spyware detetected warning screen

[rjizzo]

I have a friend whose computer apparently has spyware that has hijacked his homepage. The page he cannot change via tools/internet options is : c:\WINDOWS\secure.html.
The screen is a blue screen that says "spyware detected, Warning" and it also displays his IP address. He cannot get rid of it. He also says that there is a spyware link on the bottom of the page. Does anyone have any suggestions? I physically haven't seen the computer yet, so I don't have any more pertinent info. Thank you in advance.

 

[carrr]

That sounds like an ad gimmick that I've run into from time to time across the web. Is it really his IP being flashed?
The best way for you to help him is to run down the steps enmumerated in this FAQ: faq608-4650
Post a log back here if needed.

"'Tis an ill wind that blows no minds." - Malaclypse the Younger

 

[TSSTechie]

Howdy,

Download, install and update Adaware 6 then run a scan. Also, although i've never tried this one, Spybot Search and Destroy is often recommended.

Hope this helps

TSSTechie

May The Force Be With You

 

[THoey]

TSSTechie, Spybot S&D is another great tool. It works in a different way from Adaware, so it most times finds things that Adaware misses. I think the applications compliment each other. Those and SpywareGuard and SpywareBlaster keep my home machine virtually clean. See my FAQ for a link to all of these tools...

Terry
**************************
* General Disclaimor - Please read *
**************************
Please make sure your post is in the CORRECT forum, has a descriptive title, gives as much detail to the problem as possible, and has examples of expected results. This will enable me and others to help you faster...

 

[dyarwood]

I had to sort out a similar problem out recently. First delete all cookies and temporary internet files (including offline ones). Disable system restore (if you don't you could just be getting the problem from there). Run CWShredder and SpyBot. That sorted mine out. There may also be a problem within the registry but that info is at work so if the above does not sort it let me know and i will post the other info. The access denied could be the system restore files.

Hope that helps

 

[jrbarnett]

dyarwood:

System is Win2000 so doesn't need system restore disabled (only applies to XP and Me, unless software such as Roxio Goback is installed).

rlaeromech
It has been reported that some actual ad blocking software is spyware itself. Your log looks fairly clean, so I would be suspicious of it. Try uninstalling it then running a full virus and spyware scan over the system.

John

 

[dyarwood]

Do'h didnt see that. Plus where has the log gone?

 

[jrbarnett]

The post must have been red flagged and TT admin edited it.

John