Spyware and virus alerts

G

gary

I have Symantics Anti-Virus installed and I run updated Ad-Aware and
SPYBOT.

All of a sudden,I'm getting a lot of pop-ups saying that my system has
Spyware, malware, viruses (i.e., Trojan-variants, Worm, etc) and I'm
getting getting prompts to download various "security software" (for
example: Virus Ranger, AntiSpy Kit, WinSecure Antivirus, WinSpy
Control, WinAnonymous, etc).

How can I get clean my system and stop the pop-ups and prompts?
 
B

Brian A.

gary said:
I have Symantics Anti-Virus installed and I run updated Ad-Aware and
SPYBOT.

All of a sudden,I'm getting a lot of pop-ups saying that my system has
Spyware, malware, viruses (i.e., Trojan-variants, Worm, etc) and I'm
getting getting prompts to download various "security software" (for
example: Virus Ranger, AntiSpy Kit, WinSecure Antivirus, WinSpy
Control, WinAnonymous, etc).

How can I get clean my system and stop the pop-ups and prompts?
Click to expand...

Run a full system virus scan with fully up-to-date definitions.

**It is very important to run the update for each program before running the app/s
to be sure you have the latest definitions.**
Run the programs in Safe Mode after assuring you have shut down all running tasks
except explorer or systray and all apps are fully up to date.
Remove your Temp Internet files: Right click IE. Under the General tab click Delete
Files, put a check in Delete all Offline..., click OK and close when finished.
Delete all files in c:\windows\temp.

Download/run Cool Web Shredder from:
http://www.intermute.com/products/cwshredder.html

For Info on Cool Web Search variants:
http://www.richardthelionhearted.com/~merijn/cwschronicles.html

Download/install/run Ad-Aware SE to detect/rid of any other parasites/spyware that
may be installed. It can be obtained free from:
http://www.lavasoftusa.com/
After installing Ad-Aware, open it and click on the ref update to get the latest
up-to-date ref file, then run Ad-Aware and delete everything it finds.

Download/install/run Spybot - Search & Destroy:
http://security.kolla.de/index.php?lang=en&page=download
Run it at it's default settings until you learn an know more about it. Spybot S&D
is more of an advanced users tool and changing from the default settings can be
dangerous to the novice user. Items found in the default settings that are RED can
usually be safely removed. If you are unsure of a found item, do not remove it and
ask for help.

If you still have problems, download/run HijackThis from:

http://www.aumha.org/secure.htm
http://www.richardthelionhearted.com/~merijn/downloads.html
http://majorgeeks.com/downloads31.html

Copy HJT to it's own folder, this is where the log files will be saved. Run HJT in
Normal Mode.
Do not remove anything with it until you get advice on what to remove, HJThis will
list many apps that are needed along with the bad ones. Removing items listed
hap-hazardly without knowing what they are can/will create a royal mess. Read the
quick start here on how to create a log file that can be copied/pasted into a forum
that can provide assistance on removal of unwanted pests.
http://mjc1.com/mirror/hjt/#quick

Then post the logs to an appropriate forum where they specialize in
spyware/hijacker removal. Please read any sticky notes for proper posting which are
most commonly posted first at the top in each specific forum. Read any information
under each forum category name for information on what that particular one is used
for, look for the proper one that you post logs to.
http://forums.spywareinfo.com/
http://aumha.net/
http://forum.aumha.org/

After running the above and assuring you have a clean machine:
It’s also a good idea to have a HOSTS file to block bad sites, scroll to HOSTS File
Manager here:
http://www.mvps.org/PracticallyNerded/Software.htm

Download/install/run SpywareBlaster which stops the bad boys before they even get a
chance to install:
http://www.javacoolsoftware.com/spywareblaster.html

--


Brian A. Sesko { MS MVP_Windows Desktop User Experience }
Conflicts start where information lacks.
http://basconotw.mvps.org/

Suggested posting do's/don'ts: http://www.dts-l.org/goodpost.htm
How to ask a question: http://support.microsoft.com/kb/555375
 
L

Leythos

pcbutts1 said:
Use "Remove-it" it will clean your system. Download it here
Click to expand...

