Archived from groups: alt.comp.hardware.homebuilt (More info?)

Everytime I click on the icon to open IE it opens up with a dark blue page
with the following in white writing

Detected SPYware! System error #384
__________________________________________________________________________

Your IP address is 62.254.0.36. Using this address a remote computer has
gained anaccess to your computer and probably is collecting the information
about the sites you've visited and the files contained in the folder
Temporary Internet Files. Attention! Ask for help or install the software
for deleting secret information about the sites you visited.
__________________________________________________________________________
Your computer is full of evidences!

ISP of transmission:NTLI
Your IP address:62.254.0.36
They know you're using:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Your computer is:Windows XP
Risk status for further investigation:VERY HIGH RISK




To protect from the Spyware - click here
To prevent information transmission - click here
To delete the history of your activity, click here

The above three lines are links to
http://www.e-shredder.com/enter.phtml?wm=kamid

The URL showing is C:\WINDOWS\secure.html. I keep deleting the HTML file
called secure.html in the windows folder but everytime I open IE the same
blue page appears and the secure.html file reappears in my windows folder

Everytime I close the window a full page window pops up advertising porn and
I get a red alert from NAV saying Bloodhound.Exploit.10 has been detected in
my local settings and that NAV is unable to repair it

But when I do a full NAV system scan it says there are no viruses on my
computer. What else can be causing this?

Thanks in advance

Fran

Archived from groups: alt.comp.hardware.homebuilt (More info?)

"Purple" <fparkus@spamtrapntlworld.com> wrote in message
news:XeGFc.597$hW3.444@newsfe5-win.ntli.net...
> Everytime I click on the icon to open IE it opens up with a dark blue page
> with the following in white writing
>
> Detected SPYware! System error #384
> __________________________________________________________________________
>
> Your IP address is 62.254.0.36. Using this address a remote computer has
> gained anaccess to your computer and probably is collecting the
information
> about the sites you've visited and the files contained in the folder
> Temporary Internet Files. Attention! Ask for help or install the software
> for deleting secret information about the sites you visited.
> __________________________________________________________________________
> Your computer is full of evidences!
>
> ISP of transmission:NTLI
> Your IP address:62.254.0.36
> They know you're using:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
> Your computer is:Windows XP
> Risk status for further investigation:VERY HIGH RISK
>
>
>
>
> To protect from the Spyware - click here
> To prevent information transmission - click here
> To delete the history of your activity, click here
>
> The above three lines are links to
> http://www.e-shredder.com/enter.phtml?wm=kamid
>
> The URL showing is C:\WINDOWS\secure.html. I keep deleting the HTML file
> called secure.html in the windows folder but everytime I open IE the same
> blue page appears and the secure.html file reappears in my windows folder
>
> Everytime I close the window a full page window pops up advertising porn
and
> I get a red alert from NAV saying Bloodhound.Exploit.10 has been detected
in
> my local settings and that NAV is unable to repair it
>
> But when I do a full NAV system scan it says there are no viruses on my
> computer. What else can be causing this?
>
> Thanks in advance
>
> Fran
>
Basically you installed, or allowed to be installed, spyware or adware on
your computer and are now paying the price. Good first steps toward fixing
things are to: 1. download Spybot Search & Destroy and install it 2.
download Lavasoft's AdAware and install it 3. run each program after
downloading the most recent detection files and allow them to fix the
problems they discover 4. obtain a firewall program or at least turn on the
built-in firewall if you are running XP.
--
John McGaw
[Knoxville, TN, USA]
http://johnmcgaw.com

Archived from groups: alt.comp.hardware.homebuilt (More info?)

"John McGaw" <nowhere@at.all> wrote in message
news:7yFFc.1424$285.465@bignews6.bellsouth.net...
> "Purple" <fparkus@spamtrapntlworld.com> wrote in message
> news:XeGFc.597$hW3.444@newsfe5-win.ntli.net...

<snip my previous post>

> >
> Basically you installed, or allowed to be installed, spyware or adware on
> your computer and are now paying the price. Good first steps toward fixing
> things are to: 1. download Spybot Search & Destroy and install it 2.
> download Lavasoft's AdAware and install it 3. run each program after
> downloading the most recent detection files and allow them to fix the
> problems they discover 4. obtain a firewall program or at least turn on
the
> built-in firewall if you are running XP.
> --
> John McGaw
> [Knoxville, TN, USA]
> http://johnmcgaw.com
>
>

Hi John

I already have AdAware and completed a scan, I have Norton Firewall which I
keep on permanently

I will download spybot now and see if that helps

Thankyou for your advice

Fran

Archived from groups: alt.comp.hardware.homebuilt (More info?)

Purple wrote:

> Everytime I click on the icon to open IE

Mistake #1


> it opens up with a dark blue page
> with the following in white writing
>
> Detected SPYware! System error #384

Run both Ad-Aware and Spybot Search & Destroy to remove any nasties.
If you still have trouble after that, post your HijackThis log.


-WD

Archived from groups: alt.comp.hardware.homebuilt (More info?)

"Will Dormann" <wdormann@yahoo.com.invalid> wrote in message
news:aAFFc.182689$DG4.118631@fe2.columbus.rr.com...
> Purple wrote:
>
> > Everytime I click on the icon to open IE
>
> Mistake #1
>
>
> > it opens up with a dark blue page
> > with the following in white writing
> >
> > Detected SPYware! System error #384
>
> Run both Ad-Aware and Spybot Search & Destroy to remove any nasties.
> If you still have trouble after that, post your HijackThis log.
>
>
> -WD

Hi Will

How do I obtain the HijackThis log?

Thanks

Fran

Archived from groups: alt.comp.hardware.homebuilt (More info?)

Purple wrote:

> Hi Will
>
> How do I obtain the HijackThis log?


Run HijackThis.
Paste the log into a reply to this message.


If any of the above doesn't make sense, try google.


-WD

Archived from groups: alt.comp.hardware.homebuilt (More info?)

Sounds like it may be spyware/ trojan horse software. If so, or if it's a
virus that NAV cannot resolve, you have little choice but to reformat your
harddrive and do a fresh install of the OS and then reinstall your
applications from your backup.

--
DaveW



"Purple" <fparkus@spamtrapntlworld.com> wrote in message
news:XeGFc.597$hW3.444@newsfe5-win.ntli.net...
> Everytime I click on the icon to open IE it opens up with a dark blue page
> with the following in white writing
>
> Detected SPYware! System error #384
> __________________________________________________________________________
>
> Your IP address is 62.254.0.36. Using this address a remote computer has
> gained anaccess to your computer and probably is collecting the
information
> about the sites you've visited and the files contained in the folder
> Temporary Internet Files. Attention! Ask for help or install the software
> for deleting secret information about the sites you visited.
> __________________________________________________________________________
> Your computer is full of evidences!
>
> ISP of transmission:NTLI
> Your IP address:62.254.0.36
> They know you're using:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
> Your computer is:Windows XP
> Risk status for further investigation:VERY HIGH RISK
>
>
>
>
> To protect from the Spyware - click here
> To prevent information transmission - click here
> To delete the history of your activity, click here
>
> The above three lines are links to
> http://www.e-shredder.com/enter.phtml?wm=kamid
>
> The URL showing is C:\WINDOWS\secure.html. I keep deleting the HTML file
> called secure.html in the windows folder but everytime I open IE the same
> blue page appears and the secure.html file reappears in my windows folder
>
> Everytime I close the window a full page window pops up advertising porn
and
> I get a red alert from NAV saying Bloodhound.Exploit.10 has been detected
in
> my local settings and that NAV is unable to repair it
>
> But when I do a full NAV system scan it says there are no viruses on my
> computer. What else can be causing this?
>
> Thanks in advance
>
> Fran
>
>
>

Archived from groups: alt.comp.hardware.homebuilt (More info?)

