Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Sysprotect


  • Please log in to reply
62 replies to this topic

#1 ras60

ras60

  • Members
  • 127 posts
  • OFFLINE
  •  
  • Local time:02:20 AM

Posted 29 May 2006 - 01:06 PM

It appears this is on my computer. It opens up sometimes when I start my computer.
What can I do?
Thank you.

BC AdBot (Login to Remove)

 


#2 tg1911

tg1911

    Lord Spam Magnet


  • Members
  • 19,274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Louisiana
  • Local time:01:20 AM

Posted 29 May 2006 - 03:58 PM

I suggest you post a HijackThis log for examination.
A member of the HijackThis Team will walk you through, step by step, how to disinfect your computer.
Once you post your log, don't make any changes to your system, as that could change the results of the posted log.

Read How to post a HijackThis Log.
Please read, and follow, all directions carefully!!!

Then, run a log, and post it in the HijackThis forum, at this link. Do not, fix anything, yet.
A member, of the HJT Team, will help you out.
It may take a while to get a response, because the HJT Team are very busy. Please, be patient, these people are volunteers. They will help you out, as soon as possible.

NOTE:
Once you have made the post, please, DO NOT make another post in the HJT forum, until it has been responded to by a member of the HJT Team. The first thing they look for, when looking for logs to reply to, is 0 replies. If you make another post, there will be 1 reply. The team member, glancing over the replies, might assume someone is already helping you out, and will not respond. So, just make your post, and let it sit there, until a team member responds. This way you will be taken care of, in the most timely manner.
MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, VGA: ECS GeForce Black GTX 560, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook

#3 ras60

ras60
  • Topic Starter

  • Members
  • 127 posts
  • OFFLINE
  •  
  • Local time:02:20 AM

Posted 29 May 2006 - 04:36 PM

Okay, i am trying to do things in order, but when I click on the ad-aware download link, nothing that shows I down loaded it appears anywhere. I see no icon or link to go to next. :thumbsup:

#4 Albert Frankenstein

Albert Frankenstein

  • Members
  • 2,707 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Michigan, USA
  • Local time:03:20 AM

Posted 29 May 2006 - 06:04 PM

You can download Ad-Aware from HERE.
ALBERT FRANKENSTEIN
I'M SO SMART IT'S SCARY!


Currently home chillin' with the fam and my two dogs!


#5 ras60

ras60
  • Topic Starter

  • Members
  • 127 posts
  • OFFLINE
  •  
  • Local time:02:20 AM

Posted 31 May 2006 - 01:29 PM

So here's where I am.
I had my HP for about 8 months. About a few weeks ago, I started getting the "Sysprotect" popup whenever I started up the computer.
Also, many popups while on the internet. I have Norton, and I have the popup blocker set at high, but certain popups are appearing anyway, from places I never visit, like partypoker, adultfriendfinder, casinos, etc.
A while ago, I let someone use my computer, and they were on a "pay" survey site, where they compensate you for filling out surveys. I don't know if this has anything to do with it, but these popups and "sysprotect" screen are all fairly recent occurences. Everything was fine up until a while ago.

I did the following according to the instructions on this site:

Clean temp and internet files.
Scan with Ad-Aware and Spybot.
Scan with Housecall.
Run McAfee Stinger.
I have a firewall.
Check Windows update.

I see the next step is "Hijackthis", but it looks daunting, and I am a little nervous about taking this step. I use a computer, but I am not that well versed in the workings.

To this point, the popups are still coming up, and as some of them are a bit racy (adult dating) I cannot let my nephew and niece on the computer in case these popups come up.

I also got the "sysprotect" invasion today when I turned on the computer.

What do I do next?
Thank you.

#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,474 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:20 AM

Posted 31 May 2006 - 01:49 PM

You can try this self-help tutorial How To Remove Winfixer/Virtumonde/Msevents/Trojan.vundo.

If you still have problems after that, then your going to need to post a log so we can see whats going on with your system. Don't worry about it. The HJT Team staff member who assists will walk you through each instruction, step by step.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 ras60

ras60
  • Topic Starter

  • Members
  • 127 posts
  • OFFLINE
  •  
  • Local time:02:20 AM

Posted 31 May 2006 - 04:02 PM

You can try this self-help tutorial How To Remove Winfixer/Virtumonde/Msevents/Trojan.vundo.

If you still have problems after that, then your going to need to post a log so we can see whats going on with your system. Don't worry about it. The HJT Team staff member who assists will walk you through each instruction, step by step.




