Yes, another virus. Created 12 years ago2011-06-03 06:50:51 UTC by 2muchvideogames

Hello again TWHL, since everyone has done this at some point I might as well jump on the covered wagon.

So I was just watching some anime, and then I lost connection and some obviously cheesy shit passing itself off as an antivirus starts to tell me this and that. Now you know I'm not some old man knowing nothing about computers like my dear old dad, so I already know it's a fake.

The first time I got these kinds of things from watching anime, it resulted in mass stupidity. But now that I am experienced, I can tell you exactly what I did to get myself back on the internet. For you see, the sonuvabitch linked its own launch with that of iexplore and firefox, sly bastard. But I always do the four-step amateur elimination procedure.

Step 1: Identify the virus.
You do ctrl alt delete and find the process that the jackass's real identity is. In my case it's kma.exe. It was posing as some generic windows script program. Bull shit the only windows I know is explorer.exe so everyone else can kiss my ass.

Then Right click that process to find the location it is in. In my case, he was in C:/Users/2muchvideogames/AppData/Local. At first I went there and couldn't find it. But luckily I knew about Folder Options since I was 10, so it turns out sucker was pretending to be a system operating file (and thus is hidden)

Step 2: Kill the process.
Just press the end process button. I confirmed that virus is indeed the kma.exe because when I kill the process, the fake antivirus crap disappears.

Step 3: Fix the registry.
Search your little virus "kma.exe" in the registry. Delete all entries associated with that file. DO NOT TOUCH ANYTHING ELSE. I once deleted search assistant and the next day couldn't even get pass the logon screen.

Step 4: Incapacitate or kill the program itself.
I went to the AppData/Local folder and eliminated kma.exe (revealed with Folder Options) and his two goonies. And now here I am.

On a side note, despite Kaspersky's pricetag and reputation, it's a massive fail that didn't find this lil' sucker on multiple sweeps. I scanned kma.exe directly with kaspersky and it says and I quote "No threats found". I think maybe it didn't do anything malicious but blocking firefox and iexplore with fake antivirus message is pretty malicious for me, and for you all, I bet. In the end, you are your own best antivirus. Now excuse me I have to finish that anime only 2-3 eps left.

I don't know too mucn about kaspersky. I use latest Avast and FF4 i've never had a problem. What browser are you rocking?

Fire fox and explorer are know for their poor spam detection.
It depends on what kaspersky do you have. If its only AV it wont detect spyware. I use PURE and it detects everything.

Also, such programs mess with your registry (if not an exe file that gets into your RAM). I always have Tune UP installed and if such a virus messes with my registry (blocks internet connection) i just scan my registry with tune up and it fixes the thing.

latest avast is amazing... has a sandbox to run questionable EXE files which i was really impressed by.. i started off with MSE but switched to avast cuz it has more options

Don't know what spam detection has to do with viruses, or how "exes get into your RAM".

I've heard good (and bad) things about AVG. Personally, I haven't used an antivirus program in years. Not only that, but I also make a habit out of opening mysterious exe files that I find on dubious sites or in even more dubious torrents. I wouldn't know how to get a virus even if I wanted one.

AVG was great 3 years ago, but after that it turned to shit. I currently use ESET NOD32, but I don't think it has ever detected a genuine virus. Not because the application is crap, but because as elof said, it is almost impossible to get a virus if you apply simple common sense. For dubious executables that you may want to run, check out an awesome little app called "sandboxie".

All these comments and not one person asked what anime show it was that infected him? Wasn't something nasty I hope!

I also make a habit out of opening mysterious exe files that I find on dubious sites or in even more dubious torrents. I wouldn't know how to get a virus even if I wanted one.

I don't use torrents or download anything, it got injected into my computer by some kind of website script (prolly an ad, which puts stuff on your hard drive without you even clicking it... I had that happen before) Flipping technology always used for evil instead of good.

and lol about the anime, well I dislike anything lewd so it was just some innocent show unfortunately with people dying.

I've been succesfully using Comodo Firewall and Avast Antivirus for the past 4 years. Well, except a short period in autumn 2010 when comodo consumed ridiculous amounts of processing power.

Sand box was good, till it started to block my HLVIS.exe and treated it as a suspicious file. And no matter if i clicked run with or run with out sand box my windows stopped responding. Dumb Avast.

Also, Zone alarm is a pretty damn good fire wall. Simple to use and goes along with avast really good. But as stated above i dont use Avast any more.

@ Zombie

Spam websites that usually contain malicious files and redirections to malicious files.

Sand box was good, till it started to block my HLVIS.exe and treated it as a suspicious file. And no matter if i clicked run with or run with out sand box my windows stopped responding. Dumb Avast.

