warning - computer malware on random online granite images

12 years ago

I've been checking out lots of granite images online, and three or four times now, I've clicked on various images and gotten that trojan that pretends to be Microsoft Security software. If I'm hitting it, maybe other granite searchers will hit it, too. (I run PC with Microsoft Security Essentials. This is probably not a problem if you have a Mac.) It doesn't seem to happen as much in websites, it's usually an image that comes up in the google search of the granite name, or sometimes, "[granite name] countertops." I'm familiar with this "virus," so I have been able to defeat it each time. I wanted to warn others, though, in case you hadn't seen this yet. What happens is that you get a window that looks just like Microsoft, and it tells you that it has detected viruses and it must run a scan. Then it looks like it runs a scan, and it tells you that it found several viruses, and it asks you if you want to remove them. You have to try to close these windows, never hit OK, and if it won't stop, I just hold down the power button until the computer turns off. The next time I try to open Firefox (that's what I use to get on the internet), the thing will try to start up, but then the real Microsoft Security Essentials will kick in,say it found one trojan, and "clean the computer." It seems to work. Until the next boobytrapped granite picture. My 12-year-old daughter got this on her PC, and she had the good sense to look up a solution on her Ipod Touch. She found instructions for turning back the clock on her PC to a few days prior so it erased the trojan. I was pretty impressed.

If anyone has a better idea of how to handle this, please feel free to chime in. I think I'm going to stop searching for pictures of granite online. The images I've found posted in GW threads have all been safe, and better pictures, too.

Sort by:Oldest

Comments (24)

gsciencechick
12 years ago
I have also had the same issue with Google images. For example, I searched on a paint color vs. a granite. I do what you do. My computer seems to be fine after I run a scan.

No problems ever here on the forum.
dee850
12 years ago
The tech guys at work just sent out a warning about this - it's coming through Google Images, nothing to do with granite. It can come up with any image search. The particular one they were warning about is where a fake scan appears to be running, tells you that you have a virus, then tells you that you have to buy their software to fix the problem.

Our tech folks advised that when you're looking at google images, check the URL of the image before you click on it. If you're searching for kitchen cabinets, for example, but the URL is virusscan2011.com, then you can bet you should steer clear. Some may be more cleverly hidden than others, of course.

They also warned that at least one of these fake virus scanning programs affects Macs, so PC users aren't the only ones who should take extra care.
Related Discussions
secunia warning
Q
Comments (24)
Here is the list.. I see some I no longer use like Ace FTP freeware. AceFTP 3 Freeware Acrobat.com Acrobat.com Adobe AIR Adobe AIR Adobe Flash Player 10 Plugin Adobe Flash Player 9 ActiveX Adobe Reader 9.1 Adobe PhotoshopÂ® Album Starter Edition 3.2 Alien Skin Eye Candy 5 Impact Alien Skin Eye Candy 5 Nature Alien Skin Eye Candy 5 Textures Alien Skin Xenofex 2.0 AM-DeadLink 3.1 American Greetings CreataCard American Greetings CreataCard Spiritual Expressions 7 APC PowerChute Personal Edition Athlon 64 Processor Driver AVG Free 8.0 Big Fish Games Client CCleaner (remove only) COWON Media Center - jetAudio Basic Critical Update for Windows Media Player 11 (KB959772) Domino Master Gold (remove only) Dominoes, Win42, and WinMoon Double-9 Dominoes ESET Online Scanner ExtractNow Eye Candy 4000 GemMaster Mystic getPlus(R) for Adobe Google Updater Hallmark Card Studio 2007 HijackThis 2.0.2 Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 10 (KB903157) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB952287) HP Extended Capabilities 6.1 HP Imaging Device Functions 6.1 HP Photosmart Essential HP PSC & OfficeJet 6.1.A HP Software Update HP Solution Center and Imaging Support Tools 6.1 Ipswitch WS_FTP Home IZArc 3.81 Jasc Animation Shop 3 Jasc Paint Shop Pro 9 Java(TM) 6 Update 13 Java(TM) 6 Update 7 Mahjong Towers Eternity (remove only) Malwarebytes' Anti-Malware Mexican Train For Windows Version 4.0.2 Mexican Train For Windows Version 4.0.3 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Visual C++ 2005 Redistributable Microsoft Web Publishing Wizard 1.52 Mozilla Firefox (3.0.8) Mozilla Thunderbird (2.0.0.21) MSN MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB954430) NTI Backup NOW! 4 NTI CD & DVD-Maker NVIDIA Drivers OpenOffice.org 3.0 Otto Paint Shop Pro 7 Anniversary Edition Panda ActiveScan 2.0 Photo Organizer PowerDVD Pretty Good Solitaire version 12.0.0 Realtek AC'97 Audio RON Tool Banners4u Secunia PSI Security Update for Step By Step Interactive Training (KB898458) Security Update for Windows Internet Explorer 7 (KB938127-v2) Security Update for Windows Internet Explorer 7 (KB956390) Security Update for Windows Internet Explorer 7 (KB960714) Security Update for Windows Internet Explorer 7 (KB961260) Security Update for Windows Media Player (KB952069) Security Update for Windows Media Player 10 (KB936782) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 11 (KB954154) Security Update for Windows XP (KB923789) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB938464-v2) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950759) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB953838) Security Update for Windows XP (KB953839) Security Update for Windows XP (KB954211) Security Update for Windows XP (KB954459) Security Update for Windows XP (KB954600) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956390) Security Update for Windows XP (KB956391) Security Update for Windows XP (KB956802) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956841) Security Update for Windows XP (KB957095) Security Update for Windows XP (KB957097) Security Update for Windows XP (KB958215) Security Update for Windows XP (KB958644) Security Update for Windows XP (KB958687) Security Update for Windows XP (KB958690) Security Update for Windows XP (KB960225) Security Update for Windows XP (KB960714) Security Update for Windows XP (KB960715) Shockwave Sonic Encoders SUPERAntiSpyware Free Edition Update for Windows Media Player 10 (KB913800) Update for Windows Media Player 10 (KB926251) Update for Windows XP (KB951072-v2) Update for Windows XP (KB951978) Update for Windows XP (KB955839) Update for Windows XP (KB967715) Update Rollup 2 for Windows XP Media Center Edition 2005 VC 9.0 Runtime VC 9.0 Runtime Viewpoint Media Player (Remove Only) Vizros Plug-ins 4.1 Weather Exchange Weather Watcher Windows Internet Explorer 7 Windows Media Format 11 runtime Windows Media Format 11 runtime Windows Media Player 11 Windows Media Player 11 Windows Resource Kit Tools - SubInAcl.exe Windows XP Media Center Edition 2005 KB925766 Windows XP Service Pack 3 Wireless 802.11g USB Adapter WOT for Internet Explorer Xenofex 1.0 ZoneAlarm ZoneAlarm Spy Blocker Toolbar
...See More
Computer security hi-jacked - WARNING!!
Q
Comments (18)
DDS.txt . DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 9.0.8112.16421 Run by DK at 18:12:58 on 2012-06-12 Microsoft� Windows Vista� Home Premium 6.0.6002.2.1252.1.1033.18.3062.1241 [GMT -4:00] . AV: Microsoft Security Essentials *Enabled/Updated* (9765EA51-0D3C-7DFB-6091-10E4E1F341F6) SP: Windows Defender *Disabled/Updated* (D68DDC3A-831F-4fae-9E44-DA132C1ACF46) SP: Microsoft Security Essentials *Enabled/Updated* (2C040BB5-2B06-7275-5A21-2B969A740B4B) . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k rpcss c:\Program Files\Microsoft Security Client\MsMpEng.exe C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\SUPERAntiSpyware\SASCORE.EXE C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe C:\Program Files\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe C:\Program Files\Common Files\Intuit\DataProtect\QBIDPService.