Author Topic: Announcement  (Read 116 times)

Dj

  • Owner
  • Newbie
  • *
  • Posts: 25
    • View Profile
Announcement
« on: July 14, 2012, 12:29:08 am »
Recently, a player who shall not be named, has been spreading some nasty rumors that Swift614 is all some big plan to take control over our players computers and use them for criminal activity. I would like to show you guys how to tell that what he is saying is just a rumor, not a fact. In this thread I will teach you how to check your computer for any types of viruses and how to remove them if any are found.

First, I would like to suggest downloading the following:
  • Malwarebytes' Anti-Malware. Update it and run a quick scan. Remove everything it finds.

  • ESET Online Scanner. Download the executable and run it. It will start downloading its database. Once it is done, check all options for removal and proceed with the scan. This is a free scan that will remove any found threats.

  • Spybot Search & Destroy. Download this and run it. Click on the first box "Search & Destroy". The click on "Check for problems". It will ask you if it can delete any non-used temporary files. Click on yes. (This is ok). Let it run. Check all boxes that pop up
    and click on "Fix Selected Problems".

  • Comodo AV and Firewall. This is Comodo AV and Firewall. Download this, let it update it's virus database and then proceed to run a full scan. This could take a while. Quarantine any of the files it finds.
Please also note that if you have a second computer or have another way to get on to the internet to post here, it is highly advised to disconnect from the
internet on your infected machine and relay all information from the other machine instead. (You can transfer the downloads from PC to PC using a external hard drive or USB/CD/DVD). If you cannot access the internet from another machine, that is fine. I then suggest just downloading the files and disconnecting from the internet until all scans are done.

To further increase the amount of damage reduction, you could open up your start menu and traverse to your msconfig to remove the item from startup, if it exist. You can do this by going to Start -> Search -> msconfig -> Enter (or for XP, Start -> Run -> msconfig -> Enter). In doing so a window will popup. When it does please proceed to do the following:

Click on the fourth (4th) tab that says "Startup" and then proceed to go through the list, unchecking any check boxes you do not recognize. Then click on "Apply". And proceed to restart. Upon restarting this should prevent the program from starting up allowing you safe passage to the internet again. However, this is only if you found the correct startup item.

Last warning I should give you as well; Do NOT under ANY circumstances, reinstall or reformat the OS. This will in NO way help you. It is time consuming, a hassle, and just generally not needed. Ignore any and ALL post who say to do so.

Lastly, be sure to clear your system restore point. Malware now adays have started infecting system restore points it recommended to just wipe the current restore points you have and just make a new one after you're done being disinfected. To do so, do the following:

Clear system restore points:
Go to Start > All Programs > Accessories > System Tools > System Restore
Select Create a restore point, and Ok it.
Next, go to Start > Run and type in cleanmgr
choose your root drive (normally C:)
after it calculates how much space you will save it will open up a new window
Select the More options tab at the top of the window
Choose the option to clean up system restore and OK it.
go back to the disk clean up tab
put a checkmark in all - except compress old files (leave this unchecked)
click Ok then click yes
This will remove all restore points except the new one you just created and clean unneeded files.

You could also check your out going connections. You can do so by doing the following;
  • Open CMD (Start --> Run --> cmd) and type in "netstat -ano". Look for "established" connections then look at the number beside it
  • Open task manager....view...select columns.... and click PID
  • Look for the PID number of the program that corresponds to the "established" connection in netstat,If it comes from a suspicious process please end the process and re-run any and all virus scans.
If you have any further questions PLEASE feel free to PM me in game or on forums. I'll be glad to help you with anything related or unrelated to this.
« Last Edit: July 14, 2012, 12:34:13 am by Dj »

Share on Bluesky Share on Facebook


brandonbob

  • OWNER
  • Owner
  • Veteran
  • *
  • Posts: 1357
  • SWIFT614
    • View Profile
Re: Announcement
« Reply #1 on: July 14, 2012, 09:01:13 am »
nice work dj. Well done