Malware ?

  • Thread starter Thread starter Alan T
  • Start date Start date
A

Alan T

I got sometimes pop up a screen really saying that your computer is
infected, do you want to install XXXXXXXX, I clicked cancel but still
opening up IE with the address of a anti-spyware company website. It seems
this company had invaded my computer and install a program in my machine
want to sell his anti-virus/anti-spyware product.
 
Alan T wrote:
> I got sometimes pop up a screen really saying that your computer is
> infected, do you want to install XXXXXXXX, I clicked cancel but still
> opening up IE with the address of a anti-spyware company website. It
> seems this company had invaded my computer and install a program in
> my machine want to sell his anti-virus/anti-spyware product.

Down load and install Spybot S&D (or Ad-Aware http://www.lavasoftusa.com/),
update the descriptions and scan your machine.

Spybot Search & Destroy
http://www.safer-networking.org/en/index.html
 
I already install the AdWare 2007 but still have that problem.

"GreenieLeBrun" <GreenieLeBrun@hotmail.com> wrote in message
news:Oh3QLqExHHA.4916@TK2MSFTNGP04.phx.gbl...
>
>
> Alan T wrote:
> > I got sometimes pop up a screen really saying that your computer is
> > infected, do you want to install XXXXXXXX, I clicked cancel but still
> > opening up IE with the address of a anti-spyware company website. It
> > seems this company had invaded my computer and install a program in
> > my machine want to sell his anti-virus/anti-spyware product.
>
> Down load and install Spybot S&D (or Ad-Aware
http://www.lavasoftusa.com/),
> update the descriptions and scan your machine.
>
> Spybot Search & Destroy
> http://www.safer-networking.org/en/index.html
>
>
 
Hi Alan....

What is the name of the rogue product in the message?
If you can identify it, Log onto bleepingcomputer.com (link provided below)
and look in their Spyware and Malware Removal Guides and Reading Room for
the product you see in the message.

http://www.bleepingcomputer.com/forums/forum55.html


Alan T <alanNOSPAMpltse@yahoo.com.au> wrote:
> I already install the AdWare 2007 but still have that problem.
>
> "GreenieLeBrun" <GreenieLeBrun@hotmail.com> wrote in message
> news:Oh3QLqExHHA.4916@TK2MSFTNGP04.phx.gbl...
>>
>>
>> Alan T wrote:
>>> I got sometimes pop up a screen really saying that your computer is
>>> infected, do you want to install XXXXXXXX, I clicked cancel but still
>>> opening up IE with the address of a anti-spyware company website. It
>>> seems this company had invaded my computer and install a program in
>>> my machine want to sell his anti-virus/anti-spyware product.
>>
>> Down load and install Spybot S&D (or Ad-Aware
>> http://www.lavasoftusa.com/), update the descriptions and scan your
>> machine.
>>
>> Spybot Search & Destroy
>> http://www.safer-networking.org/en/index.html
 
Alan T wrote:
> I already install the AdWare 2007 but still have that problem.
>
> "GreenieLeBrun" <GreenieLeBrun@hotmail.com> wrote in message
> news:Oh3QLqExHHA.4916@TK2MSFTNGP04.phx.gbl...
>>
>>
>> Alan T wrote:
>>> I got sometimes pop up a screen really saying that your computer is
>>> infected, do you want to install XXXXXXXX, I clicked cancel but
>>> still opening up IE with the address of a anti-spyware company
>>> website. It seems this company had invaded my computer and install
>>> a program in my machine want to sell his anti-virus/anti-spyware
>>> product.
>>
>> Down load and install Spybot S&D (or Ad-Aware
>> http://www.lavasoftusa.com/), update the descriptions and scan your
>> machine.
>>
>> Spybot Search & Destroy
>> http://www.safer-networking.org/en/index.html

Then try SpyBot.
 
