Critical System Error

[Guest]

I keep getting these messages about a Critical System Error or

SYSTEM ALERT: MALWARE THREATS

Your computer is infected with a back door Trojan that allows the remote
attacker to perform various malicious actions. Click the baloon to download
malware removal software...

but the thing is I've downloaded run so many programs (Windows Live OneCare,
AT&T Yahoo! Online Protection - Anti Spy & Anti Virus), that keep telling me
I'm clean and good to go, but yet I'm still receiving this message. IS there
something I can do?

 

[Guest]

You ve still got the malware - but the malware is the program asking you to
download the protection - by downloading the protection your just installing
even more malware.

Your going to have to download Hijack This,
AVG anti virus
SpyBot Search and Destroy
Ad Aware
probably in that order - thankfully viruses'no-adays don't infect other
executables (as a often as in the old days) so you will be safe downloading
and installing, the problem is that your malware is probably going to make it
hard for you to install the new Security software. this is where hijack this
comes to play.

You will need to reboot into safemode and run hijackthis (after you
downloaded it) and start deleting registry entries that pertain to something
starting up that shouldn't.
You should also look around for the files that the registry entries piont to
and delete them. - note this is not for the novice at heart, so If you have
afriend that has a better idea about computers then get them to help.

Once you think you have deleted the right entries, start up your computer
and see how it responds - less popups? - good then quickly install AVG before
anything comes back. and keep installing everything else while doing all the
scans along the way. You'll see that by the time your finished With Spybot
Search and destroy you'll have a fresh clean computer.

 

[Guest]

Thank you... but is there a guide somewhere that can help me with deleting
registry entries on the hijack this... I don't know anyone that is really
computer literate, so I'm gonna have to try and do it myself. HOw can I
figure out what's good and what's bad.... I had about 67 entries show up?

 

[DL]

Sniped from earlier post


If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to
JRE/JSE
Version 5.0. There are vulnerabilities in them and they are actively being
exploited.
It is possible that is how you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of
Sun Java
to Version 5 on the PC that they be removed and Sun Java JRE/JSE Version 5.0
Update 7
be installed ASAP.

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version...

C:\Program Files\Java\jre1.5.0_07


http://www.java.com/en/download/manual.jsp



For non-viral malware...

Please download, install and update the following software...

* Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/
http://www.lavasoft.de/ms/index.htm

* SpyBot Search and Destroy v1.4
http://security.kolla.de/
http://www.safer-networking.org/microsoft.en.html

* SuperAntiSpyware
http://www.superantispyware.com/superantispywarefreevspro.html

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser
Helper Objects
that may be on the PC.

* BHODemon

http://www.majorgeeks.com/downloadget.php?id=3550&file=11&evp=245a87539eea8ed6904332b4b8b8442d

For viral malware...

* Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in
Normal Mode.
This way all the components can be downloaded from each AV vendor's web
site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot
the PC.

You can choose to go to each menu item and just download the needed files or
you can
download the files and perform a scan in Normal Mode. Once you have
downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe
Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to
run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal
Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more
comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm