Discussion Topic |
|
This thread has been locked |
neebee
Social climber
calif/texas
|
|
|
Topic Author's Original Post - Apr 2, 2009 - 09:22am PT
|
hey there all... say, i never go to odd sites, far as i know... and i dont open email other than the usual, but i was looking at a few news articles and grant sites, and writing sites, etc, tonight, and this happened out of the blue:
(OH also, this computer came from someone, to me--it has spycatcher, and it also has adaware)(and firewall is on)(but the windows version of virus-whatever is off, so that these will do the work instead)---this is how that last person had it set up...
okay then:
1---just a few hours ago a WINDOW pops up and says your computer is infected, you have possible virus (also a box telling you to click OK or CANCEL, as to downloading this file to fix it)
flashing box, and flashing red alerts, etc...
2--there is suddenly an internect explorer window saying this, in the browser:
http etc etc, and--> bonuspromoofer.com
?i sure didn't hit to go there? what is this?
3--then i reallize this is telling me to download antivirus2009,
as that is the heading, now on the brower TOP right-corner name
and the warning box that popped up, was showing as if it came from windows as a special alert (but mine is supposedly turned off?)
4--then it showed in a larger window, ALL the places where all these 200+, and 300+ and 200+ trojens were setting in all my various icons of hard drive, documents folders, and someother spot (i forgot)...
well, naturally i think:
hmmmmm... oh my, and, man oh man... what the heck have i done to have all this wrong in just a few hours, and hadn't even opened any email? was it a camoflaged news site, that was corrupted, that i hit on, somewhere?
5--well, i get a mite scared for this ol' computer as i am living at poverty-under level, so:
i get the idea to hit my own spyware and NOT trust this dad-gum weirdness going on (course by now, all my pass words, etc, are said to be in risk and who knows what)(and will be, if i dont do what they warm me to do)...
6---well, after i use my spycatcher, it found two things, and two only, and i got rid of those... then i clicked OFF all the WEIRD SUDDEN pop-up window warnings, by "x" to close, and did that to the bonuspromooffer.com deal which MUST? have been connected to this virus2009 deal, that this window was wanting me to download...
7--well, then i waited a bit and nothing new came up, and no more warnings... but then just after that, i lost dial-up connection...
8--why are there no more warnings, if i was in such danger?
was it cause i refused the 'safety' so now, all is ruined, so thus, not needed anymore?
10--well, i got back on, and used the adaware, also, and it took off three small things, and then i had forgotten to mark a full scan of the cd disc, etc, with the spycatcher----so i did that----and the the spycathcer, again found the same spyware as before... (took it off, again)...
11--then, i've been online for a about half-and-hour now, and did the scan again, and so far... it says there is nothing found...
and it appears my computer is okay...
BUT:
hmmm... well, is it? or does it really have a virus now???
okay you all.... yep, you all helped me before, so i'm
knocking on the ol' supertopo door again...
*one last note, i did a search to see what the heck that ol' antivirus2009 was and LO AND BEHOLD i find that there is also a removal of antivirus2009 because it is a BAD troublemaker, in itself...
any and all HELP, please, guys... :O
thanks and god bless...
|
|
noshoesnoshirt
climber
dangling off a wind turbine in a town near you
|
|
When you close out those pop-ups don't click the x in the upper right corner, in fact don't go anywhere them. Close the entire process in task manager.
And stop using IE, it's full off holes.
|
|
neebee
Social climber
calif/texas
|
|
|
Topic Author's Reply - Apr 2, 2009 - 09:32am PT
|
hey there noshoesnoshirt... say, thanks...
so then, this stuff was all weird stuff then... and was it a trick to get me to download the instalation of it...?
what is task master, please..
oh, and all i have in internet explorer... what else can i use... say, i don't have any money to buy anything...
please explain a bit more...
and thanks for your help... i been more than a mite worried...
edit: well, been up all night, and was supposed to be
writing... but just didn't ... will have to do it
today--story is ready to run to the finish line...
i will be back soon as i sleep, if i can, and see
what happened here tonight...
thanks, all... :)
|
|
noshoesnoshirt
climber
dangling off a wind turbine in a town near you
|
|
neebee,
You can download Firefox for free. Works great.
|
|
Reilly
Mountain climber
Monrovia, CA
|
|
"what is task master, please.."
