Good morning, and Merry Christmas everyone.
Let me start by saying Gnutella is
NOT INFECTED.
As you will read, the System Security virus can attack from any webpage, any where on the internet at any time.
__________________________________________________ _______________
Im wondering if you all have seen, or heard of, or have even been attacked by what is called the "System Security" virus?
I ask, because while perusing the Limewire forums, that nasty little booger popped up on me this morning, right here, in these forums pages.
System Security virus is a pop up that looks very much like a Windows alert pop up, informing you that some kind of virus has been found in your system. It then begins to run a visible scan, in the background, that shows a red line scanning across all of your C: drive folders, and, of course, it is finding hundreds of "viruses" on your system.
The original pop up box asks you if you (and I wish I could show you an image of this box) want to remove the viruses, and/or run the cleanup scan.
CLICKING ON ANY PART OF THIS BOX ACTIVATES THIS VIRUS. IF YOU CLICK YES, NO, OR EVEN X OUT THE BOX, YOUR INFECTED.
If you click on YES, for example, the system security virus is installed on your computer, a shield icon appears in your system tray, and pop ups begin to barrage your computer to the point that your computer cannot function.
A scan runs, finding all kinds of "viruses", and you are directed to a website where you can purchase the software to remove this virus.
You spend your money, buy the software, install it, and find out that, of course, it doesnt remove anything, and thats when you begin to realize that not only did you just become infected by a clever virus creator, you also gave him money for infecting you!
Its a clever, well hidden, scary, nasty rogue trojan (I think its a trojan), that will eventually begin to kill your systems ini files, freeze up your antivirus programs, knock out your ability to search with your browser, among other things, and eventually it fries, or erases, the important windows OS files on your hard drive.
This thing pops up on me maybe once every couple of months on websites like myspace, facebook, wherever...and now here at the gnutella forum pages.
I dont think it matters where your serfing, but I cannot tell you where this thing originates from, or why it activates on certain websites at certain times.
All I can tell you is this....There is only one way that I know of to stop the virus from entering, or activating, on your computer, when the fake alert warning box pops up.
And that is to hit ALT + F4, which is the keyboard shortcut that closes all open windows on your screen.
I will repeat that. If any box pops up on your computer while your serfing, or on a website, and it says viruses have been found, and it is NOT a warning from your AV software, hit ALT and then F4, and continue that until all of the windows on your screen have been closed.
If you have multiple tabs open in one browser window, the box asking if you want to "close all tabs?" pops up. You can click YES, or OK, on that one. Also, as you are closing your windows with the alt f4 command, that security yellow bar may open on any window you may have open. It is ok to x that warning bar closed, with your mouse, to allow the alt f4 command to work and to close that window.
Continue until all windows have been closed, open internet options and clean and delete all temp files and cookies, run a "clean disk", and then shut your computer down the normal way, with your start/shut off button.
Wait a few minutes (5 minutes is cool), and start your computer, and then run your antivirus program. A quick scan is fine, because for whatever reason, none of the antivirus programs are picking this thing up.....it is very well hidden, and apparently is not visible to your AV when it first shows itself, and your AV isnt going to find it anyway.
Ccleaner is a good program to have at a time like this. Its free, and it will quickly scan and remove all temp, prefetch, history, etc. files, and clean anything your computers cleanup scans have missed.
CCleaner - Home
I use Norton 09, (have used Norton for years), and it usually catches any and every attempt at a hijacking, but it doesnt see this one.
I bring this up here, in the Gnutella forums, because as I said, I just had the thing attack me while I was serfing these pages.
Ive had to learn the hard way, on my own, and thru google searches and forum pages, how to stop this thing when it attacks.
My daughters computer was the first to get this thing, and without going into particulars, it took about 2 days, (two shutdowns and startups) to completely fry her system.
So, beware, be warned, and please, please do not click on NO on the pop up warning box, because NO means "I GOTCHA", as does YES, and the X out box in the upper right hand corner.
I would be interested in hearing from anyone here on the forums who has been hit with, seen, or heard of someone else who got infected, or nearly infected with this ugly thing.
Anyone know of any other ways to stop it, I want to hear, please.
Merry Christmas, and safe surfing
Razz