What happens is I open IE, instead of my home page, CNN, it goes to some URL called "warningiepage.com'
The scary part is I hit tools, internet options, and look at the home page there and it has not been modified, it says CNN.com.
Also on the toolbar is a new icon, a yellow triangle with an exclamation point in the center once a minute, a box opens up that says 'Malware threat', click here to download this stuff. I tried Norton, AVG, and attempted to upgrade my Trojan Hunter but the email seems to be down, which it was fine yesterday. I am really screwed here, not sure how to proceed. BTW the window that opens up when I first attempt to go to my homepage has ads for 'spy heal', Pest Capture and a couple others. Its very difficult even to type because of that dam bubble that keeps popping up. HALP!
Originally posted by sonhouseTo get rid of warningiepage and the other crap, I would recommend doing a HijackThis scan and posting the log in one of the forums that deal with them.
What happens is I open IE, instead of my home page, CNN, it goes to some URL called "warningiepage.com'
The scary part is I hit tools, internet options, and look at the home page there and it has not been modified, it says CNN.com.
Also on the toolbar is a new icon, a yellow triangle with an exclamation point in the center once a minute, a box opens up ...[text shortened]... s. Its very difficult even to type because of that dam bubble that keeps popping up. HALP!
Don't attempt to fix anything with HijackThis unless you are certain you know what you are doing or you can cause more trouble - just follow the advice they will give you.
You can download the latest version here.
http://www.spywareinfo.com/~merijn/programs.php
Here's a good computer help forum that analyses the logs.
http://www.cybertechhelp.com/forums/showthread.php?t=86677
Originally posted by sonhouseGet Zone Alarm.
What happens is I open IE, instead of my home page, CNN, it goes to some URL called "warningiepage.com'
The scary part is I hit tools, internet options, and look at the home page there and it has not been modified, it says CNN.com.
Also on the toolbar is a new icon, a yellow triangle with an exclamation point in the center once a minute, a box opens up ...[text shortened]... s. Its very difficult even to type because of that dam bubble that keeps popping up. HALP!
http://www.download.com/3000-2092-10039884.html
Also, you must keep your windows up to date, and IE. You can stop using IE and use firefox, but I'm told I also need to keep my IE up to date.
Good Luck.
P-
Originally posted by sonhouseA quick google search reveals that this is associated with the zlob trojan.
What happens is I open IE, instead of my home page, CNN, it goes to some URL called "warningiepage.com'
The scary part is I hit tools, internet options, and look at the home page there and it has not been modified, it says CNN.com.
Also on the toolbar is a new icon, a yellow triangle with an exclamation point in the center once a minute, a box opens up ...[text shortened]... s. Its very difficult even to type because of that dam bubble that keeps popping up. HALP!
This can be removed, assuming you know what you are doing, by following these instructions
http://www.symantec.com/security_response/writeup.jsp?docid=2005-042316-2917-99&tabid=3
Good luck but don't fart about with this unless you know what you are doing as you can do more damage than good.
Originally posted by sonhouseInstall spybot too.
What happens is I open IE, instead of my home page, CNN, it goes to some URL called "warningiepage.com'
The scary part is I hit tools, internet options, and look at the home page there and it has not been modified, it says CNN.com.
Also on the toolbar is a new icon, a yellow triangle with an exclamation point in the center once a minute, a box opens up ...[text shortened]... s. Its very difficult even to type because of that dam bubble that keeps popping up. HALP!
Run it once a month at least.
http://www.spybot.info/
Will stop a lot of the nasties.
I had exactly the same problem as you're having, the best website I found out there to give you a step by step guide of how to get rid of it was www.bleepingcomputer.com if you follow the on screen instructions it takes about 10 mins to achieve, although I would suggest writing them down as you can't follow them on screen throughout as it asks you to do some complex stuff. I would also suggest you take a visit to http://www.techsupportalert.com/best_46_free_utilities.htm this is a fantastic website that gives you some great free downloads for security, you can get firefox from here, use this instead of IE
Originally posted by sangfroidI tried to go to bleeping and tried to set up an account but it said I already have one for my email address. The problem with that is I must have gone there a couple years ago or earlier and have no idea what my user name or password is. They don't seem to have an email address to talk to anyone, if you lost your password, there is a way to get an email respose but if you don't have user name either, it looks like you are screwed. I think you need both those items to even unsubcribe, if I could do that, then re-subscribe, I could do it but can't even do that. Unless someone else out there has exactly the same email address which seems unlikely.
I had exactly the same problem as you're having, the best website I found out there to give you a step by step guide of how to get rid of it was www.bleepingcomputer.com if you follow the on screen instructions it takes about 10 mins to achieve, although I would suggest writing them down as you can't follow them on screen throughout as it asks you to do so ...[text shortened]... some great free downloads for security, you can get firefox from here, use this instead of IE
I tried AVG 7.5 in safe mode and also killed system restore and it came up empty except for a few cookies.
Also didn't find anything suspicious from Hijack this. This is bugging me.
Try using this direct link as you can sign in as a guest which is what I did;
http://www.bleepingcomputer.com/forums/topic63896.html
This should take you straight to the instructions that should get rid of it for you, by the way does the balloon on yr task bar keep saying about 'virusburst'? It did on mine and it sounds very similar to the problem you're having, regardless of that just follow the instructions on bleepingcomputer and you should be fine.
Originally posted by sangfroidI think mine said Xl virus something like that. I went to the other site and downloaded a process viewer and it showed two suspicious exe's:
Try using this direct link as you can sign in as a guest which is what I did;
http://www.bleepingcomputer.com/forums/topic63896.html
This should take you straight to the instructions that should get rid of it for you, by the way does the balloon on yr task bar keep saying about 'virusburst'? It did on mine and it sounds very similar to the problem y ...[text shortened]... , regardless of that just follow the instructions on bleepingcomputer and you should be fine.
Pmmnt.exe and pmsnrr.exe. I tried to use the kill function on the process viewer but no help. Sound familiar?
hmmm, trust me I am about as novice as you are in this matter, although I'm glad to say I got rid of it. If you can find a copy of RogueScanFix download and run this prog. It was written for this exact same problem;
"RogueScanFix is a tool created to remove rogue anti-spyware applications that utilize Trojans to issue fake taskbar security alerts or that change your background in order to scare you into purchasing the full commercial version of their software..
These infections are difficult to remove and are usually bundled with so much other malware, that traditional antispyware or antivirus programs have difficult completely cleaning these infections. Due to this a specialized tool was created in order to help a user clean their system of these infections."
It worked for me