Horico

I got an e-mail from a mate that asked me to see his new website. Now this isn't out of the ordinary so i clicked the link....upon seeing a **** clip, I realised this wasn't the case and killed it.

Since then, I've had a dodgy icon in my taskbar..see pic 1 and 2 below. It shows a disabled type pic then goes to a no entry sign flashing. Then a warning pops up saying the pc is infected which i assume is just a way of getting on the website below.

http://i5.photobucket.com/albums/y187/Horico/dodgy1.jpg

http://i5.photobucket.com/albums/y187/Horico/dodgy2.jpg

I've tried to see if it's a program in the start menu as it's always there - but it's not in the start menu folder or anything..no trace of it.

Also, when I load up explorer, although my home page is set to google, i get the following page come up...

http://i5.photobucket.com/albums/y187/Horico/dodgy3.jpg

I've set up webroot spy sweeper but it can't find any more spyware and also have norton installed again but that can only find some adware that it can't delete...

Also, when i clicked on the link to a mail from scoobynet to see a new post, the pc opened up about 30 windows with the same page showing the thread!

Does anyone have any ideas?

dave honey

I had exactly the same thing happen to my pc and on the new home page that came up it was saying I needed to click on it to fix the spyware infection. So I did that thinking it would be ok and it made it loads worse and got more into my system. Messed about with it for ages untill I spoke to someone about it and they said that once I had clicked on the fix the spyware icon I had let the whole thing in. I'm not sure how true this is but I do know it knackered my pc and I had to replace it with a new one

Geezer

Download Spybot Search & Destroy (free and highly recommended) or Spyware Doctor (one of the best but not free) and run it to get rid of the infection.

Geezer

Horico

i haven't clicked on the spyware fix thingy luckily....i had a couple of professional looking icons on my desktop that were just links to the same website so i deleted them...

I'm running another sweep for spyware etc etc.

Spose i best look into backing up my media files....just to be sure...succumb to a virus on my old pc and got a new hd - don't really wanna have to do it on this one as it aint too old yet lol

gazza-uk

SpywareDefender is a b!tch to clean...

Andy McCord

Ive just had it and got rid of it, heres how to do it:-

http://www.pcdoctor-guide.com/wordpress/?p=2633

Andy McCord

Be careful with it though, it seems to get in to peoples e-mail addys & sends itself on, the chances are your mate never new it had been sent, check with people in your e-mail address book that you havent sent it on, In my case i hadnt.

I should of spotted it was dodgy when one of the recipents on the distribution was fistmyanus@hotmail or something like that

JackClark

Not an answer to your immediate problem but next time you're asked to visit a site run it's address through www.siteadvisor.com

Nicks VR4

If your running XP try a system Restore

Nick

Horico

Spot on Andy....instructions followed, spyware gone and a fresh smelling PC...

Now, where has my desktop wallpaper gone? lol

Cheers again...

bob269

Next time you're around his house accidentally spill a cup of coffee over his pc

InvisibleMan

yeah i had something similar but didnt click any links it wanted me to. It still was in there though.

Just delete from registry

c\windows\system32\nvctrl.exe
c\windows\system32\dfrgsrv.exe
c\windows\system32\mssearchnet.exe
c\windows\system32\stickrep.dll

Horico

The poor lad had no idea it got sent...i rang him to check it was legit but his lack of knowledge was the first thing to give the game away lol

Andy McCord

glad you are sorted, yep my wallpaper disappeared to, also i think my resoloution changed, these people who create this 5hite really pi5h me off

Andy