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Windows\system32\SearchIndexer.exe C:\Windows\System32\hkcmd.exe C:\Program Files\Microsoft Security Client\msseces.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\taskeng.exe C:\Windows\system32\taskeng.exe C:\Users\DK\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\DK\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\DK\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\rundll32.exe C:\Users\DK\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\DK\AppData\Local\Google\Chrome\Application\chrome.exe C:\Program Files\Windows Media Player\wmplayer.exe C:\Windows\system32\WUDFHost.exe C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE C:\Windows\system32\svchost.exe -k SDRSVC C:\Users\DK\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uInternet Settings,ProxyOverride = *.local BHO: Adobe PDF Link Helper: (18df081c-e8ad-4283-a596-fa578c2ebdc3) - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: (53707962-6f74-2d53-2644-206d7942484f) - c:\program files\spybot - search & destroy\SDHelper.dll BHO: Groove GFS Browser Helper: (72853161-30c5-4d22-b7f9-0bbc1d38a37e) - c:\progra~1\micros~2\office14\GROOVEEX.DLL BHO: Java(tm) Plug-In SSV Helper: (761497bb-d6f0-462c-b6eb-d4daf1d92d43) - c:\program files\java\jre6\bin\ssv.dll BHO: Office Document Cache Handler: (b4f3a835-0e21-4959-ba22-42b3008e02ff) - c:\progra~1\micros~2\office14\URLREDIR.DLL BHO: Java(tm) Plug-In 2 SSV Helper: (dbc80044-a445-435b-bc74-9c25c1c588a9) - c:\program files\java\jre6\bin\jp2ssv.dll TB: (7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA) - No File TB: (2318C2B1-4965-11D4-9B18-009027A5CD4F) - No File uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe uRun: [Microsoft Works Update Detection] c:\program files\microsoft works\WkDetect.exe mRun: [IgfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Intuit SyncManager] c:\program files\common files\intuit\sync\IntuitSyncManager.exe startup mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey uPolicies-explorer: HideSCAHealth = 1 (0x1) mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0) mPolicies-system: ConsentPromptBehaviorUser = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office14\EXCEL.EXE/3000 IE: Se&nd to OneNote - c:\progra~1\micros~2\office14\ONBttnIE.dll/105 IE: (2670000A-7350-4f3c-8081-5663EE0C6C49) - (48E73304-E1D6-4330-914C-F5F514E3486C) - c:\program files\microsoft office\office14\ONBttnIE.dll IE: (789FE86F-6FC4-46A1-9849-EDE0DB0C95CA) - (FFFDC614-B694-4AE6-AB38-5D6374584B52) - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll DPF: (8AD9C840-044E-11D1-B3E9-00805F499D93) - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: (CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA) - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: (CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA) - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: (E2883E8F-472F-4FB0-9522-AC9BF37916A7) - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab TCP: DhcpNameServer = 192.168.1.1 71.242.0.12 TCP: Interfaces\(331C4984-7B67-4895-92BF-FBD07719C629) : DhcpNameServer = 192.168.1.1 71.242.0.12 Filter: text/xml - (807573E5-5146-11D5-A672-00B0D022E945) - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL Handler: intu-help-qb5 - (867FCB77-9823-4cd6-8210-D85F968D466F) - c:\program files\intuit\quickbooks 2008\HelpAsyncPluggableProtocol.dll Handler: qbwc - (FC598A64-626C-4447-85B8-53150405FD57) - c:\windows\system32\mscoree.dll Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL Notify: igfxcui - igfxdev.dll SEH: Groove GFS Stub Execution Hook: (b5a7f190-dda6-4420-b3ba-52453494e6cd) - c:\progra~1\micros~2\office14\GROOVEEX.DLL SEH: SABShellExecuteHook Class: (5ae067d3-9afb-48e0-853a-ebb7f4a000da) - c:\program files\superantispyware\SASSEH.DLL . ============= SERVICES / DRIVERS =============== . R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2011-4-18 171064] R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\SASDIFSV.SYS [2010-2-17 12880] R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67664] R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCORE.EXE [2011-5-4 116608] R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2012-1-3 63928] R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504] R2 IHA_MessageCenter;IHA_MessageCenter;c:\program files\verizon\iha_messagecenter\bin\Verizon_IHAMessageCenter.exe [2011-7-1 290832] R2 QBVSS;QBIDPService;c:\program files\common files\intuit\dataprotect\QBIDPService.exe [2011-8-19 1248256] R3 osppsvc;Office Software Protection Platform;c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\OSPPSVC.EXE [2010-1-10 4640000] R3 RTL8187B;Realtek RTL8187B Wireless 802.11g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\drivers\rtl8187B.sys [2011-6-14 281088] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-4-18 257696] S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\microsoft office\office14\GROOVE.EXE [2011-6-12 31125880] S3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2011-4-27 74112] S3 NisSrv;Microsoft Network Inspection;c:\program files\microsoft security client\NisSrv.exe [2012-3-26 214952] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] . =============== Created Last 30 ================ . 