Fake Virus Warning

I'm curious. How do you all respond to a fake virus warning (a pop-up window
that says your PC is infected) when browsing the web? I've always used Task
Manager - select the pop-up window and End Task it. That way I won't have to
click any part of that pop-up window because it doesn't matter what we click
(Yes/No, OK/Cancel) the malware will be installed. Sometimes I also wonder
why malicious sites even bother asking us if we want it or not. Why don't
they just install it silently? Is this because of restrictions in one of IE
settings (can't install without asking)? Anyone?

Alias
Thu May 08 09:27:43 PDT 2008

John wrote:
> I'm curious. How do you all respond to a fake virus warning (a pop-up window
> that says your PC is infected) when browsing the web? I've always used Task
> Manager - select the pop-up window and End Task it. That way I won't have to
> click any part of that pop-up window because it doesn't matter what we click
> (Yes/No, OK/Cancel) the malware will be installed. Sometimes I also wonder
> why malicious sites even bother asking us if we want it or not. Why don't
> they just install it silently? Is this because of restrictions in one of IE
> settings (can't install without asking)? Anyone?
>
>

Try Ubuntu, compared to Windows, it's bullet proof if you have a router
with an hard firewall. Check it out at http://www.ubuntu.com/

Alias

Big
Thu May 08 09:33:12 PDT 2008

John wrote:
> I'm curious. How do you all respond to a fake virus warning (a pop-up window
> that says your PC is infected) when browsing the web? I've always used Task
> Manager - select the pop-up window and End Task it. That way I won't have to
> click any part of that pop-up window because it doesn't matter what we click
> (Yes/No, OK/Cancel) the malware will be installed. Sometimes I also wonder
> why malicious sites even bother asking us if we want it or not. Why don't
> they just install it silently? Is this because of restrictions in one of IE
> settings (can't install without asking)? Anyone?
>
>
Yes, There are a lot of things a web site cannot do. Its part of
windows security. But once you click a button or link etc you are
sorta giving things the right to launch. Like a java script or applet.

I just close the web site. If they have one baddie, I'm going to assume
they have more. And if there is a window open after that, then I use
the simple x in the upper right corner.

8n20_C#
Thu May 08 09:41:21 PDT 2008

"John" ha scritto:
> I'm curious. How do you all respond to a fake virus warning (a pop-up
> window that says your PC is infected) when browsing the web?

Most of the popup windows are blocked by the "Block popup" feature of
IE7.
Anyway, if i see such a popop window, usually i close it by pressing the X
on
the title bar, or pressing Alt-F4, or choosing Close in the popup menu
i open by right clicking the title bar.

Correct your decision to use task manager, but you've to find the window
you wanna close!

> Sometimes I also wonder why malicious sites even bother asking us if we
> want it or not. Why don't they just install it silently?

That's a good question :)

> Is this because of restrictions in one of IE settings (can't install
> without asking)? Anyone?

I don't think so, as the popup window is not a real confirmation message
but only a simple window.

Hi!

John
Thu May 08 09:42:28 PDT 2008


"Alias" <iamalias@nukethisgmail.com> wrote in message
news:fvv9lv$2m1$1@aioe.org...
>
> Try Ubuntu, compared to Windows, it's bullet proof if you have a router
> with an hard firewall. Check it out at http://www.ubuntu.com/

Oh no, not you again. I just had a discussion with you about this yesterday.
Short term memory eh? :-)

John
Thu May 08 09:51:36 PDT 2008


"Big Al" <BigAl@nowhere.com> wrote in message
news:cXFUj.25690$aA1.20545@trnddc05...
> Yes, There are a lot of things a web site cannot do. Its part of windows
> security. But once you click a button or link etc you are sorta giving
> things the right to launch. Like a java script or applet.
>
> I just close the web site.

That might work too - right click the pop-up on the task bar and click
Close. The problem with close option is that it sometimes loads another
pop-up window. That's why I choose end task.

> And if there is a window open after that, then I use the simple x in the
> upper right corner.

The X button can be part of the pop up image. Inexperienced users can't tell
the difference. Also, if we're not paying attention, we may accidentally
click that X image instead of the actual X button.

Doug
Thu May 08 09:57:24 PDT 2008


"John" <a> wrote in message
news:O8UKCqSsIHA.1436@TK2MSFTNGP05.phx.gbl...
>
> "Alias" <iamalias@nukethisgmail.com> wrote in message
> news:fvv9lv$2m1$1@aioe.org...
>>
>> Try Ubuntu, compared to Windows, it's bullet proof if you
>> have a router with an hard firewall. Check it out at
>> http://www.ubuntu.com/
>
> Oh no, not you again. I just had a discussion with you about
> this yesterday. Short term memory eh? :-)
>
Thats from inhaling all of those "ubuntu" fumes.
-

Big
Thu May 08 10:06:07 PDT 2008

John wrote:
> "Big Al" <BigAl@nowhere.com> wrote in message
> news:cXFUj.25690$aA1.20545@trnddc05...
>> Yes, There are a lot of things a web site cannot do. Its part of windows
>> security. But once you click a button or link etc you are sorta giving
>> things the right to launch. Like a java script or applet.
>>
>> I just close the web site.
>
> That might work too - right click the pop-up on the task bar and click
> Close. The problem with close option is that it sometimes loads another
> pop-up window. That's why I choose end task.
>
>> And if there is a window open after that, then I use the simple x in the
>> upper right corner.
>
> The X button can be part of the pop up image. Inexperienced users can't tell
> the difference. Also, if we're not paying attention, we may accidentally
> click that X image instead of the actual X button.
>
>
Yes, there is a certain amount of skill needed to step around these
'pranksters'.

Alias
Thu May 08 11:10:43 PDT 2008

John wrote:
> "Alias" <iamalias@nukethisgmail.com> wrote in message
> news:fvv9lv$2m1$1@aioe.org...
>> Try Ubuntu, compared to Windows, it's bullet proof if you have a router
>> with an hard firewall. Check it out at http://www.ubuntu.com/
>
> Oh no, not you again. I just had a discussion with you about this yesterday.
> Short term memory eh? :-)
>
>

I'm not in the habit of remembering every "John" I meet online, sorry.
Nonetheless, my post may help someone else who is sick of Windows and
viruses.

Alias

pcbutts1
Thu May 08 12:59:16 PDT 2008

If you are getting the pop ups then you are infected. Use my free Remove-it
software, it will remove that malware from your system. Download it here
http://pcbutts1.com/downloads/tools/tools.htm


--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell




"John" <a> wrote in message news:%23RADJvSsIHA.1872@TK2MSFTNGP04.phx.gbl...
>
> "Big Al" <BigAl@nowhere.com> wrote in message
> news:cXFUj.25690$aA1.20545@trnddc05...
>> Yes, There are a lot of things a web site cannot do. Its part of windows
>> security. But once you click a button or link etc you are sorta giving
>> things the right to launch. Like a java script or applet.
>>
>> I just close the web site.
>
> That might work too - right click the pop-up on the task bar and click
> Close. The problem with close option is that it sometimes loads another
> pop-up window. That's why I choose end task.
>
>> And if there is a window open after that, then I use the simple x in the
>> upper right corner.
>
> The X button can be part of the pop up image. Inexperienced users can't
> tell the difference. Also, if we're not paying attention, we may
> accidentally click that X image instead of the actual X button.
>

HeyBub
Thu May 08 13:02:58 PDT 2008

Alias wrote:
>
> Try Ubuntu, compared to Windows, it's bullet proof if you have a
> router with an hard firewall. Check it out at http://www.ubuntu.com/
>
> Alias

You can lead a Linux troll to water, but you can't make him think.

On second though, maybe we've been leading the wrong end...

Leythos
Thu May 08 13:14:39 PDT 2008

In article <oYIUj.16229$2g1.10641@nlpi068.nbdc.sbc.com>, pcbutts1
@leythosthestalker.com says...
> Download it here
>
Never trust a fix posted to a site that has hosted pornographic
materials and that is on the MVP block list HOST file. Never trust
anyone that can't prove they are an MVP when pretending to be one.

--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)

John
Thu May 08 13:47:41 PDT 2008

My PC isn't infected. Thanks.

"pcbutts1 [MS MVP]" <pcbutts1@leythosthestalker.com> wrote in message
news:oYIUj.16229$2g1.10641@nlpi068.nbdc.sbc.com...
> If you are getting the pop ups then you are infected. Use my free
> Remove-it software, it will remove that malware from your system. Download
> it here http://pcbutts1.com/downloads/tools/tools.htm
>
>
> --
>
> Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
> The list grows. Leythos the stalker http://www.leythosthestalker.com,
> David
> H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
> Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell
>
>
>
>
> "John" <a> wrote in message
> news:%23RADJvSsIHA.1872@TK2MSFTNGP04.phx.gbl...
>>
>> "Big Al" <BigAl@nowhere.com> wrote in message
>> news:cXFUj.25690$aA1.20545@trnddc05...
>>> Yes, There are a lot of things a web site cannot do. Its part of
>>> windows security. But once you click a button or link etc you are
>>> sorta giving things the right to launch. Like a java script or applet.
>>>
>>> I just close the web site.
>>
>> That might work too - right click the pop-up on the task bar and click
>> Close. The problem with close option is that it sometimes loads another
>> pop-up window. That's why I choose end task.
>>
>>> And if there is a window open after that, then I use the simple x in the
>>> upper right corner.
>>
>> The X button can be part of the pop up image. Inexperienced users can't
>> tell the difference. Also, if we're not paying attention, we may
>> accidentally click that X image instead of the actual X button.
>>
>

pcbutts1
Thu May 08 15:25:44 PDT 2008

If you are getting fake virus warnings, whether you click on them of just
close them you "are" infected. Those pop ups happen for a reason.


--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell




"John" <a> wrote in message news:eBE1DzUsIHA.1952@TK2MSFTNGP05.phx.gbl...
> My PC isn't infected. Thanks.
>
> "pcbutts1 [MS MVP]" <pcbutts1@leythosthestalker.com> wrote in message
> news:oYIUj.16229$2g1.10641@nlpi068.nbdc.sbc.com...
>> If you are getting the pop ups then you are infected. Use my free
>> Remove-it software, it will remove that malware from your system.
>> Download it here http://pcbutts1.com/downloads/tools/tools.htm
>>
>>
>> --
>>
>> Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
>> The list grows. Leythos the stalker http://www.leythosthestalker.com,
>> David
>> H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
>> Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell
>>
>>
>>
>>
>> "John" <a> wrote in message
>> news:%23RADJvSsIHA.1872@TK2MSFTNGP04.phx.gbl...
>>>
>>> "Big Al" <BigAl@nowhere.com> wrote in message
>>> news:cXFUj.25690$aA1.20545@trnddc05...
>>>> Yes, There are a lot of things a web site cannot do. Its part of
>>>> windows security. But once you click a button or link etc you are
>>>> sorta giving things the right to launch. Like a java script or
>>>> applet.
>>>>
>>>> I just close the web site.
>>>
>>> That might work too - right click the pop-up on the task bar and click
>>> Close. The problem with close option is that it sometimes loads another
>>> pop-up window. That's why I choose end task.
>>>
>>>> And if there is a window open after that, then I use the simple x in
>>>> the upper right corner.
>>>
>>> The X button can be part of the pop up image. Inexperienced users can't
>>> tell the difference. Also, if we're not paying attention, we may
>>> accidentally click that X image instead of the actual X button.
>>>
>>
>
>

John
Thu May 08 15:58:31 PDT 2008


"pcbutts1 [MS MVP]" <pcbutts1@leythosthestalker.com> wrote in message
news:I5LUj.2800$17.1344@newssvr22.news.prodigy.net...
> If you are getting fake virus warnings, whether you click on them of just
> close them you "are" infected. Those pop ups happen for a reason.

Interesting. What reason would that be? To tell us that they're installing
something in our PC? I didn't know they're nice people. Why not silently
install it without a pop-up?

sgopus
Thu May 08 16:22:01 PDT 2008

lousy advice, no getting a pop up from a web site doesn't automatically mean
your infected, it does mean that you could have a vunerablilty they might
exploit.
or they are using social enginering to fake you out.

