Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trying To Get Rid Of Spyware/malware On Windows Xp


  • This topic is locked This topic is locked
2 replies to this topic

#1 YokoK

YokoK

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:02:03 PM

Posted 30 March 2008 - 08:44 PM

I keep getting the following (which is quite a hefty sum in my opinion):

A pop up from an icon about every ten seconds which is like a yellow upside down triangle with an explanation point which says:

"Windows Antivirus"
Windows has detected spyware infection!
It is recommended to use special antispyware tools to prevent data loss. Windows will now download the most up-to-date software for you. Click here to protect your computer from spyware!

...as well as random popups which say:

"Windows Security Alert"
Warning! Potential spyware operation!
Your computer is making unauthorized copies of your system and
Internet files. Run full scan now to prevent any unauthorized access
to your files! Click here to download spyware remover.

... as well as:

"System Integrity Scan Wizard"
Warning: Your computer may have critical errors in Windows registry and file system!
The registry and file errors lead to computer freezes, system crashes, and slowdowns, corruption of files and documents.
Immediate system integrity scan and repair is strongly recommended.
To scan your computer for errors please click the "Next" button below.


...There's also a red circle with a white X inside of it.

...My computer desktop also changes its background to say something about how my computer is infected and will not allow me to run control panel or change my computer properties.

...I've also noticed that when I run a search in Yahoo and click on one of the results, I'm taken to a webpage in which I did not click on and must copy the address from the result directly into the address bar. Random webpages pop up from time to time also.

Here is my HijackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:19:44 PM, on 3/30/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\TEMP\win52.exe
C:\WINDOWS\sm56hlpr.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe
C:\WINDOWS\system32\uopkngvj.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\BluetoothAuthorizationAgent.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\uopkngvj.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

BC AdBot (Login to Remove)

 


#2 __RiP_ChAiN_

__RiP_ChAiN_

    Eh, whatever goes here.


  • Members
  • 1,592 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Omaha, Nebraska U.S.A
  • Local time:12:03 PM

Posted 10 April 2008 - 08:18 PM

Apologies for the delay in replying, but the forums have been overwhelmed with HIjackThis logs lately. If you still need help, please post back with a new HijackThis log, along with an update of the problems you are currently experiencing.
Posted Image

#3 __RiP_ChAiN_

__RiP_ChAiN_

    Eh, whatever goes here.


  • Members
  • 1,592 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Omaha, Nebraska U.S.A
  • Local time:12:03 PM

Posted 22 April 2008 - 07:31 AM

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users