Security Alert- LienVandeKelder.exe

John Scheldroup · 2005-05-17T17:15:24+00:00

Can you download this webpage ? If you cannot download this page your host file has been modified toredirect these sites listed below.You would have gotten what appeared to be a message fromyour mail server which said *** your email account will be suspended ***if you opened up that attachment it would have followed with asecond email YOUR EMAIL ACCOUNT ACCESS IS RESTRICTED127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 127.0.0.1 -=Copyright (C) 2005-2006 HellBot3 Team All Rights Reserved.=- XP go to Start then Run and paste this entire next line into the promptclick OkC:WINDOWSNOTEPAD.EXE C:WINDOWSSYSTEM32DRIVERSetcHOSTSScroll down to where you see this line127.0.0.1 *Remove it only* let the tool do the rest and save the Host file.Close your browser then restart now you should be able to download this webpageRun the tool. John

J

John Scheldroup 21 years ago

Can you download this webpage ?

formatting link

snipped-for-privacy@mm.removal.tool.html

If you cannot download this page your host file has been modified to redirect these sites listed below.

You would have gotten what appeared to be a message from your mail server which said *** your email account will be suspended *** if you opened up that attachment it would have followed with a second email YOUR EMAIL ACCOUNT ACCESS IS RESTRICTED

127.0.0.1

formatting link

127.0.0.1 securityresponse.symantec.com
127.0.0.1 symantec.com
127.0.0.1

formatting link

127.0.0.1 virustotal.com
127.0.0.1

formatting link

127.0.0.1 oxyd.fr
127.0.0.1

formatting link

127.0.0.1 sophos.com
127.0.0.1

formatting link

127.0.0.1 mcafee.com
127.0.0.1 liveupdate.symantecliveupdate.com
127.0.0.1

formatting link

127.0.0.1 viruslist.com
127.0.0.1 viruslist.com
127.0.0.1 f-secure.com
127.0.0.1

formatting link

127.0.0.1 kaspersky.com
127.0.0.1 kaspersky-labs.com
127.0.0.1

formatting link

127.0.0.1

formatting link

127.0.0.1 avp.com
127.0.0.1

formatting link

127.0.0.1 networkassociates.com
127.0.0.1

formatting link

127.0.0.1 ca.com
127.0.0.1 mast.mcafee.com
127.0.0.1 my-etrust.com
127.0.0.1

formatting link

127.0.0.1 download.mcafee.com
127.0.0.1 dispatch.mcafee.com
127.0.0.1 secure.nai.com
127.0.0.1 nai.com
127.0.0.1

formatting link

127.0.0.1 update.symantec.com
127.0.0.1 updates.symantec.com
127.0.0.1 us.mcafee.com
127.0.0.1 liveupdate.symantec.com
127.0.0.1 customer.symantec.com
127.0.0.1 rads.mcafee.com
127.0.0.1 trendmicro.com
127.0.0.1

formatting link

127.0.0.1

formatting link

127.0.0.1

formatting link

For XP go to Start then Run and paste this entire next line into the prompt click Ok C:\WINDOWS\NOTEPAD.EXE C:\WINDOWS\SYSTEM32\DRIVERS\etc\HOSTS

Scroll down to where you see this line

127.0.0.1 securityresponse.symantec.com

*Remove it only* let the tool do the rest and save the Host file.

Close your browser then restart now you should be able to download this webpage

Run the tool.

formatting link

snipped-for-privacy@mm.removal.tool.html

John

Vote

P

Proctologically ViolatedÂ©Â® 21 years ago

I got hit by the sasser virus some time ago, and since, can't get symantec updates, grisoft, or anything. The virus is gone, but the damage is still there. Norton refused to help me with this, w/o $$$!! F*ck them. Iny clues?

formatting link

snipped-for-privacy@mm.removal.tool.html

formatting link

snipped-for-privacy@mm.removal.tool.html

Vote

J

John Scheldroup 21 years ago

updates, grisoft, or anything. The virus is gone, but

What are looking for ?

John

Vote

J

John Scheldroup 21 years ago

Email addresses harvested somebody somewhere, bug found in mailbox yesterday.

John

Vote

R

Robert Davidson 21 years ago

P.V., I think John already posted the solution to your prob. If you are currently blocked from reaching an anti-viral website, clear out your host file as John described.

Then, before you update Norton and run a virus check I advise that you turn off your system restore. After you've run the anti-viral/anti- spyware software (I'd reccomend using a few different ones for full coverage...try this site for some freeware/shareware:

formatting link

go ahead and start up your system restore again.

Also, make sure all your windows updates have been installed.

Check out this message thread for a more detailed description of how to solve your specific problem; this should be a big help...read the whole thread:

formatting link

Best of luck,

P.S., if you're using Internet Explorer, get rid of it. I use Slimbrowser. (free version here:

formatting link

It makes a world of difference!

Vote

P

Thanks! Indeed, I can live w/o IE--I actually miss my old netscape 3.0! Time to stop bein a wus, and get more compyooter-proactive. Unfortunately, I understand all too well how people in the Edison days refused to turn on lite switches. But I think having jb as my new bitch has in fact lifted my spirits!

Vote

Security Alert- LienVandeKelder.exe

Join the Discussion

Didn't find your answer?