which virus does this?

Discussion in 'Malware Help (A Specialist Will Reply)' started by gandalf, May 18, 2005.

  1. gandalf

    gandalf Private E-2

    my friend has been getting emails for other people at differnt isp addresses. An error box appears and shortly these boxes fill the entire screen and have to be clicked off each one.

    I don't have the error msg at this stage, just wondering if anyone knows if this is charactistic of sober, or another virus?

    WinXP /Outlook.
     
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Sounds to me like its a Internet Explorer page, a popup thats covering your screen. This could be caused from Adware/Malware so I would recommend starting general cleanup procedures.

    First, please follow ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    After doing ALL of the above if you still have a problem:


    http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

    http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

    http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

    http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

    http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting
     
  3. gandalf

    gandalf Private E-2

    I know how to clean viruses from a machine, I do it for a job. The question wasn't asking how to, but what did it. I thought someone in here might have been able to enlighten me about the behaviour of this bug.
     
  4. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    If you do this for a "job" then why are you asking about it, you should already know? Its probably adware not a virus, in which case you need to begin the cleanup process.
     
  5. gandalf

    gandalf Private E-2

    What does the title of my question say? What does the gist of my message say? I wasn't asking for generic answers, but asking if any one can identify the virus that does this. It isn't adware, it's some kind of virus. So I guess you don't know so we shall all get over it then.
     
  6. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    You dont have to be so rude about this, a virus will NOT do this. Its called Malware. If something comes up that covers your screen, its most likely a IE window, this is caused from some type Malware infection.
     
  7. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Sober worm varients do popup a fake MS error box with something along the lines of "CRC error blah blah" to "No Virus, Trojans or Spyware found... click OK" if the attachment is opened.....so if you had the error message and popup descriptions it would help a great deal.

    Also as she is getting various emails for different people off different email addys then its quite possible that many of them are infected thus many popups?

    McAfee Stinger ( stand alone niche virii/trojan/worm ) scanner woudl be a wise thing to run jsut to check for Sober if you are having that urge that, thats what it could be, otherwise the "generic" spyware cleanup practices are well worth following wether Sober or somesuch virus is forund or not?

    Stinger
    http://www.majorgeeks.com/download4063.html
     
  8. xiphosura

    xiphosura Private E-2

    Why be so rude? The people in here devote a lot of time helping others (like me). Comments like yours are unfair.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds