Re: Computer Shield virus

From: Sandy Mann (sandymann_at_mailinator.com)
Date: 05/07/04 

Date: Fri, 7 May 2004 22:30:28 +0100

Hi Kevin,

The same thing happened to me on Wednesday. I still don't know how I got it
because at work I am connected to a server behind a symantec fire wall and a
router. I clicked Cancel - THEN remembered that I had read in this NG that
with this sort of scam both OK or Cancel will activate the download. I
didn't hang about in the web page to see what it was about and I immediately
ran a Computer Associates virus scan which said that I had a (Cured)
Redir.exploit Trojan in the Temp IE files. I deleted the Temp files and ran
another scan which was clear.

However, the next day when I went onto the internet I again received the
dialog box but this time - having learned - I click the 'X' which got rid of
it without my being redirected. The Computer Associates web site said that
XP users may continue to receive messages that files in Restore are infected
so, although that was not what was happening, I disabled Restore, ran
another virus check, (which was clear), and re-enabled the Restore.

Today when I want on the internet Bingo! again the dialog box! I assume
that the Trojan has been down loaded because I, originally (stupidly)
clicked 'Cancel' and so I e-mailed our IT suggesting that I download Spybot
Search & Destroy, (my firm are funny about loading software on their
computers).

Regards

Sandy 

-- 
to e-mail direct replace @mailintor.com with @tiscali.co.uk
"Kevin" <anonymous@discussions.microsoft.com> wrote in message
news:9d5701c4346d$2eecffa0$a401280a@phx.gbl...
> A few days ago the blue screen of death appeared on my
> computer. A few seconds later a box appeared with
> Microsoft in the top menu bar. Inside the box was a
> statement that in effect said, your computer is infected
> by the virus Sasser, go to download to remedy the
> situation. I clicked on "yes" and was sent to a web page,
> with no company name, where for $39.99, I could download
> software that would get rid of the sasser virus. I did not
> do this. Instead i went to the Microsfot site and was able
> to run a sasser search to determine if in fact my computer
> was infected. It was not!
> For the last three days I have faced the blue screen of
> death with the same prompts. I learned that the company
> doing this is Computer Shield. I'm struggling to stop
> these daily prompts from haunting me. Any thoughts?

Relevant Pages

  • Re: XP Home & hacktool
    ... virus in the restore point. ... > The infector is rendered impotent while in quarantine. ... > FireWall to allow it to download the needed AV vendor related files. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: errors
    ... When you get a virus infestation other pests often also climb aboard through the open door. ... Turn off System Restore until cleaning is finished. ... Download Sysclean.com and place it in this folder. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: virus ??????
    ... Check for the sasser worm ... Download & Run a free virus scanner ... Download, Update & Run a free adware remover then delete any spies found ... > just been to microsoft help and told my virus is not sasser so my xp home turn on computer and all it does is keep restarting it self i have tryed nortons solution for sasser but cant get to windows desktop to change remote shut down i am using a friends pc at the momment can any one help also cant get to safe mode i did have problems with it freezing just before it went down completly ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: i need help on activex and the w32.sasser.c
    ... Are you sure Sasser is gone: ... Jupiter Jones [MVP] ... > hello just recently i was infected with the sasser virus ... > to view this website www.pcpitstop.com and download the ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: rebooting in win xp
    ... Sounds very much like the "Sasser" virus. ... Here is the directlink to download it: ...
    (microsoft.public.windowsxp.general)