North American Fruit Explorers mailing list at ibiblio

[<dmnorton@royaloakfarmorchard.com>]

A piece of malware may be on your computer that has been in circulation since last September.  It redirects links in Google, Yahoo and MSN search results to hacker sites.

Reports of infection are widespread, but fortunately, you can remove this persistent threat relatively easily.  For at least the past four months, an Internet attack has been under way that transforms the links in search results into browser hijackers. Known as the go.google, go.yahoo, or go.msn virus, it infects systems to redirect certain Google, Yahoo, and MSN search-results pages to hacker-operated sites.

Even worse, the virus takes several steps to prevent you from removing it. The infection blocks access to certain antivirus sites and shuts down many antivirus tools. The go.google virus in particular appears to be widespread: a quick search of Google for go.google virus turns up no fewer than 4 million pages where people discuss this nasty critter!

Getting this bugger off your computer is a two-step process. First, scan your system with a malware-removal tool. If you're unable to open and download updates for your regular antivirus and anti-malware software, use a noninfected computer to download to a flash drive a program such as the free Malwarebytes Anti-Malware (more info) and SuperAntiSpyware (more info). Finally, plug the flash drive into the infected computer and run the antivirus program from that device.

Note that even if you are able to download a malware-removal tool on the virus-laden PC, the virus may prevent you from running it. To get around that problem, rename the anti-malware tool's executable file. For example, change SuperAntiSpyware.exe to mytool.exe. Now you should be able to launch the app.

Another way to get around the inability to access your antivirus program is to check your system for the presence of a particular rogue device driver:

• Step 1: Click Start, Control Panel, Performance and Maintenance (in Categories view), System.
• Step 2: Select the Hardware tab and click Device Manager.
• Step 3: Choose the View menu and select Show hidden devices.
• Step 4: Scroll to the Non-plug and play drivers section and expand the tree.
• Step 5: If you see an item labeled TDSSserv.sys, right-click it and select Disable.

After you reboot your computer, you'll be able to access your antivirus program and browse to anti-malware sites to remove the pest from your PC. Once you've cleaned your system, make certain that you update your antivirus software every day to avoid reinfection.

Dennis Norton
Royal Oak Farm Orchard
Office (815) 648-4467
Mobile (815) 228-2174
Fax (609) 228-2174
http://www.royaloakfarmorchard.com
http://www.theorchardkeeper.blogspot.com
http://www.revivalhymn.com

----- Original Message -----

From: ROBERT W JUDY A HARTMAN

To: North American Fruit Explorers

Sent: Thursday, January 15, 2009 11:12 PM

Subject: Re: [NAFEX] Google

All this told me is that Google is up.  Yes, Google is working but not correctly.  It gives you a list of what you are looking for but the site that it takes you to has nothing to do with what you are looking for.  It is totally different.

 

Bob

----- Original Message -----

From: Spidra Webster

To: North American Fruit Explorers

Sent: Thursday, January 15, 2009 5:31 PM

Subject: Re: [NAFEX] Google

It would seem to be a problem with your computer or your connection/network.  Here's a fantastic site to check stuff like that:

http://downforeveryoneorjustme.com

On Jan 15, 2009, at 5:05 PM, ROBERT W JUDY A HARTMAN wrote:

Has anyone noticed that Google doesn't seem to be working right this afternoon/evening?  I wonder what is going on.

 

Thanks,

Bob

Megan Lynch

Berkeley, CA

CRFG, NAFEX: I'm in USDA Zone 9b

Garden with me on Folia: http://myfolia.com/gardener/spidra/invite

Golden Gate Chapter Blog: http://crfggoldengate.blogspot.com/

CRFG Flickr Pool: http://www.flickr.com/groups/crfg/

Chapter Events on Upcoming.org:  http://upcoming.yahoo.com/group/3429/

_______________________________________________
nafex mailing list
nafex@lists.ibiblio.org

Reproduction of list messages or archives is not allowed.
This includes distribution on other email lists or reproduction on web sites.
Permission to reproduce is NEVER granted, so don't claim you have permission!

**YOU MUST BE SUBSCRIBED TO POST!**
Posts from email addresses that are not subscribed are discarded.
No exceptions. 
----
To subscribe or unsubscribe, go to the bottom of this page (also can be used to change other email options):
http://lists.ibiblio.org/mailman/listinfo/nafex

File attachments are NOT stripped by this list.
TAKE STEPS TO PROTECT YOURSELF FROM COMPUTER VIRUSES!
Please do not send binary files.
Use plain text ONLY in emails!

NAFEX web site:   http://www.nafex.org/