CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Red Biohazard wallpaper, "Error Cleaner/Privacy Protect

 
Post new topic   Reply to topic       All -> FavForums -> Catch All - Guests [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
penkosey

Cadet
Cadet


Joined: Jun 26, 2008
Posts: 2
Location: USA

PostPosted: Thu Jun 26, 2008 6:43 pm    Post subject: Red Biohazard wallpaper, "Error Cleaner/Privacy Protect
Reply with quote

Have no idea what to do, or even if this is the right place to post this.

So my PC (Windows XP) got the red "biohazard" wallpaper ("YOUR PRIVACY IS IN DANGER! DOWNLOAD PRIVACY PROTECTION SOFTWARE NOW"), along with the new icons "Error Cleaner", "Privacy Protector", & "Spyware & Malware Protection".

I get the window that says "Windows has detected an Internet attack attempt...someone's trying to infect your PC with spyware or harmful viruses. Run full system scan now to protect your PC from internet attacks, hijacking attempts, and spyware! Click here to download spyware remover for total protection."

I've searched around and seen several posts regarding this malware. I may be a bit worse off, though, because I can't explore or run any programs! I tried inserting a disc of anti-spyware programs, and it wouldn't let me open/explore the disc. Not even in Safe Mode. The "Start" button at the bottom left of the screen is gone, and when I try to run anything, I get a message that says something like "Windows cannot find the .exe file"...

That seemed to happen right after I ran KillBox and let it delete a file called "Spools.exe" that Ad-Aware found. Yes...my computer is really screwed up.

I'm using a borrowed computer right now, and disconnected the other one from the internet. Since I can't run anything or explore on that computer, I'm not sure how I'm going to fix it, or run any kind of Hijack This log, etc.

When I hit Ctrl/Alt/Del, my "Task Manager" button is greyed out. The time has changed to military time, like this: 6/10/2008 16:25: VIRUS ALERT! The time at the bottom right of my screen also says VIRUS ALERT.

When this first happened, I did a search and tried to follow some instructions that said to download/run something called Smitfraud. I wonder if this was fake, because the SmitfraudFix.exe had yellow Biohazard icon (like the red Biohazard wallpaper)...?

Anyway, this is obviously a mess. I greatly appreciate any assistance with getting it fixed. Thanks!

Back to top
View users profile Send private message
logicman_alf

Corporal
Corporal


Joined: Aug 18, 2006
Posts: 72
Location: UK

PostPosted: Sun Jun 29, 2008 7:37 am    Post subject: PrivacyProtector Free - SmitFraudFix
Reply with quote

I hope that somebody more familiar with this will come by to help.

You need first of all to get a trusted copy of SmitFraudFix.

I do not recommend using the tool without guidance from a qualified malware removal specialist!

Please be patient.

You will be helped.

In the meantime, please read this, it will help all round:
CastleCops Link/t146923-Waiting_for_Help_1_Patience_2_Use_the_MRP_Procedure.html

Back to top
View users profile Send private message
Mister2

SRT Team Lead
SRT Team Lead
Premium Member

Joined: Oct 28, 2004
Posts: 7329

Moderators MVP Premium SRT Team F@H

PostPosted: Sun Jun 29, 2008 8:41 am    Post subject:
Reply with quote

Hi penkosey, and Welcome to CC Very Happy

logicman_alf's advice is spot on - you need to run through our Malware Removal and Prevention procedure.

When you are ready to your HiJackThis logs then please read the instructions at the top of this page and follow these instructions before posting. One of our trained 1st Responders or Security Experts will be along help you.

If you have any questions about running the programs recommended in the procedure then please post back here and we can run through it with you.


_________________
Never stop learning
Back to top
View users profile Send private message
penkosey

Cadet
Cadet


Joined: Jun 26, 2008
Posts: 2
Location: USA

PostPosted: Mon Jun 30, 2008 3:27 am    Post subject:
Reply with quote

Thank you for the replies. I will read back over the info you mentioned. It seems the main difficulty here is that I can't explore or run any kind of .exe program...the computer is pretty crippled.

Back to top
View users profile Send private message
Mister2

SRT Team Lead
SRT Team Lead
Premium Member

Joined: Oct 28, 2004
Posts: 7329

Moderators MVP Premium SRT Team F@H

PostPosted: Mon Jun 30, 2008 4:10 am    Post subject:
Reply with quote

If you have access to another computer then download HiJackThis from here .

Copy the file twice and rename one copy to hijackthis.bat, the other copy to hijackthis.com.

Transfer all 3 files to your machine on CD or a USB memory stick.

Some malware prevents .exe files running correctly so this may be a way round the problem.

If you still can't run any of the versions of HJT from your computer then try running it from the CD/memory stick. This is not ideal but may at least generate a log.

If you do get a log then please read the instructions at the top of this page and follow these instructions before posting. One of our trained 1st Responders or Security Experts will be along help you.


_________________
Never stop learning
Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Catch All - Guests All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer