• Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

My AntiSpyware

Free antispyware software, Online Scanners, Instructions on how to remove spyware and malware.

Menu
  • Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools
Home › Malware removal › Rogue Anti Spyware › Trojan › Tutorials - HowTo › Virus › How to remove cnn.com and msnbc.com fake breaking news spam-virus and joke-bluescreen malware

How to remove cnn.com and msnbc.com fake breaking news spam-virus and joke-bluescreen malware

Myantispyware team August 21, 2008     4 Comments    

Joke-bluescreen malware is a malware that also installs rogue security applications (Antivirus XP, IE Defender) and display false alert on compromised computer, infects systems via spam emails with header “cnn.com breaking news” or “msnbc.com breaking news”. If your computer infected, then you have:

  • background turned blue and a box came up that says that you computer has been infected with spyware and you need to download some kind of software to clean PC
  • McAfee keeps telling you that the virus is called joke-bluescreen
  • system is running slow

Download HijackThis and Combofix.
Run HijackThis. Click “Do a system scan only.” and put a checkmark next to the following items (if exists):

O4 – HKLM\..\Run: [DLI32] C:\WINDOWS\dli32.exe
O4 – HKLM\..\Run: [sysrest32.exe] C:\WINDOWS\system32\sysrest32.exe
O4 – HKCU\..\Run: [CDriver] c:\microsoft\svchost.exe
O4 – HKCU\..\Run: [DDriver] c:\microsoft\svchost.exe
O4 – HKCU\..\Run: [alpha] c:\microsoft\svchost.exe
O4 – HKCU\..\Run: [beta] c:\microsoft\svchost.exe
O4 – HKCU\..\Run: [gamma] c:\microsoft\svchost.exe
O4 – HKLM\..\Run: [SMrhcjlaj0ee91] C:\Program Files\rhcjlaj0ee91\rhcjlaj0ee91.exe
O4 – HKLM\..\Policies\Explorer\Run: [CDriver] c:\microsoft\svchost.exe
O4 – HKLM\..\Policies\Explorer\Run: [DDriver] c:\microsoft\svchost.exe
O4 – HKLM\..\Policies\Explorer\Run: [alpha] c:\microsoft\svchost.exe
O4 – HKLM\..\Policies\Explorer\Run: [beta] c:\microsoft\svchost.exe
O4 – HKLM\..\Policies\Explorer\Run: [gamma] c:\microsoft\svchost.exe
O9 – Extra button: (no name) – {9034A523-D068-4BE8-A284-9DF278BE776E} – http://www.securesoftwarefeed.com/redirect.php (file missing)
O9 – Extra ‘Tools’ menuitem: IE Anti-Spyware – {9034A523-D068-4BE8-A284-9DF278BE776E} – http://www.securesoftwarefeed.com/redirect.php (file missing)
O22 – SharedTaskScheduler: cariniana – {5c770fbc-cc2f-4acd-93e8-e6f0594307fd} – C:\WINDOWS\system32\gnjsjc.dll (file missing)

Note: Where is c:\microsoft\svchost.exe can be c:\google.com\svchost.exe
Now close all browser and other windows except for HijackThis, and click “Fix Checked” to have HijackThis fix the entries you checked.

Close HijackThis. Double click on combofix.exe and follow the prompts.

If you are still having problems, then I would recommend you follow these instructions and post your logs in the spyware removal forum. I will check your logs and advise you on joke-bluescreen removal.

Malware removal Rogue Anti Spyware Trojan Tutorials - HowTo Virus

Author: Myantispyware team

Myantispyware is an information security website created in 2004. Our content is written in collaboration with Cyber Security specialists, IT experts, under the direction of Patrik Holder and Valeri Tchmych, founders of Myantispyware.com.

4 Comments

  1. Greg
    ― August 25, 2008 - 5:26 am  Reply

    I am at work but it is my home computer that is infected. In addition to the problems you mentioned, this virus won\’t let me go to any antispyware sites so I may have to fix the problem manually. Any ideas to allow me to go to the correction sites?

    Thanks,
    Greg

  2. Patrik
    ― August 25, 2008 - 6:24 am  Reply

    Hello Greg, please read these instructions and post your logs in the spyware removal forum. I will help you.

  3. David Hampton
    ― January 26, 2009 - 3:23 pm  Reply

    Ran Combofix on my cousins computer. It cleaned out the msnbc.com virus. Her machine is back up and running just fine!

  4. chris
    ― February 4, 2009 - 3:38 pm  Reply

    I keep getting pc generated mails from msnbc.com (as they are not coming through mail server, but appear in my Outlook mail). I have never opened any of them and I send them to ‘Junk’ and then I empty the junk folder. My pc is operating just fine, otherwise.
    Will running these 2 programs remove this spam mail?

Leave a Reply Cancel reply




New Guides

Popup Blocker Gold adware
Popup Blocker Gold Chrome extension (Virus removal guide)
Globaldispadvertising.com Click Allow Scam
Globaldispadvertising.com Virus Removal Guide
Tecappcloud.com malicious
Tecappcloud.com pop-up redirect (Virus removal guide)
Mediumhiquality.com I am not a robot Scam
Mediumhiquality.com Virus Removal Guide
Devon Claire Beds 0rder Placed Scam Text
Devon and Claire Beds Scam Text Order Placed Message

Follow Us

Search

Useful Guides

Best free malware removal tools
Best Free Malware Removal Tools 2020
How to reset Google Chrome settings to default
DNSChanger
How to remove DNSChanger malware virus [Updated Apr. 2018]
browser redirect virus
How to remove Browser redirect virus [Chrome, Firefox, IE, Edge]
This setting is enforced by your administrator (Removal guide)

Recent Posts

XLGuarder – fresh rogue antispyware | How to remove
How to remove VirusRemover2008 (Delete instructions)
Fresh rogue antispyware: WistaAntivirus, WinDefender, SpywareScanner2008
FixIEDef – free program for removing rogue antispyware
Found new fake antispyware – PestSweeper

MYANTISPYWARE.COM

  • About Us
  • Contact Us
  • Privacy Policy

NEED A HELP ?

If you're seeing unwanted pop-ups or ads in your web-browser, you might have an adware installed on your computer. Use the following guide to stop pop-up ads and remove malicious software. Or ask for help here.

Links

  • Downloads
  • Instructions
  • Questions and Answers
  • Free Malware Removal Tools
Copyright © 2004 - 2022 Myantispyware.com - Free antispyware programs and Spyware Removal Instructions.