Dear Moderators,
Twice in one week I was infected on two different occasions with this same type of virus, two hard drives.

The first time the Dell agent was coming to service my hinge on the cover:

When he got there I showed him, "The Blue Screen of Death" and we could not get the computer to start up, Windows kept failing to start, and every other means he and DELL tried to restore as safe drive, DOS, all failed.

I was sent overnight, a new hard drive.

I took the old hard drive to Circut City to save my data....$99.00 and tax = $105!!!!!
The diagx showed a file critically needed to start Windows were deleted.

-------
I installed the new hard drive; I was on the computer for the second day and doing the things I normally would, when I kept getting a message saying my computer was not protected, Install Spy Guard 2009. It looked like a shield shape as Norton.
As I sat there wondering was it from the new hard drive, or a reminder perhaps from the CD data files I installed from the Saved data, (NO PROGRAM FILES), from Circuit City.
Maybe something to remind me to make sure I installed my Virus protection.....
But my Norton was fine????

It won't allow me to close it!!!!
This is the HUGE sign it is a virus, immediatly use the END TASK and see if you can get rid of it! As Per the DELL tech that had this experiance theirself.

I went into my Program files and there it was, as soon as I tried to delete it all kinds of mayham started......Window coming up with a warning that it would also delete start up files to WIndows, I laughed to myself thinking it was a joke to get me not to delet it, BUT like I said is started opening windows and began isntalling something, I closed it, then was the warning about the deleting files.....I was balistic CALLED DELL.

NEXT, I got a message as I am talking to the DELL Tech that a HOST COMPUTER IS trying to access my computer. She yelled, hurry shut off your computer! Which I did.

SHe is sending me a new image something disc overnighted to resart the the computer. My computer is still shut off, and waiting for the image disc to install. I have to turn on the computer just to open the disc drive and then shut it off. Put in the new disk and allow the restart to happen. BUT I lost all the data all the scans I had that two days. I am glad though I backed them up on a portable Flash drive!

When this virus installs itself, as it did in my program files I tried to delete the file, it gave me a message that deleting this program WOULD delet crutial files needed to boot WINDOWS,
That is the same thing that happened the first time, Windows tried to boot, but failed as it was missing files.

I could have rebooted from the master disc I had the first time had we know, but I would have had a blank machine.
Any data or installed programs would be lost.

FIRST ASAP, back up all files you would never be able to replace, burn CD's, DVD-R, FLash Drive or portable back up system!!!! RIGHT NOW!

SECOND: if you get a window that will not close try the END TASK window to close and check your program files to make sure it nothing is in there that you did not install, especially SPy Guard 2009.

THIRD: IF you are attacked, not sure, or something starts to install a program immediatly shut off the computer and call you tech support or GEEK.

I did not open any email I did not know, The only thing I may have done was opened a normal website, and used a link to read an article of interest.

My point is do we have a tech squad person that can warn of this VIrus, it may not be called Spy Guard 2009 when you open it, it could have a differnt name. Even if you have Anit-protection.

To remind everyone TODAY to back up any data and files they wouldnot be able to replace!

And how to treat a suspected Virus of this nature. I was lucky to be on the phone with a TECH at the time it happened.

It should be a banner or at the top of every forum to warn what to do, and to back up all your files right now!

Thanks for reading.

Hi Di

so sorry to hear of your virus woes

one has to be so very careful of installing or opening so much these days as the bugs are so insiduous

I have moved your post here from CFF as we already have some members alarmed thinking that there is a virus coming from NT which is *not* the case here

There is NO virus alert for NT

hope you manage to get all restored

It sounds very similar the the Anti Virus 2008 & 2009 - we had posts about it too.
gives a pop up saying it will install a good antivirus program - but it is a virus instead!

yep, do not click anywhere on those.
close /Exit your browser if you can

Or
use Ctrl/Alt/Del to open task manager and select browser {iexplore, or firefox, ect} then use close/end process to shut it down that way

Or
if you aren't comfortable using that - shut down computer and reboot, but don't go back to that website or page you were on before.

here's some of the other threads -
http://neurotalk.psychcentral.com/thread59061.html
http://neurotalk.psychcentral.com/thread64192.html

Oh , drats - i could have saved you some of that data recovery money..

There are programs that you can buy to recover your data off hard drives.
I used Arax disk doctor - I think 40 bucks to download it { a free trial to see if you like the interface & program}.

Once you buy it it's yours forever, even if you lose the program or reg/key codes you can re download it and email your info to get the reg/key code from the company.

I tried 4 trial programs - found them on Cnet.com {reviews etc}- before choosing the Arax disk doctor.
I just liked the way it was set up over the others.

Hi Jo,
There was no way I could think of to retrive it. The techy had me try to use a CD of recovery through Knixxs.com I think it was, but the system would not even allow access through another OS.

I could not get safe mode on either, it would just go to the blue screen. So we had to take the hard drive out,CC hooked it up to adapters and and went in a back way to find files.

The worst thing was spending the $100 when I didn;t have it to buy a back up system to begin with.

I wish I had known how to shut it off but I never saw the thread.But I am rarely on the computer tech forum.

Twice in a week, I am just sick!
I just rebooted with the new CD that DELL sent and installed the Norton, I don;t know what else to do to protect. Like the threads I read said, it just comes from even trusted sites. All of a sudden it pops up like it detected something.

THe more you do to try to shut it off the more it does to your system.

I will have to save up to get a back upsystem.Untill then any must needs I have a 4 g flash drive.

So I have none of my Dragon, my OCR, My Dell Printer,
I have to get to Dell again to upload the drivers for the all in one...
I am so upset over this!!!
di

What I had to do last time my system crashed bad, major, no boot up either..

I reinstalled windows and got that recovery program and it could find & read my old files even though the new install had formatted over it all.
I was very surprised.

TIP-
Never just delete your old hard drive and give it away, donate it, or sell the computer without at least doing a complete secure shred of the hard drive.
Someone could use a program like that to get any info on the drive..
Get a program that will totally & securely wipe the drive, before you dispose of it.
Some people take the drive apart and destroy the disks inside.


we just keep our old drives.. we have about 10 stacked in my computer parts storage area.
not sure whats on them still but just in case LOL
one of these days I'll hook em up and check em out then zap em.

The trouble with those dime-a-dozen techies are they dont know how to learn. sure they can take a test to get an aplus certification but cant retain any information nor do they have the knowledge of early computing to take the time to do it right.

most techs now adays want to reformat before solving the issue. poooye to them.


this virus/malware could have been removed if it was disconnected from your computer. put on an solatedmachine thats for removing it. and keeping all your valuable data.


i will only do a restore in the last ditch effort. but even then if a virus is doing such damage a new drive could be in hand. howerer its the last result.

this particular virus does make itself to not let any program run and or find it. however a simple change in the name of the program before its ran can let it do its thing and remove it.


logically programs and viri are written to look for default names of programs and then disable them from running. these dime store hacks cant figure it out all they want is your cash and they dont care about your kids pictures, or the videoas of your familys weddings and such . those are the true priceless things i do my best to save for all my clients. programs and documents can be re installed and re typed . our lives however do not need be erased because some hack doesnt want to learn his trade.


roger.