• Log InLog In
  • Register
Liquid`
Team Liquid Liquipedia
EDT 03:45
CEST 09:45
KST 16:45
  • Home
  • Forum
  • Calendar
  • Streams
  • Liquipedia
  • Features
  • Store
  • EPT
  • TL+
  • StarCraft 2
  • Brood War
  • Smash
  • Heroes
  • Counter-Strike
  • Overwatch
  • Liquibet
  • Fantasy StarCraft
  • TLPD
  • StarCraft 2
  • Brood War
  • Blogs
Forum Sidebar
Events/Features
News
Featured News
HomeStory Cup 27 - Info & Preview18Classic wins Code S Season 2 (2025)16Code S RO4 & Finals Preview: herO, Rogue, Classic, GuMiho0TL Team Map Contest #5: Presented by Monster Energy6Code S RO8 Preview: herO, Zoun, Bunny, Classic7
Community News
Flash Announces Retirement From ASL9Weekly Cups (June 23-29): Reynor in world title form?12FEL Cracov 2025 (July 27) - $8000 live event16Esports World Cup 2025 - Final Player Roster14Weekly Cups (June 16-22): Clem strikes back1
StarCraft 2
General
The SCII GOAT: A statistical Evaluation CONSULT ALPHA SPY NEST EXPERTS FOR YOUR LOST BTC Weekly Cups (June 23-29): Reynor in world title form? StarCraft Mass Recall: SC1 campaigns on SC2 thread How does the number of casters affect your enjoyment of esports?
Tourneys
FEL Cracov 2025 (July 27) - $8000 live event HomeStory Cup 27 (June 27-29) WardiTV Mondays SOOPer7s Showmatches 2025 $200 Biweekly - StarCraft Evolution League #1
Strategy
How did i lose this ZvP, whats the proper response Simple Questions Simple Answers [G] Darkgrid Layout
Custom Maps
[UMS] Zillion Zerglings
External Content
Mutation # 480 Moths to the Flame Mutation # 479 Worn Out Welcome Mutation # 478 Instant Karma Mutation # 477 Slow and Steady
Brood War
General
Flash Announces Retirement From ASL ASL20 Preliminary Maps BW General Discussion BGH Auto Balance -> http://bghmmr.eu/ StarCraft & BroodWar Campaign Speedrun Quest
Tourneys
[Megathread] Daily Proleagues [BSL20] GosuLeague RO16 - Tue & Wed 20:00+CET The Casual Games of the Week Thread [BSL20] ProLeague LB Final - Saturday 20:00 CET
Strategy
Simple Questions, Simple Answers I am doing this better than progamers do.
Other Games
General Games
Stormgate/Frost Giant Megathread Nintendo Switch Thread Path of Exile What do you want from future RTS games? Beyond All Reason
Dota 2
Official 'what is Dota anymore' discussion
League of Legends
Heroes of the Storm
Simple Questions, Simple Answers Heroes of the Storm 2.0
Hearthstone
Heroes of StarCraft mini-set
TL Mafia
TL Mafia Community Thread Vanilla Mini Mafia
Community
General
US Politics Mega-thread Trading/Investing Thread Things Aren’t Peaceful in Palestine Stop Killing Games - European Citizens Initiative Russo-Ukrainian War Thread
Fan Clubs
SKT1 Classic Fan Club! Maru Fan Club
Media & Entertainment
Anime Discussion Thread [Manga] One Piece [\m/] Heavy Metal Thread Korean Music Discussion
Sports
2024 - 2025 Football Thread NBA General Discussion Formula 1 Discussion TeamLiquid Health and Fitness Initiative For 2023 NHL Playoffs 2024
World Cup 2022
Tech Support
Computer Build, Upgrade & Buying Resource Thread
TL Community
The Automated Ban List
Blogs
from making sc maps to makin…
Husyelt
Blog #2
tankgirl
Game Sound vs. Music: The Im…
TrAiDoS
StarCraft improvement
iopq
Heero Yuy & the Tax…
KrillinFromwales
Trip to the Zoo
micronesia
Customize Sidebar...

Website Feedback

Closed Threads



Active: 540 users

Lurking in TL saved my PC

Blogs > JieXian
Post a Reply
JieXian
Profile Blog Joined August 2008
Malaysia4677 Posts
Last Edited: 2011-07-14 06:43:42
July 14 2011 05:52 GMT
#1
Referring to this post, sorry if it's pure common sense to some of you but it certainly wasn't for me. I haven't encountered this ever since I was using a win95 PC. Also I hope this might be of use to someone.

