Malwareteks: Forums / Inactive Malware Threads / [INACTIVE] Attention! If your computer is infected, you could suffer data loss.... (Is it MalWare?)

Forums

Malwareteks :: Forums :: Malware Support :: Inactive Malware Threads		<< Previous thread \| Next thread >>
[INACTIVE] Attention! If your computer is infected, you could suffer data loss.... (Is it MalWare?)


Moderators: ShadowPuterDude, Greg, D3m3nt3d, Brandon, Vmarm, peterparker, siljaline, jholland1964, TurcoLoco, Windsor, JeanInMontana, KZ, RatHat, Jason Amison, MrCharlie	This thread is now closed

Author

Post

allright

Fri Aug 15 2008, 12:28AM

Registered Member #277

Joined: Fri Aug 15 2008, 12:06AM
Posts: 1
Thanked 0 times in 0 post

Hi all,

Since yesteray, when I use IE7.0 to surf, sometimes an unexpected window pops out and says:

"Attention! If your computer is infected, you could suffer data loss,erratic PC behaviour, PC freezes and crashes.

Antivirus 2009 will perform a quick and 100% FREE scan..."

At the same time, an unexpected IE7.0 window pops out with a strange url: http://windowsscanner-freever.com/2009...

Using Spyware Doctor could not find any clue, but there are two strange files in the follow location:
c:/windows/system32/vFGjQxbc.ini
c:/windows/system32/vFGjQxbc.ini2

These above two files' size is same, and the file size keeps growing to about 400K Bytes. After deleting these two files, they will appear again starting with small file size and keep growing.

During the same time, using Firefox to surf internet, some previously visited websites can not be accessed. If starting Apache server in my machine, "http://localhost" also can not be accessed.

We have struggled to resolve this problem for about one day, but still could not make it.

Your kind advice and solution will be highly appreciated!!

Best regards,
allright

MODERATOR EDIT: Do not post live links to malicious sites.

[ Edited Fri Aug 15 2008, 08:01AM ]

ShadowPuterDude

Fri Aug 15 2008, 08:02AM

...the Shadow knows

Registered Member #1

Joined: Thu Apr 27 2006, 04:52PM
Location: Northern NY
Posts: 217
Thanked 10 times in 10 posts

Hello and welcome to MalwareTeks.

Yes, your system is infected.

Follow the procedures as outlined in our Malware Cleaning Guide.

Once you have completed the procedures outlined in our Malware Cleaning Guide, attach the following logs at a minimum:

Malwarebytes Anti-Malware
HijackThis
ISeeYouXP

If you were able to complete any of the online scanners, post those logs as well.

All logs are to be posted as attachments.

If you encounter problems and any step just skip that skip and continue with the procedures outlined in the Malware Cleaning Guide.

Make sure to tell me what ran and what didn't.

"Only those who fail greatly can ever achieve greatly" - Robert F. Kennedy
Microsoft Most Valuable Professional - Consumer Security (2007-2008)
Member - Alliance of Security Analysis Professionals - Since 2006
Linux Registered User # 363218

ShadowPuterDude

Sun Aug 24 2008, 08:38AM

...the Shadow knows

Registered Member #1

Joined: Thu Apr 27 2006, 04:52PM
Location: Northern NY
Posts: 217
Thanked 10 times in 10 posts

Thread Closed

Reason: Lack of Response


Jump: Back to top