Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Www.cansew.ca Trying To Download A B.php File To My Pc


  • Please log in to reply
2 replies to this topic

#1 kate78

kate78

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:08:15 PM

Posted 09 January 2006 - 01:19 AM

Hello. I have a very anoying problem with a file that keeps trying to download on to my computer. The type of file is a b.php file and it's coming from a site known as www.cansew.ca It randomly pops up on to my screen asking if I want to save or open the file. I have opened the file once and it's just an empty note pad file with no text or anything. All other times it's poped up I have just clicked on cancel. It also afects the windows xp firewall and turns it off after you turn your computer back on and I have to manualy turn the firewall back on myself. In addition to this, I also can't access my hotmail account to see if I have mail. Could this file wanting to load be the cause of this? Can you please help me with this problem? It's driving me absolutely crazy!! AAAAAHHHH!!!

Thanks, Kate78

BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:05:15 AM

Posted 09 January 2006 - 01:27 AM

Whoa! Don't open it again!!! If it's turning your firewall on and off whenever it feels like it - it's BAD!

Please go here: http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/

Read the instructions for posting a HiJackThis log and then post it there. The security experts will help you to remove this "crud" from your system. (please be patient, they're very, very busy!)
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 Leurgy

Leurgy

    Voted most likely


  • Members
  • 3,831 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Collingwood, Ontario, Canada
  • Local time:04:15 AM

Posted 09 January 2006 - 06:58 AM

Hello kate78 and welcome to BC.

It seems that website was compromised. They have the following announcement at www.cansew.ca:

A.PHP or B.PHP: If your computer is requesting to download these files, we regret to inform you that your computer is infected with the Trojan.Lodear virus. Please understand that we are as much victims of this virus as you are. Cansew is NOT responsible in any way for the distribution of this virus and therefore cannot be held accountable.

For removal instructions please follow the link below:

http://securityresponse.symantec.com/avcen...moval.tool.html


There is a removal tool at that link. You can try to remove it yourself or if you would prefer you can follow the link in usasma's post and our Hijack Team can walk you through it if you post a log.

When the only tool you own is a hammer, every problem begins to resemble a nail. Abraham Maslo

**** We use our powers for good, not evil ****

 Trying to remove your data from the web is like trying to remove pee from a swimming pool





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users