Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I'm Infected With Something. Please Help!


  • This topic is locked This topic is locked
6 replies to this topic

#1 theyoungcoach

theyoungcoach

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:09:22 PM

Posted 15 March 2008 - 01:10 PM

I was on playlist.com when I got a pop-up saying from what I thought was Windows Security Center saying that I have spyware on my computer and I should delete it. Like an idiot, I downloaded something, now my Desktop Background is blue with a warning on it saying "Spyware has been detected on your PC...Click Here to Scan your computer for Spyware". I keep getting pop-up ads for anti-virus stuff and I keep getting an ad from antispwareupdates.net trying to get me to download their "anti-spyware" software.

I tried the Vundo Fix and it didn't work, so I tried the VirtumundoBegone and that didn't work. Any suggestions? Please help! I have a lot of work to do this weekend and I can't get it done with all these bleeping popups!!!



Here is the major ad that keeps popping up and the one that started it all. The URL just says about:security




Best Spyware Protection. Used by Millions World Wide.



Spyware & Adware can not only result in data corruption, personal profiling,

hacker attacks, pop-up ads, spying, but also identity theft.



SpyAway was created by the industry’s top professionals to protect your privacy

and to ensure optimal system performance. By locating, eradicating and preventing

malicious spyware infestations, SpyAway is able to provide its users with a

spyware-free computing environment and safe surfing.















PerfectCleaner was built to Help You Forget About Spyware.



Using an advanced monitoring technology, it puts you in control over the changes

in your system. Its sophisticated removal module will eliminate all traces of spyware

from your system. Add the regularly expanded database of spyware types and

lifetime support, and you have an affordable, flexible, reliable antispyware solution

build to keep you happy with your computer.



You will enjoy using PerfectCleaner and keeping your system clean.


















Download / Buy Now
DOWNLOAD

BUY
DOWNLOAD

BUY

Free scan:

Overall Product Rating



Price / Value

Easy of Use

Effectiveness

Customization

Technical Support

Features:

Heuristic Scan



Advanced Scanning Engine

Auto Updates

Tracking Cookie Blocking

Internet Monitor

Real-time Blocking and Protection

Quarantine Manager

Rollback/Restore Capabilities

Detections:

Adware

Spyware

Trojans

Dialers

Toolbars

Browser Hijacking / BHO's

Registry Settings Changes

Protection Features:

Startup Protection

Internet Explorer Hijack Protection

Windows Hosts File Protection

IE Favorites Protection

DOWNLOAD

BUY
DOWNLOAD

BUY





Copyright © ANTISPYWAREUPDATES.NET, 2006, 2007.
ANTISPYWAREUPDATES.NET

Edited by theyoungcoach, 15 March 2008 - 01:16 PM.


BC AdBot (Login to Remove)

 


#2 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:04:22 AM

Posted 15 March 2008 - 02:10 PM

Posted Image welcom to this site

to avoid duplication of tools already used, can we please know which windows version you are running , which antivirus protection you have on board and what other protection programs you have already tried?

#3 PropagandaPanda

PropagandaPanda


  • Malware Response Team
  • 10,433 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:22 PM

Posted 15 March 2008 - 04:22 PM

I think this is Smitfraud.

If you could give us your system information, we can determine what tools to use.

Edited by PropagandaPanda, 15 March 2008 - 04:23 PM.


#4 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,994 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:11:22 PM

Posted 16 March 2008 - 12:11 AM

Hello theyoungcoach and welcome to BC :flowers:

As stated already, we need additional information in order to provide proper disinfection procedures.

What is your operating system: Windows XP, Vista, etc.?

What security programs do you have installed?

Note: According to my research, SpyAway and Perfect Cleaner are rogue AntiSpyware programs that come from the same source. I will have our malware removal experts look into this.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#5 theyoungcoach

theyoungcoach
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:09:22 PM

Posted 17 March 2008 - 11:13 PM

I am using Windows XP and I have used the following software programs to "clean" the system:

Malwarebytes

ATF Cleaner

Super-anti-spyware


I have Avast! as my security software.



The Pop-Ups are gone and everything seems to be running normal except for two things:

1. I still get an error message when I try to get on my task manager that says: "Task Manager Has Been Disabled By Your Administrator"

2. When I log on, I get an error message that reads: "The application or DLL C:\WINDOWS\system32\fxivinky.dll is not a valid Windows image. Please check this against your installation diskette."

Then, when I close that box, another error message pops up that says: "Error loading C:\WINDOWS\system32\fxivinky.dll. %1 is not a valid Win32 application.

#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,608 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:22 PM

Posted 18 March 2008 - 10:22 AM

I'm finding no information on fxivinky.dll which suggests its probably malware related. And since your Task Manager is still disabled, I suspect more malware is on your system. This issue will require further investigation. Before that can be done you will need you to create and post a hijackthis log.

Please see the pinned topic titled "Preparation Guide For Use Before Posting A Hijackthis Log". In step #9 there are instructions for downloading HijackThis and creating a log. (This is a self-extracting version which will automatically install the current version of HJT in the proper location.) If using Windows Vista, be sure to Run As Administrator.

When you have done that, post your log in the HijackThis Logs and Malware Removal forum, NOT here, for assistance by the HJT Team Experts. A member of the Team will walk you through, step by step, on how to clean your computer. If you post your log back in this thread, the response from the HJT Team will be delayed because your post will have to be moved. This means it will fall in line behind any others posted that same day.

Start a new topic, give it a relevant title and post your log along with a brief description of your problem, a summary of any anti-malware tools you have used and a summary of any steps that you have performed on your own. Please include the top portion of the HijackThis log that lists version information. An expert will analyze your log and reply with instructions advising you what to fix. After doing this, we would appreciate if you post a link to your log back here so we know that your getting help from the HJT Team.

Please be patient. It may take a while to get a response because the HJT Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT "bump" your post or make another reply until it has been responded to by a member of the HJT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.

Edited by quietman7, 18 March 2008 - 10:23 AM.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 TMacK

TMacK

  • Members
  • 4,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:B.C. Canada
  • Local time:08:22 PM

Posted 18 March 2008 - 10:43 AM

I see you have a HJT log posted in the HijackThis Logs and Malware Removal forum.

You shouldn't make any changes to your system, while your HJT log is posted, as that could change the results of the posted log, making it difficult to properly clean your system.
At this point, the HJT Team should be the only members that you take advice from, until they have verified your log as clean.

This topic will now be closed, since you have an open log posted.
If you have any questions, feel free to send me a PM.
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.

aaaaaaaa a~Suzie Wagner




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users