2012-06-12 20:05:54 56200 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\(c63b0218-fda0-4f49-a66a-fbbac2d29431)\offreg.dll 2012-06-12 14:38:15 713784 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\nisbackup\gapaengine.dll 2012-06-12 14:38:15 713784 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\(94e954c4-9303-4459-aace-f4d82ef5da4b)\gapaengine.dll 2012-06-12 14:36:16 6737808 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\(c63b0218-fda0-4f49-a66a-fbbac2d29431)\mpengine.dll 2012-06-12 01:09:54 6737808 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll 2012-05-16 22:05:38 677136 ----a-w- c:\programdata\microsoft\ehome\packages\mcespotlight\mcespotlight\SpotlightResources.dll . ==================== Find3M ==================== . 2012-05-04 17:57:10 419488 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-05-04 17:57:09 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-04-04 19:56:40 22344 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-04-03 08:16:12 3602816 ----a-w- c:\windows\system32\ntkrnlpa.exe 2012-04-03 08:16:11 3550080 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-04-02 13:36:21 2044928 ----a-w- c:\windows\system32\win32k.sys 2012-03-30 12:39:11 914304 ----a-w- c:\windows\system32\drivers\tcpip.sys 2012-03-29 13:39:19 31232 ----a-w- c:\windows\system32\drivers\tcpipreg.sys 2012-03-25 17:34:20 472808 ----a-w- c:\windows\system32\deployJava1.dll 2012-03-21 00:44:12 74112 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys 2012-03-21 00:44:12 171064 ----a-w- c:\windows\system32\drivers\MpFilter.sys 2012-03-20 23:28:50 53120 ----a-w- c:\windows\system32\drivers\partmgr.sys . ============= FINISH: 18:13:49.82 =============== Attach.txt . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft� Windows Vista� Home Premium Boot Device: \Device\HarddiskVolume1 Install Date: 6/14/2011 9:30:53 PM System Uptime: 6/12/2012 4:29:45 PM (2 hours ago) . Motherboard: Gateway : : Processor: Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz : U2E1 : 1333/mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 298 GiB total, 207.691 GiB free. D: is CDROM () E: is Removable . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP405: 5/23/2012 11:07:30 AM - Windows Update RP406: 5/24/2012 1:57:24 PM - Windows Update RP407: 5/25/2012 5:02:37 PM - Windows Update RP408: 5/26/2012 5:59:33 PM - Windows Update RP409: 5/27/2012 6:32:30 PM - Windows Update RP410: 5/28/2012 7:53:40 PM - Windows Update RP411: 5/29/2012 11:27:49 AM - Windows Update RP412: 5/30/2012 12:05:57 PM - Windows Update RP413: 5/31/2012 12:35:48 PM - Windows Update RP414: 6/1/2012 5:13:40 PM - Windows Update RP415: 6/2/2012 10:49:47 AM - Windows Update RP416: 6/3/2012 6:47:47 PM - Windows Update RP417: 6/4/2012 11:25:04 AM - Windows Update RP418: 6/4/2012 10:49:10 PM - Windows Update RP419: 6/5/2012 4:54:34 PM - Windows Update RP420: 6/6/2012 9:34:37 AM - Scheduled Checkpoint RP421: 6/6/2012 11:11:02 AM - Windows Update RP422: 6/7/2012 10:32:10 AM - Scheduled Checkpoint RP423: 6/7/2012 12:15:48 PM - Windows Update RP425: 6/7/2012 10:23:25 PM - Microsoft Antimalware Checkpoint RP426: 6/8/2012 4:39:47 PM - Windows Update RP427: 6/9/2012 4:43:40 PM - Windows Update RP428: 6/10/2012 7:42:19 PM - Windows Update RP429: 6/11/2012 9:08:02 PM - Windows Update RP430: 6/12/2012 10:34:30 AM - Windows Update RP432: 6/12/2012 11:29:23 AM - Microsoft Antimalware Checkpoint RP433: 6/12/2012 5:35:38 PM - Windows Backup . ==== Installed Programs ====================== . Adobe AIR Adobe Anchor Service CS3 Adobe Asset Services CS3 Adobe Bridge CS3 Adobe Bridge Start Meeting Adobe Camera Raw 4.0 Adobe CMaps Adobe Color - Photoshop Specific Adobe Color Common Settings Adobe Color EU Extra Settings Adobe Color JA Extra Settings Adobe Color NA Recommended Settings Adobe Default Language CS3 Adobe Device Central CS3 Adobe ExtendScript Toolkit 2 Adobe Flash Player 11 ActiveX Adobe Fonts All Adobe Help Viewer CS3 Adobe Linguistics CS3 Adobe PDF Library Files Adobe Photoshop CS3 Adobe Reader X (10.1.3) Adobe Setup Adobe Stock Photos CS3 Adobe Type Support Adobe Update Manager CS3 Adobe Version Cue CS3 Client Adobe WinSoft Linguistics Plugin Adobe XMP Panels CS3 Brother MFL-Pro Suite MFC-490CW Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition Google Chrome Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) IHA_MessageCenter Intel(R) Graphics Media Accelerator Driver Intel(R) Matrix Storage Manager Java Auto Updater Java(TM) 6 Update 31 Malwarebytes Anti-Malware version 1.61.0.1400 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Extended Microsoft Application Error Reporting Microsoft IntelliPoint 8.1 Microsoft Office 2010 Service Pack 1 (SP1) Microsoft Office Access MUI (English) 2010 Microsoft Office Access Setup Metadata MUI (English) 2010 Microsoft Office Excel MUI (English) 2010 Microsoft Office Groove MUI (English) 2010 Microsoft Office InfoPath MUI (English) 2010 Microsoft Office OneNote MUI (English) 2010 Microsoft Office Outlook MUI (English) 2010 Microsoft Office PowerPoint MUI (English) 2010 Microsoft Office Professional Plus 2010 Microsoft Office Proof (English) 2010 Microsoft Office Proof (French) 2010 Microsoft Office Proof (Spanish) 2010 Microsoft Office Proofing (English) 2010 Microsoft Office Publisher MUI (English) 2010 Microsoft Office Shared MUI (English) 2010 Microsoft Office Shared Setup Metadata MUI (English) 2010 Microsoft Office Word MUI (English) 2010 Microsoft Security Client Microsoft Security Essentials Microsoft SQL Server Compact 3.5 SP1 English Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Word 2002 Microsoft Works 2002 Setup Launcher Microsoft Works 6.0 Microsoft Works Suite Add-in for Microsoft Word MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) MSXML 4.0 SP2 Parser and SDK PaperPort Image Printer PDF-XChange Viewer PDF Settings PHOTOfunSTUDIO 5.0 QuickBooks QuickBooks Pro 2012 REALTEK RTL8187SE Wireless LAN Driver REALTEK USB Wireless LAN Driver Samsung Kies SAMSUNG USB Driver for Mobile Phones ScanSoft PaperPort 11 Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111) Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) Security Update for Microsoft .NET Framework 4 Extended (KB2487367) Security Update for Microsoft .NET Framework 4 Extended (KB2656351) Security Update for Microsoft Excel 2010 (KB2597166) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2553091) Security Update for Microsoft Office 2010 (KB2553096) Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2598039) 32-Bit Edition Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition Security Update for Microsoft SharePoint Workspace 2010 (KB2566445) Security Update for Microsoft Visio Viewer 2010 (KB2597981) 32-Bit Edition Spybot - Search & Destroy 1.4 SUPERAntiSpyware SupportSoft Assisted Service Synaptics Pointing Device Driver Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) Update for Microsoft .NET Framework 4 Extended (KB2468871) Update for Microsoft .NET Framework 4 Extended (KB2533523) Update for Microsoft .NET Framework 4 Extended (KB2600217) Update for Microsoft Office 2010 (KB2494150) Update for Microsoft Office 2010 (KB2553065) Update for Microsoft Office 2010 (KB2553092) Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition Update for Microsoft Office 2010 (KB2553385) 32-Bit Edition Update for Microsoft Office 2010 (KB2566458) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition Update for Microsoft Office 2010 (KB2597091) 32-Bit Edition Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition Update for Microsoft OneNote 2010 (KB2589345) 32-Bit Edition Update for Microsoft Outlook 2010 (KB2553248) 32-Bit Edition Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition Vz In Home Agent WhoCrashed 3.04 WinRAR 4.01 (32-bit) Works Suite OS Pack Works Synchronization . ==== Event Viewer Messages From Past Week ======== . 6/6/2012 11:19:35 AM, Error: Microsoft-Windows-PrintSpooler [6161] - The document CMO signed.pdf, owned by EC, failed to print on printer Brother MFC-490CW Printer. Try to print the document again, or restart the print spooler. Data type: NT EMF 1.008. Size of the spool file in bytes: 4007636. Number of bytes printed: 3175820. Total number of pages in the document: 3. Number of pages printed: 0. Client computer: \\DK-PC. Win32 error code returned by the print processor: 87. The parameter is incorrect. 6/12/2012 3:48:39 PM, Error: Service Control Manager [7000] - The Parallel port driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 6/12/2012 2:45:43 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service wuauserv with arguments "" in order to run the server: (E60687F7-01A1-40AA-86AC-DB1CBF673334) 6/12/2012 2:25:42 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: (145B4335-FE2A-4927-A040-7C35AD3180EF) 6/12/2012 2:20:45 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: MpFilter SASDIFSV SASKUTIL spldr Wanarpv6 6/12/2012 2:20:45 PM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start. 6/12/2012 2:19:56 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: (9E175B6D-F52A-11D8-B9A5-505054503030) 6/12/2012 2:19:48 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: (1BE1F766-5536-11D1-B726-00C04FB926AF) 6/12/2012 2:19:42 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: (DD522ACC-F821-461A-A407-50B198B896DC) . ==== End Of File ===========================
...See More
computer stops and restarts...
Q
Comments (36)
In my eMachine, in the Bios I can check the temperature, have you done this? Below is what I posted earlier. If your computer is getting hot it will cut off to protect the PC. If I had your computer I would want to know if your problem is in the hard drive or some were else. If you put your hard drive into another computer as a slave you can do 2 things. Error Checking and Copy your files to a CD. You can buy a hard drive enclosure for about $40.00 or less that will plug into a USB. This will allow you to remove your files. I'm not sure about running Error Checking from an enclosure. Ask someone. This website explains hard drives http://computer.howstuffworks.com/adding-a-hard-drive.htm ----------------------------------------------------------- If you need an Install CD for your computer, call or email them. I bought one for mine for $20.00 from eMachine. --------------------------------------------------- If you can get an extra hard drive (Remove the old one) and use the eMachine Install CD (that you mention) the first thing your computer will want you to do is go online and Register it. You won't be allowed to use the computer except to Register. Just let the computer set and run, if it doesn't cut off than I would say the problem is in your hard drive. Or take the computer to a repair shop. Their getting $65.00 just to check a computer out were I live. ----------------------------------------------------- Check the temperature in the Bios. By tapping F2 Key when you start of. I'm giving my temperature as an example. CPU 38c degrees Current System Temp. 35c degrees ------------------------------------------- CPU Fan Speed 2483 RPM System Fan Speed 1332 RPM
