Fake Anti-Virus Sofrware Virus

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I am currently using Windows XP Home Edition. The other day I obtained a
virus that is giving the false appearence of an anti-virus program. It
changed my homepage to www.topsecuritysite.com (which I cannot change), put
two icons on my desktop ("Security Troubleshooting" and "Online Security
Guide") and a little flashing icon in my taskbar that reads "Virus Alert!"
when scrolled over. I use Norton AntiVirus and Webroot Spy Sweeper and both
have consistantly found corrupt files and removed them both in and out of
safe mode and the problem still persists. System restore will not work
either and I've tried to go back to dates weeks ago even though I'm sure the
problem only started yesterday (Wednesday, May 17th). If someone could help
me it would be greatly appreciated.
 
Isaac R. wrote:
System restore will not work
either and I've tried to go back to dates weeks ago even though I'm sure the
problem only started yesterday (Wednesday, May 17th). If someone could help
me it would be greatly appreciated.
Click to expand...

A virus scan may detect a threat in the System Restore folder even
though you have removed the threat.
For instructions on how to turn off System Restore, read your Windows
documentation, or one of the following articles:
How to turn off or turn on Windows XP System Restore
http://service1.symantec.com/SUPPOR...2001111912274039?OpenDocument&src=sec_doc_nam

Next job to do, go here.
ActiveX Spyware & Adware Scanning
http://www.spywareinfo.com/xscan.php
This scanner is an ActiveX applet. After a short delay in which your
browser downloads the control file, you will receive a "Warning
Dialogue" requesting permission for the scanner to run. Click "Yes" and
the applet will pop up and scan. You will be alerted if any spyware is
found. When a spyware or malware is found, you will be alerted and
asked if you want to remove it. If no spyware is found, the scanner
will disappear on its own.
If nothing happens, or if you are using a browser other than Internet
Explorer, click here and choose either "Open" or "Run this program from
its current location". Do not choose "Download".
http://www.xblock.com/download/xclean_micro.exe

Or,
http://www.pandasoftware.com/produc...E0-4160-81ED-7F8C6F9C77ED}&NRCACHEHINT=Guest/
SpyXposer is the new free tool for detecting spyware and other threats
hidden in your PC.
Not only will you find out if your PC is infected with spyware, but
you'll also see if other types malware are installed:
Dialers
Hacking tools
Jokes
Security risks.
Hoaxes
This application is updated at least once a day, so it can always root
out even the very latest spyware.
And you don't even need to install any program, all you need is to be
connected to the Internet.

Securing Your Computer: Temporarily Disable Real Time Monitoring
Programs.
http://wiki.castlecops.com/Securing_Your_Computer:_Temporarily_Disable_Real_Time_Monitoring_Programs
Malware Removal and Prevention: Introduction
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
Malware Removal and Prevention: Overview
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Overview
Malware Prevention: Prevent Re-infection
http://wiki.castlecops.com/Malware_Prevention:_Prevent_Re-infection
If Your PC is Infested w/ Spyware & Adware...
http://spywarewarrior.com/sww-help.htm
http://spywarewarrior.com/viewtopic.php?t=6914
http://spywarewarrior.com/viewtopic.php?t=10
http://spywarewarrior.com/viewforum.php?f=30

Important: Create a specific folder on your hard drive called
HijackThis to keep its backups.
You can do this by going to My Computer (Windows key+e) then double
click on C: then right click and select New then Folder and name it
HijackThis. Download and unzip HijackThis.exe into this folder.
http://www.merijn.org/downloads.html Or, http://tomcoyote.com/hjt/
If possible run HJT in Normal mode ( not Safe ) with all your normal
startup's working.
HijackThis Tutorial - How to Analyse your own log
http://spywarewarrior.com/viewtopic.php?t=3624
http://hometown.aol.co.uk/jrmc137/hjttutorial/tutorial.htm
http://www.bleepingcomputer.com/tutorials/tutorial42.html
HijackThis log file analysis ( online )
http://hijackthis.de/index.php?langselect=english
Or,
http://startup.networktechs.com/page-68.html
http://hjt.iamnotageek.com
 
I had the same problem and discovered it was a virus called
puper.dll.It was found in the c:\windows\system folder.
Regards Dof.
 
If none of the above helps you.. try the following combo.

NOD32 AV and Ewido Anti-Malware - Perform a full system scan after you
select the "Snan all files" option. It might take couple of hours (depending
on the HDD size).

Pls let us know what helped. Best of Luck!
t
 
Back
Top