I get those on everything I try to open, and Avast likes to restart my computer multiple amounts of times.

The Japanese don't want you looking at their testicle rape anime bullshit. KMA: Krazy Mad Asian.

I don't use torrents or download anything, it got injected into my computer by some kind of website script (prolly an ad, which puts stuff on your hard drive without you even clicking it... I had that happen before) Flipping technology always used for evil instead of good.

Not likely, unless you use like... Internet Explorer 5.5 on Windows ME. Seriously, it doesn't happen. Tracking cookies are about the most harmful thing that can be installed through a web browser without your explicit knowledge. Start using a proper browser (anything not made by Microsoft, really) and you'll be fine in that regard.

Not likely, unless you use like... Internet Explorer 5.5 on Windows ME. Seriously, it doesn't happen. Tracking cookies are about the most harmful thing that can be installed through a web browser without your explicit knowledge. Start using a proper browser (anything not made by Microsoft, really) and you'll be fine in that regard.

Hrm, well my grandfather gets tracking cookies on his Norton every five seconds. Hopefully, that will stop now that I forced him to switch to google chrome.

stojke: i never had one problem with avast, not ever... i was running MSE for a while, but switched to avast cuz it offers more options and features. Try MSE if avast is causing problems for you maybe.

Also, it's been my experience that anyone who uses and/or pays for norton products is really really really dumb.

Norton's not nearly as terrible as it used to be. I wouldn't use it myself, but it's no longer the joke it once was.

There's absolutely no point in attempting to remove a virus once it's infected your machine, anti-viruses are to prevent viruses from getting in, they're not for getting them out.

Just reformat and live and learn.

Worst advice ever.

Spybot!

There's absolutely no point in attempting to remove a virus once it's infected your machine, anti-viruses are to prevent viruses from getting in, they're not for getting them out.

That's completely untrue.

It depends on the type of virus, if it's a proper virus it's going to infect everything on your machine and is going to prevent you from running anything, and they usually delete\block entirely most popular AV's, some viruses are recoverable but if it's just a "!!VIRUS WARNING!!" popup, it's not a virus. It's called ad-ware, and hasn't infected anything.

Sure, you can remove a properly made virus, but after it infects every single file on your computer...
You can't put a item in a glass case to remove the dust that's collected, you put it in a glass case to prevent dust from collecting in the first place.

It's good to reformat frequently, virus or not.

I try to make it easier on myself by keeping all my programs on a seperate partition(like steam!), so i don't have to take 4 years reinstalling every-single-one of my programs..

Crollo I have absolutely no idea what you're trying to say.

Basically I'm trying to say it's better to use AV as a prevention system only as it's not massively reliable for getting viruses out. As mentioned, a proper one will rage absolute hell on your machine and it's best to just format.

I worded it pretty bad, implying you should just simply give up all hope if something get's in, but if a virus does it's job properly, then your machine would pretty much be toast, and all the effort it would take to properly fix it, you might'se well just reformat.

Wow Crollo... just wow.

How have gotten this far in life without falling into something or getting run over?

It is very simple to avoid getting hit by the particularly nasty viruses. Most of it is common sense.

I don't know, probably by being able to utilize entry level English, and entry level comprehensive skills?

Never did I say it was hard to avoid nasty viruses, if you want to say I did to call me an idiot, fuck you.

If you get hit by a virus that doesn't infect anything on your machine, congratulations, that's not a virus at all. It's adware. If you get hit by a VIRUS then have fun with peeling it off your computer.

Upon Googling the definition of "computer virus", I found, unsuprisingly, absolutely no-one agrees with you.

if you want to say I did to call me an idiot, fuck you.

Can I just call you an idiot because I genuinely dislike you?

...because I do

...and you are.

"A true virus can spread from one computer to another (in some form of executable code) when its host is taken to the target computer; for instance because a user sent it over a network or the Internet, or carried it on a removable medium such as a floppy disk, CD, DVD, or USB drive.
Viruses can increase their chances of spreading to other computers by infecting files on a network file system or a file system that is accessed by another computer.
As stated above, the term "computer virus" is sometimes used as a catch phrase to include all types of malware, even those that do not have the reproductive ability."

I assume you have no reading skills so I'll just bold and Italiac the important stuff here Dark.

Can I just call you an idiot because I genuinely dislike you?

Of course, it's not like I'm racist or anything.

Step 1: Safe mode
Step 2: Run virus removal software
Step 3: Profit

A virus will only load if it has a registry entry, removing the entry(s) is not that hard.

That's a pretty shitty virus then.

Man, if viruses were that bad, then I don't see why anti-viruses would even exist.

Does ANYONE see any relation between what he posted after Urby and what he was talking about previously? And why are we bothering arguing with him?