malware

[Guest]

I have an icon on my task bar that is driving me nuts. Its a red circle with
a red line thru it and it changes to a question mark..Back and forth all the
time flashing.Then every 20 - 30 seconds a message comes up saying:"System
detected virus activities,They may cause critical system failure.Please use
antimalware software to clean & protect your system from parasite
programs.Click this ballon to get all available software" When you click on
it a website pops up for virusburst.you can scan your system with it and a
bunch of spyware comes up but you have to buy the software to remove them..I
have run spybot and removed all spyware but this icon and messages keep
coming up..How do i get rid of this?? I am also running McAfee virus and it
is up to date..
Any help will be appreciated

 

[Ken Blake, MVP]

I have an icon on my task bar that is driving me nuts. Its a red
circle with a red line thru it and it changes to a question
mark..Back and forth all the time flashing.Then every 20 - 30 seconds
a message comes up saying:"System detected virus activities,They may
cause critical system failure.Please use antimalware software to
clean & protect your system from parasite programs.Click this ballon
to get all available software" When you click on it a website pops up
for virusburst.you can scan your system with it and a bunch of
spyware comes up but you have to buy the software to remove them..I
have run spybot and removed all spyware but this icon and messages
keep coming up..How do i get rid of this?? I am also running McAfee
virus and it is up to date..

You are infected. Read here:
http://www.bleepingcomputer.com/forums/topic63896.html

 

[David H. Lipman]

From: "starrider69" <[email protected]>

| I have an icon on my task bar that is driving me nuts. Its a red circle with
| a red line thru it and it changes to a question mark..Back and forth all the
| time flashing.Then every 20 - 30 seconds a message comes up saying:"System
| detected virus activities,They may cause critical system failure.Please use
| antimalware software to clean & protect your system from parasite
| programs.Click this ballon to get all available software" When you click on
| it a website pops up for virusburst.you can scan your system with it and a
| bunch of spyware comes up but you have to buy the software to remove them..I
| have run spybot and removed all spyware but this icon and messages keep
| coming up..How do i get rid of this?? I am also running McAfee virus and it
| is up to date..
| Any help will be appreciated



Two part reply..

Perform Part 1 then perform Part 2.

If the first two parts don't work, perform the alternate section.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.



Part 1
-----------

Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool -- SmitRem.exe
http://noahdfear.geekstogo.com/click counter/click.php?id=1

http://www.bleepingcomputer.com/forums/topic43659.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it will be
displayed in your browser (Opera, FireFox or Internet Explorer). However, if you are using
WinXP, Win2K or Win2003 your system will be left in a state where you will have to manually
shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in your bowser
but your PC will automatically be shutdown. It is suggested that you move the report out of
c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.


ALTERNATE:

Part 1
-----------

Secured2K's SpyAxe, PSGuard, Smitfraud, Sinnaka and Alemod removal tool.

http://secured2k.home.comcast.net/tools/AntiPuper.exe

http://forums.mcafeehelp.com/viewtopic.php?t=65072


Part 2
-----------

S!ri's SmitfraudFix
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php


Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.

* * * Please report back your results * * *

 

[Guest]

Thanks Ken...You Helped me out alot..Damn spyware..

 

[Guest]

Thanks David but I got rid of it with Ken's instructions..You guys are great

 

[Ken Blake, MVP]

Thanks Ken...You Helped me out alot..Damn spyware..

You're welcome. Glad to help.

 

[David H. Lipman]

From: "starrider69" <[email protected]>

| Thanks David but I got rid of it with Ken's instructions..You guys are great
|

Excellent.

Basically Ken pointed you to Bleeping Computer to use Noahdfear's SmitRem removal tool which
was part of my instructions.