secure32.html is this spyware? how to remove this

Discussion in 'QnA (read only)' started by Ramakrishnan, May 10, 2006.

Thread Status:
Not open for further replies.
  1. Ramakrishnan

    Ramakrishnan The Researcher

    Joined:
    Mar 7, 2006
    Messages:
    1,154
    Likes Received:
    10
    Trophy Points:
    38
    Location:
    Mumbai
    Recently my pc has been infected by some kind of virus or spyware. whenever i open the IE c:\secure32.html opens and informs me that "detected spyware! system error #384" and goes on to give me my IP address and links to to some sites: ***.spy-sheriff.com etc. It also informs me that risk status is "very high risk". What is this? How to get rid of this?
     
  2. casanova

    casanova The Frozen Nova

    Joined:
    Sep 25, 2004
    Messages:
    1,641
    Likes Received:
    2
    Trophy Points:
    0
    Location:
    Trespasser in Virtual Land
    wen u delete this file, it is restored. You will need to delete files from ur temporary internet folder also. I do nt think that it is a spyware, since I had no problems other than my default address being redirected to this file.
    Alos change ur default address back to say google
     
  3. Vishal Gupta

    Vishal Gupta Microsoft MVP

    Joined:
    Jul 28, 2005
    Messages:
    5,173
    Likes Received:
    121
    Trophy Points:
    0
    Location:
    AskVG.com
    I searched and found that "secure32.html is generated by a program called Paytime.exe, which is located in C:\WINDOWS\system32\ folder.

    So do following:

    1.) END TASK of Paytime.exe in Task Manager.
    2.) GOTO: C:\WINDOWS\system32\ and delete the file "Paytime.exe".
    3.) Also delete the file "secure32.html" from ur C: drive.

    Now after restarting the comp, u can safely start Internet Explorer and set the settings to Default... :)
     
  4. anandk

    anandk Distinguished Member

    Joined:
    Mar 8, 2005
    Messages:
    3,786
    Likes Received:
    106
    Trophy Points:
    0
    Location:
    Pune
  5. PinKLip

    PinKLip New Member

    Joined:
    Jul 4, 2004
    Messages:
    99
    Likes Received:
    0
    Trophy Points:
    0
    Paytime.exe may be also in programme folder,as in my case it was in programme folder
     
  6. OP
    OP
    Ramakrishnan

    Ramakrishnan The Researcher

    Joined:
    Mar 7, 2006
    Messages:
    1,154
    Likes Received:
    10
    Trophy Points:
    38
    Location:
    Mumbai
    There is no such file of paytime on my computer. I deleted all temporarary files from my pc. But secure32.html still persists.
     
  7. Vishal Gupta

    Vishal Gupta Microsoft MVP

    Joined:
    Jul 28, 2005
    Messages:
    5,173
    Likes Received:
    121
    Trophy Points:
    0
    Location:
    AskVG.com
  8. swatkat

    swatkat New Member

    Joined:
    Mar 12, 2004
    Messages:
    2,058
    Likes Received:
    1
    Trophy Points:
    0
    Location:
    Shimoga/ಶಿವಮೊಗ್ಗ
    Hi,
    Download HijackThis and unzip it to dedicated folder (like C:\HijackThisFolder\hijackthis.exe).
    Then run it and click the button Do a System scan and save log file. HijackThis will perform a scan and saves the log file as hijackthis.log in the same folder where it is installed and it also opens the file automatically.
    Copy the entire contents of the file and post it back here.
     
Thread Status:
Not open for further replies.

Share This Page