When my system boots up, it loads a window titled "Urgent
Security Alert." This window can't be removed and
prevents the system from shutting down. Does anyone know
what it is and how to get rid of it?
Terry,
If this is not a standard browser or other window (and if it blocks
being closed, it sure sounds like that), I'd suspect spyware.
Get Process Explorer (free) from
<
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml>. Provides
way more information than Task Manager. It will display, among other
things, title of each window. Find the title, and you will have the
process. And what modules are called by the process. And who wrote /
distributed each.
How current is your virus protection? Try these free online virus
scans:
<
http://www.bitdefender.com/scan/license.php>
<
http://www.pandasoftware.com/activescan/com/activescan_principal.htm>
<
http://security.symantec.com/ssc/home.asp>
<
http://housecall.trendmicro.com/housecall/start_corp.asp>
Now check for, and learn to defend against, additional carriers of
infection.
First, download LSP-Fix and WinsockXPFIx from
<
http://www.cexx.org/lspfix.htm>, and CWShredder from
<
http://www.majorgeeks.com/download4086.html>. All are free.
Next, close all Internet Explorer and Outlook windows, then run
CWShredder. Have it fix all variants.
Now check for, and remove, spyware. Get HijackThis
<
http://www.majorgeeks.com/download.php?det=3155> and Spybot S&D
<
http://www.safer-networking.org/index.php?page=download>. Both free.
1) Install and run Spybot. First update it ("Search for updates"),
then run a scan ("Check for problems"). Trust Spybot, and make all
recommended deletions.
2) Install and run HijackThis. Do NOT make any changes immediately.
Save the HJT Log.
3) Have your HJT log interpreted by experts at one or more of the
following forums (and post it here):
<
http://forums.net-integration.net/>
<
http://www.spywareinfo.com/forums/>
<
http://forums.tomcoyote.org/>
<
http://www.wilderssecurity.com/>
If removal of any spyware affects your ability to access the internet
(some spyware builds itself into the network software, and its removal
may damage your network), run LSP-Fix and / or WinsockXPFIx.
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.