Virus problems. How can I remove them? *EDITED*

I don’t really know for sure, but it is possible with some types of malware that a hidden autorun entry is created on media connected to the computer - some malwares spread themselves this way - it’s probably unlikely but it would pay to scan any removable media that was used on the computer at the time.
A good tool to prevent infections spreading to/from flash drives (yes, same as memory stick/usb drive) is AutorunEater by Old Macdonald.
I don’t use flash drives that often, but I have it installed anyway. Lots of infections spread via flash drives. The well-publicised Conficker worm largely used this method.

I scan the removable media with the Flashdrive/Memory Stick plugged into the computer? Right?
If the flashdrive has malware on it, and I put it onto my computer, I should get the malware? Or not?
Sorry for all the questions and thanks for your reply! ;D

Correct.
If your resident protection is capable of detecting it, it (in theory) should also be able to stop it from running when the drive is plugged in. If not, then the malware can transfer. (But not necessarily.)

To play it safe, disable autoruns in your removable media, so that when you plug it in, it won’t automatically start.
Autoruns can be re-enabled once you’ve scanned it (with Avast and MBAM, for example) and it comes up clean.
If you have Autorun Eater installed on the computer that is an additional layer of security if you can’t be faffed remembering to disable autoruns all the time.

So basically, if the flashdrive has malware on it and MBAM or Avast detect the malware, they can stop it right there from getting on my computer?

And how do I disable autoruns in my removable media?
Thanks! :slight_smile:

And how do I disable autoruns in my removable media?
From the windows help and support centre:
To change how your computer handles multimedia content Open My Computer. Under Devices with Removable Storage, right-click the device you want, such as a digital camera or CD-ROM drive, and then click Properties. On the AutoPlay tab, click the multimedia content type you want to change. Under Actions, click the action you want Windows to perform when it detects the media type you selected.
I would suggest using the "take no action" button. You can always change it later. For a USB device, you might have to have a flash drive actually plugged in before that drive can be viewed in My Computer. Use a known clean one.

Ok, I’m going to do that pretty soon. But one question: Since I didn’t really put any files on the memory stick (I only put it in my computer, but then took it out) would Avast or MBAM be able to scan it?

Sorry, I know I could go find this out myself, so you don’t have to answer this. I was just curious.
Thanks!

And happy holidays! (For those who celebrate them) ;D

The file structure would be there even if no files were in the location, so it could scan, albeit the results wouldn’t show much, 0 files scanned, etc.

This is a little off-topic, but I’m just curious:

Twice now, whenever I turned on my computer a pop-up would say:

"wisptis.exe - Application Error

The instruction at 0x6f2e242e referenced memory at 0x00000003. The memory could not be read. Click OK to terminate the program."

There is so many numbers in there, I may have some of the numbers wrong.

What does this mean? Is this malware? MBAM could not detect anything and none of my antivirus programs have told me that I have malware. If this isn’t malware, does anyone know how to stop my computer from doing this? It’s kind of annoying.

Thanks! Sorry for any typo’s.

Thanks for the reply DavidR! :slight_smile:

This is caused by a reg entry (and/or a startup entry) that is asking the computer to run this program.
It can’t. Either because it has been removed or become corrupted.
Here are some links to give you an idea of what that program (it isn’t malware) is, and might give you a clue as to what happened to cause it to not work any longer.
(Reinstalling the program usually fixes such errors, or removing the reg entry pointing to it.)
http://www.neuber.com/taskmanager/process/wisptis.exe.html
http://www.mobileread.com/forums/showthread.php?t=1260
http://www.liutilities.com/products/wintaskspro/processlibrary/wisptis/

I need to know simply if the avast home program is enough to remove the trojandownloader:win32/renos.jm. Or is other way to remove it. Windows deffender show me the error but if i press (fix it, remove all) or anything, still running and no resolve at all.
Thanks in advance!
[/quote]

There really is no way to say for certain other than by testing as malware names aren’t set to any standard naming convention, so they can differ from one AV or anti-spyware to another.

