Fake Virus Alert

Fake Virus Alert

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Fake Virus Alert DBD 08-05-2006
Posted by DBD on August 5, 2006, 9:27 am
If you were  Registered and logged in, you could reply and use other advanced thread options
: quoted-printable

I have this pesty virus alert popping up on my computer system tray and =
has lodged itself into memory. It is a ploy to get me to purchase =
spyware software for fifty bucks. I am not doing that as I have =
sufficient software for spyware. Does anyone know how I can rid myself =
of this?
------=_NextPart_000_00A0_01C6B871.62A84D10
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2900.2912" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>I have this pesty virus alert popping =
up on my=20
computer system tray and has lodged itself into memory.&nbsp; It is a =
ploy to=20
get me to purchase spyware software for fifty bucks.&nbsp; I am not =
doing that=20
as I have sufficient software for spyware.&nbsp; Does anyone know how I =
can rid=20
myself of this?</FONT></DIV></BODY></HTML>

------=
Posted by David H. Lipman on August 5, 2006, 9:37 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I have this pesty virus alert popping up on my computer system tray and has
lodged itself
into memory. It is a ploy to get me to purchase spyware software for fifty
bucks. I am not
doing that as I have sufficient software for spyware. Does anyone know how I
can rid myself
of this?





Two part reply..

Perform Part 1 then perform Part 2.

If the first two parts don't work, perform the alternate section.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.

If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to JRE/JSE
Version 5.0. There are vulnerabilities in them and they are actively being
exploited.
This is most likely why you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of Sun
Java
to Version 5 on the PC that they be removed and Sun Java JRE/JSE Version 5.0
Update 7
be installed ASAP.

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version...

C:\Program Files\Java\jre1.5.0_07


http://www.java.com/en/download/manual.jsp



Part 1
-----------

Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool --
SmitRem.exe
http://noahdfear.geekstogo.com/click%20counter/click.php?id=1

http://www.bleepingcomputer.com/forums/topic43659.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it
will be
displayed in your browser (Opera, FireFox or Internet Explorer). However, if
you are using
WinXP, Win2K or Win2003 your system will be left in a state where you will have
to manually
shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in
your bowser
but your PC will automatically be shutdown. It is suggested that you move the
report out of
c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a copy of
the HTML
report for each session.


ALTERNATE:

Part 1
-----------

Secured2K's SpyAxe, PSGuard, Smitfraud, Sinnaka and Alemod removal tool.

http://secured2k.home.comcast.net/tools/AntiPuper.exe

http://forums.mcafeehelp.com/viewtopic.php?t=65072


Part 2
-----------

S!ri's SmitfraudFix
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php


Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by DBD on August 5, 2006, 9:52 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Sir, How do I get to norman or safe mode

