Action Canceled

[Todd]

I've been having a lot of problems lately with my
computer.Most of those problems have been solved with the
help from people on this newsgroup.Lately when webpages
load,like,MSN,or Hotmail I get little white boxes with
little red x's in them,or where a banner would be i get
informed that an action was canceled.Any solutions?Any and
all help will be greatly appreciated.

 

[H Leboeuf]

You probably have been hacked by this trojan.

Look also for a file named HOSTS (no extension, could be hidden) rename it
OLDHOSTS.

Go to these sites and clean your computer.
Install the latest Microsoft Security updates.

http://www.f-secure.com/v-descs/delude.shtml

NAME: Delude
ALIAS: Trojan.BAT.Startpage.a
Delude is a trojan that is available on a web page. The web page contains a
code that uses a vulnerability in the Internet Explorer (MS03-032) to
execute.
More information about the vulnerability, including a fix, is available from
Microsoft at:
http://www.microsoft.com/security/security_bulletins/ms03-032.asp
VARIANT: Delude.A
The HTA code available on a web page downloads a file "partyboy.exe" from an
ftp site and runs it. This file is is packed with UPX. It is a batch file
which was compiled to executable binary (".exe") using a BatToExe tool.
When executed, it changes the Internet Explorer start page to find-now.info.
It prevents access to the most major search engines such as Google, Yahoo,
Lycos, MSN and AltaVista. To do this it replaces the following file:

More:

http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.html
http://vil.nai.com/vil/content/v_100719.htm
http://www.sophos.com/virusinfo/analyses/trojqhosts1.html

 

[Mike Burgess]

Todd,
Why do I see the Action Cancelled message?
http://mvps.org/winhelp2002/hosts.htm#message
_______________________________________
Mike Burgess http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 9-30-03]
Please post replies to this Newsgroup, email address is invalid