W32.Sinnaka.A@mm WHAT ON EARTH IS THAT AND HOW TO REMOVE IT??

Viruses and worms
1

There is a new spyware?/virus? or something like that which spreads rapidly.It came to me through eBay mails and I have no idea how to remove it. None of the anitiviruses , including AVAST seem to notice it as a virus. It changes startup page to a “windows - like” one with text "Attention! Your system is under control of remote computer with IP address 227.4.167.118. The remote computer has access to the following folders on your PC:

  • \WINDOWS\System32
  • \Program Files\Internet Explorer
  • \My Documents
  • Drive C:\ files
    Click here to download official anti-spyware software "

“Your private info is collected by W32.Sinnaka.A@mm”

None of the methods seems to work - including scanning on startup of the system. scanning with antispyware programs…nothing…
Any ideas?

2

Hi Sepinroth,

Here is the info about this mass mailer worm and the way to remove it:
http://www.sarc.com/avcenter/venc/data/w32.sinnaka.a@mm.html

greets,

polonus

3

If this is indeed the virus you named it has been around for some time so should be detected unless it is an other varient.

This sounds more like a browser hijack taking you to a page that is trying to get you scared into clicking another link which may or may not get you into further trouble. I certainly wouldn’t click on this kind of link or download any software that used this method to get you to but, etc.

Have you done a search for W32.Sinnaka.A@mm as it returns this - http://www.sarc.com/avcenter/venc/data/w32.sinnaka.a@mm.html, you can check and see if any of these files are present, etc.

If you haven’t already got this software (freeware), download, install, update and run it.

  1. Ad-Aware
  2. Spybot Search and Destroy
  3. Spywareblaster Don’t install this until you are clean.
  4. Ewido Security Suite
  5. Download HijackThis.zip - HiJackThis Tutorial
4

This is a startpage hijack: “Your private info is collected by W32.Sinnaka.A@mm” may be a red herring. (A deception.)

5

:slight_smile: The “PC Protection” forum at www.freedomlist.com has
numerous threads dealing with this “sinnaka” .

6

The problem is this page

http://www.updateyoursystem.com

this is a rogue page that started being “advertised” on a big number of gray sites recently.

The page pretends to be the Windows Security Center, and makes you think that your machine is infected by the Sinnaka virus (while it is of course completely clean). Then, as a countermeasure, it makes you download their software - Spy Axe - which IS in fact some sort of spyware/adware - DON’T download/install it.

To sum up, it’s more or less a fake.
If the page keeps opening up, your browser has probably been hijacked and you should install an anti-spyware application (such as AdAware / SpywareBlaster / Spybot S&D)

Thanks
Vlk