I am getting a ballon on the screen that says "System Intrusion ..

G

Guest

Detected" Dangerous infection was detected on your PC. The system will now
download and install most efficient antimalware program to prevent data loss
and your private information theft.
Click here to protect your computer from the biggest malware threats. " When
I click this balloon it sends me to a website for Spyware Striker. This
balloon is from an icon similar to the Windows Update icon. At the same time
I got this little message I got another problem with my home page on IE 6.0.
It sends me to www.updatesystempage.com instead of my homepage.
I have run both Spybot and Adaware spy removal programs and the only thing
that is unusual about that info is that Spybot keeps catching a Vcodec
problem that I have to fix.
Anyone have any ideas that could help me or whow serious I should take this
balloon message?
Thanks very much Mark
 
R

Rick \Nutcase\ Rogers

Hi,

It's a hoax, a scam. You have some junk on the system already, I would
suggest you download, install, update, and run these free applications to
aid in identifying and removing the crap:

AdawareII www.lavasoft.de
Spybot www.safer-networking.org

From MVP Richard Harper on cleaning up malware infested systems:
http://rgharper.mvps.org/cleanit.htm

This one can help you avoid these programs from being installed in the first
place:
Spyware Blaster: www.javacoolsoftware.com/spywareblaster.html

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/?kbid=827315

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org
 
P

Perrin

You probably have SpyAxe, PSGuard, Smitfraud, Sinnaka Advertisments or
detections for Puper or Alemod that can not seem to be removed
automatically, please try this automated removal tool.

AntiPuper v1.1 by secured2k
http://secured2k.home.comcast.net/tools/AntiPuper.exe

What does this tool do?
This tool will attempt to delete several known Trojan files. These files are
modified by the malware authors and encrypted to avoid detection.
Fortunately, many of these tend to use the exact same file names. If the
files are in use, locked, protected, etc, this program will schedule Windows
to remove the files upon restarting.

This program will also remove some common security policies that are changed
by viruses and worms. Policies that lock out your desktop changes, windows
update, Windows Firewall, Explorer Run policies, Registry editing, and more
are all reset.

Finally, if you have an infected Alemod WININET.DLL file, this program will
try to copy a clean version from your Windows File Protection folder and
replace the bad copy on restart. If a backup copy can not be found, the tool
will quickly look for McAfee Antivirus files and attempt to clean a copy of
the file to replace the bad one on reboot. If all of this fails, you will
need to manually replace/clean your WININET.DLL file.
 
L

Leythos

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top