Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Multiple Security Warning, Spyware Alert!, and www.prono.org redirects

  • Please log in to reply
1 reply to this topic

#1 HopewellJAM


  • Members
  • 16 posts
  • Local time:06:00 AM

Posted 08 January 2010 - 01:41 PM

I have an infected computer that is popping up multiple Security Warning and Spyware Alert! notices and then open IE and redirects to www.prono.org. I can't open the task manager or the add/delete control panel.

I've tried restarting in Safe Mode with networking and then running Malewarebytes (updated) however still have problem. I tried running rkill.com and then uninstalling/reinstalling Malewarebytes in Safe mode with know luck.

I tired following steps in the "Preparation Guide for use before posting about your potential Malware problem". I downloaded dds.scr and RootRepeal.exe to a clean computer and then transferred to infected computer on a USB drive. When I tried to run (double clicking) dds.scr it pops open Notepad with a bunch of random text. The only thing readable is a note that says "This program cannot be run in DOS mode". dds.scr shows as a File Type "DWG TrueView Script" on our computers (we run AutoCAD).

I decided to stop there and post. I'm posting from the clean computer.

As always, any help will be greatly appreciated.

BC AdBot (Login to Remove)


#2 Orange Blossom

Orange Blossom

    OBleepin Investigator

  • Moderator
  • 37,095 posts
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:05:00 AM

Posted 08 January 2010 - 05:27 PM

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.

==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Internet Security, NoScript Firefox ext.


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users