Databases (71)
Linux (42)
Outside the Cube (2086)
Programming (730)
Web publishing (118)
Windows (355)
Apache (10)
File Types (33)
Internet Explorer (6)
Network (11)
Passwords (6)
Printing
Processes (13)
Programming (243)
Exchange Links
About this site
| |
 |
New related comments
Number of comments in the last 48 hours
How to send an email (SMS) to any cell phone without knowing the provider
1 new comments
Red circle with white cross in taskbar tray - saying 'Your computer is infected'
62 comments. Current rating: 
(12 votes). Leave comments and/ or rate it.
Question:
My computer was infected a while ago with Spysheriff and I got rid of it. But I discovered a red circle with a white cross in my taskbar. When I move my mouse over it, it says 'Your computer is infected':
Answer:
This one is easy to get rid off.- Open the task manager (press Control+Alt+Del)
- Select Processes and look for a process named 13242.exe or similar (a pattern of numbers) and kill this process.
Look for a process named Archive.exe and kill it as well.
Note that the name of this other program may be different in your case - a known other name is tool2.exe .
- Search your hard disk for the file name 13242.exe (or whatever number it may have been in your case). In my case this was in:
\Documents and Settings\user1\Lokale Einstellungen\Temp
Other users reported to have found these files in c:\Windows.
As you can see in the screenshot, I found a LOT of executable files there, most of them the length 0. I could not delete those files until I had killed process 'Archive.exe'.
The file archive.exe was entered as an auto-start in the registry here:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunI deleted the file Archive.exe from C:\Program Files\Archive:
Directory of C:\Program Files\Archive 11/24/2004 04:21p <DIR> . 11/24/2004 04:21p <DIR> .. 11/24/2004 04:21p 106,496 archive.exe 1 File(s) 106,496 bytes 2 Dir(s) 3,235,689,984 bytes free
Comments:
| You are on page 1 of 5, other pages: [1] 2 3 4 5 | ||
| ||
|
Can u help me please? I have the same problem and it keeps re-installing antispyware!!! its soooooooo fucking annoying!!! i have windows xp
| ||
| ||
|
just reboot your computer dude
| ||
| ||
|
i do not have any of those in my processes....other ways to identify?
| ||
| ||
|
i also have the same problem just today, and i can not find any of the files mentioned above. But the again i'm not sure what kind of ad/spy ware infecting my PC. but it does leave the same sign. Can any one tell me waht to do??
| ||
| ||
|
i have something new with our freindly spysheriff. it has made a large sale sheet my homepage. i got rid of everything so that it is gone from my regedit, and add/rmove -- but it has:
1. a balloon in my lower left hand corner says: 'Intrusion etc. blah, blah and click' -- of course a click infrcts 2. In the cntrl-alt-del there is a process labeled atlyd32,exe -- when i end it - it ends - and guess what -- it recreates itself and gores back in the processes automatically 3. when i find atlyd32 in the registry i cannot delete it as it is running -- and i cannot stop it from running. how do we gety rid of atlyd32? better can we send the address of spysheriff to the patriot's act commotteee to be put permanently in gitmo help!!!!!!!! | ||
| ||
|
Dennis:
There must be another process running that restarts atlyd32.exe. It is also possible that the trojan (ATLYD32.EXE) gets invoked each time you start up ANY program. Read this document to get rid of this hook:  http://www.delphifa..013.shtml
It has a downloadable script that will remove those hooks in the registry, or you can do it manually. Afterwards you should delete that file - atlyd32.exe will be either in C:\WINDOWS\atlyd32.exe or in C:\WINDOWS\SYSTEM32\atlyd32.exe | ||
| ||
|
Plese tell me, are the files x.exe, tool2.exe,tool3.exe,tool4.exe,tool5.exe also the reasons of the message? Are these files created by secure32 or spysheriff ???
| ||
| ||
|
i have the exact same problem but i cant find 13242.exe or archive.exe in my processess, ive got tool2.exe and ive deleted it over and over again. but it keeps happening.
| ||
| ||
|
I could not find the files you mentioned
| ||
| ||
|
Great help kept going and finally got rid of all except small red circle wot white cross as cannot find the files mentioned to remove it
| ||
| ||
|
Thaks a bunch. worked first time. That was so annoying
| ||
| ||
|
I have cleaned up that crazy thing finally.First I did the things above.But this was useless.I run a program called Faber Toys which is the advenced of Windows task Manager.I found the tool2.exe in otomatic works when start up.I killed that one!Now I am glad.Thanks for everything
| ||
| ||
|
answer: stop looking at porn all day long - that is where these programs come from
| ||
| ||
|
Does anyone know how I can delete these fuckers. I have scanned through them and allthough the properties info suggests where they are being sourced from, they are obviously hidden or will not let me delete them as I get pop ups saying the program is still running.
| ||
| ||
|
Hello - Microsoft has a free beta2 spyware program that deletes spysheriff and its variants (pest trap, etc.). It works and cleans out the program. Then search the web for 'spysheriff wallpaper remove' to find the right settings to restore your wallpaper and other items. Depending on your variant, the instructions are slightly different, but not difficult. Good luck.
| ||
| You are on page 1 of 5, other pages: [1] 2 3 4 5 |
