Access Blocked - Virus Warning

[Freddy]

Help - this is driving me nuts!!!!

Whenever I try to access any web page I get directed to
"res://wtlbass32.dll/HTTP_Blocked.htm" and the following message is
displayed:
---------------------------------------------------
Access Blocked - Virus Warning!
You cannot access this site due to following reason:
Your computer was infected by Spyware or Adware Software.
This is dangerous software which disclose your personal
and transferred data and/or display unsolices advertising.
You can use this ADWARE/SPYWARE REMOVAL tools in
order to solve this problem and prevent futurer infection.

You can click Search to look for information on the Internet.

HTTP Error - Access Blocked
--------------------------------------------
Clicking on the ADWARE/SPYWARE REMOVAL or search links in the message sends
me to http://www.security-look.cc/anti-spyware

I've tried to access some of the sites recommended in other posts by Frank
Saunders (http://mvps.org/winhelp2002/unwanted.htm etc) but all I can get is
the message above. I've run Norton AV/Adaware and still it persists.

I would be forever grateful to anyone who could tell me what's happening
and, more importantly, how to get IE working correctly again.

Win XP Pro SP2
I.E. 6.0.2900.2180

 

[Susan]

This reminds me of when Internet Explorer was "hijacked" on one of my
machines running Windows 2000 pro not too long ago. I downloaded Microsoft's
AntiSpyware Beta 1 from
http://www.microsoft.com/athome/security/spyware/default.mspx which has
tools within it to set Internet Explorer back to its default settings.

Hope this helps!

 

[Jan Il]

Hi Freddy

Try the following and see if it helps. Even if you have already run some
programs, run them again according to the instructions in the information
below to thoroughly clean you system.





Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm
Be sure to run CWShredder here

http://www.majorgeeks.com/download3019.html

and AdAware and Spybot.
Download the newest version of HiJackThis here:
http://www.bleepingcomputer.com/files/hijackthis.php
(or Spybot - Search and Destroy DSO Exploit Fix 1.3.1 TX)
http://www.majorgeeks.com/download4392.html



Also visit these two sites to test for parasites and help basic cleaning:

On-Line Check

http://aumha.org/a/noads.htm

and

Quick-Fix Protocol.
http://aumha.org/a/quickfix.php

Basically, throw everything here at your "infection".

And be sure to use the HijackThis. Please DO NOT post your log to this
newsgroup, but to the HiJackThis Support Forums below:
http://www.hijackthis.de/forum/forumdisplay.php?f=10&guestlanguageid=4
the Aumha HiJackThis Forum
http://forum.aumha.org/viewforum.php?f=30

or Bleeping Computer Forum

http://www.bleepingcomputer.com/forums/forum22.html

to allow the experts there to evaluate your log and advise you of any
necessary steps to clean your system.

(Note: You will have to Register before posting on these Forums. Please
follow all posting instructions carefully to avoid having your log deleted
or ignored.



Also this program searches for hidden .dlls that recreate the malware.
About Buster:
http://www.majorgeeks.com/download4289.html

CAUTION!!!!! Before you try to remove spyware using any of the programs
below, download a copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html
(if your OS is Win2k or XP) The process of removing certain malware may kill
your internet connection. If this should occur, this program, LSPFIX, will
enable you to regain your connection.

You should also get a copy of WINSOCKXPFIX available at:
http://www.spychecker.com/program/winsockxpfix.html
and
WinsockXP Fix- WinXP
http://www.spychecker.com/program/winsockxpfix.html
with instructions, at
http://www.iup.edu/house/resnet/winfix.shtm
Also
From LavaSoft- all versions of Windows-
http://digital-solutions.co.uk/lavasoft/whndnfix.zip
(NOTE: It is reported that in XP SP2, the command netsh winsock reset
will fix this problem without the need for these programs.)

or ........

Winsock Fix Utility
http://www.dfwonline.net/files/WinsockFix.zip



Also.........

Courtesy of Jim Byrd -

Download Sysclean.com, from Trend Micro, here:
http://www.trendmicro.com/download/dcs.asp along with the latest pattern
file, here:
http://www.trendmicro.com/download/pattern.asp
Be sure to read the "How-to" info here:
http://www.trendmicro.com/ftp/products/tsc/readme.txt
You might also want to get Art's updater, SYS-UP.Zip, here for future
updating of these: http://home.epix.net/~artnpeg/.
(If you download and use the updater from the beginning, it will
automatically handle downloading the other files. Place them in a dedicated
folder after appropriate unzipping, and then run. This scan may take a long
time, as Sysclean is VERY extensive and thorough



NOTE: If you can not download these programs from the Internet, if your PC
has CD read capabilities, go to another computer with CD-ROM burning
capabilities. Create a folder on the hard drive of the other computer called
HOLD, download the programs to that folder, then burn that folder to a CD.
Copy the HOLD folder to your HD and then install the programs from there
and run them. After you have IE access again, update all programs where
possible to get the latest definitions and run them again in Safe Mode to be
sure there are no lingering items on the system.



If these steps do not resolve your problem, or you need help with the above,
please post back to this thread with the details and any error messages.

Hope this helps

Jan
Smiles are meant to be shared,
that's why they're so contagious.

Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm

 

[ColTom2]

You might try this: http://www.spychecker.com/program/winsockxpfix.html

 

[Frank Saunders, MS-MVP IE/OE]

Help - this is driving me nuts!!!!

Whenever I try to access any web page I get directed to
"res://wtlbass32.dll/HTTP_Blocked.htm" and the following message is
displayed:
---------------------------------------------------
Access Blocked - Virus Warning!
You cannot access this site due to following reason:
Your computer was infected by Spyware or Adware Software.
This is dangerous software which disclose your personal
and transferred data and/or display unsolices advertising.
You can use this ADWARE/SPYWARE REMOVAL tools in
order to solve this problem and prevent futurer infection.

You can click Search to look for information on the Internet.

HTTP Error - Access Blocked
--------------------------------------------
Clicking on the ADWARE/SPYWARE REMOVAL or search links in the message
sends me to http://www.security-look.cc/anti-spyware

I've tried to access some of the sites recommended in other posts by
Frank Saunders (http://mvps.org/winhelp2002/unwanted.htm etc) but all
I can get is the message above. I've run Norton AV/Adaware and still
it persists.
I would be forever grateful to anyone who could tell me what's
happening and, more importantly, how to get IE working correctly
again.
Win XP Pro SP2
I.E. 6.0.2900.2180

You're going to have to use another program or another computer to access
http://mvps.org/winhelp2002/unwanted.htm and get the required tools to fix
the problem.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx