1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved Vista help w/Bing zugo thing!

Discussion in 'Malware and Virus Removal Archive' started by Blue Star, 2010/03/26.

  1. 2010/04/30
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    I'm totally stumped here.
    Your computer looks totally clean.
    You have couple of threads open here regarding different computers. Are you sure, you are talking about this very computer?
    When exactly are you getting those pop-ups?
     
  2. 2010/05/01
    Blue Star

    Blue Star Well-Known Member Thread Starter

    Joined:
    2010/03/25
    Messages:
    440
    Likes Received:
    1
    I have four machines in use due to my business. This one is my personal machine and the only one (thankfully) with this problem.

    It occurs when I have a browser window open connected to the internet.

    Yesterday I visited with a friend and she had the same issue on her PC. It also occured when surfing.....
     

  3. to hide this advert.

  4. 2010/05/01
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    What browser is it?
    Can you post one more screenshot, but include a whole computer screen?
     
  5. 2010/05/03
    Blue Star

    Blue Star Well-Known Member Thread Starter

    Joined:
    2010/03/25
    Messages:
    440
    Likes Received:
    1
    sure. How do I do the entire screen.?


    Using IE8 with tabbed browsing.

    ........and the link to post screen shots is where, please?
     
  6. 2010/05/03
    Blue Star

    Blue Star Well-Known Member Thread Starter

    Joined:
    2010/03/25
    Messages:
    440
    Likes Received:
    1
    I guess I will have to wait until the evil thing pops up again.
     
  7. 2010/05/03
    Blue Star

    Blue Star Well-Known Member Thread Starter

    Joined:
    2010/03/25
    Messages:
    440
    Likes Received:
    1
    just tried some test shots, and the bottom was there unlike the virus shots I sent earlier.

    Don't know why bottom was cut off last time. I will be aware of that next chance I get to take new shots.
     
  8. 2010/05/03
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Please do :)
     
  9. 2010/05/06
    Blue Star

    Blue Star Well-Known Member Thread Starter

    Joined:
    2010/03/25
    Messages:
    440
    Likes Received:
    1
  10. 2010/05/06
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Please, update Malwarebytes and run new scan.
    This time, run "full scan ".
     
  11. 2010/05/07
    Blue Star

    Blue Star Well-Known Member Thread Starter

    Joined:
    2010/03/25
    Messages:
    440
    Likes Received:
    1
    will do..:)
     
  12. 2010/05/07
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Ok :)
     
  13. 2010/05/07
    Blue Star

    Blue Star Well-Known Member Thread Starter

    Joined:
    2010/03/25
    Messages:
    440
    Likes Received:
    1
    Malwarebytes.... nothing found. Is this a new type of virus/malware?

    Malwarebytes' Anti-Malware 1.46
    www.malwarebytes.org

    Database version: 4052

    Windows 6.0.6002 Service Pack 2
    Internet Explorer 8.0.6001.18904

    5/7/2010 8:39:04 PM
    mbam-log-2010-05-07 (20-39-04).txt

    Scan type: Full scan (C:\|)
    Objects scanned: 265039
    Time elapsed: 8 hour(s), 45 minute(s), 7 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:(No malicious items detected)

    Memory Modules Infected:(No malicious items detected)

    Registry Keys Infected:(No malicious items detected)

    Registry Values Infected:(No malicious items detected)

    Registry Data Items Infected:(No malicious items detected)

    Folders Infected:(No malicious items detected)

    Files Infected:(No malicious items detected)
     
  14. 2010/05/07
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    I have no idea, what's going on here, since your computer looks perfectly clean to me.
    Or....maybe, there is some miscommunication here.

    I'm looking at your screenshot and at least couple of things are unclear to me.
    The screenshot is clearly of IE window with one tab open.
    Did the IE window open by itself with "warezforyou34" tab already there, or you're using IE already?
    You didn't go to the above site by yourself, did you?
     
  15. 2010/05/18
    Blue Star

    Blue Star Well-Known Member Thread Starter

    Joined:
    2010/03/25
    Messages:
    440
    Likes Received:
    1
    Last time the incident occurred, I was using IE 8 and the site I was on is Myspace.

    First thing that happens is the small warning window pops up. If you can read it, the grammar is incorrect and includes spelling errors as well. This indicates to me that it is a replica of a genuine Microsoft window. When the first window is clicked on in any manner, the large window pops open and the "scan" begins.

    And no, I didn't go to the site myself. It tends to happen while on any site and in a random interval. Could this thing be living somewhere we are not scanning deeply enough?

    I will see if it happens when not on the internet.


    Thanks so much for your time!


    And yes, the "warezforyou34" tab is already there. This "scan" page replaces the one I was currently using when it attacked me.
     
  16. 2010/05/18
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Since your computer appears to be perfectly clean and if it happens on Myspace page only, have you considered your Myspace page being hacked?
     
  17. 2010/05/19
    Blue Star

    Blue Star Well-Known Member Thread Starter

    Joined:
    2010/03/25
    Messages:
    440
    Likes Received:
    1
    Happens at random intervals on random sites. Last time, just happened to be on myspace.

    My friend has it as well. We were looking on her facebook page at the time it occurred.

    If the sites were hacked, then what?
     
  18. 2010/05/19
    Blue Star

    Blue Star Well-Known Member Thread Starter

    Joined:
    2010/03/25
    Messages:
    440
    Likes Received:
    1
    My myspace was hacked about 8 months ago and I was instructed to change passwords and I did. When my myspace was hacked, they changed only my mood to an advertisement to make money online. Changed the password, and nothing ever happened since.

    I will make a log from here on as to which sites I'm on when it occurs.
     
  19. 2010/05/19
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Ok :)...
     
  20. 2010/05/25
    Blue Star

    Blue Star Well-Known Member Thread Starter

    Joined:
    2010/03/25
    Messages:
    440
    Likes Received:
    1
    I have not had any recent incidents of the crazy web page occurring... could this thing be located on my external hard drive? Is there a way to scan it?

    Lately it has been "not responding" and I have had to restart it continually for it to work.
     
  21. 2010/05/25
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Hmmm....good news then :)

    Scan external drive with your AV program.
    On a top of it, I'd also run diagnostics on that drive...

    Run hard drive diagnostics: http://www.tacktech.com/display.cfm?ttid=287 (or http://www.bleepingcomputer.com/forums/topic28744.html)
    Make sure, you select tool, which is appropriate for the brand of your hard drive.
    Depending on the program, it'll create bootable floppy, or bootable CD.
    If downloaded file is of .iso type, use ImgBurn: http://www.imgburn.com/ to burn .iso file to a CD (select "Write image file to disc" option), and make the CD bootable.

    NOTE. If your hard drive is made by Toshiba, unfortunately, you're out of luck, because Toshiba doesn't provide any diagnostic tool.
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.