http://www.systemwarning.com/ ????

Discussion in 'Malware Help (A Specialist Will Reply)' started by dahoss, Dec 31, 2005.

  1. dahoss

    dahoss Private E-2

    Hiyas....I picked up a bad virus/trojan last time surfing the web and I have seemed to rid myself of some of the problems, but I still have others.

    Normally whenever I log on to the internet I log on through msn.com, instead im getting this http://www.systemwarning.com/ popping up first. My msn front page no longer comes up first. I can still go surf the net but im thinking that this is a bogus web page trying to get me to download bogus anti-spyware for payment.
    It has another popup saying my PC is effected and that W32.Sinnaka.A@mm is collecting all my info, etc etc.

    How can i get rid of this?

    thx.
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

    Downloading, Installing, and Running HijackThis

    .
    And it is possible you may need to work thru the below and post the smitfiles.txt log too if still having problems after all of the above:

    Smitfraud, SpySheriff, SpyAxe & PSGuard Removal
     
  3. dahoss

    dahoss Private E-2

    I am stuck. I have downloaded the smitRem.exe file(unzipped to its own folder) to to my desktop, yet when I go into safe mode, its not there on the desktop to use.

    What now?
     
  4. dahoss

    dahoss Private E-2

    Let me clear that up. I downloaded the smitRem.exe to the desktop, then I extracted it to its own folder on the desktop. When I reboot to safe mode, it is not there on my desktop.
    Infact, a few things I have on my desktop in normal mode are not there in safe mode and then there are a few things there in safe mode that I dont have in normal mode?


    I am attempting the "Smitfraud, SpySheriff, SpyAxe & PSGuard Removal" at the moment.
     
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    When you boot into safe mode are you using the same user account as where you download the file too?

    Otherwise try installing SmitRem into its own folder not on the Desktop. Try C:\SmitRem

    You can just move the folder from your Desktop to c:\
     
  6. dahoss

    dahoss Private E-2

    I done already after posting last message figured it out.

    What I did instead of downloading it directly to the desktop, was to download it into a folder not on the desktop in normal mode, then after I went to safe mode, I sent it to the desktop from there. It was then usable.

    It looks like I will be here awhile though, so talk at ya later. :eek:

    Thankx
     
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay! When you complete all the scans make sure you attach all the logs.

    You should be attaching the following logs if you still need help after running the scans.
    BitDefender
    PandaActiveScan
    Smitfiles.txt
    hijackthis.log.
     
  8. dahoss

    dahoss Private E-2

    Here are my (3) scans below.

    I didnt include BitDefender because it reported no virus or no nothing.


    Anyway, it looks like I get that http://www.systemwarning.com/ only when i log on to the internet using Internet Explorer. It doesnt pop up when I log on using Yahoo or AOL or MSN links from desktop.
     

    Attached Files:

  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Did you run the SmitRem procedure from safe mode boot? I still see traces of it. If you do not follow the procedure exactly as written (like most of the procedures we write) it will not work and you are wasting your time and ours. If you did follow it exactly as written then excuse the comment and tell me that you did. At anyrate, try it again because I still see some pieces of the infection. But this may be related to the below.

    You seem to have ignored step 3 of the READ & RUN ME I see three of them. AOL, McAfee, and AVG!

    Your current HJT log does not show any signs of having run the Bitdefender and Panda online scanners. Why? Did you get an HJT log before running the scans? If so, that is not the order requested in the READ ME.
     
  10. dahoss

    dahoss Private E-2

    Yes I did run SmitRem in safe mode as I described above.

    As for McAfee, I had no idea it was still on my computer. Im currently looking for it but have yet to locate it.

    I will rescan everything again and repost.
     
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Did you look in Add/Remove Programs? It is on your PC and running. But what about the fact that you also have AOL Antivirus and AVG. Which one do you plan on keeping? You must use only one. Personally I would not use anything from AOL.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds