- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - Microsoft
- >
- Virus posing as security software - can't kill
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-25-2007 05:08 PM
тАО01-25-2007 05:08 PM
Virus posing as security software - can't kill
Every time I click home key on browser it takes me back to the below listed un-welcome security advertising page. My browser shows Goggle as my assigned home page, but still "defaults" to 'asecureboard' screen page anyway.
Any clues as to how to kill this thing? Seems to come from Rumania...?
This is culprit:
http://asecureboard.com
Regards,
Richard Anderson
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-25-2007 08:26 PM
тАО01-25-2007 08:26 PM
Re: Virus posing as security software - can't kill
can you try to verify your registry?
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"
kind regards
yogeeraj
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-25-2007 08:53 PM
тАО01-25-2007 08:53 PM
Re: Virus posing as security software - can't kill
and welcome to the forums !
McAffee has the solution:
http://forums.mcafeehelp.com/viewtopic.php?t=101014
And many others returned by web search.
Please also read:
http://forums1.itrc.hp.com/service/forums/helptips.do?#33 on how to reward any useful answers given to your questions.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-26-2007 02:57 AM
тАО01-26-2007 02:57 AM
Re: Virus posing as security software - can't kill
Bleepingcomputer has a nice writeup on how to use it (as part of a tutorial on how to kill a similar infection).
http://www.bleepingcomputer.com/forums/topic70074.html
It usually creates a log file at C:\rapport.txt. Would not hurt to check it to see if complains of any files it can't fix.
When you finish with SmitFraudFix get Hijackthis.exe from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe
(above is the direct download link. If you want to see the site you are getting it from:
http://tomcoyote.org/hjt
)
Save it to your desktop with a new name like Richard.exe then run it. Select the top option (Scan and Save Log) then when notepad comes up with the log, copy the text and paste it in your next Reply. Let me check it to make sure you got it all. Lately a lot of the smitfraud style infections are combined with a vundo infection which likes to give you popups and I expect can also invite its friends in. It also hides if it sees a program named Hijackthis running.
Ron
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-26-2007 04:28 PM
тАО01-26-2007 04:28 PM
Re: Virus posing as security software - can't kill
Holy Bat Goop! It's gone!!!
Thanks fellers!
Only residual damage was Desktop background had to be reset. Downloaded suggested scan tool - found nothing I recognize as suspicious, so left things alone...
-Richard
Washougal, WA