security alert Networm-i.virus@fp popup

adamc44 · Mar 2, 2007

hello, i have a security alert that keeps popping up on the lower right hand corner of my screen. it says Security alert: networm-i@fp. then goes on to describe it and wants me to download some software. well i ran spybot and also ran ad-aware. heres is my hijack this log. any help is greatly appreciated. thank you very much! adam

Edit by chaslang: Inline HJT log removed. READ & RUN ME sticky not followed.

chaslang · Mar 2, 2007

Welcome to Majorgeeks!

Download and run this: RogueRemover

Attach a log from it!

How are things working now?

adamc44 · Mar 3, 2007

i believe rougue remover got it, it said registry cleaner removed,
i attached a log file i think lol, sorry about the last post
one more question, i was reading through the help page on removing malware and it said to go to the add/remove programs, well there is a program named System Alert Popup, i tried to remove it but is said module could not be found. any idea on what to do to get rid of it? i appreciate the help!! thank you!!!

adam

chaslang · Mar 3, 2007

Please do not post HijackThis logs unless you have run our standard cleaning procedures (the READ & RUN ME sticky procedure) and we request one.

Most people are under the very mistaken misconception that HijackThis is a scanning/removal tool. It is not! HijackThis is simply a tool that is used to identify browser hijackers and in some cases it will show entries for some malware that is for instance running at startup. All it does is list a few of the thousands of registry keys that exist, and it makes no inferences to whether anything being shown is good or bad. That decision is left a person with significant Windows and malware cleaning experience. HijackThis does not come close to showing all malware that could be hiding on a PC. Anyone who has an infected computer and is relying on HijackThis without the benefit of running other scans such as Spybot, Windows Defender, BitDefender & Panda, CCleaner, etc. are more than likely still infected. In most cases, where there is one virus/trojan there are more. The goal of this forum is to remove all malware, and this cannot be done properly by just seeing a HijackThis log.

I'm going to post two sets of instructions below. Each will be enclosed in separate Quote boxes. Make sure to complete the first one 100% before moving on to the second one.

STEP 1: Complete this procedure completely including attaching the requested log before doing the second procedure.

Download SmitfraudFix (by S!Ri) to your Desktop.

Extract all the files to your Destop. A folder named SmitfraudFix will be created on your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press Enter
This program will scan large amounts of files on your computer for known patterns so please be patient while it works. When it is done, the results of the scan will be displayed and it will create a log named rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed. Please attach that log in your next reply.

Note:process.exe ( which is used my SmitFraudFIx ) is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user. The below is a link to what process.exe is.

http://www.beyondlogic.org/consulting/proc...processutil.htm

IMPORTANT: Do NOT run any other options until you are asked to do so!
Click to expand...

ATTACH THE FIRST LOG NOW BEFORE CONTINUING OR YOU WILL OVERWRITE IT!!!! And then immediately continue on to the below steps.

STEP 2: PLEASE READ ALL OF THESE INSTRUCTIONS FIRST BEFORE DOING ANYTHING. Ask any questions that you may have before starting.

Please print out or copy these instructions to Notepad as the internet will not be (while in Safe Mode) available to you at certain points of the removal process. Make sure to work through all the Steps in the exact order in which they are listed below. Again, if there's anything that you don't understand, ask your question(s) before moving on with the fixes.

Reboot your computer into Safe Mode : Starting your computer in Safe mode

Open the SmitfraudFix Folder of your Desktop, then double-click smitfraudfix.cmd file to start the tool.

Select option #2 - Clean by typing 2 and press Enter.
Wait for the tool to complete and disk cleanup to finish.
You will be prompted : "Registry cleaning - Do you want to clean the registry ?" answer Yes by typing Y and hit Enter.

The tool will also check if wininet.dll is infected. If it is infected and a clean version is found, you will be prompted to replace the infected wininet.dll with the clean file. Answer Yes to the question "Replace infected file ?" by typing Y and hit Enter.

A reboot may be needed to finish the cleaning process, if you computer does not restart automatically please do it yourself manually. BUT Reboot in Safe Mode.

The tool will create a log named rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed.

Now reboot into normal mode and attach this new rapport.txt log here.
Click to expand...

How are things working now?

adamc44 · Mar 3, 2007

here is the smitfraudfix attachment

chaslang · Mar 3, 2007

That's step 1! Now do step 2.

adamc44 · Mar 3, 2007

im trying to attach the new rappaport file i just saved in safemode but its saying i already posted it earlier, i tried changing the name but still the same deal.

i did go to my add/remove programs and the add popup is gone

chaslang · Mar 3, 2007

That means you are trying to attach the exact same file which means it is not the log from step 2.

adamc44 · Mar 3, 2007

ok here we go

chaslang · Mar 3, 2007

So how are things working now?

You should uninstall MorpheusBar which is malware.

You should also consider running READ & RUN ME FIRST Before Asking for Support to make sure that you don't have any other malware.

Log in or Sign up

security alert Networm-i.virus@fp popup

adamc44 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

adamc44 Private E-2

Attached Files:

hijackthis99.txt

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

adamc44 Private E-2

Attached Files:

rapport.txt

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

adamc44 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

adamc44 Private E-2

Attached Files:

rapport1.txt

chaslang MajorGeeks Admin - Master Malware Expert Staff Member