"pcbutts1 [MS MVP]" wrote:

> If you are getting fake virus warnings, whether you click on them of just
> close them you "are" infected. Those pop ups happen for a reason.
>
>
> --
>
> Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
> The list grows. Leythos the stalker http://www.leythosthestalker.com, David
> H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
> Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell
>
>
>
>
> "John" <a> wrote in message news:eBE1DzUsIHA.1952@TK2MSFTNGP05.phx.gbl...
> > My PC isn't infected. Thanks.
> >
> > "pcbutts1 [MS MVP]" <pcbutts1@leythosthestalker.com> wrote in message
> > news:oYIUj.16229$2g1.10641@nlpi068.nbdc.sbc.com...
> >> If you are getting the pop ups then you are infected. Use my free
> >> Remove-it software, it will remove that malware from your system.
> >> Download it here http://pcbutts1.com/downloads/tools/tools.htm
> >>
> >>
> >> --
> >>
> >> Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
> >> The list grows. Leythos the stalker http://www.leythosthestalker.com,
> >> David
> >> H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
> >> Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell
> >>
> >>
> >>
> >>
> >> "John" <a> wrote in message
> >> news:%23RADJvSsIHA.1872@TK2MSFTNGP04.phx.gbl...
> >>>
> >>> "Big Al" <BigAl@nowhere.com> wrote in message
> >>> news:cXFUj.25690$aA1.20545@trnddc05...
> >>>> Yes, There are a lot of things a web site cannot do. Its part of
> >>>> windows security. But once you click a button or link etc you are
> >>>> sorta giving things the right to launch. Like a java script or
> >>>> applet.
> >>>>
> >>>> I just close the web site.
> >>>
> >>> That might work too - right click the pop-up on the task bar and click
> >>> Close. The problem with close option is that it sometimes loads another
> >>> pop-up window. That's why I choose end task.
> >>>
> >>>> And if there is a window open after that, then I use the simple x in
> >>>> the upper right corner.
> >>>
> >>> The X button can be part of the pop up image. Inexperienced users can't
> >>> tell the difference. Also, if we're not paying attention, we may
> >>> accidentally click that X image instead of the actual X button.
> >>>
> >>
> >
> >
>
>

Alias
Thu May 08 17:10:11 PDT 2008

HeyBub wrote:
> Alias wrote:
>> Try Ubuntu, compared to Windows, it's bullet proof if you have a
>> router with an hard firewall. Check it out at http://www.ubuntu.com/
>>
>> Alias
>
> You can lead a Linux troll to water, but you can't make him think.
>
> On second though, maybe we've been leading the wrong end...
>
>

When you pull the chain of an MS fanboy, out comes the above.

Alias

pcbutts1
Thu May 08 17:14:14 PDT 2008

If such massage appears it in fact means some fake antispyware may have
been installed in your PC. The Zlob.Trojan and its many variants generates
this type of warning to scare users and force to download rogue
anti-spyware products and probably certain malware, perhaps Smitfraud or
Vundo. It is much easier for the malware writers to use vulnerabilities in
IE like BHO's to install the small hard to detect trojans then the full
rogue anti-malware programs.


--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell




"John" <a> wrote in message news:Omv0K8VsIHA.4476@TK2MSFTNGP06.phx.gbl...
>
> "pcbutts1 [MS MVP]" <pcbutts1@leythosthestalker.com> wrote in message
> news:I5LUj.2800$17.1344@newssvr22.news.prodigy.net...
>> If you are getting fake virus warnings, whether you click on them of just
>> close them you "are" infected. Those pop ups happen for a reason.
>
> Interesting. What reason would that be? To tell us that they're installing
> something in our PC? I didn't know they're nice people. Why not silently
> install it without a pop-up?
>

Frank
Thu May 08 17:32:34 PDT 2008

Alias wrote:

> HeyBub wrote:
>
>> Alias wrote:
>>
>>> Try Ubuntu, compared to Windows, it's bullet proof if you have a
>>> router with an hard firewall. Check it out at http://www.ubuntu.com/
>>>
>>> Alias
>>
>>
>> You can lead a Linux troll to water, but you can't make him think.
>>
>> On second though, maybe we've been leading the wrong end...
>>
>
> When you pull the chain of an MS fanboy, out comes the above.
>
> Alias

The truth comes out?...LOL!
You're not that bright sheep-fukker!
Frank

HeyBub
Thu May 08 17:52:29 PDT 2008

Alias wrote:
> HeyBub wrote:
>> Alias wrote:
>>> Try Ubuntu, compared to Windows, it's bullet proof if you have a
>>> router with an hard firewall. Check it out at http://www.ubuntu.com/
>>>
>>> Alias
>>
>> You can lead a Linux troll to water, but you can't make him think.
>>
>> On second though, maybe we've been leading the wrong end...
>>
>>
>
> When you pull the chain of an MS fanboy, out comes the above.
>

I keep my pants tied up with a chain of twine,
It keeps me ready all the time,
So if you're mine, baby, if you're mine,
Please pull the twine,
Please pull the twine.