I was lurking around reading posts about 1 month ago when today my father was clicking on some link he claims he does everyday from a blog to some "UK newspaper" site about "How to buy gold" <--- my spider sense detects inconsistency at this point. But no point arguing with him.

----------------------------------------------------------------------------------------------------------------------------
EDIT: Later he came back and offered to show me what he did earlier and it was a life feed link from a blog and looking legit, I clicked it (knowing how to solve the problem) and got here (just in case you're worried, it really is): http://www.telegraph.co.uk/finance/personalfinance/investing/gold/8635523/How-to-invest-in-gold.html . Showing him the article, he said he didn't see this page earlier. Based on how he spoke and knowing his .. routines, I have some confidence that that's what happened. If it's true than it's really scary.

On second thought, it could be due to some link he clicked earlier since programs take some time to finish installing. That makes more sense.
----------------------------------------------------------------------------------------------------------------------------


The program "Security protection" had all the pictures used by Win7, the firewall and the shield thing and for moment I thought it was from windows, until I saw the shortcut icon on the desktop which meant that a program was installed. Moreover I couldn't close it and any program I execute just dies after 2 seconds so I can't use the task manager to kill the process or restore it to and earlier state.

And it scanned my pc automatically and detected some win32Gen-Child-Porn which made me panic a while. This was before I saw the shortcut icon on my desktop.

So at first I tried to out maneuver it by trying to kill the process with the task manager faster than it could kill the task manager.

Didn't work.

Next, after trying to alt f4 and right click it from the task bar in vain, I went to the 'settings' tab and saw options to "Start Security Protection on startup" and "Scan PC on startup". Seeing a glimmer of hope, I pounced on both the checkboxes and promtly restarted my computer.

Only to be greeted by the the same scareware again.

After staring and thinking for a few minutes, I suddenly recalled reading something about safe mode and hoped that it will allow me to restore my backup. Sure enough, in safe mode, the "Security Protection" scareware didn't startup and neither did MsnMessenger or anything else. Without anything stopping me, I was able to restore my computer to an earlier state.

And sure it did :D

After restoring, I quickly loaded the thread I bookmarked and couldn't be more grateful.

Download Combofix ( http://www.bleepingcomputer.com/combofix/how-to-use-combofix )

Also download hijackthis ( http://free.antivirus.com/hijackthis/ )

What you want to do is boot into safe-mode and run hijackthis first, after that run combofix. Once combofix finishes its going to reboot your computer. Running both of them should do quite the trick to speed up your computer.

After that I would run malwarebytes ( http://www.malwarebytes.org/ )

I used to work at a PC repair shop and those 3 programs solved 95+% of our issues.



Thank you so very very much Halfwarr!!!!!

*****
Please send me a PM of any song you like that I most probably never heard of! I am looking for people to chat about writing and producing music | https://www.youtube.com/watch?v=noD-bsOcxuU |
Alabasern
Profile Blog Joined September 2010
United States4005 Posts
July 14 2011 06:12 GMT
#2
TeamLiquid is a splendid resource indeed.
Support your esport!
Mickey
Profile Blog Joined July 2005
United States2606 Posts
July 14 2011 06:17 GMT
#3
Combofix is an amazing utility that has saved me so many times.
Z3kk
Profile Blog Joined December 2009
4099 Posts
July 14 2011 06:22 GMT
#4
Wait, how were you able to download those two things and run then successfully if everything you opened got closed? :o

Thanks for this; good to know for future reference
Failure is not falling down over and over again. Failure is refusing to get back up.
JieXian
Profile Blog Joined August 2008
Malaysia4677 Posts
Last Edited: 2011-07-14 06:40:49
July 14 2011 06:34 GMT
#5
Opps I forgot to describe the most important part. Added it to the OP

Basically when I start up in safe mode (keep mashing F8 during booting). None of the programs will launch at startup, and that includes the scareware.

