Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Emergency


  • Please log in to reply
12 replies to this topic

#1 Christoph182

Christoph182

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Local time:08:15 PM

Posted 13 August 2005 - 07:23 AM

Hey guys, I just reformatted my computer and everything is good except that all these messages keep popping up and saying my registry file are infected. How do I clean this or use a free program to get rid of it.

BC AdBot (Login to Remove)

 


m

#2 MajorFatCat

MajorFatCat

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:03:15 AM

Posted 13 August 2005 - 07:34 AM

Yes there are free programs available to determine if you really have errors in your registry. You may get several registry cleaners from www.download.com. Just make sure they are free. If you want to pay, that will be OK too. Here is the one I used to fix mine last month.

Registry mechanic

Best of luck! :thumbsup:
MaJoRfAtCaT

In Malware Business

#3 Christoph182

Christoph182
  • Topic Starter

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Local time:08:15 PM

Posted 13 August 2005 - 08:04 AM

ok thank you, but what are some good free programs to have to stop spyware and all that other junk??? I have ad-aware andspybot already, whatelse?

#4 MajorFatCat

MajorFatCat

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:03:15 AM

Posted 13 August 2005 - 08:12 AM

Ad Aware is probably the best you can get. If unsatisfied, your best option will be Spybot S&D. It's detection rate is just as good as Ad Aware's. :thumbsup:

That covers the AntiSpyware programs. I recommend getting Avast Home Edition or AVG Free. Both are great Antivirus programs and they detect things that Norton and Mcafee does not! :flowers:

AVG: http://free.grisoft.com
Avast!: http://www.avast.com

Both are free to download and keep for the life of the product. But remember, only download ONE of them. If you download both, they will confict and cause chaos.

Edited by MajorFatCat, 13 August 2005 - 08:13 AM.

MaJoRfAtCaT

In Malware Business

#5 Leurgy

Leurgy

    Voted most likely


  • Members
  • 3,831 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Collingwood, Ontario, Canada
  • Local time:08:15 PM

Posted 13 August 2005 - 09:29 AM

Hi Christoph182.

First thing to do is to get a firewall.

Zdnet has Kerio and Sygate. ZoneAlarm is good too (www.zonelabs.com).

You might be able to get rid of the malware you picked up but the easiest thing to do is reinstall. Download and burn a firewall and install it right after you install XP before you go on the internet.

If you want to try to clean things up then get Spybot and Ad-Aware. Then you are going to need to post a HiJack This log in our forum for our team to look at. They can guide you through the process of removing the malware you have picked up. Please be patient and they will get to you as soon as they can. It will take at least a couple of days right now.


How to submit a Hijackthis Log.

When the only tool you own is a hammer, every problem begins to resemble a nail. Abraham Maslo

**** We use our powers for good, not evil ****

 Trying to remove your data from the web is like trying to remove pee from a swimming pool


#6 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:08:15 PM

Posted 13 August 2005 - 10:52 AM

Freeware AntiSpyware and Security Programs

Software firewalls with freeware versions
Free Zone Alarm SE: http://www.zonelabs.com/store/content/comp...;NONE?lid=ho_za

Sygate: http://www.sygate.com/

Antivirus programs - freeware (you can only use one resident anti-virus program on your computer. More than one will conflict)

AVG: http://www.grisoft.com/us/us_index.php

Avast Anti-virus freeware
http://www.komando.com/bestshareware.asp


Anti-malware freeware (You can run as many of these as you wish. Generally there is no conflict between these and you should always run several)

*AdAware SE: http://www.lavasoftusa.com/software/adaware/

*Spybot S&D: http://www.safer-networking.org/en/index.html

*the two most important to have!

Microsoft Antispyware Beta: http://www.microsoft.com/athome/security/s...re/default.mspx

SpywareBlaster: http://www.javacoolsoftware.com/spywareblaster.html

Microsoft Malicious Software Removal Tool (Win XP and Win 2000):
http://www.microsoft.com/security/malwareremove/default.mspx

A˛ - Free from http://www.majorgeeks.com/download4281.html . Run it, click Search for Updates, then click Scan.


CWShredder
CW Shredder removes some variants of spyware known as the Coolwebsearch Trojan. The Trojan takes advantage of a flaw in a key component of Windows -- Microsoft's version of the Java Virtual Machine -- to install itself via popups often found on porn and illegal software (a.k.a. "warez") sites. Run CWShredder after installing, and have it look for updates. Then click the "Fix" button, and the program will both scan and fix any problems it finds. If your system does not have this kind of spyware, it will give you the good news.
Freeware
http://www.intermute.com/spysubtract/cwshr...r_download.html

Hijack This and a variety of other tools for malware and pestware
http://216.180.233.162/~merijn/files/HijackThis.exe or
http://www.spywareinfo.com/~merijn/downloads.html
(do not use this by yourself unless you are an expert with the registry. We have expert help available if you ask for it)
How to submit a Hijack This log
http://www.bleepingcomputer.com/tutorials/how-to-post-a-hijackthis-log/

http://www.bleepingcomputer.com/forums/How...s_Log-t956.html


Web based online Antivirus and anti-malware scans: (these can be run regardless of whatever else you are using. You must use Internet Explorer to run these.)

