UNSOLVED
502 EPA Warning
I received a 502EPA Warning - Privacy Violation Detected. It stated I should download this software that costs $99.00 to help protect my computer from being spyed on. Is this a scam? I online bank and afraid that they will be able to get my information. Do I really need to download this software or are there other ways of taking care of this problem.
- almost without exception, any time you get a popup/warning asserting that you're "infected" by malware (virus/worm/trojan/adware/spyware), and trying to direct you to a website which they claim will fix the problem [usually for a fee], odds are it's a scam.[Unfortunately, you may indeed be infected... probably because that very program trying to "warn" you already inflicted the damage itself!.. and now, they want you to pay their "ransom" to fix things.]DO *NOT* DOWNLOAD IT, nor pay any "ransom" to remove spyware.rather, you should download the latest version of HJT(hijackthis) (version 1.99.1) from
http://majorgeeks.com/download3155.html
you must create a separate folder and place it there.... people commonly use C:\HJT. Note: Please do *NOT* use a TEMP (temporary) folder, *NOR* your DESKTOP, as HJT will be generating log files and backup files in the folder from which it is run... you risk accidentally losing these if you use a TEMP folder, and you will generate extreme clutter if you use your DESKTOP.
The file above comes as a compressed .ZIP file... you have to UNzip it (hopefully, you have an UNzip utility built into your Windows Explorer. If for any reason, you're unable to UNzip it, you can download the already-unzipped .EXE file from http://downloads.malwareremoval.com/HijackThis.exe )
After Unzipping, double click on HiJackThis.EXE
Click on Do a System Scan and Save a LogFile
This will automatically open NotePad
Copy the entire file from NotePad: EDIT/SelectAll, EDIT/Copy
Then go to the new forum dedicated for HiJack This logs (**NOT** back here), and PASTE the results there:
http://forums.us.dell.com/supportforums/board?board.id=si_hijack
Be sure to include a detailed description of any problems/errors/warnings you are encountering.
Hopefully, one of the HJT experts will get to it as quickly as possible.
WARNING: HiJack This is a VERY POWERFUL tool. Do *NOT* do anything else (in particular, do NOT use it to delete any entries) until you are advised to do so!! Improper use of this tool can severely damage your system.Supplemental note: The procedure as worded above has been carefully edited over time, so as to expedite the process of helping people. Nevertheless, it seems that many individuals try to be "creative", and make some variations. It really would be to your benefit if you follow these directions EXACTLY as stated... because certain changes on your part can result in slowing-down the help process.Specifically, the following are 3 very common BAD deviations which will cause delays:a) BAD: using an older/outdated version of HiJackThis...The experts only work with the current version. So if you make a post with an older version, you'll simply be advised to get the latest version, re-run it, and re-post your log.b) BAD: using a TEMP directory or your DESKTOP for HJT....Some experts may insist you move HJT before they'll begin working with you. Others will start the repair process, advising you to move HJT as one of the very first steps. Failure to do so can result in losing potentially critical information. So please, just use the suggested C:\HJT directory, rather than try to be creative.c) BAD: posting your log in the wrong forum...if you post your log back here, in the Virus/SpyWare forum, it will "sit idly", either until the forum moderator gets around to move it for you... or until you decide to repost your log... in the HiJackThis forum.Message Edited by ky331 on 09-15-2005 02:33 PM
- monty,you need to (re-)post this in the HiJackTHis forum(starting a new thread of your own there)while the experts there will be happy to look at things, in general, it might expedite matters if you indicate any known/specific problems you're encountering...
- cdoerf,without further analysis, there's no way i (or anyone here) can assert, definitively, whether you have [partially or] completely removed the threat... or whether you have simply "suppressed" its warning message. all of these are real possibilities.the choice about how to proceed is in your hands.... if you feel "safe", you may wish to stop here. but to know, for sure, will require HiJackThis [or some comparable analytical tool]. I understand your concern about my warning... that you could potentially "screw something up in the process". but that can only happen if you click-on the boxes to FIX (or remove) some lines... the process of simply generating and posting your log [see for example the log Monty displayed above] will not change anything. if you decide to proceed [or not], good luck.
Message Edited by ky331 on 09-19-2005 02:49 PM
- on a perhaps-related point, i see that another person has already posted a HiJackLog, also complaining about the EPA warning. if you're CURIOUS, and want to get some "sense" of what HiJack "advice" might look like, you could keep an eye on that thread:however, since HiJackThis is a highly "personalized" approach, you should NOT simply mimic any particular advice you see given there, as your case may be different. if you decide to use HiJackThis, you need to post your own log [in your own thread] over in that forum.
- I started this thread and I didn't download HJT because I thought I would screw something up in the process but what I did was to use system restore and I was able to get rid of the warning that way. My question is, did I eliminate the threat or did I just get rid of the 502EPA warning. It has been a few days and the warning has not come back but I am still wondering
- i see you've decided to go ahead, and have posted your HJT log. please be patient, as the experts there are very over-worked at the moment (there's a rather mean problem, called Winfixer, that's keeping them VERY busy). I'll try to be sure that someone gets to you as soon as they can.
msgale
2 Intern
•
2507 Posts
530
0
Posted September 15th, 2005 15:00
Message Edited by msgale on 09-15-2005 01:10 PM