DaveW wrote:

> Sounds like it may be spyware/ trojan horse software. If so, or if it's a
> virus that NAV cannot resolve, you have little choice but to reformat your
> harddrive and do a fresh install of the OS and then reinstall your
> applications from your backup.
>

Actually, there are lot's of alternatives short of a fresh install.

http://www.spychecker.com/software/antispy.html

Archived from groups: alt.comp.hardware.homebuilt (More info?)

Great advice Dave!!
Won't be asking you for any.

Go to www.trendmicro.com and then go to the personal tab at the top of the
page. Click on the housecall icon and follow the instructions. Never failed
me yet when norton can't remove a virus.

Hope you have broadband otherwise it may take some time.

Spencer


"David Maynard" <dNOTmayn@ev1.net> wrote in message
news:10ef2njc3t3um9c@corp.supernews.com...
> DaveW wrote:
>
> > Sounds like it may be spyware/ trojan horse software. If so, or if it's
a
> > virus that NAV cannot resolve, you have little choice but to reformat
your
> > harddrive and do a fresh install of the OS and then reinstall your
> > applications from your backup.
> >
>
> Actually, there are lot's of alternatives short of a fresh install.
>
> http://www.spychecker.com/software/antispy.html
>

Archived from groups: alt.comp.hardware.homebuilt (More info?)

"Will Dormann" <wdormann@yahoo.com.invalid> wrote in message
news:ycGFc.182703$DG4.37051@fe2.columbus.rr.com...
> Purple wrote:
>
> > Hi Will
> >
> > How do I obtain the HijackThis log?
>
>
> Run HijackThis.
> Paste the log into a reply to this message.
>
>
> If any of the above doesn't make sense, try google.
>
>
> -WD

After instally and running everybit of spyware software I could find I have
finally fixed the problem

Thanks all for your help

Fran

Archived from groups: alt.comp.hardware.homebuilt (More info?)

"Purple" <fparkus@spamtrapntlworld.com> wrote in message
news:LwGFc.604$hW3.292@newsfe5-win.ntli.net...
>
> "John McGaw" <nowhere@at.all> wrote in message
> news:7yFFc.1424$285.465@bignews6.bellsouth.net...
> > "Purple" <fparkus@spamtrapntlworld.com> wrote in message
> > news:XeGFc.597$hW3.444@newsfe5-win.ntli.net...
>
> <snip my previous post>
>
> > >
> > Basically you installed, or allowed to be installed, spyware or adware
on
> > your computer and are now paying the price. Good first steps toward
fixing
> > things are to: 1. download Spybot Search & Destroy and install it 2.
> > download Lavasoft's AdAware and install it 3. run each program after
> > downloading the most recent detection files and allow them to fix the
> > problems they discover 4. obtain a firewall program or at least turn on
> the
> > built-in firewall if you are running XP.
> > --
> > John McGaw
> > [Knoxville, TN, USA]
> > http://johnmcgaw.com
> >
> >
>
> Hi John
>
> I already have AdAware and completed a scan, I have Norton Firewall which
I
> keep on permanently
>
> I will download spybot now and see if that helps
>
> Thankyou for your advice
>
> Fran
>
You may want to check out the news group alt.privacy.spyware.

Archived from groups: alt.comp.hardware.homebuilt (More info?)