Windows Security Trojanscan
http://www.windowsecurity.com/trojanscan/trojanscan.asp

Panda Activescan (IE only)
http://www.pandasoftware.com/activescan/co...n_principal.htm

Trend Micro antivirus and malware scan:
http://housecall-beta.trendmicro.com/en/st...orp.asp?id=scan

Etrust Anti-virus web scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

Kaspersky Anti-Virus Web Scanner
http://www.kaspersky.com/service?chapter=161739400#betatest
online trojan scans here -
http://scan.sygatetech.com/pretrojanscan.html
http://windowsecurity.com/trojanscan

Microsoft Baseline Security Analyzer (MBSA)
MBSA is an easy-to-use tool designed for the IT professional that helps small and medium businesses determine their security state in accordance with Microsoft security recommendations and offers specific remediation guidance. Improve your security management process by using MBSA to detect common security misconfigurations and missing security updates on your computer systems.
http://www.microsoft.com/technet/security/...s/mbsahome.mspx

Edited by Enthusiast, 13 August 2005 - 10:54 AM.


#7 Christoph182

Christoph182
  • Topic Starter

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Local time:08:15 PM

Posted 14 August 2005 - 12:27 AM

hey guys I found out exactly what the message that always pops up says!!!

Message from SYSTEM to ALERT on 8/13/2005

STOP! Windows Requires Immediate Attention.

Windows has found 47 critical errors.

TO fix please do the following

1.Download Registry Repair from http://www.e-regfix.com
2.Install
3.Run Registry Repair
4.Reboot Your Computer

FAILURE TO ACT NOW MAY LEAD TO DATA LOSS AND CORRUPTION!

Is this true, how do I fix the problem and stop the message??

Edited by Christoph182, 14 August 2005 - 12:29 AM.


#8 Ronbo

Ronbo

  • Members
  • 333 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Directly above the center of the Earth
  • Local time:08:15 PM

Posted 14 August 2005 - 12:56 AM

Christoph, that popup is not windows telling you have registry problems. That popup means you have picked up some malware and it is trying to get you to buy something. The malware is what is popping up telling you that you have problems.

Follow Leurgy's advice, either reformat your disk and reinstall windows or try to clean up the infection you already have. If you choose to reinstall windows make sure you burn all your important data to CD/DVD's before you do so or else you will lose it.

The list of software and links that Enthusiast has provided you is also an excellent source of software and information to help you get squared away and protected so this won't happen again.

Good Luck

Edited by Ronbo, 14 August 2005 - 12:56 AM.

There is no justice, there is just us.

#9 Christoph182

Christoph182
  • Topic Starter

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Local time:08:15 PM

Posted 14 August 2005 - 07:38 PM

ok thanks. I got rid of one problem but I have another one. I noticed when I go into programs there is like MSN Gaming Zone and all that how can I get rid of it, when I try to delete it, it wont delete.

#10 Leurgy

Leurgy

    Voted most likely


  • Members
  • 3,831 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Collingwood, Ontario, Canada
  • Local time:08:15 PM

Posted 14 August 2005 - 07:52 PM

when I go into programs there is like MSN Gaming Zone and all that how can I get rid of it, when I try to delete it, it wont delete.


How did you get that on your computer? You just installed XP, what, yesterday?

I hope you aren't trying to do this from your Program Files. You need to remove that from Add/Remove Programs in the Control Panel. Its never a good idea to delete programs from your Program Files.

When the only tool you own is a hammer, every problem begins to resemble a nail. Abraham Maslo

**** We use our powers for good, not evil ****

 Trying to remove your data from the web is like trying to remove pee from a swimming pool


#11 Christoph182

Christoph182
  • Topic Starter

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Local time:08:15 PM

Posted 15 August 2005 - 04:38 PM

ok, Ill try it in add/delete programs. When I go into internet explorer, it keeps seeting my homepage to something else. Iknow this could be do to spy ware or whatever. but how do I get rid of it? I have zone alarm ad-aware, and registry mechanic. Shouldnt ad-aware find this problem??

#12 tg1911

tg1911

    Lord Spam Magnet


  • Members
  • 19,274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Louisiana
  • Local time:07:15 PM

Posted 15 August 2005 - 04:59 PM

Do as Leurgy suggested, and post a HJT log, in the proper forum, to be examined.
How to submit a Hijackthis Log

Edited by tg1911, 15 August 2005 - 04:59 PM.

MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, VGA: ECS GeForce Black GTX 560, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook

#13 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:08:15 PM

Posted 15 August 2005 - 05:22 PM

ok, Ill try it in add/delete programs. When I go into internet explorer, it keeps seeting my homepage to something else. Iknow this could be do to spy ware or whatever. but how do I get rid of it? I have zone alarm ad-aware, and registry mechanic. Shouldnt ad-aware find this problem??

ok, Ill try it in add/delete programs. When I go into internet explorer, it keeps seeting my homepage to something else.


That is a hijacker!

You need to run the latest versions with the latest updates of Adaware and Spybot Search and Destroy, if you haven't already, and then follow the Hijack This instructions here:

Download Hijack This (there is also a pretty good selection of of other tools for malware and pestware on this site as well)
http://216.180.233.162/~merijn/files/HijackThis.exe or
http://www.spywareinfo.com/~merijn/downloads.html

Unless you are an expert in altering, editing or modifying the registry do not attempt to use “Hijack This” without expert assistance which you can get following the instructions below:
How to submit a Hijack This log
http://www.bleepingcomputer.com/tutorials/how-to-post-a-hijackthis-log/
http://www.bleepingcomputer.com/forums/How...s_Log-t956.html




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users