CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

[DONE]"Warning you're in danger" virus thing - please ta

 
Post new topic   This topic is locked you cannot edit posts or make replies       All -> FavForums -> General Computer Problems [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
smileyl

Cadet
Cadet


Joined: Nov 09, 2004
Posts: 9
Location: USA

PostPosted: Wed Nov 10, 2004 2:39 am    Post subject: "Warning you're in danger" virus thing - please ta
Reply with quote

Hi. I saw someone else's post who had a similar problem, but mine is slightly different.

The Background of windows XP is covered by a black screen that I cannot get rid of. The screen says "Warning You're in Danger" etc. I ran spybot S+D and Adaware, and they both helped a little I think because afterwards, the internet ran faster again.

now the syptoms are:
-big black screen
-can't open folders
-Internet explorer and other programs shut down unexpectedly
-when I try to open a folder, I am taken to the restore your desktop screen

I am a new user, but I read a similar post which recommended a program called hijackthis - the problem for me is that I am unable to open folders and therefore cannot start the program.

Thank you so much for your help.

L

Back to top
View users profile Send private message
wawadave

Special Response Team
Special Response Team

Joined: Nov 22, 2002
Posts: 21503
Location: Installing Vista http://tinyurl.com/2l9qyd
Premium RootKit Detection Hosts Rootkit Responders SRT

PostPosted: Wed Nov 10, 2004 3:24 am    Post subject:
Reply with quote

hello
d/l hjt from the link below reboot to safe mode run it from there save its log reboot post in the forum in the link below!
In order to help you we need a HiJackThis log.

You will be posting the HiJackThis log in the HiJackThis forum: CastleCops Link/f67-Trend_Micro_HijackThis_Logs.html

Read the HJT forum posting rules: CastleCops Link/postt8864.html

Download HiJackThis from : CastleCops Link/downloads-file-328.html

Create a folder and unzip the HiJackThis download to the folder. Do not unzip the HiJackThis download to your Desktop or the Temp folder - it won't work.

Doubleclick "HijackThis.exe". First, update HiJackThis by pressing the "Config" button, then press "Misc Tools", followed by "Check for update online". If you downloaded an updated HJT, click "Yes" at the "Open the file?" prompt. If you did not update, press the "Back" button .

Press "Scan".When the scan is finished, use "Save Log" button and save the log as a text file. Its best to save your text file in the same folder as where you put HiJackThis.

DO NOT FIX ANYTHING YOURSELF UNTIL INSTRUCTED TO DO SO ONLY BY A CCSP EXPERT. MOST OF THE HJT LOG ENTRIES ARE NEEDED TO RUN YOUR COMPUTER. REMOVING THE NEEDED ENTRIES CAN CAUSE SERIOUS DAMAGE TO YOUR COMPUTER.

Post your log in the HiJackThis forum : CastleCops Link/f67-Trend_Micro_HijackThis_Logs.html. Click "NewTopic" and simply copy/paste the HJT log into the textbox. Include the information requested in the HJT forum posting rules: CastleCops Link/postt8864.html

Make sure your HJT log is posted only in the HiJackThis forum: CastleCops Link/f67-Trend_Micro_HijackThis_Logs.html.
(I Borrowed this)


_________________
Brycetechs new tut dvd http://tinyurl.com/2u7rpk
The Pixel Palladium
Bryce Newby help and tuts, d/l,s How 2s Updated 18 Apr 2008
Back to top
View users profile Send private message Send email Visit posters website
digitalrazor

Cadet
Cadet


Joined: Nov 07, 2004
Posts: 6
Location: USA

PostPosted: Thu Nov 11, 2004 3:33 am    Post subject: cntrl + alt + del
Reply with quote

with that warning you are in serious trouble its easy to defeat and btw you want the desktop in safe mode cause if its running then you will have to use the task manager to kill a running process ""timer"" that will place the desktop in safe mode then right click on the desktop and under the "Web" tab unlick the view as webpage and click the title "you are in serious trouble" right click on that and a delete option will popup delete it. then after you have click apply, you will be back to you'r desktop . but go into you'r windows folder and look for a red looking eye the same one that was on the message delete that dump you'r temp folder and theres a few files that it leaves in you'r default windows folder ones a html file and there is one other place that it hides on the start bar right click on that one and delete that as well.

best of luck Razor

Back to top
View users profile Send private message
smileyl

Cadet
Cadet


Joined: Nov 09, 2004
Posts: 9
Location: USA

PostPosted: Thu Nov 11, 2004 7:16 am    Post subject:
Reply with quote

Hi Razor, thank you for your advice.

is the red eye looking icon you're referring to perhaps called "ssico"?

L

Back to top
View users profile Send private message
thomas_toy2004
Warnings : 1

Trooper
Trooper


Joined: Nov 09, 2004
Posts: 20
Location: USA

PostPosted: Thu Nov 11, 2004 9:45 am    Post subject:
Reply with quote

Goto here:

http://www.smart-security.info/removal.html

run it.

IF not, try removing the wallpaper by going to the control panel. What processes are running in the background? (Run HJT...)

Go to Control Panel -> Display -> Desktop. Click on the Customize Desktop button. Then select Web and uncheck (or delete) the webpage Security. Click OK and it's done.

TOM

Back to top
View users profile Send private message
smileyl

Cadet
Cadet


Joined: Nov 09, 2004
Posts: 9
Location: USA

PostPosted: Thu Nov 11, 2004 2:52 pm    Post subject:
Reply with quote

Thank you very much for your advise. the background is gone, and everything is running well again.

I installed a firewall too. Smile

L

Back to top
View users profile Send private message
Acheton

Forums Admin
Premium Member

Joined: Sep 04, 2003
Posts: 8925
Location: Uk
Premium

PostPosted: Thu Nov 11, 2004 5:57 pm    Post subject:
Reply with quote

I've locked this thread since the issue is resolved Smile Please pm a mod if you have any questions.

thanks,

ach

Back to top
View users profile Send private message Visit posters website
Display posts from previous:   
Post new topic   This topic is locked you cannot edit posts or make replies       All -> FavForums -> General Computer Problems All times are GMT
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can report post to moderators in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer