Thanks Rick. I hate feeling helpless and am trying to get a quick education,
which is why I followed the manual instructions. Unfortunately I found that
even with checking the option to show hidden files they have a way to hide
them from you, so it leaves me guessing whether I missed anything. I have the
block pop-ups option checked, and looked through the list that comes up under
"Exceptions", and there are hundreds of sites listed as blocked. I am curious
if that list is populated by pop-up attempts? Or did it come from one of my AV
protections? If so, I just screwed up by removing one of the blocked sites
from the list, and don't remember the name. Maybe I just need to run another
round of AV updates?
John
Fogelsville, PA
--- On Sat, 1/17/09, Rick Bastedo <rbastedo@gmail.com> wrote:
From: Rick Bastedo <rbastedo@gmail.com>
Subject: Re: [Spridgets] Email Problems
To: spridgets@autox.team.net
Date: Saturday, January 17, 2009, 2:24 PM
My wife's machine picked that up, I found a tool at bitdefender to clean it
but I had to boot her machine in safe mode to get it to work
The little bugger is smart enough to give you false success messages (such
as "Cleanup Successful") while defeating the tools designed to kill it.
Running in safe mode also allows you access to regedit and msconfig which
the infection sometimes disables in standard mode.
Rick Bastedo
(IT is what I do...when I'm not playing with my cars)
---------------------------------------------------------------------------
Date: Sat, 17 Jan 2009 10:28:37 -0800 (PST)
From: fastvee <fastvee@yahoo.com>
Subject: [Spridgets] Email Problems
To: spridgets@autox.team.net
Message-ID: <445327.44257.qm@web34403.mail.mud.yahoo.com>
Content-Type: text/plain; charset=us-ascii
My apologies to the list for two previous empty messages. My replies were
somehow trimmed when I sent them, and I have since resubscribed from my
other email account. I am baffled, and hope it is not related to an
infection of windefender 2009 scareware on Tuesday. FYI, A popup appears
telling you it has discovered activity at your firewall and tries to
redirect you to their download site where their worm is implanted, which has
the ability to send your info, passwords, and screen shots back to the
sender. I followed manual instructions to clear the hidden files from my
registry and temp folder and have used the computer without problems until
this morning. I have updated Symantic AV, Spybot Search&Destroy, and
AdAware, and none caught the scareware download. If one of these scareware
popups appears on your computer, DO NOT click on it anywhere. Closing the
browser immediately or unplugging the CPU seems to be the only safe method
to avoid infection.
http://tinyurl.com/8kbwna
John
Fogelsville, PA
---------------------------------------------------------------------------
You are subscribed as fastvee@yahoo.com
http://www.team.net/archive
http://autox.team.net/mailman/listinfo/spridgets
_______________________________________________
Support Team.Net http://www.team.net/donate.html
http://www.team.net/archive
http://autox.team.net/mailman/listinfo/spridgets
|