials??

    Something else I noticed, whenever I click on a google search result, I'm getting redirected to someplace else.

    I have Malwarebytes installed, don't have SAS. I have done numerous AMB scans, and nada comes up.

    I'm starting to think a complete wipe here...

    And who deleted my post? I thought it was funny...
  • txcoastal1
    txcoastal1 Posts: 13,271
    edited May 2011
    If you have the redirect bug its in your registery and Malbyte nor Super will wipe it...run CC

    What OS are u running
    2-channel: Modwright KWI-200 Integrated, Dynaudio C1-II Signatures
    Desktop rig: LSi7, Polk 110sub, Dayens Ampino amp, W4S DAC/pre, Sonos, JRiver
    Gear on standby: Melody 101 tube pre, Unison Research Simply Italy Integrated
    Gone to new homes: (Matt Polk's)Threshold Stasis SA12e monoblocks, Pass XA30.5 amp, Usher MD2 speakers, Dynaudio C4 platinum speakers, Modwright LS100 (voltz), Simaudio 780D DAC

    erat interfectorem cesar et **** dictatorem dicere a
  • ysss
    ysss Posts: 213
    edited May 2011
    Your data was likely still there, but everytime your computer writes to the harddrive (that is, normal windows usage; because the os itself writes to a bunch of swap and temporary files) then there's a chance it's writing to (parts of) your old missing data files.

    My advice is to stop using that computer. Pull that harddrive out (and maybe put in a USB dock), and run data recovery software on it.

    Also, look into using Apple Mac OSX. They have almost no virus and they have powerful and very easy to setup backup system.
  • ysss
    ysss Posts: 213
    edited May 2011
    Your data was likely still there, but everytime your computer writes to the harddrive (that is, normal windows usage; because the os itself writes to a bunch of swap and temporary files) then there's a chance it's writing to (parts of) your old missing data files.

    My advice is to stop using that computer. Pull that harddrive out (and maybe put in a USB dock), and run data recovery software on it.

    Also, look into using Apple Mac OSX. They have almost no virus and they have powerful and very easy to setup backup system.
  • AudioGenics
    AudioGenics Posts: 2,567
    edited May 2011
    amulford wrote: »
    ....infected with some ..... virus....

    What anti-virus program are you using ?

    Do you know what virus you were specifically infected with ?
  • txcoastal1
    txcoastal1 Posts: 13,271
    edited May 2011
    The redirect is not a virus its malware...its nasty and you can get it anywhere...I got it from clicking on a google image of a cranberry salad last thanksgiving
    2-channel: Modwright KWI-200 Integrated, Dynaudio C1-II Signatures
    Desktop rig: LSi7, Polk 110sub, Dayens Ampino amp, W4S DAC/pre, Sonos, JRiver
    Gear on standby: Melody 101 tube pre, Unison Research Simply Italy Integrated
    Gone to new homes: (Matt Polk's)Threshold Stasis SA12e monoblocks, Pass XA30.5 amp, Usher MD2 speakers, Dynaudio C4 platinum speakers, Modwright LS100 (voltz), Simaudio 780D DAC

    erat interfectorem cesar et **** dictatorem dicere a
  • fatchowmein
    fatchowmein Posts: 2,637
    edited May 2011
    txcoastal1 wrote: »
    http://www.galvestoncs.com/index.php?option=com_content&view=article&id=61&Itemid=73

    This is a sister company to mine safely download Cleaner, malware bytes, super this are
    Try malware and super first...once loaded and updated run them in "Safe mode" its slow but much more effective

    Good luck

    Hey, that's very kind of you but I'm getting a "Not Found...".
  • txcoastal1
    txcoastal1 Posts: 13,271
    edited May 2011
    Hey, that's very kind of you but I'm getting a "Not Found...".

