Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Remove 'Warning you're in danger


  • This topic is locked This topic is locked

#1
underwurlde

underwurlde

    New Member

  • Member
  • Pip
  • 1 posts
This [bleep] spyware from 'Smart Security' seems to have evolved...

Here's how I removed it, with some success from a Win 2000 Pro system:

Adaware seemed to remove it on boot etc. but still came back, so...

This crap from a 'company' called Smart Security appears thus:

Desktop hijacked & now viewed as a 'Web page' !WARNING you're in danger, Click here etc.
(Do NOT 'click here')
Teen F**k icon (on desktop & in start menu) P.S. THANKS FOR THAT, JUST WHAT MY WIFE & KIDS WANT TO SEE!
!Protect your Date icon (on desktop)
! Secure yourself icon (in start menu)
Explorer homepage set to about:blank taking you to 213.159.117.130
Task Manager Disabled

A tick 'Security' add on has appeared in desktop active Web options.

('Active Web' sorry M$, that really is just bloody ASKING FOR IT)

It is a complete front and very clever red herring to what's actually happening i.e.
an automatic p*** dialler to some high toll rate phone line. (you've been warned!)
If you're worried, DISCONNECT MODEM!


First off then, try....

CTRL-ALT-DEL 'Task Manager' button greyed out?
Or Start->Run TaskMgr.exe results in:
'Task Manager has been disabled by your administrator'

Hence: Start->Run: regedit.exe

Go here:
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VRESION\POLICIES\SYSTEM

Modifiy DisableTskMgr from a '1' to a '0'

exit regedit and hit CRTL-ALT-DEL, can now go to 'Task Manager'... Do so:

Processes tab, scroll to & select 125209.dlr & hit 'End Process'

Now to get rid of the desktop frig...

Get rid of ticked 'Security' option in desktop properties & do not view desktop as a web page.

Delete C:\Winnt\desktop.html

Right click desktop & hit refresh. Gone!

delete c:\125209.exe

delete 2 aforementioned icons on desktop & in start menu (right click, delete)

run SpySweeper to get rid of any ingrained regisrty / program hacks left over.

Reboot

After rebooting, hopefully Teen F**k etc icons gone, desktop OK

Go to Internet Explorer properties & reset homepage to your choice, not about:blank

Re-run Spysweeper
Run AdAware SE

Reboot

Fingers crossed, gone!
  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP