Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Bravesentry And Anti Virus Pro Spyware Remover


  • Please log in to reply
5 replies to this topic

#1 rimidalv03

rimidalv03

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:54 AM

Posted 22 November 2007 - 03:16 PM

I was on the web and i was already getting a few pop-ups. This pop-up called Anti Virus Pro spyware remover showed up and asked me if i wanted to scan my computer for viruses. I clicked yes and it showed a window that seemed to be scanning my computer. In the end, it said i couldn't remove the viruses found because i need to download the full version. I didn't and i just closed that window.
But now when i go on Mozilla Firefox and the text is written in Russian. And on top of that I'm getting a lot of pop-ups. There are 2 programs on my desktop that are called BraveSentry and Anti Virus Pro spyware remover and i think these caused it. I opened BraveSentry and it shows up as BS 2.0. It shows Malware names and 2 of the names are Adwarepopuper and Trojan VX download.
My OS is Windows XP.
Any help is greatly appreciated.

BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,410 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:11:54 PM

Posted 22 November 2007 - 04:01 PM

Use the two programs below to remove the malware.

http://siri.urz.free.fr/Fix/SmitfraudFix_En.php (Read and follow the directions carefully)

Install Super Antispyware free. Run it in safe mode. Allow it to quarantine whatever it finds.
http://www.superantispyware.com/

Post back with the results and for further instructions.
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 rimidalv03

rimidalv03
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:54 AM

Posted 22 November 2007 - 08:39 PM

Thanks a lot for helping so far. The Bravesentry is gone now after i did those 2 steps. When I ran super anti-spyware it found around 170 spyware things. I quarantined them and i rebooted my computer. But the Anti Virus Pro spyware remover is still on my desktop. I'm still getting pop-ups and my Mozilla Firefox page is still in Russian.

#4 buddy215

buddy215

  • Moderator
  • 13,410 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:11:54 PM

Posted 22 November 2007 - 09:23 PM

Use Rogue Remover.
http://www.malwarebytes.org/rogueremover.php

Run the online scan for Bit Defender in normal mode. Allow it to quarantine whatever it finds.
http://www.bitdefender.com/scan8/ie.html

--------------------------------------------------------------------------------

Post a Hijack This Log in the Hijack This Forum by following the directions in the link below if the programs above have not removed ALL malware. DO NOT post a log in this forum. http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

This is the first I know of Firefox changing to Russian.
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#5 rimidalv03

rimidalv03
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:54 AM

Posted 23 November 2007 - 04:24 PM

I used rogue remover and then i used bitdefender to scan. On bitdefender, it found some trojans that said it didn't disinfect it and it said move failed. I'm wondering if that is still there. The Anti Virus Pro spyware remover icon is still on my desktop but when it runs, it gets terminated right away so i think the rogue remover worked.

#6 buddy215

buddy215

  • Moderator
  • 13,410 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:11:54 PM

Posted 23 November 2007 - 06:24 PM

EDIT: I just checked, Super Antispyware has a NEW update. Suggest you update SAS and run it again in safe mode.10/24/07

I just checked to see if Super Antispyware updated today. They did not. They usually update at 6pmEST.
AVG 7.5 Antispyware has had success with removing the smitfraud/zlob malware. If you would like to try it, here is a link
to the free download.
http://free.grisoft.com/doc/downloads-prod...s/frt/0?prd=asf

If AVG doesn't finish the job, you can wait for SAS to update in the next 2 or 3 days or post a Hijack This Log and let the experts help you get rid of the malware. Directions for posting the log are in the link below. Post the log in the
Hijack This Forum. DO NOT post the log in this forum.
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

Edited by buddy215, 24 November 2007 - 07:57 AM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users