Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Mystery virus?


  • Please log in to reply
3 replies to this topic

#1 bigpizza2000

bigpizza2000

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Local time:03:03 PM

Posted 12 July 2005 - 04:10 PM

I have recently installed windows xp on my computer due to millions of problems with windows ME, and although at first all seemed ok, i have started getting popups that are headed 'windows messenger'. MSN seems to be called Windows Messenger now, so i thought it just had something to do with that and reinstalled but no luck. I'm not actually sure if the popups are real or are part of some malware scam to get u to log into dodgy sites, but im farely sure the sites it recommends cant be real, since there seems to be about 10 different warnings, all with different recommended websites. they all basically say the same thing, which is that there is an error in the system registry and it needs to be scanned for problems. I have run McAfee virus checker, which claims to have found and deleted 2 viruses, trojans ending in ..../bj and ..../w, but when i rescan they are there again so it cant be getting rid.
a couple of times in the last hour i have had an error message telling me my system is going to be shut down in x number of seconds, again each time having a different number of seconds, but it does actually restart the comp when it says it will, i just dont know why.

i have installed xp on another pc and downloaded msn messenger from the same source and it works fine. i have even reinstalled windows and formatted both partitions of my hard drive, to no avail. i know this is all a bit vague but if anyone knows what it might be or can help me stop it i would be very grateful.

thanks, jenny.

BC AdBot (Login to Remove)

 


#2 bigpizza2000

bigpizza2000
  • Topic Starter

  • Members
  • 40 posts
  • OFFLINE
  •  
  • Local time:03:03 PM

Posted 12 July 2005 - 04:58 PM

some of the errors i have been receiving and the websites they recommend i visit to get rid of the 'problem', in case anyone recognises them:

system error, www.repairmyreg.com

registry error....www.pcregfix.com

internal error...regeditpro.com, e-regpatch.com

critical registry errors.... www.spw2c.com

critical system errors...www.fixregerror.com, www.winregrepair.com, www.e-regclean.com, www.fixregerror.com

buffer overflow...www.wupdate.com

critical errors in registry and file system... www.spw2f.com

internal errors...www.neatreg.com

spyware alert...www.pcrepairtool.com

I have just received one that looked the same as the others but told me i could get free porn for life from www.xxx4you.rz4.com - i dont recommend you try that!!
but this confirms my idea that these are not genuine error reports!!!

they are coming up at about 1 per minute, although i can still use internet explorer while its happening, while before i reinstalled windows the messages were crashing the pc totally. McAfee has just 'identified and cleaned ' W32/sdbot.worm.bot.b, but nothing has changed.

#3 tg1911

tg1911

    Lord Spam Magnet


  • Members
  • 19,274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Louisiana
  • Local time:02:03 PM

Posted 13 July 2005 - 06:57 PM

Have you run your your Antivirus in Safe Mode?
How to start Windows in Safe Mode

Also,download, update, and then run these programs, also in Safe Mode.
They're all free.

aČ free - a complementary product to antivirus software which is specialized in protection against harmful software. Antivirus software often features an inadequate protection against Trojans, Dialers and Spyware. aČ fills this gap.
Ad-Aware - A good program similar to SpyBot S & D.
Spybot S&D - Detects and removes spyware, of different types, from your computer.
SpywareBlaster - A good program that prevents spyware from being installed on your computer in the first place. This program is always running in the background, protecting your computer. It prevents the installation of bad active X controls found in web pages.
SpywareGuard - A nice compliment to SpywareBlaster. This allows you the option to prevent downloads that contain bad active X controls.

Important:
Please read this tutorial on Spybot S&D before using it. Spybot can do SERIOUS damage, if not used properly.

These programs, updated and used regularly, will do a lot to keep your computer clean of spyware, trojans, keyloggers, browser hijackers, etc...

If that doesn't help, then:

Read How to post a HijackThis Log.
Please read, and follow, all directions carefully.

Then, run a log, and post it in the HJT forum, at this link. Do not, fix anything, yet.
A member, of the HJT Team, will help you out.
It may take a while to get a response, because the HJT Team are very busy. Please, be patient, these people are volunteers. They will help you out, as soon as possible.

NOTE:
Once you have made the post, please, DO NOT make another post in the HJT forum, until it has been responded to by a member of the HJT Team. The first thing they look for, when looking for logs to reply to, is 0 replies. If you make another post, there will be 1 reply. The team member, glancing over the replies, might assume someone is already helping you out, and will not respond. So, just make your post, and let it sit there, until a team member responds. This way you will be taken care of, in the most timely manner.
MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, VGA: ECS GeForce Black GTX 560, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook

#4 phatcat42141

phatcat42141

  • Members
  • 107 posts
  • OFFLINE
  •  
  • Local time:04:03 PM

Posted 13 July 2005 - 08:49 PM

I have recently installed windows xp on my computer due to millions of problems with windows ME, and although at first all seemed ok, i have started getting popups that are headed 'windows messenger'. MSN seems to be called Windows Messenger now, so i thought it just had something to do with that and reinstalled but no luck. I'm not actually sure if the popups are real or are part of some malware scam to get u to log into dodgy sites, but im farely sure the sites it recommends cant be real, since there seems to be about 10 different warnings, all with different recommended websites. they all basically say the same thing, which is that there is an error in the system registry and it needs to be scanned for problems. I have run McAfee virus checker, which claims to have found and deleted 2 viruses, trojans ending in ..../bj and ..../w, but when i rescan they are there again so it cant be getting rid.
a couple of times in the last hour i have had an error message telling me my system is going to be shut down in x number of seconds, again each time having a different number of seconds, but it does actually restart the comp when it says it will, i just dont know why.

i have installed xp on another pc and downloaded msn messenger from the same source and it works fine. i have even reinstalled windows and formatted both partitions of my hard drive, to no avail. i know this is all a bit vague but if anyone knows what it might be or can help me stop it i would be very grateful.

thanks, jenny.

Do this the easy way --

Click START>Control Panel>Add Or Remove Programs>Add/Remove Windows Components

Now uncheck the box beside the "Windows Messenger"

No more Windows Messenger popups! :thumbsup: :flowers: :trumpet:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users