A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Windows XP Help and Support
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

"Your computer is infected" message



 
 
Thread Tools Display Modes
  #1  
Old May 1st 07, 03:48 PM posted to microsoft.public.windowsxp.help_and_support
No_Name
external usenet poster
 
Posts: 17
Default "Your computer is infected" message

This icon pops up every minute .It just happened today. I understand
there is a fix for it but my Windows is not genuine.My brother-in-law
fixed my computer last year but loaded {unbeknownst to me} a
counterfeit copy Will i have any problem trying to fix this w/o a
geniune Windows version?

Ads
  #2  
Old May 1st 07, 04:29 PM posted to microsoft.public.windowsxp.help_and_support
Mark L. Ferguson
external usenet poster
 
Posts: 4,253
Default "Your computer is infected" message

I suggest tryng AutoRuns. Set it to only show apps not from Microsoft, and
turn off anything you can't positively identify as something you need.

AutoRuns for Windows v8.61:
http://www.microsoft.com/technet/sys.../Autoruns.mspx
--
Was this post helpful to you? Voting helps others who use the web interface.
Mark L. Ferguson



" wrote:

This icon pops up every minute .It just happened today. I understand
there is a fix for it but my Windows is not genuine.My brother-in-law
fixed my computer last year but loaded {unbeknownst to me} a
counterfeit copy Will i have any problem trying to fix this w/o a
geniune Windows version?


  #3  
Old May 1st 07, 06:26 PM posted to microsoft.public.windowsxp.help_and_support
nass
external usenet poster
 
Posts: 7,474
Default "Your computer is infected" message



" wrote:

This icon pops up every minute .It just happened today. I understand
there is a fix for it but my Windows is not genuine.My brother-in-law
fixed my computer last year but loaded {unbeknownst to me} a
counterfeit copy Will i have any problem trying to fix this w/o a
geniune Windows version?



You can get a Pop-Up legit for error message like Memory couldn't be read

or ** illegitimate ** message telling you buy a software because your
computer is infected?.
Which you have is a bad message and you should NOT click on it or go to the
link provided, your machine is infected so please follow these steps and see
if you will
clean up the machine:

1... Click start Control Panel Double Click Network and Internet
Connections Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit or you can send them here in your next
post) and click [OK] to confirm your Changes.

Click on Advanced Tab and scroll down under the browsing option and uncheck
this box:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) and click Apply
then OK to close your IE Properties.

2.... And also for malwares from he
http://www.lavasoft.com/products/ad-...e_personal.php
http://www.safer-networking.org ; for Spybot S&D
Download and install after installing this software and
update then run a scan in both safe mode and normal:
http://free.grisoft.com/doc/5390/lng/us/tpl/v5
= Open the Windows
Explorer and locate this path:
C:\Windows\System32\drivers\etc = look in the Right Pane/window for this
file called the HOSTS file but not the one with the extension *.SAM* leave
this as is.
If you can't see it try to click Tools Folder Options and select show
Hidden files and folder, then right Click the Hosts file and select open with
Notepad.
There see any reference for that site and remove it, you Hosts file will
looks like this:
# 102.54.94.97 rhino.acme.com # Source server
# 38.25.63.10 x.acme.com # Client Host
127.0.0.1 LocalHost
------------------------------------------
Remove all other References other than those above.

Run disk Clean Up and Defrag in safe mode, then Open run command and type in:
sfc /scannow click [OK]
Note the space between sfc_/

If you still directed Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.
HTH.
Let us know.
Regards,
nass
----------
www.nasstec.co.uk
  #4  
Old May 1st 07, 09:45 PM posted to microsoft.public.windowsxp.help_and_support
No_Name
external usenet poster
 
Posts: 17
Default "Your computer is infected" message

On May 1, 10:26 am, nass wrote:
" wrote:
This icon pops up every minute .It just happened today. I understand
there is a fix for it but my Windows is not genuine.My brother-in-law
fixed my computer last year but loaded {unbeknownst to me} a
counterfeit copy Will i have any problem trying to fix this w/o a
geniune Windows version?


You can get a Pop-Up legit for error message like Memory couldn't be read

or ** illegitimate ** message telling you buy a software because your
computer is infected?.
Which you have is a bad message and you should NOT click on it or go to the
link provided, your machine is infected so please follow these steps and see
if you will
clean up the machine:

1... Click start Control Panel Double Click Network and Internet
Connections Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit or you can send them here in your next
post) and click [OK] to confirm your Changes.

Click on Advanced Tab and scroll down under the browsing option and uncheck
this box:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) and click Apply
then OK to close your IE Properties.

2.... And also for malwares from hehttp://www.lavasoft.com/products/ad-...etworking.org; for Spybot S&D
Download and install after installing this software and
update then run a scan in both safe mode and normal:http://free.grisoft.com/doc/5390/lng/us/tpl/v5
= Open the Windows
Explorer and locate this path:
C:\Windows\System32\drivers\etc = look in the Right Pane/window for this
file called the HOSTS file but not the one with the extension *.SAM* leave
this as is.
If you can't see it try to click Tools Folder Options and select show
Hidden files and folder, then right Click the Hosts file and select open with
Notepad.
There see any reference for that site and remove it, you Hosts file will
looks like this:
# 102.54.94.97 rhino.acme.com # Source server
# 38.25.63.10 x.acme.com # Client Host
127.0.0.1 LocalHost
------------------------------------------
Remove all other References other than those above.

Run disk Clean Up and Defrag in safe mode, then Open run command and type in:
sfc /scannow click [OK]
Note the space between sfc_/

If you still directed Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log tohttp://aumha.net/viewforum.php?f=30,http://castlecops.com/forum67.html,h...hp?showforum=7, or other appropriate
forums for expert analysis, not here.
HTH.
Let us know.
Regards,
nass
----------www.nasstec.co.uk


The first suggestion did not work. I'll try the other options. Will
let you know what happens. Thanks.

 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 10:11 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.