Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

What the bleep!! Malware with a green wheelchair icon

This is the place for general discussions - we are a family site - no bad language, no flames.
A Moderators word is final.

What the bleep!! Malware with a green wheelchair icon

Unread postby RJARRRPCGP+ » May 20th, 2006, 1:54 am

Recently, I reformatted the HDD, because the following occured:

1. I was browsing the internet. When browsing the internet, I suddenly got pop-ups of a web site with a DNS name that had something to do with porn.
I didn't see the image in any of the pop-ups, because I closed them before I could see the images.

2. I saw the green wheelchair and no sign tray icon


3. I saw a fake spyware or malware warning message.


4. Then right after the tray icon and fake warning message appeared, got disconnected from the internet and Windows 2000 didn't even try to redial.

Heard the dreaded disconnect sound, "kerplop!" from my 56k external modem speaker.

The malware hung up my modem!! :angryfire:


I would like to know exactly which malware I got?
RJARRRPCGP+
Active Member
 
Posts: 4
Joined: May 20th, 2006, 1:01 am
Location: USA (Cavendish, Co. Windsor, Vermont)
Advertisement
Register to Remove

Unread postby 'KotaGuy » May 20th, 2006, 2:31 am

Welcome!

Download HijackThis. Save it to its own folder. Run the program and click the Do a System Scan and Save a Logfile button.

Post that log as a new topic in the Malware Removal Forum.

Someone will get to it as soon as we can.

Thanks!
User avatar
'KotaGuy
Admin/Teacher Emeritus
 
Posts: 12472
Joined: April 7th, 2005, 7:06 pm
Location: Alberta, Canada

Unread postby RJARRRPCGP+ » May 20th, 2006, 3:59 pm

Oh, I also had an unusual process listed in Task Manager.

I terminated that process.

It had a process name that looked something like "7ewitbbt.exe".
RJARRRPCGP+
Active Member
 
Posts: 4
Joined: May 20th, 2006, 1:01 am
Location: USA (Cavendish, Co. Windsor, Vermont)

Unread postby 'KotaGuy » May 20th, 2006, 4:06 pm

If you don't post your log to the forum link I gave you in my last reply we can't help you.

Please follow the instructions in my previous reply.

Thanks!
User avatar
'KotaGuy
Admin/Teacher Emeritus
 
Posts: 12472
Joined: April 7th, 2005, 7:06 pm
Location: Alberta, Canada

Unread postby RJARRRPCGP+ » May 20th, 2006, 9:09 pm

I already reformatted and reinstalled Windows. Sorry. :(
RJARRRPCGP+
Active Member
 
Posts: 4
Joined: May 20th, 2006, 1:01 am
Location: USA (Cavendish, Co. Windsor, Vermont)

Unread postby 'KotaGuy » May 20th, 2006, 9:53 pm

No need to apologize... entirely your choice on what you wanted to do.

But just so ya know... we would've been able to clean it without much of a problem ;)
User avatar
'KotaGuy
Admin/Teacher Emeritus
 
Posts: 12472
Joined: April 7th, 2005, 7:06 pm
Location: Alberta, Canada

Unread postby Nick-YF19 » May 21st, 2006, 12:51 am

You had what is called SmitFraud in case you were wondering. A great free tool to help remove it is SmitFraudFix. Using that and Ewido Antimalware, should take care of the problem if you should run across this again.
User avatar
Nick-YF19
Admin/Teacher Emeritus
 
Posts: 4036
Joined: May 17th, 2005, 12:42 am
Location: California

Unread postby RJARRRPCGP+ » May 21st, 2006, 5:46 pm

But is the apparently porn-related pop-ups from different malware?

Also, is getting disconnected the usual symptom of Smitfraud?
RJARRRPCGP+
Active Member
 
Posts: 4
Joined: May 20th, 2006, 1:01 am
Location: USA (Cavendish, Co. Windsor, Vermont)
Advertisement
Register to Remove


Return to General Discussions



Who is online

Users browsing this forum: No registered users and 31 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware