Re: Error message instead of Homepage.....

Cheers Malke, just before you replied I got ADaware and that seemed to do the
trick, however the download you suggested sorted out ANOTHER 17 problems.
Many thanks, simon.

"Malke" wrote:

> simon r wrote:
>
> > ....hi, when I open IE I get a blue screen & address box says
> > c:\secure32.html. On screen it says "Detected Spyware! Security error
> > #384", it then asks if I want to download spyware removal from
> > 'spy-sheriff.com', from this site I can then access the net via my
> > links or address bar but will not let me set a homepage. I've run
> > Grisoft Free & Spybot and a couple of things came up which I dealt
> > with...but still the same message. System Restore will not let me
> > restore either.
> >
> > I have XP which is all up to date and am using Windows firewall
> > besides the
> > programmes mentioned above.
> >
> > Any help would be greatly appreciated!!
>
> You've got a variant to the Smitfraud trojan. Start by running Dave
> Lipman's removal tool. Here is the download link and his instructions
> for using it:
> ******
> Download:
> http://www.ik-cs.com/programs/virtools/SmitFraud.exe
>
> Instructions:
> Execute; SmitFraud.exe { Note: You must accept the default of C
> \McAfee }
> Choose; Unzip
> Choose; Close
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE
> to go through your FireWall to enable WGET.EXE to download the needed
> McAfee related files.
>
> Execute; c:\mcafee\clean.bat
> { or Double-click on 'Clean Link' in c:\mcafee }
>
> A final report in HTML format called C:\mcafee\ScanReport.HTML will be
> generated. At the end of the scan, it will be displayed in your
> browser (Opera, FireFox or Internet Explorer). It is suggested that you
> move the report out of c:\mcafee before performing another scan.
> ****
>
> After you've run Dave's tool, if you are still having problems with the
> desktop: Go to the Display applet in Control Panel and look on the
> Desktop tab. Click on Customize Desktop, and then click on the Web tab.
> You will see that there are checkmarks next to "My Current Home Page"
> and probably "Lock Desktop Items". Uncheck these. By highlighting the
> "My Current Home Page" and clicking on the Properties button, you will
> be able to determine the name of the file that is the message. It might
> be called something like "security.html" or the like. Click Apply and
> OK out when you've made your changes. Then you want to find the *.html
> malware file and delete it.
>
> And for other general malware removal steps:
> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>
.

Quantcast