[olug] help needed cleaning a home computer network.

[Lou Duchez]

I admit that I'm not sure how an E-Mail opened in Linux would have 
resulted in your Windows partition getting infected, and my working 
assumption is that it did not -- whatever you've got on your Windows 
partition got installed during a previous Windows session.  With that 
assumption in mind, I am assuming CentOS is clean, unless you have 
observed any symptoms while running CentOS.  (Perhaps it's a boot sector 
thing, in which case trying to clean Windows would still cover it.)

There's a good chance you can clean your Windows partition yourself, 
with VIPRE Rescue:

http://www.vipreantivirus.com/live/

Instructions:

1)    Boot to the CentOS partition.

2)    Download VIPRE Rescue onto a flash drive.

3)    Disconnect the computer from the Internet.

4)    Boot to the Windows partition.

5)    Install VIPRE Rescue.

6)    Run VIPRE Rescue, and let it do its thing.

7)    Run VIPRE Rescue a second time, and hopefully it won't find any 
more traces of anything on your computer.

Depending on how deeply embedded your malware is, this may or may not do 
the trick.  However, it's free, and it can't hurt (or is extremely 
unlikely to anyway).


>     I'm running a desktop and laptop system both with dual-boot Centos 
> 6 and Windows 7.  Firefox has recently been crashing regularly on the 
> desktop running Centos (my usual machine).  This morning I used the 
> laptop to boot Windows 7 since my bank has decided that it will allow 
> online access only to current versions of Firefox, and the Centos 
> Firefox is usually a few versions behind.  After accessing the bank 
> account I left the desktop running.  When I came back to it 20 minutes 
> or so later, it had decided to display a porno site.  I don't do risky 
> website browsing.
>
>     In a fit of absentmindedness, I had clicked on a link from a 
> plausible email about a month ago.  The person who sent it told me his 
> email had been hacked, so I was concerned but hoped that the fact that 
> I was running Linux protected me.  I guess not.
>
>     I'm looking for someone who can clean the system, both Linux and 
> Windows.  If you are interested or know someone who can handle it, 
> please contact me off-list.  Otherwise, I'll start calling around to 
> local "computer virus cleaner" shops.
>
>     Thanks,
>
>     Jack Dunn
>     402 551-2552
> _______________________________________________
> OLUG mailing list
> OLUG at olug.org
> https://lists.olug.org/mailman/listinfo/olug