system error

[specific download times]

I keep getting a message that says: system error Your
computer was infected by unknown trogan. It's dangerous for your system
(critical files can be lost)! Click OK to download the
antispyware program to clean your system! (Recommended)

I scanned and found two viruses and removed them but it still wants me to
download and purchase some third party antispyware program. How do I get rid
of the message? Thanks

 

[philo]

I keep getting a message that says: system error Your
computer was infected by unknown trogan. It's dangerous for your system
(critical files can be lost)! Click OK to download the
antispyware program to clean your system! (Recommended)

I scanned and found two viruses and removed them but it still wants me to
download and purchase some third party antispyware program. How do I get rid
of the message? Thanks

Virus checkers do not necessarily get rid of spyware...
try a free one such as SpyBot S&D

 

[Cameron Snyder]

What event triggers this message? If it is opening an internet browser
session, click tools/internet options and remove the site from your homepage
on the general tab.

 

[Charlie42]

I keep getting a message that says: system error Your
computer was infected by unknown trogan. It's dangerous for your system
(critical files can be lost)! Click OK to download the
antispyware program to clean your system! (Recommended)

I scanned and found two viruses and removed them but it still wants me to
download and purchase some third party antispyware program. How do I get
rid
of the message? Thanks

Your machine is infected with malware. The "anti spyware" advertised in the
pop up is rougue, and has probably carried further malicious code.

Take a look at Malke's article in this thread, and post in
microsoft.public.windows.vista.security if you like to know more.

http://windowshelp.microsoft.com/co...29-3238eac1e36d&cat=&lang=&cr=&sloc=en-us&p=1

Charlie42

 

[AlexB]

That alone may not remove the danger. It may postpone reckoning, though.

 

[AlexB]

The explanation:

You or your kid browsed the web and hit an innocently looking site set up by
criminals. They may actually be here among the trolls roaming this place.
They see how their malware works, take an opportunity to confuse you,
redirect you to another malware because they have a few outlets.

To get rid of the scum, download and install Spybot Search & Destroy. It is
free for individuals but they would appreciate a donation. Donations are not
their only source of income. They sell the application to corporations. I
think MS has never officially recommended it.

Run it and you will be surprised what you will find. Immunize your system
against future attacks. After that if your kid goes there they will be
powerless.

There are other things you may employ. They will be in my next post.

You can check this. It is a rare and minor problem (SB S&D related):

https://connect.microsoft.com/VisualStudio/feedback/Workaround.aspx?FeedbackID=213202

My policy is not to use any 3-rd party anti-malware except Spybot S&D.
Windows Vista offers sufficient protection against malicious software
writers some of them I am sure watch this forum very carefully.

Download Microsoft Windows Baseline Security Analyzer. It is Beta 2.1 for
Vista and I think it is safe to download. Run it.
<http://www.microsoft.com/downloads/...AF-9DBE-4DCE-889E-ECF997EB18E9&displaylang=en>
It will give you all your vulnerabilities, especially in your firewall
settings. You should read the report and if it suggests any changes, you
should consider them.
Your Windows firewall setting will be analyzed.
Download Microsoft® Windows® Malicious Software Removal Tool (KB890830). It
will want to run upon install. Choose the FULL scan although it may give you
a threatening message that it might take a few hours. It will scan your
entire computer in about half an hour or less if you do not have a lot of
stuff in it.
<http://www.microsoft.com/downloads/...e0-e72d-4f54-9ab3-75b8eb148356&displaylang=en>

Some reassuring information: Malicious Software Removal Tool
<http://www.microsoft.com/security/malwareremove/default.mspx>
The Microsoft Windows Malicious Software Removal Tool helps remove specific,
prevalent malicious software from computers that are running Windows Vista,
Windows Server 2003, Windows XP, or Windows 2000
http://support.microsoft.com/?kbid=890830

You can also go to Protection Center (Microsoft)
<http://onecare.live.com/site/en-US/center/howsafe.htm?s_cid=mscom_msrt>
and click "Protection Scan." There will be a dropdown menu and a button:
"Launch Full Scan or Vista." You can do it if you wish.

Download and install Spybot Search & Destroy, a marvelous piece of software
which is free for individuals but corporations pay fees. You may be asked
for donations but it is up to you. It is very up to date and every week you
will have to download new updates, sometimes even more often. You should
check for updates every time you run it. It will give you all su*kers
leached into your registry and ask you if you wanted to remove them. Many of
them have masqueraded themselves under MS Windows names like
Windows.something. Do not hesitate to kill them all. You can trust SB S&D.

It also allows you to IMMUNIZE your system. It means that when you go to a
website and they try to download some kind of a Trojan to you SB S&D will
either kill it silently, or ask you if you want to do it or will kill it and
give you a notice. It is better to let it kill them all in silence.

