New answers tagged virus
0
Since the connection isn't using https I would use wireshark to do a packet capture. Once you have a capture you can right click a packet involved in the http transfer and 'Follow TCP Stream'. It will show you the color coded conversation your browser/system had with the server.
15
The website seem to be be only checking the User-Agent. I tried the following
wget --user-agent="Mozilla/5.0 (Windows NT 5.2; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" "http://tfdesignsandpcrepair.com/dinwnle.php?get_info=ss00_323" -O file.zip
and it seems to be working
One possibility is that you might have tried so many times without a valid User-Agent ...
7
You could request the page from a browser while running a proxy like Burp which would allow you to get the contents of the page.
Also it would give you a valid request that you can replay without a browser using the Repeater feature.
5
It may not be the user-agent header that they're looking at, or the only header that they're looking at before determining whether or not to serve the page. You might have a better chance if you copy a full set of headers from your browser, and send them all with the request.
If that works, then you can try various permutations of the header set in order ...
2
According to Symantec, it's possible to:
6.Decrypt the disk using another system - Remove the hard disk and slave the disk to another system with PGP Desktop installed to decrypt the disk.
So you should be able to mount this HD in another computer, and extract all the relevant files to make a backup.
I wouldn't bothering removing the virus: if the ...
2
Another option is to put the drive in another computer that has PGP installed and decrypt and scan the drive from there. Make sure that the other computer is either a burner or has auto-play turned off to make sure the virus doesn't get an opportunity to spread from the infected encrypted drive though.
The key is to load the drive in a clean environment ...
5
This question is a bit off-topic, but I'll post my personal experience with a similar issue.
Create a VistaPE image.
Integrate PGP into the image (Follow this guide and download the PGP tools from here)
Burn the VistaPE image, then boot from it.
Use the following command to decrypt the disk:
pgpwde --decrypt --passphrase "YourPassword" --disk 0 ...
0
Beside what you are doing for your security consider followings:
Get ready for worst scenario (Rootkits) and make an image from every OS on your PC at different stages (i.e
after OS installed and updated, common programs installed and
updated...) and update and replace them periodically. Then in case
like this one happened to you can roll-back to a stable ...
3
The easy answer is: browser exploits. Not visiting "dodgy" sites does not, in any way, mean that you're 100% safe. There have been many cases of exploits loaded through flash or pure HTML/JS through ad networks, for instance (if you are a gamer, Curse had this two years ago).
Even if everything you have is up to date, there are still ways around it. There ...
5
You're not doomed, everything is gonna be okay.
Pause Dropbox sync on all of the devices associated with this account.
Turn off all of the devices that have Dropbox installed and associated with that account, and any other device that you know/suspect they're infected.
Now that you know your files are okay on Dropbox, nuke all of the systems you've just ...
1
virusshare.com is another great repository of malware samples, having a huge number of samples. A snapshot from the website's homepage:
Access is by invitation only, so you will need to drop a mail to the site admin.
Another good resource that I know of- www.deependresearch.org
0
Computers get compromised all the time. You are lucky that you found out about yours. Here is my advice:
Call the 3 major credit reporting agencies (Equifax, Experian, and TransUnion) and tell them all your financial documents were stolen and that you believe someone is trying to steal your identity. This is bending the truth a little bit, but it's the ...
1
In the sense that you are reverting to a known good state before doing anything sensitive, yes this is a good avenue to take.
However, Deep Freeze appears to store images on disk, which can be modified, so an infection to your host system could happily infect images captured in the past, so you lose your known-good property.
You are much better off ...
Top 50 recent answers are included
