Re: Possible blackmail sent to my pc

From: N. Miller (anonymous_at_discussions.microsoft.com)
Date: 07/19/04


Date: Mon, 19 Jul 2004 10:42:01 -0700

In article <039f01c46d8b$1a960ea0$a501280a@phx.gbl>, Possible IE Blackmail
says...

> After I connect to the internet, I am blocked from
> getting anywhere by a message that tries to force me to
> accept a "performace enhancing software product". I do
> not accept it, but I cannot exit from it. It placed some
> icons on my desktop. It claims to fix the problems on my
> computer if I agree to accept its terms by clicking ok.
> If I do not use the internet, it brings up the internet
> connect screen every few minutes. My internet provider is
> Earthlink and they told me to call Microsoft.

> Can someone help? I think I'm being blackmailed!

The technically correct term for that kind of nonsense is, "extortion". It
sounds like a browser hijacker, and calls for some spyware programs.

Ad Aware and Spybot S&D 1.3 are a pair of sturdy basics that can handle the
garden variety of scumware.

http://www.lavasoftusa.com/ {for Ad Aware}
http://www.safer-networking.org/en/index.html {for Spybot}

If you have one of the CoolWebSearch variants, you might try CWShredder.
Alas, the author has had to move on to other projects, and CoolWebSearch is
a constantly morphing product, so the last version of CWShredder probably
won't help against the latest versions.

The really heavy-duty program is called, "Hijack This". You have to read the
instructions carefully; using it improperly can seriously break things.

Hmmm. For both CWShredder and Hijack this, Google wanted to take me to a
site: http://www.spywareinfo.com/, but that site is currently parked. You
probably will have to Google on each, and see if you can find a mirror which
has them. The mirrors may not have the latest versions, though.

-- 
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint


Relevant Pages

  • Re: CWS.smartsearhc.2/removing MS Java VM/Hijack This log
    ... Last I heard CWShredder is no longer being updated and as such will not remove newer ... It may help to try and run your spyware removal tools in safe mode. ... > hijack this, here is the log. ... > E:\Program Files\Norton Internet Security\SymProxySvc.exe ...
    (microsoft.public.win2000.security)
  • CWS.smartsearhc.2/removing MS Java VM/Hijack This log
    ... Today I ran CWShredder. ... set of random characters as its title, and informed me it did this ... hijack this, here is the log. ... Internet Explorer v6.00 SP1 ...
    (microsoft.public.win2000.security)
  • Re: HIJACKED WEBPAGE
    ... HIJACKED WEBPAGE wrote: ... Hijack This from the list below (plus everything else, ... Immunize with Spybot and SpywareBlaster.) ... Empty your Temporary Internet Files and shrink the size it stores to about ...
    (microsoft.public.security)
  • Re: Serious Spyware issues ...
    ... download a screen saver and install it as my ... >run Ad-Aware many times and hijack this. ... >until the next time I connect to the Internet, ...
    (microsoft.public.security.virus)
  • Re: very slow WIN XP Pro and other issues
    ... You can click Search to look for information on the Internet. ... > Unzip, but do not run it yet, it will be needed later. ... > Download: WINFILE.zip ... > Run CWShredder and reboot. ...
    (microsoft.public.windowsxp.general)