DeeJay
Thu May 08 22:10:36 PDT 2008

Using tools from a stranger to remove malware? How is that different from
clicking a fake warning from some unknown site? Your track record isn't
great either: http://www.google.com/search?q=pcbutts1

"pcbutts1 [MS MVP]" <pcbutts1@leythosthestalker.com> wrote in message
news:oYIUj.16229$2g1.10641@nlpi068.nbdc.sbc.com...
> If you are getting the pop ups then you are infected. Use my free
> Remove-it software, it will remove that malware from your system. Download
> it here http://pcbutts1.com/downloads/tools/tools.htm
>
>
> --
>
> Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
> The list grows. Leythos the stalker http://www.leythosthestalker.com,
> David
> H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
> Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell
>
>
>
>
> "John" <a> wrote in message
> news:%23RADJvSsIHA.1872@TK2MSFTNGP04.phx.gbl...
>>
>> "Big Al" <BigAl@nowhere.com> wrote in message
>> news:cXFUj.25690$aA1.20545@trnddc05...
>>> Yes, There are a lot of things a web site cannot do. Its part of
>>> windows security. But once you click a button or link etc you are
>>> sorta giving things the right to launch. Like a java script or applet.
>>>
>>> I just close the web site.
>>
>> That might work too - right click the pop-up on the task bar and click
>> Close. The problem with close option is that it sometimes loads another
>> pop-up window. That's why I choose end task.
>>
>>> And if there is a window open after that, then I use the simple x in the
>>> upper right corner.
>>
>> The X button can be part of the pop up image. Inexperienced users can't
>> tell the difference. Also, if we're not paying attention, we may
>> accidentally click that X image instead of the actual X button.
>>
>

Onsokumaru
Fri May 09 02:52:51 PDT 2008


"HeyBub" <heybub@gmail.com> wrote in message
news:%23i4aAaUsIHA.4476@TK2MSFTNGP06.phx.gbl...
> Alias wrote:
>>
>> Try Ubuntu, compared to Windows, it's bullet proof if you have a
>> router with an hard firewall. Check it out at http://www.ubuntu.com/
>>
>> Alias
>
> You can lead a Linux troll to water, but you can't make him think.
>
> On second though, maybe we've been leading the wrong end...
>

ROFL, unlike your independent, free thinking windows user...;-)

Alias
Fri May 09 04:00:01 PDT 2008

HeyBub wrote:
> Alias wrote:
>> HeyBub wrote:
>>> Alias wrote:
>>>> Try Ubuntu, compared to Windows, it's bullet proof if you have a
>>>> router with an hard firewall. Check it out at http://www.ubuntu.com/
>>>>
>>>> Alias
>>> You can lead a Linux troll to water, but you can't make him think.
>>>
>>> On second though, maybe we've been leading the wrong end...
>>>
>>>
>> When you pull the chain of an MS fanboy, out comes the above.
>>
>
> I keep my pants tied up with a chain of twine,
> It keeps me ready all the time,
> So if you're mine, baby, if you're mine,
> Please pull the twine,
> Please pull the twine.
>
>

Uh, yuck, no thanks.

Alias

John
Fri May 09 08:39:34 PDT 2008

I agree if pop ups appear as soon as the PC is on. However, my question was
"How do you all respond to a fake virus warning (a pop-up window that says
your PC is infected) when browsing the web?" You can't get infected by
seeing a pop up without responding to it unless the PC has an unpatched (or
zero day) vulnerability and (worse) you're logged on as Administrator.

"pcbutts1 [MS MVP]" <pcbutts1@leythosthestalker.com> wrote in message
news:qHMUj.2139$7k7.98@flpi150.ffdc.sbc.com...
> If such massage appears it in fact means some fake antispyware may have
> been installed in your PC. The Zlob.Trojan and its many variants generates
> this type of warning to scare users and force to download rogue
> anti-spyware products and probably certain malware, perhaps Smitfraud or
> Vundo. It is much easier for the malware writers to use vulnerabilities in
> IE like BHO's to install the small hard to detect trojans then the full
> rogue anti-malware programs.