Before Upgrading to Win-7

[jim]

My wife is using Vista (32-bit, HoPro) and was going to upgrade to 7HP
(32-bit). For 2 days now I think she's got a virus because every time she
clinks on a hot link to say, google.com, she is led to somewhere else. I'm
pretty sure she's got something called the "redirect virus?" Is there any
way I can confirm this? McAfee show no problem and a separate running of MS
Security show no problems - but the problem persists.

 

[Mike]

My wife is using Vista (32-bit, HoPro) and was going to upgrade to 7HP
(32-bit). For 2 days now I think she's got a virus because every time she
clinks on a hot link to say, google.com, she is led to somewhere else. I'm
pretty sure she's got something called the "redirect virus?" Is there any
way I can confirm this? McAfee show no problem and a separate running of
MS Security show no problems - but the problem persists.

http://www.malwarebytes.org/
http://superantispyware.com/

Download, install and run the free versions of these programs. If you can't
get to the sites with your wife's computer, you can use any computer and
download them to a thumb drive.
Drop Crapafee and use something like MSE. It's free and pretty damned good.
Your third option is to do a fresh install of HP making sure you back up
your stuff from Home first.

 

[a]

My wife is using Vista (32-bit, HoPro) and was going to upgrade to 7HP
(32-bit). For 2 days now I think she's got a virus because every time she
clinks on a hot link to say, google.com, she is led to somewhere else. I'm
pretty sure she's got something called the "redirect virus?" Is there any
way I can confirm this? McAfee show no problem and a separate running of MS
Security show no problems - but the problem persists.

For starters, open up the Internet Explorer Tools menu and then select
Manage Addons. Select the option to show All Addons and then go down
the list to see if there's anything from an unknown source. If you see
anything irregular, use the More Information option to identify the
suspect file and its location. You can then try to remove that file,
although it may be impossible if its a particularly bad virus.

You can also go to www.malwarebytes.org for more help.

 

[Ken Blake]

My wife is using Vista (32-bit, HoPro) and was going to upgrade to 7HP
(32-bit). For 2 days now I think she's got a virus because every time she
clinks on a hot link to say, google.com, she is led to somewhere else. I'm
pretty sure she's got something called the "redirect virus?" Is there any
way I can confirm this? McAfee show no problem and a separate running of MS
Security show no problems - but the problem persists.

Two points:

1. To address the malware she has, get her to download, install, and
run both MalwareBytes AntiMalware and SuperAntiSpyware.

2. For the future, have her get rid of McAfee, which in my view is
among the poorest of anti-virus programs. For an anti-virus program, I
recommend eSet NOD32, if you are willing to pay for it. If you want a
free anti-virus, I recommend one of the
following three:
 
Avira
Avast
Microsoft Security Essentials

All of these are considerably better than McAfee.

 

[R. C. White]

Hi, Jim.

Why "upgrade"?

Since she's going to install a new Windows anyhow, why not take the
opportunity for a fresh start with a Clean Install?

Backup all her personal data, of course, and make sure that you have the
original media for any applications (including backups of any downloaded
applications that can't be simply downloaded again). She should be able to
use WET (Windows Easy Transfer - included with Win7) to ease this
transition, even if she can't safely go online.

Then boot from the Win7 DVD and do a clean install, including reformatting
the infected disk or volume. Then she can re-install her software and
restore her data (with WET again) into a known-clean new system.

And I agree with the recommendation to run Microsoft Security Essentials.
With that and "practicing safe hex", she should not need McAfee. ;<)

RC
--
R. C. White, CPA
San Marcos, TX
(e-mail address removed)
Microsoft Windows MVP
Windows Live Mail 2010 (15.3.2804.0607) in Win7 Ultimate x64


"jim" wrote in message
My wife is using Vista (32-bit, HoPro) and was going to upgrade to 7HP
(32-bit). For 2 days now I think she's got a virus because every time she
clinks on a hot link to say, google.com, she is led to somewhere else. I'm
pretty sure she's got something called the "redirect virus?" Is there any
way I can confirm this? McAfee show no problem and a separate running of MS
Security show no problems - but the problem persists.

 

[Warren Smith]

My wife is using Vista (32-bit, HoPro) and was going to upgrade to 7HP
(32-bit). For 2 days now I think she's got a virus because every time she
clinks on a hot link to say, google.com, she is led to somewhere else. I'm
pretty sure she's got something called the "redirect virus?" Is there any
way I can confirm this? McAfee show no problem and a separate running of
MS Security show no problems - but the problem persists.

I've had that problem. Here's what happened.

Same as you, redirected to every scam site imaginable. But it got worse, the
virus went to FileZilla and sent the loggin details of my website to another
server. This server then downloaded my whole website and infected it with
malicious code (Gumbla virus) and the reloaded the site back onto my server.

My advise is to re-install your OS. If you use an FTP program clear any
loggin details - NOW!

There is a good chance that none of the AV's will find a problem. None of
mine did. Always remember that the virus writers, hackers and spammers are
miles ahead of the good guys. Don't trust any AV program. None are anywhere
near perfect!!!!!

Avoid using any FTP programs on any version of Windows. I now use either a
Mac or Linux to transfer files using ftp. It's just far too dangerous using
Windows.

Warren Smith
(e-mail address removed)

 

[johnbee]

Two points:

1. To address the malware she has, get her to download, install, and
run both MalwareBytes AntiMalware and SuperAntiSpyware.