...See More
slow, slow computer
Q
Comments (106)
How do you get yourself into these problems? Because you have a problem and are trying to fix it rather than ignore it or dump your problem on someone else. I find that to be very admirable. The good thing about this is you will be learning a lot in the process of getting things back on track. The down side is it is going to take a little bit of time if we do it here. Your are very lucky because there is a lot of experience her and, super people willing to help. There should be no fear of what to do with what fix-it finds if you decide to go that route. They offer several bits of information as to what found information does, and a suggestion of what you should let fix-it do, to fix your computer. You can undo anything fix-it does, with the click of a button. If you go to do anything that will screw things up, fix-it will tell you. If anything in any of the steps does not agree with what you see on the screen, don't continue and get back to us and let us know what the discrepancy is. There are several reasons why you might not be getting to the desk top you are used to and rather than a bunch of mumbo jumbo and jargon, we'll start with the simplest reason first. From what I gather at this point, you have multiple issues that are not necessarily "Computer Problems". To best help you get on track using a forum like this, I suggest we take one issue at a time. There are several ways to skin a cat so I am going to use what I know will get you to where you want to be. Of course, if you know a faster way that works for you, no problem, as long as we both get to where we want to be. We don't know what you know so if we describe a step that you well know, it is not to insult your intelligence or belittle you, it's just to get you where you need to be in a step by step manner. 1....The folder that YOU created named "desk top", rename it to "My Icons" and do so without the start and end quotes. The folder you created, from what you indicated here, has a space between the words "desk" and "top". That's the one you want to rename. 2....Click on the START button at the bottom left of you computer screen. Look for "My Computer" and click on that. 3....RIGHT click Local Drive (C:) In the left column at the top, you should see "Desktop" with no space between desk and top. Looking down a little further, you should see C: with a plus next to it. Click on that plus. When it expands, look down the list and you should see the renamed directory "My Icons" that you did previously. Click on that and in the right column, everything you moved should be listed there. 4....At the top of this window click on EDIT and when the menu drops down, click on SELECT ALL. Everything in the right column should become highlighted, usually in blue. 5....Take your mouse pointer over to the highlighted column click down on the LEFT mouse button and HOLD IT DOWN. While holding it down, drag everything over to the left column and up to the "DESKTOP", at the top of the left column. You will see the DESKTOP change color when you are on it and at that point, let up on the mouse button. Make sure you are on the DESKTOP name and that it highlights because if you don't, you may move everything into another directory, compounding the issue!!! Everything should now be back the way it was before you moved your desk top. If everything is back to what you are used to, we'll take the next step. My particular next step is going to ask for a list of everything in the task manager under the tab "PROCESSES". Do a "Ctrl" "Alt" "Delete". When the task manager pops up, click on the "Processes" tab. After you enter this tab, hover your pointer over the words "User Name". This will be the name of one of the columns. You have to hover over the actual words. Left click that and you will see everything organize itself. If you could then get us a list as it appears on your screen, we can work on the next steps. I have to go on an errand so it might be some time before I get back to you, I live in a rural area. Someone else here may pick up where I left off, I have no problem with that. The beauty of this particular forum is many knowledgeable people willing to help.
...See More
writersblock (9b/10a)
12 years ago
Yes, the mac version tries to trick you into installing it, but it can't do anything unless you give it your password to install. Be especially cautious about typing that--think about why you're being asked. If you don't know why, don't do it.
sophie123
12 years ago
I had the same thing happen to me last week! I ran my anti-virus program and it cleaned it up.
writersblock (9b/10a)
12 years ago
I forgot to say that on my macs I use glimmerblocker as my ad block and I've never seen the Mac Defender/Mac Security come on, so that's one way to help protect yourself.
westsider40
12 years ago
When I try to click on an item listed on a page of google hits, I get some unrelated nonsense. I ran a malware scan yesterday but it didn't change anything nor was anything found. Not getting the 'scan now' pages. My malfunction is google related plus my pc keeps dropping windows.
ginny20
Original Author
12 years ago
Thanks dee850. Maybe it's best to avoid google images for a while.
marble_com
12 years ago
I guess Google is not living up to their "Don't Be Evil" slogan :P