    Thanks I'll check it out ....sorry guys working on it
    2-channel: Modwright KWI-200 Integrated, Dynaudio C1-II Signatures
    Desktop rig: LSi7, Polk 110sub, Dayens Ampino amp, W4S DAC/pre, Sonos, JRiver
    Gear on standby: Melody 101 tube pre, Unison Research Simply Italy Integrated
    Gone to new homes: (Matt Polk's)Threshold Stasis SA12e monoblocks, Pass XA30.5 amp, Usher MD2 speakers, Dynaudio C4 platinum speakers, Modwright LS100 (voltz), Simaudio 780D DAC

    erat interfectorem cesar et **** dictatorem dicere a
  • amulford
    amulford Posts: 5,020
    edited May 2011
    txcoastal1 wrote: »
    If you have the redirect bug its in your registery and Malbyte nor Super will wipe it...run CC

    What OS are u running

    Vista Home something
    What anti-virus program are you using ?

    Do you know what virus you were specifically infected with ?

    Defender and MWB. No, I don't know...
  • txcoastal1
    txcoastal1 Posts: 13,271
    edited May 2011
    amulford wrote: »
    Vista Home something



    Defender and MWB. No, I don't know...

    Have you tryed running malware revoval in safe mode

    click windows, type in msconfig in search 2nd tab to right is where you go into safe mode when you restart pc

    run your MWB from there then to get out repeat misconfig but click first tab check normal startup and reboot

    If that doesn't work then run Ccleaner
    http://www.cnet.com/1770-5_1-0.html?query=ccleaner&tag=srch
    2-channel: Modwright KWI-200 Integrated, Dynaudio C1-II Signatures
    Desktop rig: LSi7, Polk 110sub, Dayens Ampino amp, W4S DAC/pre, Sonos, JRiver
    Gear on standby: Melody 101 tube pre, Unison Research Simply Italy Integrated
    Gone to new homes: (Matt Polk's)Threshold Stasis SA12e monoblocks, Pass XA30.5 amp, Usher MD2 speakers, Dynaudio C4 platinum speakers, Modwright LS100 (voltz), Simaudio 780D DAC

    erat interfectorem cesar et **** dictatorem dicere a
  • maximillian
    maximillian Posts: 2,144
    edited May 2011
    +1 to msconfig and MWB. Also, use regedit (careful in here) to check for the places where programs are startup such as:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

    You could also try GooredFix and TDSSKiller. These two sometimes work for rootkit malware that hijacks Google links.
  • renowilliams
    renowilliams Posts: 920
    edited May 2011
    Lasareath wrote: »
    I love kids on computers. I pay my mortgage this way every month :)

    Well, I guess from your perspective as someone paid to fix the problems, its a good thing. But as a parent having to pay the bill, perspective is a little different...:biggrin:
    "They're always talking about my drinking, but never mention my thirst" Oscar Wilde


    Pre-Amp: Anthem AVM 20
    Amp: Carver TFM-35
    Amp: Rotel RB-870BX
    Fronts : SDA 1B w/ RDO-194s
    T.V.:Plasma TC-P54G25
    Bluray: Oppo BDP-93
    Speaker Cables: MIT Terminater
    Interconnect Cables:DH Labs Silver Sonic BL-1isonic
  • F1nut
    F1nut Posts: 50,496
    edited May 2011
    It's almost cause some bullet holes a couple of nights.

    I can picture that.
    Political Correctness'.........defined

    "A doctrine fostered by a delusional, illogical minority and rabidly promoted by an unscrupulous mainstream media, which holds forth the proposition that it is entirely possible to pick up a t-u-r-d by the clean end."


    President of Club Polk

  • amulford
    amulford Posts: 5,020
    edited May 2011
    I'm tellin ya...

    Scared the crap out of a guest one night, then she was laughing her **** of at me creeping around naked and armed. (Something about " Watch it!!! You'll put an eye out with that thing!!! Oh you put that gun away, c'mere tiger...":eek:)

    OK, update. I've run a MWB from safe mode and a CC. I still have the redirect, but I'm not all that confident with going into my registry. I'm still looking for my old backup discs, they're here somedamwhere, I'm guessing it's time to do a complete wipe...

    The little princess, however, is getting a dissertation on the limits of her entrance to my office. As in "OFF", that is...