Listen to Mark Russinovich's (MS) webcast: Advanced Malware Cleaning

<http://www.microsoft.com/emea/spotlight/sessionh.aspx?videoid=359>

 

[CB]

I keep getting a message that says: system error Your
computer was infected by unknown trogan. It's dangerous for your system
(critical files can be lost)! Click OK to download the
antispyware program to clean your system! (Recommended)

I scanned and found two viruses and removed them but it still wants me to
download and purchase some third party antispyware program. How do I get rid
of the message? Thanks

I can't believe people still fall for this shit. The message you received
was spyware itself. By clicking on the link and scanning your computre you
probably loaded more spyware or malware onto your computer.

Windows operating systems do not produce such messages. These messages come
from spyware you have let into your system. If you purchase their products
you will inadvertantly end up with a product that does nothing but load
spyware onto your computer.

DO NOT click on any links that say you are infected with spyware or malware.
DO NOT click on any link that says your drive needs cleaned or your registry
needs cleaned or defragmented. DO NOT CLICK ON ANYTHING UNLESS AND UNTIL YOU
REALIZE WHAT YOU ARE DOING. You need to educate yourself.

Have a nice day.

C.B.

 

[NoStop]

The explanation:

You or your kid browsed the web and hit an innocently looking site set up
by criminals. They may actually be here among the trolls roaming this
place. They see how their malware works, take an opportunity to confuse
you, redirect you to another malware because they have a few outlets.

To get rid of the scum, download and install Spybot Search & Destroy. It
is free for individuals but they would appreciate a donation. Donations
are not their only source of income. They sell the application to
corporations. I think MS has never officially recommended it.

Run it and you will be surprised what you will find. Immunize your system
against future attacks. After that if your kid goes there they will be
powerless.

There are other things you may employ. They will be in my next post.

You can check this. It is a rare and minor problem (SB S&D related):

https://connect.microsoft.com/VisualStudio/feedback/Workaround.aspx?FeedbackID=213202

My policy is not to use any 3-rd party anti-malware except Spybot S&D.
Windows Vista offers sufficient protection against malicious software
writers some of them I am sure watch this forum very carefully.

Download Microsoft Windows Baseline Security Analyzer. It is Beta 2.1 for
Vista and I think it is safe to download. Run it.

It will give you all your vulnerabilities, especially in your firewall
settings. You should read the report and if it suggests any changes, you
should consider them.
Your Windows firewall setting will be analyzed.
Download Microsoft® Windows® Malicious Software Removal Tool (KB890830).
It will want to run upon install. Choose the FULL scan although it may
give you a threatening message that it might take a few hours. It will
scan your entire computer in about half an hour or less if you do not have
a lot of stuff in it.

Some reassuring information: Malicious Software Removal Tool
<http://www.microsoft.com/security/malwareremove/default.mspx>
The Microsoft Windows Malicious Software Removal Tool helps remove
specific, prevalent malicious software from computers that are running
Windows Vista, Windows Server 2003, Windows XP, or Windows 2000
http://support.microsoft.com/?kbid=890830

You can also go to Protection Center (Microsoft)
<http://onecare.live.com/site/en-US/center/howsafe.htm?s_cid=mscom_msrt>
and click "Protection Scan." There will be a dropdown menu and a button:
"Launch Full Scan or Vista." You can do it if you wish.

Download and install Spybot Search & Destroy, a marvelous piece of
software which is free for individuals but corporations pay fees. You may
be asked for donations but it is up to you. It is very up to date and
every week you will have to download new updates, sometimes even more
often. You should check for updates every time you run it. It will give
you all su*kers leached into your registry and ask you if you wanted to
remove them. Many of them have masqueraded themselves under MS Windows
names like Windows.something. Do not hesitate to kill them all. You can
trust SB S&D.

It also allows you to IMMUNIZE your system. It means that when you go to a
website and they try to download some kind of a Trojan to you SB S&D will
either kill it silently, or ask you if you want to do it or will kill it
and give you a notice. It is better to let it kill them all in silence.

Listen to Mark Russinovich's (MS) webcast: Advanced Malware Cleaning

<http://www.microsoft.com/emea/spotlight/sessionh.aspx?videoid=359>

You cannot IMMUNIZE a Vista system, that's the first thing. It's as
impossible a task as trying to raise Frank's IQ above 60 points.

Better protection would come about by, saying 10 - Our Fathers and 25 - Holy
Marys and keeping your fingers crossed. Vista is a nonsecure operating
system that NO anti-malware software supplier can possibly keep up with.
It's impossible to secure this toy operating system without a major
rewriting of the whole bloated system from the ground up. UAC is a feeble
attempt at best to try and secure this toy and as AlexB points out, without
piling on the condoms, one stands little chance of securing it. Even then,
something will get through eventually that will bring down this toy. Just
wait and see.

