Author Topic: need help with a url:mal  (Read 16384 times)

0 Members and 3 Guests are viewing this topic.

REDACTED

  • Guest
Re: need help with a url:mal
« Reply #30 on: June 17, 2014, 02:58:30 AM »
ye I'll do that especially coz when I scan, I protect the entire computer so even her account. I wont bother about the cleaner but I'll prolly remove the A-V
also Im not sure she got admin powers but she has to install and do a lot of stuff so maybe I created her an account with powers dont remember

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: need help with a url:mal
« Reply #31 on: June 17, 2014, 03:02:15 AM »
You can check by doing the following.

Control Panel > User Accounts > Manage Another Account > [Her Account Name].

Standard = No Admin rights.
Admin = Admin rights.

Edit: Italian correct?

Pannello di controllo> Account utente> Gestisci un altro account> [Her Name account]
« Last Edit: June 17, 2014, 03:04:54 AM by Michael (alan1998) »
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

REDACTED

  • Guest
Re: need help with a url:mal
« Reply #32 on: June 17, 2014, 03:10:06 AM »
yeah we're both admin, she often needs to install and do stuff

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: need help with a url:mal
« Reply #33 on: June 17, 2014, 11:17:18 AM »
May I suggest you install Unchecky to avoid downloading any adware.

I'd also suggest you demote 1 of the two Admin accounts to a Standard User. The one admin will be able to grant permission for installation of programs no matter the account.
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

REDACTED

  • Guest
Re: need help with a url:mal
« Reply #34 on: June 17, 2014, 02:07:42 PM »
I dont think I need that, it was just a dumb misclick by me usually I dont get caught by this kind of files but thanks for the advice :D
still waiting on what to do next tho :p

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: need help with a url:mal
« Reply #35 on: June 17, 2014, 03:12:36 PM »
Hi, could you run a further OTLK quickscan please selecting all users and I should now be able to delete the file

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5719
  • Spartan Warrior
Re: need help with a url:mal
« Reply #36 on: June 17, 2014, 04:53:22 PM »
May I suggest you install Unchecky to avoid downloading any adware.

I'd also suggest you demote 1 of the two Admin accounts to a Standard User. The one admin will be able to grant permission for installation of programs no matter the account.
Suggest changing the password of your remaining admin account to prevent the other standard user running/installing programs as admin if you want to restrict a standard user to standard privileges.  It's possible to bypass standard privileges when in a standard account by right-clicking a program and selecting 'Run as administrator'.  You as the admin should create a standard account for yourself and operate 90-95% of the time as a standard user, with access to admin rights when needed, but the other standard user cannot as that standard user would not know the admin password.  If the other standard user knows the admin password, then they can operate as admin whenever they want, same as you, using the workaround posted above.  Not something one wants.

Run as admin only for such things as Windows Updates and installing new programs for yourself after you verify new programs are clean and safe to use.

So, you want at least three accounts:
  • An admin account
  • A standard user account for you
  • A standard user account for the other user with no access to the admin password.  This will remove the possibility of installing/running new programs without your explicit consent.  Which is why the main admin password must be changed if the other user knows the original admin password.
 
I also suggest setting up another spare password-protected admin account you do not use, for yourself only, which you reserve for emergency cases where the original admin account becomes corrupted.  This will allow you to recover and create new accounts, standard or admin, if any of the original three become corrupted and unusable.  This is Microsoft recommended to recover from corrupted user accounts.  When done, there will be four accounts, one held as a reserve emergency admin account for emergency recovery, for use only when the original admin account becomes corrupted.  Move all user data to the new account and when satisfied all is in order, and only then delete the corrupted account.
« Last Edit: June 17, 2014, 05:02:22 PM by mchain »
Windows 11 Home 23H2
Windows 11 Pro 23H2
Avast Premier Security version 24.8.6127 (build 24.8.9372.868)
UI version 1.0.814

REDACTED

  • Guest
Re: need help with a url:mal
« Reply #37 on: June 17, 2014, 11:43:09 PM »
here's the latest OTL log for essex ^^

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: need help with a url:mal
« Reply #38 on: June 18, 2014, 03:12:17 PM »
Looks good, this should delete the files but if it does not then just do it manually :)

Subject to no further problems   :)

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems 

Now the best part of the day ----- Your log now appears clean  :thumbsup:

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset  System Restore points:

Download and run Delfix



Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

CryptoPrevent install this programme to lock down and prevent crypto ransome ware



Malwarebytes.

Update and run weekly to keep your system clean


It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read this little guide  Best security practices Keep safe  :wave:

REDACTED

  • Guest
Re: need help with a url:mal
« Reply #39 on: June 18, 2014, 03:29:30 PM »
ok I did what u say in the last post, I removed manually the file and it looks all fine but this entire topic made me confused :D
so, to make it short, I should have on my PC:
avast
malwarebytes
cryptoprevent


remove other antivirus programmes
remove my sister's admin privilege
remove the IOs cleaner and keep using CCleaner
use an admin account only when needed so ideally I should have an admin account, 2 guest accounts (me and my sister) and a backup account in the case my admin account gets corrupted

can I remove otl, antivbs and adwcleaner?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: need help with a url:mal
« Reply #40 on: June 18, 2014, 03:39:04 PM »
Delfix should have removed otl and adwcleaner..  Just delete antivbs

Quote
avast
malwarebytes
cryptoprevent

A good basis, if you download programmes from the net then I would also recommend to protect against bad addons :

http://unchecky.com/

Click on the link above to be taken to Unchecky.com
click the very large Download button.
click Save
Click Open folder


Right click on the Unchecky_setup or folder and choose to Run as Administrator

Once open click the Install button.



Then click on Finish



Unchecky is now installed and will help you keep unwanted check boxes unchecked ;)


Quote
remove other antivirus programmes
remove my sister's admin privilege
remove the IOs cleaner and keep using CCleaner
use an admin account only when needed so ideally I should have an admin account, 2 guest accounts (me and my sister) and a backup account in the case my admin account gets corrupted
Again good, but bear in mind you will probably need to use the admin account to install some programmes

REDACTED

  • Guest
Re: need help with a url:mal
« Reply #41 on: June 18, 2014, 03:42:21 PM »
ok thanks I feel a little less noob now :D
btw I never get screwed by toolbars and other stuff so I'll prolly skip Unchecky, I dont know I dont feel like filling my pc with all this programmes :p

is it okay if I do this:
1 admin account with my stuff
1 guest account for my sister

coz I rarely download software anyway, all I need is already here.
that virus I got was a dumb click on a fishy file on skype :/

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: need help with a url:mal
« Reply #42 on: June 18, 2014, 03:44:57 PM »
Yep as long as you are careful :)

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37699
Re: need help with a url:mal
« Reply #43 on: June 18, 2014, 03:51:06 PM »
If you or your sister use removable drives, then also add this tool MCShield  http://mcshield.net   

REDACTED

  • Guest
Re: need help with a url:mal
« Reply #44 on: June 18, 2014, 03:54:42 PM »
too much stuff :D
btw my sister is really convinced by that Advanced Cleaner, is there another similar programme I could download before deleting that one? Also I use ccleaner, should I keep it?
still 1000thanks guys, u're so precise and gentle