That would be my loving wife.
Noshoes refers to the Task Manager which appears when you hit Ctrl-Alt-Del at the same time. In it you can click on the process you want to end and then click End Task. I think he is recommending this method because if you just try to close some pop-ups by hitting the 'x' they will not do so.
FireFox is really good for older Windows machines.
|
|
72hw
Trad climber
Pasadena, CA
|
|
Yeah - for sure Firefox is the only way to go...
I too run the above mentioned Script killer and also the below listed add-on's that have made my time online so much better:
Ad Block Plus: https://addons.mozilla.org/en-US/firefox/addon/1865
Get rid of the banners, ads, pop up's and other annoying sh|t that slows down your page loads for good!
IE View: https://addons.mozilla.org/en-US/firefox/addon/35
Let's you open the increasingly rare page that refuses to work in Firefox using Internet Exploder with one simple click.
|
|
Off White
climber
Tenino, WA
|
|
Oh Neebee, you might have a really ugly bugger of a trojan virus. I had one of those last year, and it futzed with all kinds of things, including limiting websearches related to killing it off. There's a nasty little .dll file floating around, and it's likely spawning new files and downloading other junk. Firefox won't save you now, and you absolutely should not purchase any of the "anti-spyware" crap the little boxes tell you to go to, they're the folks behind the trojan in the first place.
There's a variety of programs that will help, I had luck with Spyware Doctor (pretty good at finding things, free trial might be fully functional, I'm not sure), but also used Security Task Manager (will analyze and assign risk ratings to everything running on your computer, I think it's free) and Killbox (free, will shutdown any process running, including ones like that trojan that won't let you shut it down) to root stuff out. A You'll have problems in your registry too, something like JV Powertools will help clean that up. There's a lot of info out on the web, but somethings these things won't let you search for info if you specify the file name, so you might need a second clean computer to find things out.
If all this is gobbledegook to you, get some computer savvy friend who's comfortable getting into the software guts of the machine to come help you.
|
|
Saltydog
climber
NC
|
|
maybe try to create a restore point a few days back.
|
|
neebee
Social climber
calif/texas
|
|
|
Topic Author's Reply - Apr 2, 2009 - 01:15pm PT
|
hey there all... say, whoever is around...
i will go and down load the foxfire, by the link...
i dont have much memory, will this use up more?
also, i DID NOT download any of the spy or anti virus stuff...
but this machine came with a spycatcher set up in it...
do you all think i got the trojen stuff into my machine now??
what should i do, will it take all my passwords, etc...
should i use my email now, or not...??
HOW do i do a ssytemes restore, to a few days agao??
|
|
neebee
Social climber
calif/texas
|
|
|
Topic Author's Reply - Apr 2, 2009 - 01:34pm PT
|
hey there skipt... say, thanks.. happy to see you...
say, i am going to download the foxfire now...
say, i have seen it before on my ex son in law's wife's computer...
am i still able to use my email now, or what...
i have not used any since this... and i had not opened any that night, either... so i dont know WHY this all started...
|
|
johnboy
Trad climber
Can't get here from there
|
|
First things first. What version of Windows are you running?
The rest of these answers will most likely get you through most of the versions of Windows your running, but there are variations.
Sounds like you got a spyware and its trying to lead you to a trojan. You might be OK, but more than likely is has replicated itself into a .dll file that manifests itself on some cue programmed into it.
Fire fox will use much less memory than MSIE. When you set up Fire fox, don't transfer any files or cookies from IE when it asks. Also, set your cookies to "ask" for your permission before accepting.
Since the program has already replicated itself, going back with a system restore might not work either. Again, its just waiting for the right trigger. But it won't hurt if you want to try it. Use the windows "run" dialoge box and type in "msconfig" and look for windows restore,, follow directions. If the offender hasn't stolen all your previous system check points, go back a week or two.
Another thing I'd suggest to do first is to go into your Windows Explorer program (not Internet Explorer) and go to your windows\system32 files, under "View" at the top, make sure you look at the files by "Details" and also "Arrange files by" then "Modified". Now go through every subfolder in system32 and system32 itself and look for any files that have been created in the last couple of weeks and delete them.
