Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

"warning! Spyware Detected On Your Computer"


  • This topic is locked This topic is locked
8 replies to this topic

#1 Tom22

Tom22

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:16 AM

Posted 28 June 2008 - 09:07 PM

Problem started with desktop "AntiVirusXP2008" and a very slow computer. I used Spybot to fix the desktop problem and 27 other problems. After this, the computer was still slow and shutdown and re-booted every 20-30 minutes. Also a new text box was on the desktop saying "Warning! Spyware detected on your computer" complete with a "Buy" button. After many hours of work I found this web site with a recommendation to buy STOPzilla. STOPzilla removed the desktop problem and 57 other problems but did not fix the slow computer and other problems. My task Manager shows numerous process running most of which appear bogas. Also, a new pop up occurs occasionally that says "Warning! You have 5407 critical objects on your computer" with the usual "Buy Now" button. A second STOPzilla scan identified 14 more problems. The new infection names are Malware Protector, Secure Desktop Hijacker, Sweg, Winds32, Core and Virus Alert. After removing these, the computer is still extremely slow and it still has the "Warning" popup. I have a HijackThis File but not sure how to submit it. Any help is appreciated. Tom22

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,421 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:03:16 AM

Posted 28 June 2008 - 09:33 PM

Hello and welcome. Please first disable Spybot while the scan is done, you can turn it on afterward.

Please download Malwarebytes Anti-Malware and save it to your desktop.
alternate download link 1
alternate download link 2
  • Make sure you are connected to the Internet.
  • Double-click on Download_mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
  • MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
  • On the Scanner tab:
    • Make sure the "Perform Quick Scan" option is selected.
    • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
  • Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad and you may be prompted to restart your computer. (see Note below)
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply and exit MBAM.
Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 DustinN535

DustinN535

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:16 AM

Posted 28 June 2008 - 11:58 PM

im having the same problem i tried what was posted but it kept freezing i use avg anti spyware and run Mcafee i dont know what to do its really bugging me i cant remove Antivirus XP 2008 please help

#4 TMacK

TMacK

  • Members
  • 4,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:B.C. Canada
  • Local time:12:16 AM

Posted 29 June 2008 - 12:12 AM

Hi DustinN535, Welcome to Bleeping Computer.

If you have a problem you would like to discuss, please start your own topic.

This will help to avoid the confusion, of trying to help two or more people, in the same thread, with different problems.
Even if your problem is similar to the original poster's problem, the solution could be totally different due to different hardware, software, system requirements, etc....

This is also known as hijacking a thread, which is not considered to be proper forum etiquette.

Thank you for your cooperation :thumbsup:
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.

aaaaaaaa a~Suzie Wagner

#5 Tom22

Tom22
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:16 AM

Posted 29 June 2008 - 10:20 AM

Hi boopme,

I sent a "QuickReply" but don't see my entry here. Do I need to repeat?

Tom22

#6 Tom22

Tom22
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:16 AM

Posted 29 June 2008 - 12:21 PM

Hi boopme,

Here's what I did and the results:
1. Saved Mbam-Setup file to desktop
a.. English OK
b. Close all software Next
c. Accepted agreement Next
d. Information screen(New Ver 1.19 on 6/28/08) Next
e. Install in Program file folder Next
f. No Start Folder Next
g. Create Desktop Icon Next
h. Locate in Program File folder Install
i. Update and Launch ...... were checked I Clicked Finish
j. It updated and installed the program

2.I performed a Quick Scan
3. It scanned 2538 objects with no infections then stopped prematurely with "Dr. Watcon Post Mortum Debugger has encountered a problem and needs to close" "Send/Don't Send"

4. Could not uninstall the files in my Program File folder.

5. Created a new folder in my Program File folder and did the whole thing again and this time it stopped prematurely after 2737 objects scanned with no infections and a test box with "Malwarebytes' AntiMalwayr has encountered a problem and needs to close. I hit don't send. Sounds like yesterday's new version of mbam.exe software is bad.

6. I now have two copies of this thing in my Program File folder that I cannot uninstall. I can erase but when I run the mbam program, it says they are still their and it aborts because it can't rename a folder.

Here is my HijackThis file. Does it helps? STOPzille was turned off for this test. What can I do now?

Logfile of HijackThis v1.99.1
Scan saved at 13:13:31, on 6/29/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Tom22

Edited by boopme, 29 June 2008 - 01:20 PM.
Removed HJT Log


#7 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,421 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:03:16 AM

Posted 29 June 2008 - 01:19 PM

Hi Tom Isaw some things in that Log that need to be dealt with by the HJT team.
I am deletimg that log as they aren't to be posted here . Follow these instructions and come back to this thread to tell us you have posted the HJT log. So we can close this one,thanks.
Boopme

Please follow the instructions in this tutorial for posting a HijackThis Log.
Preparation Guide for use before posting a HijackThis Log

After you have created it,post the log here HijackThis Logs and Malware Removal and NOT in this topic,thanks.

Click on New Topic and copy/paste the entire log into the reply. Give it a relevant title.
Once you have posted the log DO NOT reply to it or change it until contacted or advised to do so by the HJT Team tech.
Should you have any other questions about this ask those here.

Edited by boopme, 29 June 2008 - 01:21 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#8 Tom22

Tom22
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:16 AM

Posted 29 June 2008 - 03:53 PM

Hi Boopme,

I have posted the new version of HijackThis to the other forum.

Thanks,

Tom22

#9 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,421 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:03:16 AM

Posted 29 June 2008 - 07:21 PM

Great job TOM , If needed I am a PM away.
Now that your log is properly posted, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a HJT Team member, nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show it the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the HJT Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the HJT Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the HJT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.

If after 5 days you still have received no response, then post a link to your HJT log in the thread titled "Haven't Had A Reply In Five Days?".

To avoid confusion, I am closing this topic.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users