I went to the java site and the latest they have is 5.0 Update 6




> I have this pesty virus alert popping up on my computer system tray and
> has lodged itself
> into memory. It is a ploy to get me to purchase spyware software for
> fifty bucks. I am not
> doing that as I have sufficient software for spyware. Does anyone know
> how I can rid myself
> of this?
>
>
>
>
>
> Two part reply..
>
> Perform Part 1 then perform Part 2.
>
> If the first two parts don't work, perform the alternate section.
>
> It is suggested that you execute each tool in Normal Mode then in Safe
> Mode.
>
> If you are using any version of Sun Java that is prior to JRE Version 5.0,
> then you are strongly urged to remove any/all versions that are prior to
> JRE/JSE
> Version 5.0. There are vulnerabilities in them and they are actively
> being exploited.
> This is most likely why you got infected with malware.
>
> Therefore, it is highly suggested that if there are any prior versions of
> Sun Java
> to Version 5 on the PC that they be removed and Sun Java JRE/JSE Version
> 5.0 Update 7
> be installed ASAP.
>
> Simple check, look under...
> C:\Program Files\Java
>
> The only folder under that folder should be the latest version...
>
> C:\Program Files\Java\jre1.5.0_07
>
>
> http://www.java.com/en/download/manual.jsp
>
>
>
> Part 1
> -----------
>
> Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool --
> SmitRem.exe
> http://noahdfear.geekstogo.com/click%20counter/click.php?id=1
>
> http://www.bleepingcomputer.com/forums/topic43659.html
>
>
> Part 2
> -----------
>
> Download SmitFraud.exe from the URL --
> http://www.ik-cs.com/programs/virtools/SmitFraud.exe
>
> Execute; SmitFraud.exe { Note: You must accept the default of
> C:\McAfee }
> Choose; Unzip
> Choose; Close
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to
> go through your
> FireWall to enable WGET.EXE to download the needed McAfee related files.
>
> Execute; c:\mcafee\clean.bat
> { or Double-click on 'Clean Link' in c:\mcafee }
>
> A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
> C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan,
> it will be
> displayed in your browser (Opera, FireFox or Internet Explorer). However,
> if you are using
> WinXP, Win2K or Win2003 your system will be left in a state where you will
> have to manually
> shutdown/reboot the PC. On Win9x/ME platforms the report will not be
> shown in your bowser
> but your PC will automatically be shutdown. It is suggested that you move
> the report out of
> c:\mcafee before performing another scan.
>
> It would be best to scan in both Safe Mode and in Normal Mode and save a
> copy of the HTML
> report for each session.
>
>
> ALTERNATE:
>
> Part 1
> -----------
>
> Secured2K's SpyAxe, PSGuard, Smitfraud, Sinnaka and Alemod removal tool.
>
> http://secured2k.home.comcast.net/tools/AntiPuper.exe
>
> http://forums.mcafeehelp.com/viewtopic.php?t=65072
>
>
> Part 2
> -----------
>
> S!ri's SmitfraudFix
> http://siri.urz.free.fr/Fix/SmitfraudFix_En.php
>
>
> Please Copy and Paste the contents of the HTML Log files;
> C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your
> reply.
>
> * * * Please report back your results * * *
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>



Posted by Malke on August 5, 2006, 10:14 am
If you were  Registered and logged in, you could reply and use other advanced thread options
DBD wrote:

> Sir, How do I get to norman or safe mode
>
> I went to the java site and the latest they have is 5.0 Update 6

See instructions here for getting into Safe Mode. Then you can do what David
Lipman suggested.

http://www.elephantboycomputers.com/page2.html#Removing_Malware

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a professional computer repair
shop (not your local version of BigStoreUSA). Since you didn't know how to
get into Safe Mode, this would probably be the better course of action for
you. I'm not saying that to hurt your feelings, just being practical.

Malke
--
MS-MVP Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic"

Posted by David H. Lipman on August 5, 2006, 11:06 am
If you were  Registered and logged in, you could reply and use other advanced thread options

| Sir, How do I get to norman or safe mode
|
| I went to the java site and the latest they have is 5.0 Update 6
|


There have been problems downloading Sun Java v5 update 7. V5 update 6 is fine.


For those users having trouble getting into Safe Mode, there is the free BootSafe
application:
http://www.superadblocker.com/bootsafe.html


BTW: Don't be so formal, 'Dave' will do :-)

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Similar ThreadsPosted
Virus Alert Window June 11, 2006, 12:31 pm
virus alert "your computer is infected" ?? March 26, 2006, 6:33 am
Fake Spyware Warning August 18, 2005, 3:51 pm
fake spyware message February 18, 2006, 7:49 pm
Help! Fake svchost.exe on my computer October 6, 2006, 7:27 am
distinguish real from fake dialog? September 12, 2008, 1:43 pm
smitfraud creating fake registry entries?? September 24, 2006, 6:23 am
One more "Fake" Anti-Malware product-"eAntivirusPro" September 18, 2008, 7:08 am
System Alert!!! January 24, 2007, 12:06 am
Security Alert Question August 16, 2005, 12:01 pm

The site map in XML format XML site map

Contact Us | Privacy Policy