WARNING - the website in the removed link contains filthy pornographic
files created by the PC BUTTS1 poster. Downloading files from a porno
site is always a bad idea.

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(e-mail address removed) (remove 999 for proper email address)
 
A

Alias

Leythos said:
WARNING - the website in the removed link contains filthy pornographic
files created by the PC BUTTS1 poster. Downloading files from a porno
site is always a bad idea.
Click to expand...

No porn on that website. Do you always lie like this? The real warning
should be that these types of programs should be downloaded from the
original web sites.

Alias
 
P

PA Bear [MS MVP]

The pop-ups are symptoms of an already-present hijacker. Do NOT click on
any links in the pop-ups or download the "recommended" software!

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
 
L

Leythos

No porn on that website. Do you always lie like this? The real warning
should be that these types of programs should be downloaded from the
original web sites.
Click to expand...

He's posted MANY Porno pictures on that site, check the sig for the
links he's posted in many groups - all stolen from other porno sites,
modified by him, according to him, and exposed to kids through search
engines.

--

Leythos - (e-mail address removed) (remove 999 to email me)

Fight exposing kids to porn, complain about sites like PCBUTTS 1.COM
that create filth and put it on the web for any kid to see: Just take a
look at some of the FILTH he's created and put on his website:
http://forums.speedguide.net/archive/index.php/t-223485.html all exposed
to children (the link I've include does not directly display his filth).
You can find the same information by googling for 'PCBUTTS1' and
'exposed to kids'.
 
A

Alias

Leythos said:
He's posted MANY Porno pictures on that site, check the sig for the
links he's posted in many groups - all stolen from other porno sites,
modified by him, according to him, and exposed to kids through search
engines.
Click to expand...

I didn't see any on the link he just posted. No body needs pcbutts1 to
find porn on the net, Leythos.

Alias
 
L

Leythos

I didn't see any on the link he just posted. No body needs pcbutts1 to
find porn on the net, Leythos.
Click to expand...

And the link he posts is to a website, and you will notice I said
WEBSITE, not web-page.

No reputable anti-malware site host porn on the same site that they
direct the public to.

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(e-mail address removed) (remove 999 for proper email address)
 
A

Alias

Leythos said:
And the link he posts is to a website, and you will notice I said
WEBSITE, not web-page.

No reputable anti-malware site host porn on the same site that they
direct the public to.
Click to expand...

I don't see any porn anywhere on that web site and I went to the home
page, http://pcbutts1.com/.

So, are you seeing things that are not there or what?

Alias
 
P

pcbutts1

That's because it's not a porno site. Leythos is a disgruntled news group
troll who is obsessed with me. He has been stalking me for 4 years. He will
only stop when he dies or I make him.

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell
 
A

Alias

pcbutts1 said:
That's because it's not a porno site. Leythos is a disgruntled news group
troll who is obsessed with me. He has been stalking me for 4 years.
Click to expand...

Yeah, and he hates it when he's wrong, which is most of the time.
He will
only stop when he dies or I make him.
Click to expand...

I did notice by visiting your site that you recommend IE over Netscape
5. I use Firefox version 2.0.0.12. And it says:

Browser Type Netscape failed (use Internet Explorer)
Browser Version 5 failed (use Internet Explorer)

Advising using IE is not good advice.

Alias
 
L

Leythos

I don't see any porn anywhere on that web site and I went to the home
page, http://pcbutts1.com/.

So, are you seeing things that are not there or what?
Click to expand...

Look at the links that he's posted in this and other groups over the
last couple years, they are still on his porno website. Google is his
enemy.

Go to this website:
http://forums.speedguide.net/archive/index.php/t-223485.html

Then look at the links that I copied from his other posts, they are all
from his website.