A Vista user is better off getting his system brought down by malware
earlier then later, as he'll lose less valuable data and help to cut down
on the spam that his system is spewing out onto the Net.

The BEST solution from a security point of view if one insists on using
Vista/XP is to not allow your computer to connect to the Net at all.

Cheers.

PS. Frankie Boy, no need to add your vulgar reply. We already know what
you're going to say, as we've read it a thousand times. Just read my sig.
It's there to help YOU.

--
Frank's Brain Activity Plotted (watch the red line):
http://i68.photobucket.com/albums/i4/Astronomy2/PreformanceMonitor.jpg

Frank's Corporate Headquarters: Business Sign on his Bedroom Door ...
http://www.gneil.com/images/products/1slN1455.jpg

Frank - seek help immediately! Visit ...
http://www.binsa.org/

 

[Frank]

NoStop wrote:

....ok for you as*hole!
Frank

 

[Alias]

NoStop wrote:

...ok for you as*hole!
Frank

Looks like Frank's going off the deep end.

Heh.

Alias

 

[AlexB]

You are a well know idiot, NoStop. You are being an idiot nonstop.

You cannot IMMUNIZE a Vista system

Run SB S&D an you will see that your Vista WILL BE IMMUNIZED to the known
threats, in other words to those that are in SB S&D database, you antisocial
character, criminal and an idiot.

By showing your malicious idiocy you simply magnify it many times.

 

[Frank]

Looks like Frank's going off the deep end.

Heh.

Alias

You're an idiot...looks like nostop (your lover?) just went off the deep
end...LOL!
You're pretty stupid and so is your "partner".
Frank

 

[Mick Murphy]

http://www.spybot.info/en/index.html

Here is the address; no-one bothered giving it to you!
Download it, install it, update it(you update it once a month, not weekly),
then scan your system.
If it does not get it all, don't use Spybot startup mode.
Hit F8 at startup, go into Safe Mode, and run the scan again from there.

 

[Mick Murphy]

You know 3/5ths of 5/8ths of F*CK ALL.

You are a well know idiot, NoStop. You are being an idiot nonstop.


Run SB S&D an you will see that your Vista WILL BE IMMUNIZED to the known
threats, in other words to those that are in SB S&D database, you antisocial
character, criminal and an idiot.

By showing your malicious idiocy you simply magnify it many times.

 

[NoStop]

Looks like Frank's going off the deep end.

Heh.

Alias

Yep. Looks like we own his Vista-kissing-Steve Ballmer's ass.

Cheers.

--
Frank's Brain Activity Plotted (watch the red line):
http://i68.photobucket.com/albums/i4/Astronomy2/PreformanceMonitor.jpg

Frank's Corporate Headquarters: Business Sign on his Bedroom Door ...
http://www.gneil.com/images/products/1slN1455.jpg

Frank - seek help immediately! Visit ...
http://www.binsa.org/

 

[Frank]

Alias wrote:




Yep. Looks like we own his Vista-kissing-Steve Ballmer's ass.

Cheers.

How are you two enjoying your honeymoon together doris...LOL!
Frank

 

[Kevpan Nuts]

I Got My W-2 From The USPS Today, Just FYI.

I Use To Work For The Postal Service.

Signed

Kevin

Just FYI

 

[AlexB]

I think it is a very good and interesting point but I don't really see the
reason why it would work better in safe mode under ordinary circumstances.

It might be a good idea to do it in safe mode if you cannot run your machine
in full windows, that will be justified.

Could you explain? Also how will he know if it did not get them all? I think
the way to be on the safe side is to run MS software afterwards.

 

[DanS]

I think it is a very good and interesting point but I don't really see
the reason why it would work better in safe mode under ordinary
circumstances.

It might be a good idea to do it in safe mode if you cannot run your
machine in full windows, that will be justified.

Could you explain?

Why safe mode ? Because there is a better chance of being able to remove
what is found.

Safe mode loads a very minimalistic Windows config. MOST of the time,
malware packages are not active in safe mode, where as any existing
Malware is completely active in non-safe mode. Spyware packages have
other modules that monitor what's going on and if the malware's main
process is terminated, it wil re-generate the malware exe file and just
restart the malware package.

The module that is watching does not need to be another process though,
it can be a dll only.

Adding a dll entry in this registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
\Notify

will cause whatever the spyware dll is to be injected into each & every
process when it is launced, so each & every other process is watching for
termination of the spyware process. I'm not sure if Winlogin/Notify is
processed in safe mode.

Also how will he know if it did not get them all? I
think the way to be on the safe side is to run MS software afterwards.

You are absolutley right. You will never know if all were *found* unless
you run AT LEAST one other anti-spyware package. There is not one anti-
spyware package that can detect ALL packages.

To clean other's PC's I've always used a combination of Spybot, Adaware,
HiJackThis and manual registry editing.

 

[alexB]

It makes perfect sense.

Many thanks. It is useful.