Thanks.
I ran the above program, and it came back as nothing found.
Is it time to try the HJT?
I am really nervous about that, but the popups and sysprotect are apparently still there.
Thanks for the help to this point.

#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,474 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:20 AM

Posted 31 May 2006 - 04:56 PM

Yes start a new topic in the HJT Forum and post your log. That fix should have worked so I suspect we are dealing with a new variant. With need to see the log so that the malware can be identified. After posting your log an expert will be giving you easy to follow instructions. You will be in good hands and will do fine so don't worry.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#9 ras60

ras60
  • Topic Starter

  • Members
  • 127 posts
  • OFFLINE
  •  
  • Local time:02:20 AM

Posted 31 May 2006 - 05:42 PM

Thank you.
I am going to try it.

#10 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,474 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:20 AM

Posted 31 May 2006 - 05:43 PM

:thumbsup:
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#11 ras60

ras60
  • Topic Starter

  • Members
  • 127 posts
  • OFFLINE
  •  
  • Local time:02:20 AM

Posted 31 May 2006 - 07:36 PM

I'm at wits end.
I apologize for not being able to do this.
I tried doing the "hijackthis". It was going along as expected, then when it said (after figure 13) to:

"Press the Save log button, designated by the red box in Figure 13 above, to save your log to your computer and open it. When you press the save button, you will be presented with a screen similar to figure 3 above. Simply press the Desktop button to save it your desktop and then press the Save button. The log is now saved to your desktop and is opened in notepad. You will now see a screen similar to Figure 14 below."

...It took me back to the "My computer" screen, and now I tried 3 times redoing it, and it won't load back in.

Yikes.

Something tells me I still have the "hijackthis" download saved, but I can't find it.

Edited by ras60, 31 May 2006 - 07:38 PM.


#12 Albert Frankenstein

Albert Frankenstein

  • Members
  • 2,707 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Michigan, USA
  • Local time:03:20 AM

Posted 31 May 2006 - 08:33 PM

I'm not sure I understand what you don't get.

I think:

You have HJT installed.

You have been able to run a scan ok.

Then, after the scan you clicked Save Log and you should have seen a screen like in the photo #3. Scroll up to see photo #3. On the left side of photo #3 you should see a red square around a button that says Desktop. Click this button. Then click Save. That will save the log to your desktop, making it easy to find the log after saving it.

Does that answer your question?
ALBERT FRANKENSTEIN
I'M SO SMART IT'S SCARY!


Currently home chillin' with the fam and my two dogs!


#13 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,474 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:20 AM

Posted 31 May 2006 - 08:37 PM

OK, lets try this.

1. Exit out of Hijackthis and then double-click on hijackthis.exe to run it again.
2. Choose "Do a system scan and save a logfile"
3. When the scan is finished, a text file name hijackthis.log will open.
4. Go to File and select save as.
5. A "Save File in" window will open.
6. Click the drop down box to the right and choose the Hijackthis folder or another folder you can easily locate.
7. Then click the "Save" button on the bottom right.
8. Go to the folder where you saved the hijackthis.log and double click to open.
9. Save the log to your HJT folder or to the desktop so you can easily find it.
10. Use Ctrl-A to "Select All", Ctrl-C to copy it, and Ctrl-V to paste the log into your post in the HijackThis forum.
11. Post the log along with a brief description of your problem, a summary of any anti-malware tools you have used and a summary of any steps that you have performed on your own. Please include the top portion of the HijackThis log that lists version information.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#14 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,474 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:20 AM

Posted 31 May 2006 - 08:41 PM

Albert Frankenstein, I didn't see your post before I posted. I believe he's using the How to post a HJT log instructional link instead of the Prep Guide. The fig. numbers are different but it still should have worked.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#15 ras60

ras60
  • Topic Starter

  • Members
  • 127 posts
  • OFFLINE
  •  
  • Local time:02:20 AM

Posted 31 May 2006 - 08:42 PM

I'm not sure I understand what you don't get.

I think:

You have HJT installed.

You have been able to run a scan ok.

Then, after the scan you clicked Save Log and you should have seen a screen like in the photo #3. Scroll up to see photo #3. On the left side of photo #3 you should see a red square around a button that says Desktop. Click this button. Then click Save. That will save the log to your desktop, making it easy to find the log after saving it.

Does that answer your question?



That's it, until I am supposed to get to the part where it does the scan and it says I should see a screen like #3. Instead of a screen like number 3, it showed the My Computer window (where it shows the HJT icon that looks like the dynamite). There was no "desktop" button in that window. That's where I lost it. :thumbsup:

Edited by ras60, 31 May 2006 - 08:43 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users