Explorer User Prompt

**galehickey** · December 20th, 2005, 10:34 PM

Suddenly some sites pop up menu that says: "Explorer User Prompt" then "Script Prompt." The site freezes and I have to disconnect from my ISP. Any help. Thanks.

**jman01pa** · December 20th, 2005, 10:53 PM

Have you scanned your system for spyware and viruses? That would be my first step.

**PC TECH250** · December 20th, 2005, 10:55 PM

http://www.kellys-korner-xp.com/xp_tweaks.htm #142 disables script debugger in IE60.
http://blogs.msdn.com/ie/ security alerts about malicious codes at certain web sites.
http://www.softpedia.com/progDownloa...oad-16213.html is
Microsoft's Tweakomatic 1.0 that could help with this as well.

**galehickey** · December 20th, 2005, 10:56 PM

Have scanned .... have not tried HiJackThis. Next step though. Never seen this before. Will get back if I find anything out. Thanks.

**PC TECH250** · December 20th, 2005, 10:57 PM

http://www.microsoft.com/athome/secu...e/default.mspx
http://www.microsoft.com/security/ma...e/default.mspx free online scan for any
malicious softwares.

**galehickey** · December 23rd, 2005, 06:43 AM

I have kinda made some headway. There is a Java virus called ByteVerify that SpySweeper catches. When I delete the virus and rescan the virus is gone. However, when I revisit two sites the user prompt shows up and the virus reappears. Have used these sites for several years with no problems but now they have a trojan - I guess. Do a scan and see if ByteVerify shows up. The virus appears in the Temporary Internet files.

**PC TECH250** · December 23rd, 2005, 03:38 PM

Sometimes a link no longer works when the domain gets bought out. Afterwards someone
creates a mock site that looks like the original. They are "phishers" were spywares and the
use of something similar like a virus is used to collect personal information off of a system.
That has been happening more often according to articles written on the subject. It would
be a good idea to locate alternate sites and boost up your antivirus and antispyware utills.
The AVG7.0 free edition has been good at catching this stuff too. You can get that at:
http://www.download.com

http://vil.nai.com/vil/content/v_100261.htm
http://www.faqfarm.com/Q/How_do_you_...ava-ByteVerify
http://www.mnin.org/write/2005_trimode.html

Most of the links that could be added here refer to it as a JavaByteVerify that is designed to
exploit a vulnerability in the MS virtual machine. These links here shoud give you a reference
to just what that is and how it is used by mailicious sites.