Infect Your Machine

Be careful what you ask for!!!

 

How are most infections started? I've gotten questionable emails. I've been to a few questionable sites (warez crackz ect) and I've had ride alongs like OpenCandy and the fake 'FBI' startup screen. I've always been able to delete the files or folders and sometimes found the crazy randonname,bat or exe in the appdata folder. But have been able to recover fairly easy. What do you see most grabbing ahold of people's pc's?

 

Do any of the popular antivirus or antimalware throw up a warning on remote access or disable remote access unless specifically authorized. I don't remember seeing that option in any product. I know to disable remote in processes and the firewall. Is it ever automatically done?

 

In a recent post I mentioned my mum was scammed and infected by someone supposedly from the government who called to check the connection speed of her new internet connection to the NBN (National Broadband Network).
Because she has had a lot of connection issues since the NBN was installed and she also read about the government checking data speeds in the newspapers, she allowed them remote access to her PC.

Here are the other details in my previous post https://forums.majorgeeks.com/threads/new-phone-scam.318101/#post-2008781

Generally when the remote access scams happen they call you on the phone and after spinning some tale about your internet is going to be disconnected unless they can test your PC or maybe they are your ISP checking for line issues and then they ask you to enable remote access so they can do their tests.
AV software or antimalware aps won't stop this action because they will rightly presume you want to do this as you have enabled it and surely you know what you are doing....... Sometimes you may have to escalate to "run as administrator" but they can talk you through this and then the problems begin.....

 

I had a elderly client (who only spoke English as a second language) had a phone call from someone telling her her machine was interfering with their computers, that it was acting illegally, and she would have to pay them $250 to them so they could fix her machine. If she didn't pay, the police would be involved. They frightened her so much, that all the warnings we had given her went out the window. She paid. We then had to clean her machine afterwards. Maddens me when I see how these thieves rip off people.

 

Ok then, lets see if i can infect one of my VM's and give you something to play with!

 

Not many of us punters using windows anymore for internet access.....its all mobile devices, Android, iOS etc.
Sadly, windows fixes are all over the net these days and most think a software download can do it all..... i guess in a lot of cases it can!

Companies running multiple windows clients are dealt with by sophisticated IT depts now, so they dont need to come to forums to sort issues.

Lets face it, you guys are running a website that is designed to promote software advertising, and therefore income for the owners of the domain, and so it should, I would do the same.

The forum is a minor part, but we love it all the same!

Long live MG's