Ok. I put in a clean flashdrive and I couldn’t seem to figure out where to change the settings…

So eventually I just gave up and put in the flashdrive that I thought might have malware. I scanned the flashdrive with Avast! and MBAM. Avast said that there was no files found on the flashdrive, so I just clicked “Skip” and Avast went ahead and scanned it and it only couldn’t scan one thing, it was something called Boot Read… Or something. But other than that, Avast and MBAM both said the flashdrive was clean and malware-free. :slight_smile:

Is there something I’m missing or is my flashdrive really just clean?
Sorry haha, I’m just making sure. :wink:
This should be my last question, unless something else happens… :smiley:

Thanks again to everyone who helped me! ;D

The flashdrive probably is clean, based on that.
I’m not sure what you meant when you said “I couldn’t figure out where to change the settings”
I might have already suggested it, but consider installing Autorun Eater which will block an unknown/malicious autorun entry attempting to install from a (possibly) infected flash drive.

^ Thank you. :slight_smile:

Sorry, I guess I have another question:

Sorry if someone already said so, but computers who share the same network can “share” malware with each other and if it’s a wireless network people nearby can access your network right?

Would just simply disconnecting from the network prevent one or both of those things (“Sharing” malware or someone else using your network) from happening?

Also, how do I get a “network key” (That is what it’s called right?)? A “network key” is basically a password right?
Sorry again, and thanks in advance! :slight_smile:

Computers on the same physical network can be infected across the network. People can only access your wireless network if ‘you’ fail to protect it, you must block access to those not specifically allowed to join the wireless network. Use strong passwords, don’t have it signal its presence and secure it using WAP2 (Wireless Access Protocol 2nd version) not the old WEP (Wireless Encryption Protocol) or WAP (1st generation of the protocol), which are easier to break and gain access to the wireless network.

Google Wireless Network Security and you should get some helpful info (I don’t use wireless).

If the wireless router/modem doesn’t have power then it can’t work, so it won’t be able to connect, so the same is true for anything else in the network.

Thanks! :slight_smile:

But do you mind if I ask you this?:
If you disconnect from your network can you still get a virus/malware from another computer that has malware on it that’s connected to your same network?
Thanks in advance! :slight_smile:

I don’t know, not using a network, so I will ask:
If the network connection is closed from one system, then is the system visible from the other networked systems or from the network controller/interface ?

If so then in theory it would be possible. If not then what you can’t see how do you infect it.

If you have Network Sharing & Discovery enable is visible to others. But in the same Network (router)

Well you have effectively answered your own question, if visible then it may be possible.

You can try a simple test in trying to copy a file to a system that has disconnected from the network ?

I went under “Network Computers and Devices” in the control panel on my family’s computer and both my computer and my family’s computer has the same name. So I couldn’t tell if the computer listed under the “Network Computers and Devices” was my computer or my family’s computer.

Does it list your computer under the network computers? If not, then it has to be my computer. And if it is, sorry for being so computer stupid ( :P) but a malware warning popped up on the YouTube video on how to secure your network, so I don’t want to watch that video again, so how do you create a new “Network” or whatever it is that makes it so both my computer and my family’s computer is on totally different networks so we can’t spread malware to each other?

Thanks! :slight_smile:

EDIT: I read your last post DavidR. How exactly does that work? Do you mean that you copy a file to another computer’s file sharing thing and see if the file appears in the other computer’s “File Sharing” thing (Sorry I don’t know what it’s called) I don’t totally understand. :-[

EDIT 2: Forget the first edit, I changed the computer’s name of my computer and restarted my computer so it can apply the changes (A.K.A the new computer’s name) now I should be able to tell the difference between the computers now, right? Or won’t the computer’s new name be shown under “Network Computers and Devices” on my family’s computer?

Oh wait, nevermind, I see my new computer’s name AND my family’s computer’s name under my family’s computer’s “Network Computers and Devices”. I’m going to disconnect my computer from the network and see if it works. If my computer’s name disappears from the network computers then my family’s computer won’t be able to share malware with mine? Correct?

EDIT 3: Yep, my computer’s name disappeared. But my computer keeps telling me that it’s trying to block a printer. I’d imagine it’s trying to block the printer that was under “File Sharing” that was on my Family’s Computer?

Sorry for the long post and all the questions.