So I was able to safely restore my computer to an earlier state. Program files -->Accessories --> {something about restoring backup or System restore} (currently using a Spanish interface to learn the language)

I didn't download the programs because this was easier and I didn't have any work that will be lost if I were to restore to the state it was 2 days ago. Anyways I'm going to download those 2 programs right now just in case this happens again.
Please send me a PM of any song you like that I most probably never heard of! I am looking for people to chat about writing and producing music | https://www.youtube.com/watch?v=noD-bsOcxuU |
Kyuukyuu
Profile Blog Joined January 2009
Canada6263 Posts
July 14 2011 06:40 GMT
#6
Wait so you just system restored and didn't actually use the things in the post you quoted o_O?
Cr4zyH0r5e
Profile Blog Joined November 2007
Peru1308 Posts
Last Edited: 2011-07-14 06:42:04
July 14 2011 06:41 GMT
#7
you could have also googled how to get rid of the scareware and you would have found out that you can start your computer in safe mode, locate the installed file and delete it from your computer, then find it on your registry, and delete its entrance as well. You wouldnt' have had to restore your computer to an earlier state assuming there was something that you would have rather not deleted. Nonetheless, I'm glad you managed to get rid of it. =]

Edit: You ninja'd me with your edit 2 posts above.
Diamond 4 Jungle/Support - http://www.twitch.tv/cr4zyh0r5e/c/3051057 Zyra support 101
Dakk
Profile Blog Joined June 2010
Sweden572 Posts
July 14 2011 06:44 GMT
#8
On July 14 2011 15:22 Z3kk wrote:
Wait, how were you able to download those two things and run then successfully if everything you opened got closed? :o

Thanks for this; good to know for future reference

He opened windows in safe mode when he restarted the PC. This prevents stuff to execute themselves somewhat and it makes you able to do stuff you otherwise cannot do.
I will not fear, Fear is the mindkiller. Fear is the little death.
Z3kk
Profile Blog Joined December 2009
4099 Posts
July 14 2011 06:45 GMT
#9
On July 14 2011 15:40 Kyuukyuu wrote:
Wait so you just system restored and didn't actually use the things in the post you quoted o_O?


Yeah, I was like "wait a minute..." when I read that post :o
Failure is not falling down over and over again. Failure is refusing to get back up.
JieXian
Profile Blog Joined August 2008
Malaysia4677 Posts
Last Edited: 2011-07-14 06:53:15
July 14 2011 06:46 GMT
#10
On July 14 2011 15:41 Cr4zyH0r5e wrote:
you could have also googled how to get rid of the scareware and you would have found out that you can start your computer in safe mode, locate the installed file and delete it from your computer, then find it on your registry, and delete its entrance as well. You wouldnt' have had to restore your computer to an earlier state assuming there was something that you would have rather not deleted. Nonetheless, I'm glad you managed to get rid of it. =]

Edit: You ninja'd me with your edit 2 posts above.


Thanks, that is actually simpler...
EDIT: if I don't have anything to lose wouldn't restoring be safer since I may not be able to completely remove everything manually?

On July 14 2011 15:40 Kyuukyuu wrote:
Wait so you just system restored and didn't actually use the things in the post you quoted o_O?


Actually what I learnt from the post was to run in safe mode :D I just wanted to quickly solve the problem.
Please send me a PM of any song you like that I most probably never heard of! I am looking for people to chat about writing and producing music | https://www.youtube.com/watch?v=noD-bsOcxuU |
JieXian
Profile Blog Joined August 2008
Malaysia4677 Posts
July 14 2011 06:48 GMT
#11
On July 14 2011 15:45 Z3kk wrote:
Show nested quote +
On July 14 2011 15:40 Kyuukyuu wrote:
Wait so you just system restored and didn't actually use the things in the post you quoted o_O?


Yeah, I was like "wait a minute..." when I read that post :o


After staring and thinking for a few minutes, I suddenly recalled reading something about safe mode and hoped that it will allow me to restore my backup.




Didn't mean to mislead. I only remembered the "safe mode" part of the post.
Please send me a PM of any song you like that I most probably never heard of! I am looking for people to chat about writing and producing music | https://www.youtube.com/watch?v=noD-bsOcxuU |
MiraKul
Profile Blog Joined November 2010
Malaysia498 Posts
July 14 2011 08:44 GMT
#12
ehh bleepingcomputer.com is down? The link is dead.
ovrpwrd
FlaminGinjaNinja
Profile Blog Joined January 2011
United Kingdom879 Posts
July 14 2011 11:41 GMT
#13
On July 14 2011 15:22 Z3kk wrote:
Wait, how were you able to download those two things and run then successfully if everything you opened got closed? :o

Thanks for this; good to know for future reference


When booting in safe mode only critical drivers are loaded, the absolute minimum to still allow the PC to run. That means that no start-up programs and no specialised drivers will start. Because of this the program cloing everything that installed itself does not start and therefore can not close down the things you open.

