Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Getting The Windows Security Alert Popup! Help


  • This topic is locked This topic is locked
7 replies to this topic

#1 kingoftherapids

kingoftherapids

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:17 PM

Posted 07 September 2007 - 01:58 AM

What do i do? it pops up about every 5 or 10 minutes and says "warning! potential spyware operation! your computer is making unauthorized copies of your system and internet files. Run full scan now to pervent any anuathorised access to your files! click YES to download spyware remover..." the only thing i have is spybot

BC AdBot (Login to Remove)

 


#2 oldf@rt

oldf@rt

  • Members
  • 2,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Avondale, Arizona USA
  • Local time:12:17 PM

Posted 07 September 2007 - 02:20 AM

Are you running any kind of antivirus program? If you are not please download one of these three and do a full system scan: Avira, Avast! or AVG.. After this, please download Superantispyware. Install SAS, accepting the default installation options. Make sure you run the updates. Once this is done, please restart your computer in safe mode. Start SAS, making sure that you run a complete scan. When the scan is done, let SAS remove/quarantine everything that it finds. If SAS needs to restart the computer, let it. PLease let us know your results.
The name says it all -- 59 and holding permanently

**WARNING** Links I provide might cause brain damage

#3 kingoftherapids

kingoftherapids
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:17 PM

Posted 07 September 2007 - 10:09 AM

I did all of this and it found 211 infections in the Complete Scan. I have a Superantispyware alert box that says i have a potentially harmful application that it blocked from running. it is identified as trojan.net-AVP/AVT.process. the blocked item is c:\windows\system32\winavxx.exe under processes it lists printer.exe, winavxx.exe, system.exe, and autorun.exe

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,486 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:17 PM

Posted 07 September 2007 - 11:36 AM

If your using Win XP or 2000, please print out and follow the generic instructions for using SmitfraudFix in BC's self-help tutorial "How to remove the Smitfraud/Generic Zlob".
(scroll down to where it says Removal Instructions)
If you already have a copy of smitfraudfix, make sure you re-download and use the most current version as the tool is frequently updated.

Then download RogueRemover and save to you Desktop. (This program is for Win XP, 2000, NT only)
  • Double-click on rr-free-setup.exe to install in C:\Program Files\RogueRemover.
  • During the installation an icon will automatically be created on your Desktop.
  • Double-click on the RogueRemover icon to launch the program and select Check for Updates.
  • If prompted, click Download to receive the latest updates.
  • When completed, close the update window.
  • Select "Scan" and the program will walk you through the remaining steps.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 kingoftherapids

kingoftherapids
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:17 PM

Posted 07 September 2007 - 12:49 PM

when i ran the program it was in like french or something. i ran it in safemode and followed theinstructions perfectly. i am talking about the smitfraud program.

#6 kingoftherapids

kingoftherapids
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:17 PM

Posted 07 September 2007 - 12:51 PM

I did all of this and it found 211 infections in the Complete Scan. I have a Superantispyware alert box that says i have a potentially harmful application that it blocked from running. it is identified as trojan.net-AVP/AVT.process. the blocked item is c:\windows\system32\winavxx.exe under processes it lists printer.exe, winavxx.exe, system.exe, and autorun.exe

#7 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,486 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:17 PM

Posted 07 September 2007 - 02:15 PM

You reposted the same thing from Post #3. Are you still getting that same information or did you repost by mistake?
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#8 tg1911

tg1911

    Lord Spam Magnet


  • Members
  • 19,274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Louisiana
  • Local time:01:17 PM

Posted 09 September 2007 - 09:27 PM

kingoftherapids,

I see you have an open HJT log posted in the HijackThis Logs and Malware Removal forum.
You shouldn't make any changes to your system, while your HJT log is posted, as that could change the results of the posted log, making it difficult to properly clean your system.

At this point, the HJT Team should be the only members that you take advice from, until they have verified your log as clean.

I'm closing this topic until you are cleared by the HJT Team.
If, after your log has been cleaned, you still need help, please PM a Moderator and we will re-open this topic.

If you have any questions, don't hesitate to send me a PM.
MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, VGA: ECS GeForce Black GTX 560, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users