PC Defender in System Restore
in [Windows Viruses]
|
From: antioch on 26 May 2010 20:10 Whilst having problems with a series of BSODs over the last couple of days, I had a look in system restore with the mad thought in mind that at some point it could help but mainly with the intention to check to see if I can restore at any point during the 100 Software Distribution Service 3 entries since Feb 24 2010. Going back through all points, I was surprised that there were only 4 check points and to my horror I saw that PC Defender had been installed on March 24. If this is that rogue one that has been of interest for a while, then I could find no trace in my system - probably too well hidden - but I have done countless scans with MS Security Essentials, MBAM,SAS and a couple of on-liners a couple of times since then. But I have read that it is a sod to find and remove. I cannot think what else it could be - apart from updates, nothing else has been installed on the computer and I certainly have had no pop-ups with any virus warnings. MBAM/SAS have removed some minor stuff on the odd occasion. Reading recent probs with this SDS, I am aware that some have had problems doing a SR prior to one of these entries. My laptop has about 20 SDS enties and twice as many check points over the same period. Providing I can keep my computer stable, I was wondering if it worth trying a system restore to a point just prior to this suspect rogue install or best left to just drop out in time. Rgds Antioch
From: David H. Lipman on 26 May 2010 21:00 From: "antioch" <antioch(a)home.com> | Whilst having problems with a series of BSODs over the last couple of days, | I had a look in system restore with the mad thought in mind that at some | point it could help but mainly with the intention to check to see if I can | restore at any point during the 100 Software Distribution Service 3 entries | since Feb 24 2010. | Going back through all points, I was surprised that there were only 4 check | points and to my horror I saw that PC Defender had been installed on March | 24. | If this is that rogue one that has been of interest for a while, then I | could find no trace in my system - probably too well hidden - but I have | done countless scans with MS Security Essentials, MBAM,SAS and a couple of | on-liners a couple of times since then. But I have read that it is a sod to | find and remove. | I cannot think what else it could be - apart from updates, nothing else has | been installed on the computer and I certainly have had no pop-ups with any | virus warnings. MBAM/SAS have removed some minor stuff on the odd occasion. | Reading recent probs with this SDS, I am aware that some have had problems | doing a SR prior to one of these entries. | My laptop has about 20 SDS enties and twice as many check points over the | same period. | Providing I can keep my computer stable, I was wondering if it worth trying | a system restore to a point just prior to this suspect rogue install or best | left to just drop out in time. BSoD conditions can be caused by software and hardware. Restoring to a previosu restore point may not be the solution if the BSoD is caused by hardware. You need to research the exact cause of the BSoD first. What is the exaxt NT Stop error ? What are HEX codes generated ? -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
From: Antioch on 27 May 2010 06:14 "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message news:eV2lyfT$KHA.5464(a)TK2MSFTNGP05.phx.gbl... > From: "antioch" <antioch(a)home.com> > > | Whilst having problems with a series of BSODs over the last couple of > days, > | I had a look in system restore with the mad thought in mind that at some > | point it could help but mainly with the intention to check to see if I > can > | restore at any point during the 100 Software Distribution Service 3 > entries > | since Feb 24 2010. > | Going back through all points, I was surprised that there were only 4 > check > | points and to my horror I saw that PC Defender had been installed on > March > | 24. > | If this is that rogue one that has been of interest for a while, then I > | could find no trace in my system - probably too well hidden - but I have > | done countless scans with MS Security Essentials, MBAM,SAS and a couple > of > | on-liners a couple of times since then. But I have read that it is a > sod to > | find and remove. > | I cannot think what else it could be - apart from updates, nothing else > has > | been installed on the computer and I certainly have had no pop-ups with > any > | virus warnings. MBAM/SAS have removed some minor stuff on the odd > occasion. > > | Reading recent probs with this SDS, I am aware that some have had > problems > | doing a SR prior to one of these entries. > | My laptop has about 20 SDS enties and twice as many check points over > the > | same period. > > | Providing I can keep my computer stable, I was wondering if it worth > trying > | a system restore to a point just prior to this suspect rogue install or > best > | left to just drop out in time. > > BSoD conditions can be caused by software and hardware. Restoring to a > previosu restore > point may not be the solution if the BSoD is caused by hardware. > > You need to research the exact cause of the BSoD first. > What is the exaxt NT Stop error ? > What are HEX codes generated ? > > > -- > Dave > http://www.claymania.com/removal-trojan-adware.html > Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp > > Hello Dave Thanks for coming in on this - but at the moment it is difficult to say if its a HDD/or a nasty causing this. I have had different results with chkdsk. Waiting to find out what to scan with from the Maxtor forum. If I may, and to avoid repeating all, please take a look at my thread in XP General - BSOD-Unmountable & others 25 May 2010 - 23:56. I have had at least 6 different stop error codes over a two day period. I dont know 'what are hex codes generated?' I have not mentioned them. Antioch
From: David H. Lipman on 27 May 2010 06:28 From: "Antioch" <myotherside(a)elsewhere.com> | Hello Dave | Thanks for coming in on this - but at the moment it is difficult to say if | its a HDD/or a nasty causing this. I have had different results with | chkdsk. | Waiting to find out what to scan with from the Maxtor forum. | If I may, and to avoid repeating all, please take a look at my thread in XP | General - BSOD-Unmountable & others 25 May 2010 - 23:56. | I have had at least 6 different stop error codes over a two day period. | I dont know 'what are hex codes generated?' I have not mentioned them. | Antioch Hardware. Run hard disk diagnostic from vendor check RAM. -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
From: Antioch on 27 May 2010 07:27
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message news:enx9odY$KHA.5808(a)TK2MSFTNGP02.phx.gbl... > From: "Antioch" <myotherside(a)elsewhere.com> > > > | Hello Dave > | Thanks for coming in on this - but at the moment it is difficult to say > if > | its a HDD/or a nasty causing this. I have had different results with > | chkdsk. > | Waiting to find out what to scan with from the Maxtor forum. > | If I may, and to avoid repeating all, please take a look at my thread in > XP > | General - BSOD-Unmountable & others 25 May 2010 - 23:56. > | I have had at least 6 different stop error codes over a two day period. > | I dont know 'what are hex codes generated?' I have not mentioned them. > > | Antioch > > Hardware. > > Run hard disk diagnostic from vendor check RAM. > > > -- > Dave > http://www.claymania.com/removal-trojan-adware.html > Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp > > As above - waiting for info from the Seagate/Maxtor as to appropriate tool with which to diagnose. Rgds Antioch |