Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Remove 'Warning you're in danger


  • This topic is locked This topic is locked

#1
underwurlde

underwurlde

    New Member

  • Member
  • Pip
  • 1 posts
This [bleep] spyware from 'Smart Security' seems to have evolved...

Here's how I removed it, with some success from a Win 2000 Pro system:

Adaware seemed to remove it on boot etc. but still came back, so...

This crap from a 'company' called Smart Security appears thus:

Desktop hijacked & now viewed as a 'Web page' !WARNING you're in danger, Click here etc.
(Do NOT 'click here')
Teen F**k icon (on desktop & in start menu) P.S. THANKS FOR THAT, JUST WHAT MY WIFE & KIDS WANT TO SEE!
!Protect your Date icon (on desktop)
! Secure yourself icon (in start menu)
Explorer homepage set to about:blank taking you to 213.159.117.130
Task Manager Disabled

A tick 'Security' add on has appeared in desktop active Web options.

('Active Web' sorry M$, that really is just bloody ASKING FOR IT)

It is a complete front and very clever red herring to what's actually happening i.e.
an automatic p*** dialler to some high toll rate phone line. (you've been warned!)
If you're worried, DISCONNECT MODEM!


First off then, try....

CTRL-ALT-DEL 'Task Manager' button greyed out?
Or Start->Run TaskMgr.exe results in:
'Task Manager has been disabled by your administrator'

Hence: Start->Run: regedit.exe

Go here:
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VRESION\POLICIES\SYSTEM

Modifiy DisableTskMgr from a '1' to a '0'

exit regedit and hit CRTL-ALT-DEL, can now go to 'Task Manager'... Do so:

Processes tab, scroll to & select 125209.dlr & hit 'End Process'

Now to get rid of the desktop frig...

Get rid of ticked 'Security' option in desktop properties & do not view desktop as a web page.

Delete C:\Winnt\desktop.html

Right click desktop & hit refresh. Gone!

delete c:\125209.exe

delete 2 aforementioned icons on desktop & in start menu (right click, delete)

run SpySweeper to get rid of any ingrained regisrty / program hacks left over.

Reboot

After rebooting, hopefully Teen F**k etc icons gone, desktop OK

Go to Internet Explorer properties & reset homepage to your choice, not about:blank

Re-run Spysweeper
Run AdAware SE

Reboot

Fingers crossed, gone!
  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP