Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Warning! Spyware Detected On Computer Message On Desk Top

  • Please log in to reply
3 replies to this topic

#1 rmz6471


  • Members
  • 10 posts
  • Local time:01:05 AM

Posted 17 February 2006 - 11:15 AM

Help! On my desktop i have a message that my computer is infected by spyware. How do I get rid of this. I have run Spyware Doctore, remove all infected, but i still receive this message

(Moderator edit: thread moved to more appropriate forum. jgweed)

Edited by jgweed, 17 February 2006 - 12:03 PM.

BC AdBot (Login to Remove)


#2 t3s


  • Members
  • 628 posts
  • Gender:Male
  • Location:Somewhere in MD
  • Local time:12:05 AM

Posted 17 February 2006 - 11:25 AM

It sounds like you may want to post an HJT log...

You can Start Here. Please be sure to follow all instructions otherwise it will only impair our ability to help you.

“Technology does not drive change -- it enables change.”


"I'm a cannibal... I eat Crackers"


Hacker != Cracker


website is down until further notice. . . . 

#3 Albert Frankenstein

Albert Frankenstein

  • Members
  • 2,707 posts
  • Gender:Female
  • Location:Michigan, USA
  • Local time:01:05 AM

Posted 17 February 2006 - 11:26 AM

It sounds like you are infected with some version of smitfraud. It is also known as SpySherrif, SpyAxe, or it's latest incarnation: SpyFalcon.

Depending on your level of expertise:

There is a forum here at Bleeping Computer for self help, you can find it HERE. Here you can find instructions for removal of the infection.

Or, for help with removing your infection I would like to refer you to the Highjack This (HJT) forum here at BleepingComputer.com:

First: Read the Preparation Guide found HERE. It is very important that you follow ALL of the instructions found within. (There are many important steps in this guide that may clean your computer.)

Second: Post your system information along with a brief description of the problems you are having, and your HJT log in the HJT forum found HERE.

NOTE: Please, after you post your HJT log DO NOT make another post in the HJT forum until it has been responded to by a member of the HJT Team. The first thing they look for, when looking for logs to reply to, is 0 replies. If you make another post there will be 1 reply. The team member glancing over the replies might think someone is already helping you out and will not respond. So, just make your post and let it sit there until a team member responds. The volunteers who work that forum are very busy, so please be patient and wait for a response. It can sometimes take a few days.

Third: If, after finishing your work with the folks at the HJT forum you have issues with XP related to the removal of the infection, then come back in here and let us help you get your computer back to normal.

You are in good hands! Good luck!

Currently home chillin' with the fam and my two dogs!

#4 Enthusiast


  • Members
  • 5,898 posts
  • Location:Florida, USA
  • Local time:12:05 AM

Posted 17 February 2006 - 04:50 PM

Was the message in a box from Windows Messenger Service with a link to buy a spyware removal ap or was it a full Windows blue screen?

Try turning the Windows Messenger service off, which will not hurt anyway:

To do that:
--In Windows XP, click Start>>Control Panel
--In Windows 2000, click Start>>Settings>>Control Panel

In both versions:
--Double click Administrative Tools
--Double click Services
--Double click Messenger
--Under Service Status, click Stop
--In the box next to Startup Type, select Disabled
--Click Apply>>OK

Alternatively, you can download a small program that will disable Messenger Service called "Shoot The Messenger".
It's freeware available at http://www.grc.com/default.htm

Edited by Enthusiast, 17 February 2006 - 04:54 PM.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users