PDA

View Full Version : Computer Problem - Virus? (Help Please)



Timage
March 2nd, 2004, 02:28 AM
Hey.

A couple of hours ago, I was redirected to a **** site from some gay thing and the computer went crazy, then Norton's picked up a couple of virus's, but removed them. After that, the home page on Internet Explorer turned to a blue page with this address: C:\WINDOWS\secure.html
And has this on it.





--------------------------------------------------------------------------------
Detected SPYware! System error #384
__________________________________________________
________________________

Your IP address is XXXXXXXX (It says it). Using this address a remote computer has gained anaccess to your computer and probably is collecting the information about the sites you've visited and the files contained in the folder Temporary Internet Files. Attention! Ask for help or install the software for deleting secret information about the sites you visited.

__________________________________________________
________________________

Your computer is full of evidences!


ISP of transmission: NET
Your IP address: XXXXXXXXXX (It says it)
They know you're using: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Your computer is: Windows XP
Risk status for further investigation: VERY HIGH RISK

To protect from the Spyware - click here
To prevent information transmission - click here
To delete the history of your activity, click here
--------------------------------------------------------------------------------






The links take me to this site: http://www.privacyoutpost.com/enter.html?wm=sher

It's a site with a program that costs $50 and says will protect me.
Now, my question is, should I worry about this? It's freaking me out because as soon as I change the homepage, it changes right back. It also says I'm using Mozilla, which I don't. I use MSN Explorer, and sometime IE, but unless MSN is mozilla, then no. I've tried Adaware 6 and it found somethings, which it removed, but still the problem remains. I also ran SpyBot search and destroy, which found and fixed some things, but still, the problem remains.

Thanks for your help.




P.S. Don't ****ing say "Oh what are you doing looking at ****?" because I wasn't. I clicked on a picture that I found on a google image search, so don't even think about it or I'll crack the serious sloppy ****s.

RelandR
March 2nd, 2004, 03:20 AM
nice - it's like the guy beats you up and then offers to protect you for a fee :sure:

anysite can detect and report that info to you - noBiggy with that part...

this address path is on your machine::
"C:\WINDOWS\secure.html "

try this:
most important part=go and delete "secure.html", along with dumping your cache and cookies, run spybot again and make sure to use the advanced mode and check all boxes - then find the "restore" (or similar name) folder under spybots directory, don't throw the folder away but dump all it's content... empty the trash, reset your browser settings and then do a cold re-boot ... (shut down completely - wait 10 minutes then restart)

if that doesn't clear it up you need a better anti-virus app... maybe zonealarm

Timage
March 2nd, 2004, 03:35 AM
I deleted it before but they popped up again. I will try the other things you mentioned. Thanks for the reply.

prstudio
March 2nd, 2004, 03:42 AM
pssst.... get a copy of the next Kirupa Newsletter

teet
March 2nd, 2004, 11:40 AM
You could always try the nifty system restore feature on windows xp...

Most people waste 8-12% of their harddrive for the system restore, and then when the need to use it actually arises they forget they even have it. I'm not saying it will help you necessarily in this case, but it's worth a shot :)

Also, go to Start-->Run and type "msconfig" then click on the startup tab. Uncheck anything that looks odd (or everything! you don't really need any of it in your startup). Then click on the services tab up top, check "Hide all Microsoft Services," and remove anything that looks funny.

-teet

Voetsjoeba
March 2nd, 2004, 01:33 PM
Good thing this forum has a language filter. :sigh:

Laslett
March 2nd, 2004, 01:36 PM
start up in safe mode remove the web page thing
run antivirus!!

Scalabis
March 2nd, 2004, 01:44 PM
Better wear condoms next time visiting sex pages! :P

SeiferTim
March 2nd, 2004, 01:52 PM
http://www.spywareguide.com

Run the free scanner.
And download this baby: SpyBot (www.safer-networking.org/index.php?page=download)

Timage
March 3rd, 2004, 02:35 AM
YES! YOU LITTLE RIPPER!

Problem solved! Now, if anyone gets this happening to them do this:
Open Regedit, search for something called Reg32, delete the mofo.
And done! yOu're freeeee!!!1111!11!!one