|
Posted by Larry Beezley on January 8, 2006, 2:41 pm
If you were Registered and logged in, you could reply and use other advanced thread options
: quoted-printable
The entire message is : Warning! Your computer is infected! Press =
here for help!
It's a crawl that finally settles along the top of the screen. Xing it =
brings up a box that nags you to get their software.
OK. Nothing seems to touch this thing. SpyBot, MS AntiSpyware, =
Ad-Aware, Spyware Blaster, and AVG Free have been used, in regular and =
Safe Mode. I wonder if there is a good online virus test that would =
actually do some removal work?
*Any* help would be appreciated. I don't even know what name to call =
this infection, though I have called it several names.
There are other glitches, such as klunky behavior of Outlook Express and =
slowness of downloads and program execution. I suspect ET is calling =
home.
My OS is XP. All the patches are current, including the one last Friday =
(KB912919).
TIA,=20
Larry
------=_NextPart_000_001B_01C61461.9560CC50
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2900.2802" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT size=3D2>
<DIV><FONT size=3D2>The entire message is : Warning! Your =
computer is=20
infected! Press here for help!</FONT></DIV>
<DIV><FONT size=3D2>It's a crawl that finally settles along the top of =
the=20
screen. Xing it brings up a box that nags you to get their=20
software.</FONT></DIV>
<DIV><FONT size=3D2>OK. Nothing seems to touch this thing. =
SpyBot, MS=20
AntiSpyware, Ad-Aware, Spyware Blaster, and AVG Free have been used, in =
regular=20
and Safe Mode. I wonder if there is a good online virus test that =
would=20
actually do some removal work?</FONT></DIV>
<DIV><FONT size=3D2>*Any* help would be appreciated. I don't even =
know what=20
name to call this infection, though I have called it several =
names.</FONT></DIV>
<DIV><FONT size=3D2>There are other glitches, such as klunky behavior of =
Outlook=20
Express and slowness of downloads and program execution. I suspect =
ET is=20
calling home.</FONT></DIV>
<DIV><FONT size=3D2>My OS is XP. All the patches are current, =
including the=20
one last Friday (KB912919).</FONT></DIV>
<DIV><FONT size=3D2></FONT> </DIV>
<DIV><FONT size=3D2>TIA, </FONT></DIV>
<DIV><FONT size=3D2>Larry</FONT></DIV></FONT></DIV></BODY></HTML>
------=
|
|
Posted by David H. Lipman on January 8, 2006, 2:54 pm
If you were Registered and logged in, you could reply and use other advanced thread options
The entire message is : Warning! Your computer is infected! Press here for
help!
It's a crawl that finally settles along the top of the screen. Xing it brings
up a box that
nags you to get their software.
OK. Nothing seems to touch this thing. SpyBot, MS AntiSpyware, Ad-Aware,
Spyware Blaster,
and AVG Free have been used, in regular and Safe Mode. I wonder if there is a
good online
virus test that would actually do some removal work?
*Any* help would be appreciated. I don't even know what name to call this
infection, though
I have called it several names.
There are other glitches, such as klunky behavior of Outlook Express and
slowness of
downloads and program execution. I suspect ET is calling home.
My OS is XP. All the patches are current, including the one last Friday
(KB912919).
TIA,
Larry
Two part reply..
Perform Part 1 then perform Part 2.
If the first two parts don't work, perform the alternate utility.
It is suggested that you execute each tool in Normal Mode then in Safe Mode.
If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to JRE
Version 5.0. There are vulnerabilities in them and they are actively being
exploited.
It is possible that is how you got infected with malware.
Therefore, it is highly suggested that if there are any prior versions of Sun
Java
to Version 5 on the PC that they be removed and Sun Java JRE Version 5.0 Update 6
be installed ASAP.
http://www.java.com/en/download/manual.jsp
Part 1
-----------
Use noahdfear's SmitFraud and SpyAxe removal tool -- SmitRem.exe
http://noahdfear.geekstogo.com/click%20counter/click.php?id=1
http://www.bleepingcomputer.com/forums/topic36868.html
Part 2
-----------
Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe
Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close
NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to enable WGET.EXE to download the needed McAfee related files.
Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }
A final report in HTML format called C:\mcafee\ScanReport.HTML will be
generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or
Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing
another scan.
ALTERNATE:
Secured2K's SpyAxe, PSGuard, Smitfraud, Sinnaka and Alemod removal tool.
http://secured2k.home.comcast.net/tools/AntiPuper.exe
http://forums.mcafeehelp.com/viewtopic.php?t=65072
Please Copy and Paste the contents of the HTML Log file;
C:\mcafee\ScanReport.HTML in your
reply.
* * * Please report back your results * * *
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
|
|
Posted by Lisa Simpson on January 8, 2006, 4:11 pm
If you were Registered and logged in, you could reply and use other advanced thread options
The entire message is : Warning! Your computer is infected! Press here
for help!
It's a crawl that finally settles along the top of the screen. Xing it
brings up a box that nags you to get their software.
OK. Nothing seems to touch this thing. SpyBot, MS AntiSpyware, Ad-Aware,
Spyware Blaster, and AVG Free have been used, in regular and Safe Mode. I
wonder if there is a good online virus test that would actually do some
removal work?