In article <ur37ccExHHA.424@TK2MSFTNGP06.phx.gbl>,
alanNOSPAMpltse@yahoo.com.au says...
> I got sometimes pop up a screen really saying that your computer is
> infected, do you want to install XXXXXXXX, I clicked cancel but still
> opening up IE with the address of a anti-spyware company website. It seems
> this company had invaded my computer and install a program in my machine
> want to sell his anti-virus/anti-spyware product.

Only download software you can validate as uncompromised - in the case
of non-vendor site you have no guarantee that the files are unmodified
or uncompromised. Anyone providing a link to a non-vendors site with a
direct download should not be trusted, the vendors sites are the safest
place to download their application.

No person of sound mind would download files from a hack site that
requires a password to access the unknown files when they are available
directly from the vendors.

Always remember - only download files from Trusted Sites.

The following links will take you to vendors sites for Spy Ware / Ad
ware removal tools and also for Antivirus tools. After you install any
of these applications and update them, run them in SAFE MODE to allow
them to properly clean your system.

First, make sure that your Java is updated to the latest version:
http://www.java.com/en/download/index.jsp

These sites are for downloading Anti-Malware and Anti-Spyware tools, in
order that I would use them myself:

Dave Lipman's tools:
Download MULTI_AV.EXE from the URL --
http://www.pctipp.ch/downloads/dl/35905.asp

AdAwareSE can be found here:
http://www.lavasoft.com/products/ad_aware_free.php

SpyBot Search and Destroy can be found here:
http://www.safer-networking.org/en/download/index.html

Secured2K's AntiPauper (download link/info at)
http://forums.mcafeehelp.com/viewtopic.php?t=65072

Rogue Fix - This removal tool is the property of Internet Inspiration
http://www.internetinspiration.co.uk/roguefix.htm

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)
 
Hello,

Try performing a spyware scan by downloading and running
SuperAntispyware from here

http://www.superantispyware.com
(the free HOME edition is sufficient for your needs)

--
Singapore Web Design
http://www.bootstrike.com/Webdesign/
Singapore Web Hosting
http://www.bootstrike.com/WinXP/faq.html
Windows XP FAQ

"Alan T" <alanNOSPAMpltse@yahoo.com.au> wrote in message
news:ur37ccExHHA.424@TK2MSFTNGP06.phx.gbl...
>I got sometimes pop up a screen really saying that your computer is
> infected, do you want to install XXXXXXXX, I clicked cancel but still
> opening up IE with the address of a anti-spyware company website. It seems
> this company had invaded my computer and install a program in my machine
> want to sell his anti-virus/anti-spyware product.
>
>
 
"Alan T" wrote:

> I got sometimes pop up a screen really saying that your computer is
> infected, do you want to install XXXXXXXX, I clicked cancel but still
> opening up IE with the address of a anti-spyware company website. It seems
> this company had invaded my computer and install a program in my machine
> want to sell his anti-virus/anti-spyware product.


1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Taps:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Run a scan from here on-line:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
http://free.grisoft.com/doc/5390/lng/us/tpl/v5

Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.
 
Alan

This is what is called Smithfraud. Follow the below links from Malke to correct this issue

>snip<

Do the preparatory steps here:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://pcdid.com/Multi_AV.htm - download

Then do the specific steps here:

http://www.elephantboycomputers.com/page2.html#Smitfraud_Trojan

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigStoreUSA). Please be aware that not all local shops are skilled at
removing malware and even if they are, your computer may be so infested
that Windows will need to be clean-installed. Have all your data backed
up before you take the machine into a shop.


>end snip>

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"Alan T" <alanNOSPAMpltse@yahoo.com.au> wrote in message news:ur37ccExHHA.424@TK2MSFTNGP06.phx.gbl...
>I got sometimes pop up a screen really saying that your computer is
> infected, do you want to install XXXXXXXX, I clicked cancel but still
> opening up IE with the address of a anti-spyware company website. It seems
> this company had invaded my computer and install a program in my machine
> want to sell his anti-virus/anti-spyware product.
>
>
 
I think there are 2 companies called:
ErrorSafe and
WinAntiVirus
had invaded my computer to promote their products.