Maybe it would help if you go to Advance Image Search before you begin your quest looking for images, and check the SafeSearch box that says "Use Strict Filtering". Be careful everyone! A computer infested wit malware is an absolute nightmare...
Fori
12 years ago
Google isn't giving you viruses. It's just providing links. You decide what to do with the links provided. If you do think Google is to blame, please contact them--they are responsive.

Thanks for the warning, Ginny!
gayl
12 years ago
this happened to me a couple of weeks ago and I lost everything on my computer...all the years of info and pics I had saved for our new build, not to mention all the info from the rest of my life...
ginny20
Original Author
12 years ago
Gharborwa - I am so sorry! That is terrible. We lost a computer to this same sort of virus last fall. It took over the laptop, everything froze, and you couldn't even turn it off. DH fetched another laptop from a different room and used it to try to look up the fix. While doing this, he knocked over his glass of wine, spilling it over the first, infected laptop, which fried. That's one way to get rid of a virus. Anyway, we took the fried laptop to our local computer fixer, and he was able to get all of our documents,etc, off our hard drive. If you still have the computer, have you tried calling one of these tech wizards? I hope you have some success.

The experience did teach me the value of those external drives, like seagates, for backing up.
gayl
12 years ago
thanks, Ginny20. I did take it to our trust computer guru, and he said he backed everything up and that when I added Office and iTunes, etc, I would get it all back, including all my Word docs, but so far I haven't figured out how to do that...I have nothing!
morgne
12 years ago
It's funny.

