[Spridgets] Email Problems

[Rick Bastedo]

My wife's machine picked that up, I found a tool at bitdefender to clean it
but I had to boot her machine in safe mode to get it to work
The little bugger is smart enough to give you false success messages (such
as "Cleanup Successful") while defeating the tools designed to kill it.
Running in safe mode also allows you access to regedit and msconfig which
the infection sometimes disables in standard mode.

Rick Bastedo
(IT is what I do...when I'm not playing with my cars)



---------------------------------------------------------------------------
Date: Sat, 17 Jan 2009 10:28:37 -0800 (PST)
From: fastvee <fastvee at yahoo.com>
Subject: [Spridgets] Email Problems
To: spridgets at autox.team.net
Message-ID: <445327.44257.qm at web34403.mail.mud.yahoo.com>
Content-Type: text/plain; charset=us-ascii

My apologies to the list for two previous empty messages. My replies were
somehow trimmed when I sent them, and I have since resubscribed from my
other email account. I am baffled, and hope it is not related to an
infection of windefender 2009 scareware on Tuesday. FYI, A popup appears
telling you it has discovered activity at your firewall and tries to
redirect you to their download site where their worm is implanted, which has
the ability to send your info, passwords, and screen shots back to the
sender. I followed manual instructions to clear the hidden files from my
registry and temp folder and have used the computer without problems until
this morning. I have updated Symantic AV, Spybot Search&Destroy, and
AdAware, and none caught the scareware download. If one of these scareware
popups appears  on your computer, DO NOT click on it anywhere. Closing the
browser immediately or unplugging the CPU seems to be the only safe method
to avoid infection.
http://tinyurl.com/8kbwna
John
Fogelsville, PA
---------------------------------------------------------------------------