Do i have a virus?

Question

So, today my norton all of a sudden keeps notifying me about preventing or blocking some sort of intrusion. I hardly ever see such attempts made, yet today it has happened 2 or 3 times from the SAME place. They were also hours apart. i get this report from norton: High,An intrusion attempt by 107.21.110.245 was blocked.,Blocked,No Action Required,System Infected: Trojan.Miuref Activity 2,No Action Required,No Action Required,"107.21.110.245, 80",businessbureau.tv/scrstat,"My PC","107.21.110.245" ,"TCP, www-http"
Network traffic from businessbureau.tv/scrstat matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME3\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE.

Both times it has been from businessbureau.tv/scrstat, but the first time was from a different IP. i am getting worried. I just recently opened up a new bank account too, a few days ago. Im not sure whether they are connected or not, but im kinda scared.

Answer 1

You need to use SAFE MODE to get rid of malware. Here's how:







USING SAFE MODE



You may very well be hijacked with malware that is preventing you from doing things or your computer is running very slow.



The best way to work this problem is to boot your pc into the SAFE MODE. This is a mode where your computer only boots windows files and nothing else. So if there is malware present it doesn't boot up and preclude you from running antivirus/malware programs to clean up your pc. Here's how to get there.



1. Boot up or reboot your pc and when you see the screen becoming active start tapping the F8 key at one half second intervals until you see a black screen with white lettering.

2. Look at the list of Safe Mode options near the top of the displayed page and use the arrow keys to move the highlighted line up to the SAFE MODE WITH NETWORKING line and then hit enter.

3. Give the pc a few minutes to fully boot up. It will boot with a fairly normal looking desk top screen but will have "Safe Mode" in all 4 corners of the display.

4. Hopefully you have Malwarebytes installed. If so update the malware definitions using the Check For Updates selection in the settings icon in the top right of the screen and download the latest definitions. If you don't have it installed, use your internet browser (IE; Firefox; Chrome; etc.) and go to download.com, use the search box and search for Malwarebytes and download it and install it.

http://www.icleansoftware.com/bliss-search-ads-removal-guide/

5. Click on the Scan area in Malwarebytes and run a full scan. When complete review the findings (if any) and then select all of them (right click on one of the little check boxes) and then click on Remove All. Malwarebytes will remove all of the found problem items.

6. Reboot the pc.

Answer 2

This is your best means of being sure of the presence/lack of malware and of getting rid of it short of a wipe/reload of the hard drive:

The most reliable way of removing malware: by [e-mail]



The best way to remove viruses from your computer is to boot from something other that your hard

disk. Fortunately, most AV producers provide what is called a Rescue Disk. This is a boot-able CD/DVD or flash drive. On a *clean* computer, download at least one of these programs, preferably two of them. (No AV program gets everything but not many can get past two reputable scanners.) Make the boot-able disk or flash drive, boot the computer with it. Now this image was made a while ago so you will want to update after you boot. Once it has updated set it to work scanning your computer. See the explanation of why this is the case below.



Separate from the others I will offer to you is Kaspersky's TDSSKiller. Not an actual Rescue Disk by itself, it is at the very top of the list of root-kit finders/eliminators. You should run this in addition to at least one of the others:

http://usa.kaspersky.com/downloads/TDSSKiller



Here are 4 of the many free Rescue Disks available:



http://support.kaspersky.com/us/viruses/rescuedisk/

http://www.bitdefender.com/support/how-to-create-a-bitdefender-rescue-cd-627.html

https://www.zonealarm.com/forums/showthread.php/72117-boot-disc-zone-alarm-scan

http://www.lavasoft.com/mylavasoft/support/supportcenter/how-to-create-a-rescue-cd



One of the most difficult things about viruses is once you get one it is difficult to be sure you got rid of all of it/them. Resident programs are pretty effective at blocking initial infection if kept updated, but not so good at removing all of the viruses, especially the worst ones – root-kits.



Think of the entire computer with all the software as a walled city with one outer wall – the rest of the world outside, the computer and the software inside – and then a series of inner walls with fewer and fewer people allowed within the next layer towards the castle in the middle. It is the center wall within which all the power of the kingdom resides. On a computer, in the middle, we have the kernel or heart of the operating system which talks directly with the hardware such as the CPU, motherboard, RAM, etc. Anything that wants to access any of the computer's hardware must go through the OS to get there. In the layers going out, each layer has increasingly less security to go through (and less authority) so that on the very outside where the applications are, there isn't a lot of security or authority to change things on the computer.



Most viruses operate in the outer layers which makes it relatively simple to find, identify and remove. Malware performs various tricks in order to get access to the inner layers. There are, however, some viruses which manage to get access to the kernel level. These are called “Root Kit” viruses. Root is a reference to the center layer. In the Linux and Unix world, a root user has the keys to the kingdom and full control of everything on the machine. With Windows, of course, we don't have a root, we have administrators who actually have a little less authority than Root on Linux/Unix.



The Root-Kits are able to get themselves launched at the same time as the kernel, sometimes as part of the kernel. This happens well before any security software on the machine is launched. As a result, these root-kits have time to hide themselves and even hide other viruses from the security systems/software of the computer. The only reliable way to find them is to perform a virus search before the virus launches which means before the Kernel of the OS launches. By using something other than your hard drive to boot from you have full access to everything on the machine and nothing has time to hide because they never launch.

Answer 3

scan ur computer with Malwarebytes Anti Malware.