Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

“warning! Spyware Detected On Your Computer”


  • Please log in to reply
1 reply to this topic

#1 goonoog

goonoog

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:10:33 AM

Posted 04 June 2008 - 01:34 AM

Not sure where I got it from but it seems like my computer got infected with something. It might have come from a file hosting site? A pop up would keep coming up with an alert saying that my computer has been affected, and that I should buy some kind of software to remove the spyware. Here’s how one of the pop up looks like:

Posted Image

My wallpaper got replaced with a “Warning! Spyware detected on your computer” blue wallpaper. My screen saver also got changed to be that of bugs crawling around. Here’s how the blue wallpaper looks like:

Posted Image

I ran AVG, TrendMicro HouseCall (IE dies on me every time it’s ready to scan for spyware), Mcafee, Spybot S&D but nothing showed up!

I did a search, and I found the bitmap background that was showing up as my wallpaper in C:\WINDOWS\system32. I also found an .exe application with the same name (lphc3r4j0e78r.exe) in the same folder. However, I can’t delete it, and I don’t see any suspicious process running. I also did a search for *.scr to find the bugs screen saver (blphc3r4j0e78r.scr) to try to get it to stop but it just came back even after I deleted it.

That’s about all I know to do :thumbsup: . I can’t do system restore since all my restore points before the infection got wiped out. I’m on Windows XP.

Thanks in advance for your help!

BC AdBot (Login to Remove)

 


#2 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,579 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:33 AM

Posted 04 June 2008 - 01:41 AM

Run this fix:

How to remove the Smitfraud / Generic Zlob / Quicknavigate / Virtual Maid

After that run a full system scan with Malwarebytes' Anti-Malware.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users