"Peter Foldes" <okf22@hotmail.com> wrote in message
news:ONoFmnIxHHA.3328@TK2MSFTNGP03.phx.gbl...
Alan

This is what is called Smithfraud. Follow the below links from Malke to
correct this issue

>snip<

Do the preparatory steps here:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://pcdid.com/Multi_AV.htm - download

Then do the specific steps here:

http://www.elephantboycomputers.com/page2.html#Smitfraud_Trojan

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigStoreUSA). Please be aware that not all local shops are skilled at
removing malware and even if they are, your computer may be so infested
that Windows will need to be clean-installed. Have all your data backed
up before you take the machine into a shop.


>end snip>

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"Alan T" <alanNOSPAMpltse@yahoo.com.au> wrote in message
news:ur37ccExHHA.424@TK2MSFTNGP06.phx.gbl...
>I got sometimes pop up a screen really saying that your computer is
> infected, do you want to install XXXXXXXX, I clicked cancel but still
> opening up IE with the address of a anti-spyware company website. It seems
> this company had invaded my computer and install a program in my machine
> want to sell his anti-virus/anti-spyware product.
>
>
 
I searched thru' Google finally found out these 2 are quite famous, got 2
links:
www.remove-errorsafe.org
www.winantivirus-removal.com.removal-instructions.com

Hope the link to the anti-spywares:
XoftSpySE
SpyHunter's WinAntiVirus Pro 2007 Scanner is not a spyware itself.

I just wonder these 2 can eliminate the above 2 spywares but not Lavasoft's
AdWare 2007.

"Alan T" <alanNOSPAMpltse@yahoo.com.au> wrote in message
news:us$OJyNxHHA.3616@TK2MSFTNGP02.phx.gbl...
> I think there are 2 companies called:
> ErrorSafe and
> WinAntiVirus
> had invaded my computer to promote their products.
>
> "Peter Foldes" <okf22@hotmail.com> wrote in message
> news:ONoFmnIxHHA.3328@TK2MSFTNGP03.phx.gbl...
> Alan
>
> This is what is called Smithfraud. Follow the below links from Malke to
> correct this issue
>
> >snip<
>
> Do the preparatory steps here:
>
> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>
> Include scanning with David Lipman's Multi_AV and follow instructions to
> do all scans in Safe Mode.
>
> http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
> http://pcdid.com/Multi_AV.htm - download
>
> Then do the specific steps here:
>
> http://www.elephantboycomputers.com/page2.html#Smitfraud_Trojan
>
> When all else fails, run HijackThis and post your log in one of the
> specialty forums listed at the first link above (not here, please).
>
> Standard caveat: If the procedures look too complex - and there is no
> shame in admitting this isn't your cup of tea - take the machine to a
> professional computer repair shop (not your local version of
> BigStoreUSA). Please be aware that not all local shops are skilled at
> removing malware and even if they are, your computer may be so infested
> that Windows will need to be clean-installed. Have all your data backed
> up before you take the machine into a shop.
>
>
> >end snip>
>
> --
> Peter
>
> Please Reply to Newsgroup for the benefit of others
> Requests for assistance by email can not and will not be acknowledged.
>
> "Alan T" <alanNOSPAMpltse@yahoo.com.au> wrote in message
> news:ur37ccExHHA.424@TK2MSFTNGP06.phx.gbl...
> >I got sometimes pop up a screen really saying that your computer is
> > infected, do you want to install XXXXXXXX, I clicked cancel but still
> > opening up IE with the address of a anti-spyware company website. It
seems
> > this company had invaded my computer and install a program in my machine
> > want to sell his anti-virus/anti-spyware product.
> >
> >
>
>
 
Back
Top