Re: my desktop has been taken over

From: Malke (malke_at_nospoonnotreally.com)
Date: 05/09/04 

Date: Sat, 08 May 2004 17:01:09 -0700

ash wrote:

> the day after sasser came out, i switched on my laptop
> (running xp home) and soon my desktop was taken over by a
> blue screen with a microsoft windows explorer box in the
> center saying 'rpc doom virus found on your computer.
> click ok to remove'
> so i clicked cancel (instead of ok) thinking its adware
> and a box opened up selling antivirus!
> then the next day the same box appeared but instead of
> saying rpc doom, it said sasser.
>
> i have norton on my system and have found 1 adware that
> cant be fixed or quarantined.
>
> my question is, is this adware running on my system or is
> it a genuine microsoft response for me to fix my system.
> it has happanened about 3 times since then??
>

Hi, Ash. No, this has nothing to do with Microsoft. You undoubtedly have
a lot of spyware on your system. First, make sure your Norton is a
current version (not earlier than 2002) and is using the most recent
virus definitions. If you are unsure, use Live Update. Second,remove
spyware with Spybot Search & Destroy from www.safer-networking.org and
Ad-aware from www.lavasoftusa.com. Be sure to update these programs
before running them. These programs are free, so run them both since
they complement each other. It is best to run antivirus and spyware
removal tools in Safe Mode. You may also need to run CWShredder from
http://www.spywareinfo.com/~merijn/index.html . Please read the
instructions carefully. A great resource for dealing with spyware is
http://www.spywareinfo.com. Also, make sure you've visited Windows
Update and applied all security patches. Make sure you are running a
firewall.
 
HTH,

Malke 

-- 
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"

Relevant Pages

  • Re: Xnews and NZB files
    ... having spent HOURS helping friends pull spyware off their ... > that beneath all the crap that Microsoft puts in XP, ... Hardly a week goes by that you don't hear of a new security hole ... Windows XP has added a bunch of silly user interface ...
    (news.software.readers)
  • Re: Newest updates causing me a lot of problems
    ... I won't be back to Microsoft forums again. ... I will take your advice, for which I thank you. ... WgaTray.exe is Microsoft spyware. ... If you have your Windows disk, pop the DVD into your DVD drive and Windows ...
    (microsoft.public.windowsupdate)
  • Re: Runner Error/Windows XP
    ... is whether or not multiple spyware scanning ... the McAfee Firewall, ensuring that the built-in firewall was enabled, and I ... >> Windows XP, I suggest you clean up your system first. ... I am not going to say Microsoft ...
    (microsoft.public.windowsxp.newusers)
  • Re: Good reading
    ... > As a Linux desktop user himself, ... > infected Windows PC after it had become compromised. ... > so fed up with spyware, trojans, viruses, and spam, that he ... Everyone, even Microsoft, knows ...
    (microsoft.public.windowsxp.general)
  • SecurityFocus Microsoft Newsletter #176
    ... MICROSOFT VULNERABILITY SUMMARY ... Microsoft Windows XP HCP URI Handler Arbitrary Command Execu... ... PHPNuke Category Parameter SQL Injection Vulnerability ... Microsoft Baseline Security Analyzer Vulnerability Identific... ...
    (Focus-Microsoft)