[SGVLUG] AV Guard Virus

[juanslayton @dslextreme.com]

Robert,
     Yeah, I thought of pulling the bios battery, but the thing is nearly
inaccessible and I gave it up after nearly disassembling the machine.  If
you thought of that too, then maybe it wasn't such a dumb idea after all.
I'll try again before tossing the machine in the dumpster.  Thanx for the
response.

On Wed, Oct 19, 2011 at 8:43 AM, Robert Leyva <mrflash818 at geophile.net>wrote:

> For the M$ boxes, you might want to manually load clamwin into a USB jump
> drive, then copy to the infected box, then as
> _administrator_and_in_safe_mode_, try to have clamwin delete or quarantine
> what it finds.
>
> This AV-nasty thing might even have some removal tools people have made.
>
> For the linux box that won't fire up, perhaps you can pull the bios
> battery for, say 15min, then put back in, which will hopefully make the
> bios go back to factory default? Then I'd perhaps try chkrootkit, and
> clamav.
>
> > Could use a little advice myself; apologies for the length of the
> comment.
> >
> >
> > display "AV Guard," purporting to be an anti-virus program that had
> > identified malware on our system that it could remove (for a fee).  Of
> > course, AV Guard is itself a virus.
> >
>
> >
> > I'm left with 3 questions:
> > 1)  How can this virus hose the BIOS so one machine will not boot, and
> > another appears to have a failed power supply.
> > 2)  Is there any way to revive my laptop, short of replacing the mother
> > board?
> > 3)  Any of you guys need a nearly new battery for an Acer Extensa 1000?
> >
>
>
> --
> "Knowledge is Power" -- Sir Francis Bacon
>
> Robert Leyva
> mrflash818 at geophile.net
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.sgvlug.net/pipermail/sgvlug/attachments/20111019/e7b6a107/attachment-0001.html