4729

Well, for one example, here’s what Windows Defender Offline (http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline) found from a scan of an infected machine. Fortunately the user powered down the computer immediately after realizing he had been had. Rogue:Win32/WinwebsecTrojanfile:D:\ProgramData\hDa3n3aV\serv.batfile:d:\users\–username-removed–\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antivirus Security Pro\Antivirus Security Pro support.urlfile:d:\users\–username-removed–\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antivirus Security Pro\Antivirus Security Pro.urlfolders:d:\users\–username-removed–\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antivirus Security Pro\ TrojanDownloader:Win32/Kuluoz.Dcontainerfile:D:\Users\–username-removed–\Downloads\VoiceMail_Seattle_(206)4581802.zipfile:D:\Users\–username-removed–\AppData\Local\dqegmcmb.exefile:d:\users\–username-removed–\AppData\Roaming\Microsoft\Windows\Recent\VoiceMail_Seattle_(206)4581802.lnkfile:d:\users\–username-removed–\Downloads\VoiceMail_Seattle_(206)4581802.zip->VoiceMail_Seattle_(206)4581802.exeregkey:HKCU@S-1-5-21-3504191443-3983057376-3714753911-2621\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\ojphvgtgrunkey:HKCU@S-1-5-21-3504191443-3983057376-3714753911-2621\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\ojphvgtg A tip for you. After running the cleanup removal in Windows Defender Offline, reboot the machine with network disconnected to a Microsoft ERD Commander disc and use the registry editor and Windows Explorer to check the work of the cleanup tool and ensure everything is out of there. Then reboot and run … Continue reading What does a fake voicemail virus email get you?

This is from an email I received this week from Mark Clagett over at Microsoft.  Running into an issue today where I sent it to an end user so figured I would post it here as well.  Thanks Mark for sending out the notice! – Steve ________________________________________________________________________________________________________ I thought you’d be interested in this new Solution Accelerator from Microsoft – it’s called the Malware Removal Starter Kit.  It’s a free download from TechNet, and provides you with excellent guidance and tools to help you restore PCs infected with malware.  Here’s a quick overview of what the kit can do for your organization.  … Continue reading Microsoft releases the Malware Removal Starter Kit