Is this a virus?
Thread poster: Emma Grubb
Emma Grubb
Emma Grubb  Identity Verified
United Kingdom
Local time: 09:06
Member (2010)
German to English
+ ...
Apr 7, 2006

Yesterday, something appeared to install itself on my computer. Since then, my windows desktop background has appeared as a dark blue screen displaying the following message:

"Warning! Spyware threat detected! System error #1752

Your computer has several fatal errors due to spyware activity.
Your IP address is 127.0.0.1 and via this address an unauthorized
access was gained by another computer. It is strictly recommeded
to install an anti-virus softwar
... See more
Yesterday, something appeared to install itself on my computer. Since then, my windows desktop background has appeared as a dark blue screen displaying the following message:

"Warning! Spyware threat detected! System error #1752

Your computer has several fatal errors due to spyware activity.
Your IP address is 127.0.0.1 and via this address an unauthorized
access was gained by another computer. It is strictly recommeded
to install an anti-virus software to close all security breaches.


Your IP address: 127.0.0.1
They know you're using: Internet Explorer
Your computer is: AMD Sempron(tm) 2400+ 1666 MHz, 223.36 MB of RAM

Risk status for further investigation: VERY HIGH RISK


To protect your computer from spyware attacks - click here
To erase the tracks of your internet activity - click here"

I certainly don't intend to click on the parts that say "click here", and my spyware and virus software are not detecting any problem.

Anyone know what this is and/or how to get back to my normal desktop display? (control panel -> display, etc. doesn't work....)
Collapse


 
Alexandra Speirs
Alexandra Speirs  Identity Verified
Local time: 10:06
Italian to English
+ ...
Return to previous configuration Apr 7, 2006

Spyware, may even be a virus somewhere....

I've fixed this on my computer, but my system is in Italian so I don't know what the exact terms are in the English version of Windows. I'm using XP by the way....

Try this:
Start
All programs
Accessories
System utililties (??) The Italian says Utilità di sistema
Restore (??) system configuration (it must be something like that, the Italian is Ripristino configurazione di sistema).

T
... See more
Spyware, may even be a virus somewhere....

I've fixed this on my computer, but my system is in Italian so I don't know what the exact terms are in the English version of Windows. I'm using XP by the way....

Try this:
Start
All programs
Accessories
System utililties (??) The Italian says Utilità di sistema
Restore (??) system configuration (it must be something like that, the Italian is Ripristino configurazione di sistema).

Then follow the instructions, selecting a date immediately before the disaster struck.

That should do the trick!
Collapse


 
Emma Grubb
Emma Grubb  Identity Verified
United Kingdom
Local time: 09:06
Member (2010)
German to English
+ ...
TOPIC STARTER
Problem solved! Apr 7, 2006

Thanks for your help Alexandra. Much appreciated!

 
tlmurray (X)
tlmurray (X)
Local time: 05:06
English
Restore may not be sufficient Apr 7, 2006

Alexandra Speirs wrote:
That should do the trick!


That *might* do the trick, but in most case, it's not enough, because restores replace only certain files, and the infection could easily be somewhere else. Indeed, Mike Danseglio, program manager in the Security Solutions group at Microsoft, said in a presentation at the InfoSec World conference in Lake Buena Vista, Florida, "When you are dealing with rootkits and some advanced spyware programs, the only solution is to rebuild from scratch. In some cases, there really is no way to recover without nuking the systems from orbit."

It's been found even after cleanings that things *can* get left behind.


 
sarahl (X)
sarahl (X)
Local time: 02:06
English to French
+ ...
sounds like a trojan Apr 7, 2006

I hate to be the bearer of bad news, Emma, but this sounds like the malware my computer was infected with around the holidays. I had to take it to the pros for cleaning.

The malware is called netwrap.exe, which means it keeps executing itself and you need a pro to erase it completely.

Best of luck

Sarah

[Edited at 2006-04-07 18:40]


 
davidgreen
davidgreen
German to English
you should still scan for viruses and spyware Apr 8, 2006

If you haven't done this already, it's a good idea to download, update and run the following: spybot search & destroy, adaware and your anti-virus programme.

 


To report site rules violations or get help, contact a site moderator:

Moderator(s) of this forum
Laureana Pavon[Call to this topic]

You can also contact site staff by submitting a support request »

Is this a virus?






Wordfast Pro
Translation Memory Software for Any Platform

Exclusive discount for ProZ.com users! Save over 13% when purchasing Wordfast Pro through ProZ.com. Wordfast is the world's #1 provider of platform-independent Translation Memory software. Consistently ranked the most user-friendly and highest value

Buy now! »
Trados Business Manager Lite
Create customer quotes and invoices from within Trados Studio

Trados Business Manager Lite helps to simplify and speed up some of the daily tasks, such as invoicing and reporting, associated with running your freelance translation business.

More info »