Uh, in a non funny way I mean.

Let me try again.

It's coincidental. Just a few months ago I had another client lose years worth of data with no decent back up system in place so I finally got off my duff to locate a good online backup.

I'm really glad I finally got a good system. It suprises me how much more secure I feel. :)
jenme43
12 years ago
Hi!..I have had a program on my computer for years called
W O T!!! and I love it. I also have Microsoft Essentials!
This little program lets me know on my google search page which is safe or not...the safe sites show a little green circle and the not safe little red circles...
WOT is a community-based, free safe surfing tool for browsers that provides website ratings & reviews to help web users as they search, surf & shop online. hope that helps!
Here is the download link..
http://www.mywot.com/en/download
catherine_l
12 years ago
I got one of those virus' also by using Google images. I was looking at a photo of flatware. All of a sudden my computer was taken over and I couldn't get it to do anything. The virus wanted me to purchase some kind of software to fix it. I ended up calling Dell and having them remotely take over my computer to fix it. Ended up costing me $200. Now that I have Norton 360, it will tell me if a image is safe and I'm run into several more lately that have a virus attached to them.
formerlyflorantha
12 years ago
I use Macs and I've had a problem lately with things slowing down to a crawl and needing a "Force Quit" to solve it. Is this related?
writersblock (9b/10a)
12 years ago
Probably not, florantha, if your browsers are working normally. Did you give your administrative password to something to let it install without knowing for sure what it was? Are you being sent to random porn sites? Here's a complete explanation of the mac version of this thing and how to get rid of it, but if you didn't deliberately install it, you don't have it:

Here is a link that might be useful: mac defender trojan removal
writersblock (9b/10a)
12 years ago
If that's not the problem, florantha, how full is your hard drive? Is your OS up to date? Which version of OS X are you running?
formerlyflorantha
12 years ago
Writersblock, I think I'm fine on that score.

If the malware is introduced by a beefy Mr.Clean-like graphic, then I've been introduced to it. I got lots of solicitations for it recently and went as far as clicking on the 'learn more' button that took me to a website. I decided I wouldn't buy.

My freeze-up problems may be related to something else entirely, which might be solvable by owning newer, beefier computer parts.

First of all I need to replace the missing A on my keyboard. Plays hob with touchtyping.
writersblock (9b/10a)
12 years ago
>went as far as clicking on the 'learn more' button that took me to a website.

Then you did download it. Clicking the learn more button is the "yes, I want this cr@p on my computer button". Did you install it?
formerlyflorantha
12 years ago
let me get this straight--the purple Mr. Clean man carries the malware for Macs?
writersblock (9b/10a)
12 years ago
I don't understand what you mean by "the purple Mr. Clean man". Go to your applications folder and look for Mac Defender or Mac Security. If you're using a version of OS X with a downloads stack/folder, look in there, too, for the installer itself.
formerlyflorantha
12 years ago
I don't have it.
writersblock (9b/10a)
12 years ago
Okay, good, then let's try to figure out why you're slowing down. Which version of OS X, how large is your hard drive, and how much free space? Is only safari slow, or is everything slow.

warning - computer malware on random online granite images

Comments (24)

gsciencechick

dee850

Related Discussions

writersblock (9b/10a)

sophie123

writersblock (9b/10a)

westsider40

ginny20
Original Author

marble_com

Fori

gayl

ginny20
Original Author

gayl

morgne

jenme43

catherine_l

formerlyflorantha

writersblock (9b/10a)

writersblock (9b/10a)

formerlyflorantha

writersblock (9b/10a)

formerlyflorantha

writersblock (9b/10a)

formerlyflorantha

writersblock (9b/10a)

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

warning - computer malware on random online granite images

Comments (24)

Related Discussions

ginny20Original Author

ginny20Original Author

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

ginny20
Original Author

ginny20
Original Author