*Any* help would be appreciated. I don't even know what name to call this
infection, though I have called it several names.
There are other glitches, such as klunky behavior of Outlook Express and
slowness of downloads and program execution. I suspect ET is calling home.
My OS is XP. All the patches are current, including the one last Friday
(KB912919).
TIA,
Larry
|
|
Posted by Aei Sedai on January 8, 2006, 5:09 pm
If you were Registered and logged in, you could reply and use other advanced thread options
for Puper or Alemod that can not seem to be removed automatically, please
try this automated removal tool.
AntiPuper v1.1 by secured2k
http://secured2k.home.comcast.net/tools/AntiPuper.exe
What does this tool do?
This tool will attempt to delete several known Trojan files. These files are
modified by the malware authors and encrypted to avoid detection.
Fortunately, many of these tend to use the exact same file names. If the
files are in use, locked, protected, etc, this program will schedule Windows
to remove the files upon restarting.
This program will also remove some common security policies that are changed
by viruses and worms. Policies that lock out your desktop changes, windows
update, Windows Firewall, Explorer Run policies, Registry editing, and more
are all reset.
Finally, if you have an infected Alemod WININET.DLL file, this program will
try to copy a clean version from your Windows File Protection folder and
replace the bad copy on restart. If a backup copy can not be found, the tool
will quickly look for McAfee Antivirus files and attempt to clean a copy of
the file to replace the bad one on reboot. If all of this fails, you will
need to manually replace/clean your WININET.DLL file.
The entire message is : Warning! Your computer is infected! Press here
for help!
It's a crawl that finally settles along the top of the screen. Xing it
brings up a box that nags you to get their software.
OK. Nothing seems to touch this thing. SpyBot, MS AntiSpyware, Ad-Aware,
Spyware Blaster, and AVG Free have been used, in regular and Safe Mode. I
wonder if there is a good online virus test that would actually do some
removal work?
*Any* help would be appreciated. I don't even know what name to call this
infection, though I have called it several names.
There are other glitches, such as klunky behavior of Outlook Express and
slowness of downloads and program execution. I suspect ET is calling home.
My OS is XP. All the patches are current, including the one last Friday
(KB912919).
TIA,
Larry
|
|
Posted by Max Wachtel on January 8, 2006, 8:55 pm
If you were Registered and logged in, you could reply and use other advanced thread options
this jewel:
> If you have SpyAxe, PSGuard, Smitfraud, Sinnaka Advertisments or
> detections for Puper or Alemod that can not seem to be removed
> automatically, please try this automated removal tool.
>
> AntiPuper v1.1 by secured2k
> http://secured2k.home.comcast.net/tools/AntiPuper.exe
>
> What does this tool do?
> This tool will attempt to delete several known Trojan files. These
> files are modified by the malware authors and encrypted to avoid
> detection. Fortunately, many of these tend to use the exact same file
> names. If the files are in use, locked, protected, etc, this program
> will schedule Windows to remove the files upon restarting.
>
> This program will also remove some common security policies that are
> changed by viruses and worms. Policies that lock out your desktop
> changes, windows update, Windows Firewall, Explorer Run policies,
> Registry editing, and more are all reset.
>
> Finally, if you have an infected Alemod WININET.DLL file, this
> program will try to copy a clean version from your Windows File
> Protection folder and replace the bad copy on restart. If a backup
> copy can not be found, the tool will quickly look for McAfee
> Antivirus files and attempt to clean a copy of the file to replace
> the bad one on reboot. If all of this fails, you will need to
> manually replace/clean your WININET.DLL file.
>
******************Reply Separator*************************
PC???? is that you again????
I just can't keep up!!!!!!
max
--
Virus Removal Instructions: http://home.neo.rr.com/manna4u/
Keeping Windows Clean: http://home.neo.rr.com/manna4u/keepingclean.html
Windows Help: http://home.neo.rr.com/manna4u/tools.html
Specific Fixes: http://home.neo.rr.com/manna4u/fixes.html
Forums for HiJackThis Logs:
http://home.neo.rr.com/manna4u/forums_for_hijackthis_logs.html
To reply by e-mail change nomail.afraid.org to gmail.com
nomail.afraid.org is setup specifically for use in USENET
feel free to use it yourself. Registered Linux User #393236
|
| Similar Threads | Posted | | WARNING SPWARE detected on your computer - Install an antivirus or | February 3, 2006, 1:29 pm |
| "Your computer is infected" | July 1, 2006, 10:59 am |
| How to clean an infected computer? | October 30, 2007, 2:27 am |
| virus alert "your computer is infected" ?? | March 26, 2006, 6:33 am |
| Can Updates be transfered from computer to computer. | June 14, 2007, 5:43 am |
| warning | January 6, 2006, 10:24 pm |
| Warning ! SSL | November 11, 2006, 2:01 pm |
| Security Warning | November 14, 2005, 12:15 am |
| Re: Getting a warning NOTICE | May 10, 2008, 10:43 pm |
| Fake Spyware Warning | August 18, 2005, 3:51 pm |
|
XML site map