Vista - Explorer

GJC wrote:

> Hi, Can you please help?
>
> I get an error message when I open explorer. "Attention some dangerous
> viruses detected in your system. Windows vista (TM) Hoem Premium files
> corrupted. This may lead to the destruction of important files in
> C:\Windows. Download protection software now! Click OK to download the
> antispyware. (recommended)".
>
> Any of the 2 Yes/No buttons takes you to a web page.
> I can still get to my files, but very now and then it comes back. When I
> use explorer.
>
> I have Norton installed, together with windows defender.
>
> Anyone know, how this got into windows explorer and my computer?
> Does anyone know how to get rid of it, please?

Your system is infected with a rogue antivirus program. It is called "rogue"
because it pretends to be A Good Guy but is really Evil. Do not pay them!

Since you didn't mention the name of the program that you're being urged to
purchase I can't point you to the exact removal steps but look for them
here:

Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

These may work for you and all may be well. However, in many cases the
computer will also be infected with Zlob and/or Vundo trojans and protected
by a rootkit. These machines are extremely difficult to clean.

If your machine is one of these cases, either get guided help at one of the
specialty forums below OR back up your data and do a clean install of
Windows. It is your choice. If you are unsure how to back up your data or
how to do a clean install, you can take your machine to a local computer
professional. I don't recommend using BigComputerStore/GeekSquad types of
places.

PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS.

http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/...y.php?f=25Look
http://www.geekstogo.com/forum/Malwa..._Here-f37.html
http://gladiator-antivirus.com/forum...?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

Download and install Spybot Search & destroy, and do a system scan in Safe
Mode.
All info below.

http://www.spybot.info/en/index.html

Spybot Search & Destroy 1.6 is a very good, FREE Anti-Spyware Program.
Download, install, update, and immunize your System with it.
Then SCAN with it.
Update it, and scan your System once a fortnight.

To get into Safe mode, tap F8 right at Power On / Startup, and use UP arrow
key to get to Safe Mode from list of options, then hit ENTER.
SCAN your computer with Spybot S & D while in Safe Mode.

--
Mick Murphy - Qld - Australia


"GJC" wrote:

> Hi, Can you please help?
>
> I get an error message when I open explorer. "Attention some dangerous
> viruses detected in your system. Windows vista (TM) Hoem Premium files
> corrupted. This may lead to the destruction of important files in C:\Windows.
> Download protection software now! Click OK to download the antispyware.
> (recommended)".
>
> Any of the 2 Yes/No buttons takes you to a web page.
> I can still get to my files, but very now and then it comes back. When I use
> explorer.
>
> I have Norton installed, together with windows defender.
>
> Anyone know, how this got into windows explorer and my computer?
> Does anyone know how to get rid of it, please?
> Regards GJC

Hi I have received the same error message "Attention...." when browsin
folders in my explorer. At the same time, my internet explorer is no
working properly, with pop up error message that " Windows Explorer ha
stopped working " with the problem details everytime I open Contro
Panel or internet explorer...et

Problem Event Name: APPCRAS
Application Name: explorer.ex
Application Version: 6.0.6000.1654
Application Timestamp: 46d230c
Fault Module Name: ntdll.dl
Fault Module Version: 6.0.6000.1638
Fault Module Timestamp: 4549bdc
Exception Code: c000000
Exception Offset: 000620e
OS Version: 6.0.6000.2.0.0.768.
Locale ID: 308
Additional Information 1: 8d1
Additional Information 2: cdca9b1d21d12b77d84f02df48e3431
Additional Information 3: 8d1
Additional Information 4: cdca9b1d21d12b77d84f02df48e3431

Please help !!! Thank you very much. It is driving me craz

Regards
Sean

GJC;798322 Wrote:

> Hi, Can you please help
>
> I get an error message when I open explorer. "Attention some dangerou
> viruses detected in your system. Windows vista (TM) Hoem Premium file
> corrupted. This may lead to the destruction of important files i
> C:\Windows
> Download protection software now! Click OK to download the antispyware
> (recommended)"
>
> Any of the 2 Yes/No buttons takes you to a web page
> I can still get to my files, but very now and then it comes back. Whe
> I us
> explorer
>
> I have Norton installed, together with windows defender
>
> Anyone know, how this got into windows explorer and my computer
> Does anyone know how to get rid of it, please
> Regards GJ

--
hatevirus

hI

Suggest you follow Malke's excellent advice - but you need to know th
name of the culprit - try checking Task manager to see waht programs an
processes show while this malware is active

Alternatively you could try downloading and scanning with a couple o
other security- they may identify and kill it - free ones to try ar

'www.avast' (http://www.avast) .com free home edition - instal
it, update it, and do a sca

and a-squared free 3.

'a-squared Anti-Malware (a2) Download - Free Downloads of the Trial
and Freeware-Versions' (http://www.emsisoft.com/en/software/download/

Hope this help

SIW

--
SIW2