Anyone have experience with Internet Explorer and the EID_pe_iscorrupted (virus) on Windows...

  • Thread starter Thread starter KABRO3
  • Start date Start date
K

KABRO3

Guest
I'm posting this- not so much as a question- as a lesson learned and, hopefully, a means to prevent others for doing the same. I'm not a pro, but I have computer knowledge. This could have been much worse for me.


All of the posts I found, started with a phone call and overtaking his/her computer. Mine was accessing a website.


My son opened Internet Explorer, chose Google as his search engine, in the search bar, he started typing YouTube. Immediately, several options populated in the screen. He chose one that had a little yellow square with the word "Ad" in it - usually the first of many that appear at the top of the page before a list of authentic sites. Once he made his selection, a "blue screen" populated the entire web browser screen (not the BIOS screen) with white lettering and a list of computer jargon for a "BSOD error". At the top of that screen was a phone number to call immediately. Additionally, a smaller window pop-up displayed the "error" with instructions not to turn off or restart the computer b/c I could lose all data and the "BSOD Error code: 333" all the while my computer is beeping continuously.

I called the number listed and spoke to a heavy-accented "Steven" guy. He asked me a few questions regarding what the screen read (already had my phone number) and then told me he would have to access my computer to help evaluate and fix my computer. He asked me if my PC was secure. I told him I had AVG. He continued and had me press and hold the Windows button on my keyboard and then press the letter R. In the "run" box that popped-up. He then had me type in hh w (with a space between the letter) to help evaluate the situation. Stupidly, I did.

Fortunately, for me, a new page popped-up telling me the "page cannot be displayed". He then walked me through how to get to the url support.me by accessing the yellow question mark in the upper left hand corner of the screen and selecting "jump to url". An "official" looking page came up after typing in the site he gave me. While waiting for the code he was to give me to allow him access, I decided to inquire as to what company I was calling because while I was freaked out with the computer beeping at me, I was a little suspicious. His accent was so heavy I couldn't understand him, but he continued to tell me that his company represents Microsoft tech support, but he doesn't work for Microsoft and that Microsoft will not call me and does not offer support. Again (all the while freaked out by the beeping and blue screen on Internet Explorer), fortunately, my computer would not take the code he gave me. It would not start a download. There were no error messages, either. So, he started walking me through how to get to another site "tinyurl/livefix". I do not know if this is legit, but I wasn't going to find out either. I was getting too suspicious. He had me open Firefox. Once I realized I was able to get into Firefox, I decided to a quick search for "support.me" and immediately saw a list of SCAM warnings. I told "Steven" that I couldn't access anything he was telling me - the addresses he was giving me wouldn't pop-up and that I would have to figure out something else. I then hung up on him.

After hanging up, I "x" out of the pop-ups that originated from Internet Explorer and "x" out of Internet Explorer. Immediately, the beeping stopped and my PC and Firefox were/are running fine.

I accessed my AVG virus tools and made sure they were up-to-date and ran full scans. As a result of the full-scan, AVG isolated and removed an "EID_pe_iscorrupted" threat. Even though my PC showed no history of any downloads this was detected.


According to the AVG website

If determined to be malware, actions can include: EID_pe_iscorrupted is a potential threat. Threats, when malicious, can be used to interfere with the normal operation of a computer, gather personal information or allow a hacker to access the device remotely without the user's consent.
This kind of software usually arrives in the form of an unwanted download from a malicious website or as code illegally injected into a legitimate website without the webmaster's knowledge. It can also be received as an email attachment or an instant message from an untrusted source.

If determined to be malware, actions can include:
- Stealing hard disk space and memory, slowing down or completing stopping the PC
- Corrupting or deleting data
- Compromising the entire system by providing remote access to hackers
- Stealing passwords and other sensitive information
- Gathering information about your web-browsing habits without your consent for advertising purposes
- Installing other unwanted software


As far as support.me, I found out it is a legitimate site that companies use to access computers with permission, but you need to trust the company /person you are giving such permission. This guy could have been pretty convincing, I think. But, even though my PC is getting old and I've had my share of issues, I've been able to resolve a lot and just had a feeling. The amount of panic that I ensued was enough to get me to call, in the first place. I wasn't the operator of my PC, my son was; and I had NO idea what he had done.


After resolving the issue, I had my son walk me through what/how he had gotten the error, which I detailed above. I have instructed my son to NEVER access any of those "Ad" pages after doing a search for anything. Mostly, just to ask me before accessing anything AND NEVER use Internet Explorer. It's just screwy!

Continue reading...
 
Back
Top