2. For the future, have her get rid of McAfee, which in my view is
among the poorest of anti-virus programs. For an anti-virus program, I
recommend eSet NOD32, if you are willing to pay for it. If you want a
free anti-virus, I recommend one of the
following three:

Avira
Avast
Microsoft Security Essentials

All of these are considerably better than McAfee.

Please allow me to add another tip of my own. Anyone who admits using any
particular virus protection at all will immediately be met with comments
that what they have is one of the worst and so-and-so is better.

In my view an important point about virus protection is to buy one which
provides a good web site where you can log in to your account and get
specific advice. It is very likely that users of Mcafee can do this, and it
is very useful if you get one such as were described. A site member will be
able to get rid of anything quickly and easily 24/7. There is absolutely
nothing at all wrong with Mcafee - and Microsoft Security Essentials is
excellent as well but without the personal support.

Another important difference between the various options is that some are
best on good PCs but a bit heavy otherwise. Lastly, a lot depends upon what
the user does: for example if running a business network and making lots of
use of internet banking it is a bit careless to rely on freebies.

 

[Ken Blake]

Please allow me to add another tip of my own. Anyone who admits using any
particular virus protection at all will immediately be met with comments
that what they have is one of the worst and so-and-so is better.

In my view an important point about virus protection is to buy one which
provides a good web site where you can log in to your account and get
specific advice. It is very likely that users of Mcafee can do this, and it
is very useful if you get one such as were described. A site member will be
able to get rid of anything quickly and easily 24/7. There is absolutely
nothing at all wrong with Mcafee - and Microsoft Security Essentials is
excellent as well but without the personal support.

Another important difference between the various options is that some are
best on good PCs but a bit heavy otherwise. Lastly, a lot depends upon what
the user does: for example if running a business network and making lots of
use of internet banking it is a bit careless to rely on freebies.

You and I have very different opinions. I won't argue with you, but
suffice it to say that I disagree with almost everything you say
above.

 

[Char Jackson]

You and I have very different opinions. I won't argue with you, but
suffice it to say that I disagree with almost everything you say
above.

Ken, you and I are 100% in sync on this.

There are certain AV options that are known to be better than certain
others. You listed several examples above. As for limiting the choices
to those that offer personal web support, I'd bet that 99.9% of people
would not care and would not use such a resource. No matter which AV
program a person settles on, multiple web resources are available
whenever needed. And finally, free AV programs offer no less support
than paid programs, and in some cases actually offer better support.

 

[Ken Blake]

Ken, you and I are 100% in sync on this.

There are certain AV options that are known to be better than certain
others. You listed several examples above. As for limiting the choices
to those that offer personal web support, I'd bet that 99.9% of people
would not care and would not use such a resource. No matter which AV
program a person settles on, multiple web resources are available
whenever needed. And finally, free AV programs offer no less support
than paid programs, and in some cases actually offer better support.

You don't need me to tell you this, but I'm in 100% sync with your
addition above.

 

[Zaidy036]

Two points:

1. To address the malware she has, get her to download, install, and
run both MalwareBytes AntiMalware and SuperAntiSpyware.

2. For the future, have her get rid of McAfee, which in my view is
among the poorest of anti-virus programs. For an anti-virus program, I
recommend eSet NOD32, if you are willing to pay for it. If you want a
free anti-virus, I recommend one of the
following three:
 
Avira
Avast
Microsoft Security Essentials

All of these are considerably better than McAfee.

Look at Immunet (free) http://www.immunet.com/main/index3.html
which is one of the only AV programs that can run along side others and adds an
additional level of protection.

 

[jim]

8-16
Solved! Took a good look at my wife's computer (which I rarely if ever
touch). She had MS Security Essentials, McAfee Anti Virus, and Norton
Security Suite. She told me she scanned her computer and nothing showed up.
This morning with my wife gone I got on her computer->deleted
Norton-Symantec Security Suite, Deleted McAfee AV . Ran MS program which
turned up the Bamital Virus (MS Security Essentials classified this as a
Trojan). Deleted it and all runs well. Thanks for all your inputs.

 

[LouB]

8-16
Solved! Took a good look at my wife's computer (which I rarely if ever
touch). She had MS Security Essentials, McAfee Anti Virus, and Norton
Security Suite. She told me she scanned her computer and nothing showed
up. This morning with my wife gone I got on her computer->deleted
Norton-Symantec Security Suite, Deleted McAfee AV . Ran MS program which
turned up the Bamital Virus (MS Security Essentials classified this as a
Trojan). Deleted it and all runs well. Thanks for all your inputs.

Thanks for the update.

 

[Mike]

8-16
Solved! Took a good look at my wife's computer (which I rarely if ever
touch). She had MS Security Essentials, McAfee Anti Virus, and Norton
Security Suite. She told me she scanned her computer and nothing showed
up. This morning with my wife gone I got on her computer->deleted
Norton-Symantec Security Suite, Deleted McAfee AV . Ran MS program which
turned up the Bamital Virus (MS Security Essentials classified this as a
Trojan). Deleted it and all runs well. Thanks for all your inputs.

Jim, make sure you used both Crapaffeeee's and Norton's removal tools.
Google search them. If not, traces of both programs will remain in the
registry and a few folders.