Does anyone know what this is?

gerturdeanna

Hi all,

I keep getting a message flashing up on screen. It says:
Message from SYSTEM to ALERT on 25/03/07 16:53:09
STOP! IMMEDIATE ATTENTION REQUIRED
Windows has found CRITICAL SYSTEM ERRORS.
Download Registry Cleaner from www. key32.com
FAILURE TO ACT NOW MAY LEAD TO DATA LOSS AND CORRUPTION!

I have NTL Netguard which has pop-ups blocked installed. I have runa n Anti-Virus and Spywar scan but it's not shpwing anything up. I haven't click the pop up screen as I'm not sure where its from. Any ideas folks?

Lil2002

I'm sure somebody wiser will be along in a moment, but one thing I know. Never, ever click on one of those pop-ups!

Wait for advice from the experts.

albertross_2

XP?

Have you installed service pack 2 yet?

http://www.microsoft.com/downloads/details.aspx?FamilyId=049C9DBE-3B8E-4F30-8245-9E368D3CDB5A&displaylang=en

gerturdeanna

Yes I've got XP. Do I need the cd to install the above? As I don't have it!

superscaper

gerturdeanna wrote: »

Yes I've got XP. Do I need the cd to install the above? As I don't have it!

Use albertross' link above or go to windows update http://update.microsoft.com/windowsupdate/v6/default.aspx

gerturdeanna

Downloading and updateing as we speak. Will I need to do anything else do you think? i.e Run a different Anti-Virus? If so which would you recommend? (for free of course!!)

superscaper

gerturdeanna wrote: »

Downloading and updateing as we speak. Will I need to do anything else do you think? i.e Run a different Anti-Virus? If so which would you recommend? (for free of course!!)

Go through the malware removal guide
http://forums.moneysavingexpert.com/showthread.html?t=133269

Martin's guide on free software is quite comprehensive
http://www.moneysavingexpert.com/cgi-bin/viewnews.cgi?newsid1162826527,35939,

ormus

never ever click on this sort of garbage.
google pop up blocker will stop most of em.

Browntoa

this is a false bit of spyware/malware of the smitfraud type of infection

http://www.cryptguard.com/security_alerts_2006novdec.shtml

02 December 2006 :: Another Con-Artist "Spyware Cleaner" Website

A new crapware domain registered on December 1st has wasted no time in paying hackers to spew their fraudulent popup messages across the internet. The website is operating as https://www.key32.com and is located at IP address 67.19.22.162, on the network of the bottom-feeder ISP thePlanet. And like many other fraudulent operations, the con artists running this site have registered the domain name through namecheap.com and are using name-services.com as their DNS resolver. Anyone in need of domain/hosting services should be looking for reputable, responsible, and conscientious companies and would therefore do well to steer clear of these businesses.

Browntoa

as superscraper says work through

Go through the malware removal guide

http://forums.moneysavingexpert.com/....html?t=133269

although I've got the feeling we will need other tools to remove this

if you get the problem still after completing all the steps can you run off a hijackthis log as it tells you at the end of post 4 and copy that back here

gerturdeanna

I've followed the steps in the malware removal thread but when I get to step 7 in post 2, there is no ewido anti-spyware 4.0 guard in the extended tab. Where did I go wrong?