Another thing, never run more than one antivirus program or spyware programs on your computer, not only is it memory intensive, it will also drive your computer nuts with one program watching the other modify things and vice versa.
Short of anything else, its very simple to erase the hard drive and put an operating system back on it. More often than not, its the best way and the shortest to fix. If you've got to many files that you don't want to lose, than my advice is like the 3 simple rules for golfing. In golfing its,
1.Keep your head down.
2.Keep your head down.
3.Keep your damn head down.
In computers the 3 simple rules are,
1.Backup your files.
2.Backup your files.
3.Damnit, backup your files.
Most wait till its to late.
|
|
johnboy
Trad climber
Can't get here from there
|
|
While its OK to use your e-mail program, get in the habit of not using it and use your ISP's web mail online instead. Avoid problems in the future.
Skipt is right about Firefox not being targeted with many viruses, as is Netscape and some others. Virus programmers being the twits they are want to infect as many people as possible, via MSIE is the path to the most destruction.
Soon someone will focus on these other browsers and its gonna catch a lot of suckers of guard.
|
|
neebee
Social climber
calif/texas
|
|
|
Topic Author's Reply - Apr 2, 2009 - 02:20pm PT
|
hey there johnboy.. skipt.. say, thanks... i will do some of this now, and get back to you...
god bless.. .:)
|
|
PRRose
climber
Boulder
|
|
Both IE and Firefox are targeted by this malware. Its a bitch to get rid of.
It may prevent you from going to access legitimate malware websites or prevent downloading updated signature files. If this is the case, you will have to be creative--for example, download to another computer and transfer via a thumbdrive.
Another possibility is to try a system restore to a known good configuration.
|
|
neebee
Social climber
calif/texas
|
|
|
Topic Author's Reply - Apr 2, 2009 - 04:48pm PT
|
hey there prrose, and all...
say, well, i am using the foxfire browser... i quess i can use either...
my spycatcher never shows anything, except for a tracker from netzero, and is easy to delete...
nothing has gone wrong, so i don't know what to expect...
actually, i never did hit anything to download...
so i dont know why all of the sudden
this warning came up,
unless it was trick to scare me into downloading the
very thing that i DID NOT download...
cause as i said the weblink that suddenly showed, said:
bonuspromooffer.....
and then the anitvirus2009 deal showed up...
so NONE of you all have seen this happen??
or know what this weird
http:// and then bonuspromoofer.com
deal was?
well, i will let you know how this goes...
should i still do that microsoft download skipt...
for scanning for virus, or whatever?
i dont know if i have enough memory though...
|
|
neebee
Social climber
calif/texas
|
|
|
Topic Author's Reply - Apr 2, 2009 - 04:50pm PT
|
hey there... also, i did do the system restore...
thank guys...
man, it was really WEIRD last night... and i have not gone to sleep yet for 30? hours.. ?
:(
or taken ol' patty ann marie, the pup-dog for a walk...
to spacey right now... :O
edit:
ps
i did learn that when "mom"s busy with weird computer trouble,
ol pup-dogs finds weird dangerous metal balls to chew on ... from where, who knows... looks like it was cover in thin plastic or rubber... but i checked on her just in time...
:O
|
|
Saltydog
climber
NC
|
|
I had a similar prompt for the 2009 MS whatever protector.
Telling me i was infected and all sorts of weird popups.
Sytem restore worked for me. I also run AVG free on a daily basis, seems to work.
|
|
neebee
Social climber
calif/texas
|
|
|
Topic Author's Reply - Apr 2, 2009 - 04:58pm PT
|
hey there saltydog... say, THAT'S IT... that's what happened to me last night... jusst out of the blue...
well, i went to a few news sites, doing a search for information, but if i landed somewhere weird, i sure never saw it...
but that what happened, and it made it look like it was my own computer stuff popping up and doing this from window...
it showed the same icons on 'my computer' too...
thanks for the share... (i never hit there stuff though, and closed it down after i did my own check, on this computer's spycatcher.... (hope i'm okay, if i never clicked to download)
edit: what is avg? please...
|
|
|
SuperTopo on the Web
|
Let us know!