Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 
1024kb
582 posts

Ultimate Geek

Subscriber

  #2557425 5-Sep-2020 13:11
Send private message quote this post

 There's also the particularly sneaky method of hiding malware scripts in RAM. The script lives there & gets kept alive by the CMOS power.  The result is that after you've cleaned, reinstalled, replaced, re-everythinged, you fire up your fresh new machine with the same old virus on board.

 

Which can be confusing as well as enormously frustrating. 

 

It's not that often you'll see this method, but to make sure the infection isn't resident in RAM, disconnect the 240v power supply then remove the RAM sticks. Press & hold the power button to remove any last vestiges of power, then reinstall your RAM & reconnect the power.

 

You may never come across a RAM-resident virus, but the extra 2 minutes taken to ensure you've removed that possibility is time well-invested.

 

 





Megabyte - so geek it megahertz


Scott3
1146 posts

Uber Geek

Lifetime subscriber

  #2557432 5-Sep-2020 13:50
Send private message quote this post

OMG, so frustrating.

Good work getting to the Bank ASAP.

 

Next step is to scrub and change passwords on various cloud sites. (trademe, email etc). Can be hard if the scammers have already changed passwords, recovery mobile phone numbers etc to take over those accounts.

 

PC is relatively less urgent. I would fire it up air gaped, and take copies of any important files not already backed up to a USB drive, and check the autofill password memory for any accounts that may have been missed above.

I would then do a clean install of everything. Either fully formatting the hard disk, or taking the opportunity to do a hard drive upgrade.


 
 
 
 


K8Toledo
282 posts

Ultimate Geek

Subscriber

  #2557590 5-Sep-2020 17:17
Send private message quote this post

freitasm: System restore doesn't really do much - reset is a lot better.

 

Not to mention System Restore should be disabled before a virus removal.....:)


K8Toledo
282 posts

Ultimate Geek

Subscriber

  #2557594 5-Sep-2020 17:28
Send private message quote this post

1024kb:

 

 There's also the particularly sneaky method of hiding malware scripts in RAM. The script lives there & gets kept alive by the CMOS power.  The result is that after you've cleaned, reinstalled, replaced, re-everythinged, you fire up your fresh new machine with the same old virus on board.

 

Which can be confusing as well as enormously frustrating. 

 

It's not that often you'll see this method, but to make sure the infection isn't resident in RAM, disconnect the 240v power supply then remove the RAM sticks. Press & hold the power button to remove any last vestiges of power, then reinstall your RAM & reconnect the power.

 

You may never come across a RAM-resident virus, but the extra 2 minutes taken to ensure you've removed that possibility is time well-invested.

 

 

 

 

CMOS power comes from 5v battery. 

 

 

 

RAM is powered by the PSU......


1 | 2 
View this topic in a long page with up to 500 replies per page Create new topic





News »

Nanoleaf enhances lighting line with launch of Triangles and Mini Triangles
Posted 17-Oct-2020 20:18


Synology unveils DS16211+
Posted 17-Oct-2020 20:12


Ingram Micro introduces FootfallCam to New Zealand channel
Posted 17-Oct-2020 20:06


Dropbox adopts Virtual First working policy
Posted 17-Oct-2020 19:47


OPPO announces Reno4 Series 5G line-up in NZ
Posted 16-Oct-2020 08:52


Microsoft Highway to a Hundred expands to Asia Pacific
Posted 14-Oct-2020 09:34


Spark turns on 5G in Auckland
Posted 14-Oct-2020 09:29


AMD Launches AMD Ryzen 5000 Series Desktop Processors
Posted 9-Oct-2020 10:13


Teletrac Navman launches integrated multi-camera solution for transport and logistics industry
Posted 8-Oct-2020 10:57


Farmside hits 10,000 RBI customers
Posted 7-Oct-2020 15:32


NordVPN starts deploying colocated servers
Posted 7-Oct-2020 09:00


Google introduces Nest Wifi routers in New Zealand
Posted 7-Oct-2020 05:00


Orcon to bundle Google Nest Wifi router with new accounts
Posted 7-Oct-2020 05:00


Epay and Centrapay partner to create digital gift cards
Posted 2-Oct-2020 17:34


Inseego launches 5G MiFi M2000 mobile hotspot
Posted 2-Oct-2020 14:53









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.