Virus from NEICE?

I went to look at NEICE yesterday evening, and my computer locked up as soon as the page loaded. McAffee popped up to say it had removed a trojan 4 times, but now I keep getting hard drive error warnings, and all software and files are gone (or invisible) except for McAfee and something that pretends to be from Microsoft that wants to sell me something to fix my hard drive (not clicking on that). McAfee runs and says there are no viruses on my disk, but I can't even run Windows explorer to offload files.

Anyone else access NEICE and have issues? Anyone know what this (presumed) virus is?

I got the same windows message but, no signs of a virus yet.

KathyS wrote:I went to look at NEICE yesterday evening, and my computer locked up as soon as the page loaded. McAffee popped up to say it had removed a trojan 4 times, but now I keep getting hard drive error warnings, and all software and files are gone (or invisible) except for McAfee and something that pretends to be from Microsoft that wants to sell me something to fix my hard drive (not clicking on that). McAfee runs and says there are no viruses on my disk, but I can't even run Windows explorer to offload files. Anyone else access NEICE and have issues? Anyone know what this (presumed) virus is?

I was just on NEice.com. besides the photo and classifieds being down for softwear upgrades there is no issue with the site.

I would recheck your computer and make sure that you do not have a virus or virus that either mimics McAfee or disables McAfee.

here is a good place to start. its a forum that may help with your situation.
Go to the first response by TOUCH and follow his directions

cybertechhelp.com/forums/sh…

Another good site with similar info

forums.pcpitstop.com/index.…

If you Google. "virus that disabled McAfee" you get a ton of stuff

Also down load Malwearbytes and run it, the free program does a good job. The purchaced verson is great if you want to go that route

shop.malwarebytes.org/lpa/3…

kathy,

you could boot your computer (i assume non-mac) in a basic/secure mode at startup.

you should see a thing when you turn it on, it is either F2 or F12, i forget... you will see it.

then you can have it start each program individually. sometimes it could be a file(the virus) that automatically starts at boot up.
i have seen these files, and mcafee can't seem to get rid of them completely. sometimes they have a .dll extension to the file name.

so if nothing but windows is running, then load mcafee, scan the whole computer to start, then start reintroducing programs..

not sure if this will help, but good luck!

Cor wrote:kathy, you could boot your computer (i assume non-mac) in a basic/secure mode at startup. you should see a thing when you turn it on, it is either F2 or F12, i forget... you will see it. then you can have it start each program individually. sometimes it could be a file(the virus) that automatically starts at boot up. i have seen these files, and mcafee can't seem to get rid of them completely. sometimes they have a .dll extension to the file name. so if nothing but windows is running, then load mcafee, scan the whole computer to start, then start reintroducing programs.. not sure if this will help, but good luck!

I'll try that, and if I can get Mozilla working, download that Malwarebites to see if it finds something McAfee is missing. McAfee did remove something, but the damage may have been done. It may have mucked with the file indexing on the hard drive to make it look like my files are gone. McAfee was still able to find them and scan them, so I think the hard drive isn't really dead.

Good to know NEICE is ok, but I'm still afraid to go there with this computer.

I just had Norton block an attack as soon as I visited NEICE. It said, "Malicious Toolkit Website 9" attack blocked. - beware

I got the exact same thing the other night. From NEIce.com Let me know if you have any luck removing it. Spybot attempts to remove it but cant because the program is using memory.

Have any of you that have had problems tried to contact NEICE to let them know that their website might have a problem? .....might be the polite, considerate thing to do.

J. Albers wrote:Have any of you that have had problems tried to contact NEICE to let them know that their website might have a problem? .....might be the polite, considerate thing to do.

I would, but I don't want to risk this computer to go back on to get any contact info. If anyone who has better AV software, or is on a Mac or Linux machine and is willing to get the webmaster's email, I'd be happy to contact them.

Ksween wrote:I got the exact same thing the other night. From NEIce.com Let me know if you have any luck removing it. Spybot attempts to remove it but cant because the program is using memory.

I figured out it is the FakeAlert!grb trojan. Here are two links I found via Google about how to remove it. Haven't had time to try yet.

answers.microsoft.com/en-us…

mcafee.com/us/downloads/fre…

Contact Information

NEice.com
PO Box 360
Bartlett, NH 03812-0360

978-808-6932 / doug@neice.com

nrd wrote:Contact Information NEice.com PO Box 360 Bartlett, NH 03812-0360 978-808-6932 / doug@neice.com

Many thanks! Sent Doug a note.

Housecall from TrendMicro is also a really good virus checker for PC's, plus it's free. housecall.trendmicro.com/

Doug tells me the host service removed the virus. I haven't gone back in yet....

I was just on their site and got nothing, so I'm guessing it's all good. Even though their forums are still under construction

For those of you who also need help removing the virus, download Microsoft Security Essentials. Just make sure its from a micrsoft website. It removed the virus in like 30 seconds.

If its hiding your files and data it may be too late for anything you can do on your own. It's a spyware, we starting seeing this type of thing this past summer in my shop and it seems like every two weeks there's a smarter version. I also recommend Malwarebytes do serveral full scans until it doesn't find any infections and if your files have not been unhidden find a reputable shop with fair prices. The spyware sets all the attributes to hidden so you data is still there you just can't see it, in a few days some legitimate looking pop up will say you're harddrive is going out and if you give them 50 bucks it'll go away they're turn your attributes back on and everything will be fine and then in a month or so they'll pull the same job. My advise is when you get it resolved switch to Norton 2012 not Norton Internet Security or Norton 360. DO NOT DOWNLOAD ANYTHING FROM TRENDMICRO ask any repair guy, that stuff will haunt you the only way to remove it is too mess with your registry or reformat your harddrive.

I've had computers where I had to run like 5 different programs to catch all the spyware/malware.

CNET.com is a pretty safe site to get free programs from.

McAfee? Norton? Sigh...
I'm pretty sure even your grandparents have moved away from that shit by now.

How do people like ESET NOD32?

Boissal wrote:McAfee? Norton? Sigh... I'm pretty sure even your grandparents have moved away from that shit by now.

Personally I just reformat and reinstall every two months or so but out of all the virus removals I'd say almost none of the folks have norton and all the computers I install norton on none of them come back until someone lets the subscription run out.