System error! virus pop up

[macey76]

Hi guys
I have no idea about logs and things but I have an annoying pop up which I assume is an Malware or something..

Obviously its only on I.E and I do use Firefox most of the time....
Basically when I go to I.E,I get a pop up made to look like a legitimate "SYSTEM ERROR" box which says

"Your system is invected with a dangerous virus!
NOTE:Strongly recommend to install antispyware programme to clear your system and avoid total crash of your computer!
click OK to download the antispyware .(Recommended)

I have tried using
SUPERantispyware
AVG Ant-spyware
Ad-ware
Microsoft Advanced windows care
ETD Security scanner
plus a few others but havent had any luck..

Im downloading COUNTERSPY as I type in the hope that it might work..

I got the virus trying to watch the I.P.L cricket, but when I search in I.E,I am given a small porn image and an error msg as my first search result..

Its not slowing me down at all but really annoying me just knowing I have it on my computer...

Any suggestions??

Cheers fella's

[ssrattus]

Sounds like a Smitfraud infection. Download and run the cleaner here:

Use:

* Search:
o Double-click SmitfraudFix.exe
o Select 1 and hit Enter to create a report of the infected files. The report can be found at the root of the system drive, usually at C:\rapport.txt

* Clean:
o Reboot your computer in Safe Mode (before the Windows icon appears, tap the F8 key continually)
o Double-click SmitfraudFix.exe
o Select 2 and hit Enter to delete infect files.
o You will be prompted: Do you want to clean the registry ? answer Y (yes) and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection.
o The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found): Replace infected file ? answer Y (yes) and hit Enter to restore a clean file.
o A reboot may be needed to finish the cleaning process. The report can be found at the root of the system drive, usually at C:\rapport.txt

* Optional:
o To restore Trusted and Restricted site zone, select 3 and hit Enter.
o You will be prompted: Restore Trusted Zone ? answer Y (yes) and hit Enter to delete trusted zone.

then do an online scan... this site is good:

[ssrattus]

Actually it is more likely to be Vundo, it installs by Java (older versions), and has pop ups like you describe.

Try the fix here:



Also update your Java...

[macey76]

ssrattus

You are a dead set champion

Smitfraud worked a treat!!!

Im so happy, thanks heaps


Cheers macey

[ssrattus]

Glad it worked... but do update your java, you probably have an old version and got it just by visiting dubious websites.

[best4less]

SmitFraudFix Is a great little program saved heaps of computers
with it

Make me wonder how many people actually download and pay for the security package they are scamming

[BCNZ]

SmitFraudFix Is a great little program saved heaps of computers
with it

Make me wonder how many people actually download and pay for the security package they are scamming

I'd say quite a few. Your average computer user is a complete noob when it comes to ANY kind of error message and will randomly click anything if they think it will help the situation.
I've had some real horror stories from some of the people I've done tech work for.
What I do wonder however is if the "paid" program that the malware suggests you buy really does get rid of the crap in the first place - or are people being forced to hand over $$ only to find that they are still plagued with crap?

[best4less]

What I do wonder however is if the "paid" program that the malware suggests you buy really does get rid of the crap in the first place


Yeah I have often wondered that also LOL

[ramrod]

man the last time I usde smitfraud was about 2 years ago maybe I've been lucky

[macey76]

Yep updated Java.
I got it from a sports website trying to watch the Indian Premier cricket online...I havent had any problems for ages ..

[best4less]

ssrattus is there any other programs out there, I have one that SmitFraudFix
looks like it should fix but this one has me stumped LOL
tried the other VundoFix by Atribune but that didn't find anything
spyware doctor finds a couple of Trojans but the just keep coming back
and antivir just keeps deleting them
I am chasing my tail and the cust wont let me format the computer LOL

[ssrattus]

You could run Hijackthis and analyze the log file it generates.

or

Check what processes are running and ID the name of the offending process
by doing a google search on the name of each process. Would also run msconfig and check if any of the programs being run are spyware.

[best4less]

LOL after 4 hours i found it
It was staring me in the face all the time
and i used SDFix to remove it
I got it from here
Thanks for your help mate

[Trance]

i had the nastiest of that pop up crap on my laptop the other day. It disabled my task manager and deleted all the restore points before i realised. As i fought it with the standard antivirus software it became more aggressive even changed my desktop wallpaper to something that is active if you clicked on it caused more pop ups. Just drove me crazy and ended up formatting the bugger.
How come standard antivirus Sw is so behind with this new malware and trojans?

[BCNZ]

i had the nastiest of that pop up crap on my laptop the other day. It disabled my task manager and deleted all the restore points before i realised. As i fought it with the standard antivirus software it became more aggressive even changed my desktop wallpaper to something that is active if you clicked on it caused more pop ups. Just drove me crazy and ended up formatting the bugger.
How come standard antivirus Sw is so behind with this new malware and trojans?

What did you format for? Surely the drive was already formatted? Must have been if it was running Windows?

The problem with 'standard' antivirus software is that it's just that - standard. You get what you pay for. Buy something decent - NOD32 is pretty good.
I had a laptop that I had to sort out last week that was totally poxed up with spyware, viruses, trojans and more - and NOD went berserk on them all - as soon as it was installed - and that was with slightly outdated AV defs.

[ssrattus]

i had the nastiest of that pop up crap on my laptop the other day. It disabled my task manager and deleted all the restore points before i realised. As i fought it with the standard antivirus software it became more aggressive even changed my desktop wallpaper to something that is active if you clicked on it caused more pop ups. Just drove me crazy and ended up formatting the bugger.
How come standard antivirus Sw is so behind with this new malware and trojans?

Did you try a Safe mode start and then getting into msconfig to stop most things from running at a normal startup?

[Trance]

Did you try a Safe mode start and then getting into msconfig to stop most things from running at a normal startup?

No i did not. Unfortunately I'm not that of an advanced user to modify the msconfig. But tried to use Hijackthis which usually gave good results before but no avail this time. In a previuos case i was able to delete the nasties in DOS prompt (boot into DOS only).

[ssrattus]

msconfig is very easy to use... Click Start->Run.. and type in msconfig and then click on the Startup Tab and there is a list of applications that are run at startup, you can then un-check suspect applications and then when you reboot into normal mode those applications won't start up.

[Trance]

Thanks Ssrattus. I just did what you recommended. I think i know what to do next time.
Cheers.

[biggeorge]

You *NEVER* ever ever need to "reformat" a hard drive, re-install windows and everything else.
I cringe when I hear "I had to reformat the hard drive" because it is un-necessary, it wastes a lot of time, and really messes up the people who have data and programs stored on the hard disc.

There is no problem that I have ever come across, that cannot be fixed somehow. Usually googling the symptoms and reading for half an hour will give you all the answers you need.

It's like having your dog put down and buying a new dog whenever he gets sick. You wouldn't do this to your kids, your dog or even sell a car every time something goes wrong...
Why do it to a computer?