It's important to note that if you need to download programs from the internet to solve your issue you will need to boot in safe-mode with networking, because normal safe-mode does not load the drivers nessasary to connect to a network

Also, malwarebytes rocks!
GinjaNinja.661 EU I'd like to thank my sh*t keyyboard for always messing up my 'Y's
Please log in or register to reply.
Live Events Refresh
Next event in 8h 16m
[ Submit Event ]
Live Streams
Refresh
StarCraft: Brood War
Britney 25113
NotJumperer 52
Aegong 36
Sharp 31
Noble 26
ajuk12(nOOB) 25
Bale 1
Dota 2
XaKoH 233
XcaliburYe201
BananaSlamJamma91
League of Legends
JimRising 591
Counter-Strike
Stewie2K451
shoxiejesuss192
Super Smash Bros
Mew2King152
Heroes of the Storm
Khaldor115
Other Games
shahzam1035
WinterStarcraft408
ceh9299
KnowMe100
SortOf83
Pyrionflax59
Organizations
Other Games
gamesdonequick787
StarCraft 2
Blizzard YouTube
StarCraft: Brood War
BSLTrovo
sctven
[ Show 12 non-featured ]
StarCraft 2
• AfreecaTV YouTube
• intothetv
• Kozan
• IndyKCrew
• LaughNgamezSOOP
• Migwel
• sooper7s
StarCraft: Brood War
• BSLYoutube
• STPLYoutube
• ZZZeroYoutube
Dota 2
• lizZardDota2202
League of Legends
• Stunt476
Upcoming Events
uThermal 2v2 Circuit
8h 16m
OSC
11h 16m
Replay Cast
16h 16m
The PondCast
1d 2h
RSL Revival
1d 2h
ByuN vs Classic
Clem vs Cham
WardiTV European League
1d 8h
Replay Cast
1d 16h
RSL Revival
2 days
herO vs SHIN
Reynor vs Cure
WardiTV European League
2 days
FEL
2 days
[ Show More ]
Korean StarCraft League
2 days
CranKy Ducklings
3 days
RSL Revival
3 days
FEL
3 days
Sparkling Tuna Cup
4 days
RSL Revival
4 days
FEL
4 days
BSL: ProLeague
4 days
Dewalt vs Bonyth
Replay Cast
5 days
Replay Cast
6 days
Liquipedia Results

Completed

Proleague 2025-06-28
HSC XXVII
Heroes 10 EU

Ongoing

JPL Season 2
BSL 2v2 Season 3
BSL Season 20
Acropolis #3
KCM Race Survival 2025 Season 2
CSL 17: 2025 SUMMER
Copa Latinoamericana 4
Championship of Russia 2025
RSL Revival: Season 1
Murky Cup #2
BLAST.tv Austin Major 2025
ESL Impact League Season 7
IEM Dallas 2025
PGL Astana 2025
Asian Champions League '25
BLAST Rivals Spring 2025
MESA Nomadic Masters
CCT Season 2 Global Finals
IEM Melbourne 2025
YaLLa Compass Qatar 2025

Upcoming

CSLPRO Last Chance 2025
CSLPRO Chat StarLAN 3
K-Championship
uThermal 2v2 Main Event
SEL Season 2 Championship
FEL Cracov 2025
Esports World Cup 2025
StarSeries Fall 2025
FISSURE Playground #2
BLAST Open Fall 2025
BLAST Open Fall Qual
Esports World Cup 2025
BLAST Bounty Fall 2025
BLAST Bounty Fall Qual
IEM Cologne 2025
FISSURE Playground #1
TLPD

1. ByuN
2. TY
3. Dark
4. Solar
5. Stats
6. Nerchio
7. sOs
8. soO
9. INnoVation
10. Elazer
1. Rain
2. Flash
3. EffOrt
4. Last
5. Bisu
6. Soulkey
7. Mini
8. Sharp
Sidebar Settings...

Advertising | Privacy Policy | Terms Of Use | Contact Us

Original banner artwork: Jim Warren
The contents of this webpage are copyright © 2025 TLnet. All Rights Reserved.