naturesgift@ns.sympatico.ca

"John McGaw" <nowhere@at.all> wrote in message
news:7yFFc.1424$285.465@bignews6.bellsouth.net...
> "Purple" <fparkus@spamtrapntlworld.com> wrote in message
> news:XeGFc.597$hW3.444@newsfe5-win.ntli.net...
> > Everytime I click on the icon to open IE it opens up with a dark blue
page
> > with the following in white writing
> >
> > Detected SPYware! System error #384
> >
__________________________________________________________________________
> >
> > Your IP address is 62.254.0.36. Using this address a remote computer has
> > gained anaccess to your computer and probably is collecting the
> information
> > about the sites you've visited and the files contained in the folder
> > Temporary Internet Files. Attention! Ask for help or install the
software
> > for deleting secret information about the sites you visited.
> >
__________________________________________________________________________
> > Your computer is full of evidences!
> >
> > ISP of transmission:NTLI
> > Your IP address:62.254.0.36
> > They know you're using:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1)
> > Your computer is:Windows XP
> > Risk status for further investigation:VERY HIGH RISK
> >
> >
> >
> >
> > To protect from the Spyware - click here
> > To prevent information transmission - click here
> > To delete the history of your activity, click here
> >
> > The above three lines are links to
> > http://www.e-shredder.com/enter.phtml?wm=kamid
> >
> > The URL showing is C:\WINDOWS\secure.html. I keep deleting the HTML file
> > called secure.html in the windows folder but everytime I open IE the
same
> > blue page appears and the secure.html file reappears in my windows
folder
> >
> > Everytime I close the window a full page window pops up advertising porn
> and
> > I get a red alert from NAV saying Bloodhound.Exploit.10 has been
detected
> in
> > my local settings and that NAV is unable to repair it
> >
> > But when I do a full NAV system scan it says there are no viruses on my
> > computer. What else can be causing this?
> >
> > Thanks in advance
> >
> > Fran
> >
> Basically you installed, or allowed to be installed, spyware or adware on
> your computer and are now paying the price. Good first steps toward fixing
> things are to: 1. download Spybot Search & Destroy and install it 2.
> download Lavasoft's AdAware and install it 3. run each program after
> downloading the most recent detection files and allow them to fix the
> problems they discover 4. obtain a firewall program or at least turn on
the
> built-in firewall if you are running XP.
> --
> John McGaw
> [Knoxville, TN, USA]
> http://johnmcgaw.com
>
>

Archived from groups: alt.comp.hardware.homebuilt (More info?)

"John McGaw" <nowhere@at.all> wrote in message
news:7yFFc.1424$285.465@bignews6.bellsouth.net...
> "Purple" <fparkus@spamtrapntlworld.com> wrote in message
> news:XeGFc.597$hW3.444@newsfe5-win.ntli.net...
> > Everytime I click on the icon to open IE it opens up with a dark blue
page
> > with the following in white writing
> >
> > Detected SPYware! System error #384
> >
__________________________________________________________________________
> >
> > Your IP address is 62.254.0.36. Using this address a remote computer has
> > gained anaccess to your computer and probably is collecting the
> information
> > about the sites you've visited and the files contained in the folder
> > Temporary Internet Files. Attention! Ask for help or install the
software
> > for deleting secret information about the sites you visited.
> >
__________________________________________________________________________
> > Your computer is full of evidences!
> >
> > ISP of transmission:NTLI
> > Your IP address:62.254.0.36
> > They know you're using:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1)
> > Your computer is:Windows XP
> > Risk status for further investigation:VERY HIGH RISK
> >
> >
> >
> >
> > To protect from the Spyware - click here
> > To prevent information transmission - click here
> > To delete the history of your activity, click here
> >
> > The above three lines are links to
> > http://www.e-shredder.com/enter.phtml?wm=kamid
> >
> > The URL showing is C:\WINDOWS\secure.html. I keep deleting the HTML file
> > called secure.html in the windows folder but everytime I open IE the
same
> > blue page appears and the secure.html file reappears in my windows
folder
> >
> > Everytime I close the window a full page window pops up advertising porn
> and
> > I get a red alert from NAV saying Bloodhound.Exploit.10 has been
detected
> in
> > my local settings and that NAV is unable to repair it
> >
> > But when I do a full NAV system scan it says there are no viruses on my
> > computer. What else can be causing this?
> >
> > Thanks in advance
> >
> > Fran
> >
> Basically you installed, or allowed to be installed, spyware or adware on
> your computer and are now paying the price. Good first steps toward fixing
> things are to: 1. download Spybot Search & Destroy and install it 2.
> download Lavasoft's AdAware and install it 3. run each program after
> downloading the most recent detection files and allow them to fix the
> problems they discover 4. obtain a firewall program or at least turn on
the
> built-in firewall if you are running XP.

Don't advise to arbitrarily turn on the XP firewall (ICF). This firewall
was not meant for use in a networked environment. I don't know if the
original poster is running his PC as part of a network, but turning on ICF
in that situation would just create more problems.