You would have to be blind to not see the porn.

--

Leythos - (e-mail address removed) (remove 999 to email me)

Fight exposing kids to porn, complain about sites like PCBUTTS 1.COM
that create filth and put it on the web for any kid to see: Just take a
look at some of the FILTH he's created and put on his website:
http://forums.speedguide.net/archive/index.php/t-223485.html all exposed
to children (the link I've include does not directly display his filth).
You can find the same information by googling for 'PCBUTTS1' and
'exposed to kids'.
 
L

Leythos

pcbutts1 said:
That's because it's not a porno site
Click to expand...

Then how do you explain THESE LINKS YOU'VE POSTED and the content in
them that you created?

Want to know what PCBUTTS1 is really about?

*** WARNING - these links contain foul/pornographic content of an
abusive nature created by PCBUTTS1 and still hosted on his public
website ***

http://www.pcbutts1.com/rlk/rlk.htm Exposed to Kids ,
http://www.pcbutts1.com/license.htm Exposed to Kids ,
http://www.pcbutts1.com/downloads/max.htm Exposed to Kids ,
http://www.pcbutts1.com/downloads/mpv.htm Exposed to Kids ,
http://www.pcbutts1.com/downloads/wtcpcb.htm Exposed to Kids ,
http://www.pcbutts1.com/cracks.htm Exposed to Kids ,
http://www.pcbutts1.com/Louthe*******.htm REMOVED ,
http://www.pcbutts1.com/downloads/bughunters.htm Exposed to Kids ...

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(e-mail address removed) (remove 999 for proper email address)
 
L

Leythos

Yeah, and he hates it when he's wrong, which is most of the time.
Click to expand...

Nope, I appreciate knowing when I'm wrong, unlike you.

Butts host porn on that site, the links are found at the site in my sig,
and all of them were posted in public by Butts himself - he's even
bragged about creating that filth.

Actually, when he stops being unethical I will go away.

--

Leythos - (e-mail address removed) (remove 999 to email me)

Fight exposing kids to porn, complain about sites like PCBUTTS 1.COM
that create filth and put it on the web for any kid to see: Just take a
look at some of the FILTH he's created and put on his website:
http://forums.speedguide.net/archive/index.php/t-223485.html all exposed
to children (the link I've include does not directly display his filth).
You can find the same information by googling for 'PCBUTTS1' and
'exposed to kids'.
 
P

pcbutts1

Those links are about you Stalker! You are the one that needs to explain
them not me. They specifically name YOU! and other newsgroup trolls and
MVP's who tried to shut me down. They are NOT porn you idiot unless you get
excited by looking at it. Do you get excited by looking at them Stalker?
This is porn
http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=GGLL,GGLL:2008-03,GGLL:en&q=porn
big difference.
Pornography or porn is the explicit depiction of sexual subject matter,
especially with the sole intention of sexually exciting the viewer.
http://en.wikipedia.org/wiki/Pornography those picture must excite your sick
a$$ because you keep demanding that they are porn.


--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell
 
L

Leythos

pcbutts1 said:
Those links are about you Stalker! You are the one that needs to explain
them not me. They specifically name YOU! and other newsgroup trolls and
MVP's who tried to shut me down.
Click to expand...

You created that filth and you posted the links to it - they are about
you, your ethics, your dishonor, your mental state, and they show that
you do host porn, created by you, on your website that you sucker people
into downloading from to inflate your hit counts that you even stated
you get paid for.

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(e-mail address removed) (remove 999 for proper email address)
 
L

Leythos

pcbutts1 said:
Crybaby jealous little phucker. Go cry to your mama.
Click to expand...

You just prove my point each time you post butts - and each time you
show the public how unethical you really are and that they should avoid
your porno website.

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(e-mail address removed) (remove 999 for proper email address)
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

VIRUS ALERT??? 3
annoying pop up message 13
Pop up Spyware 2
Pop-up vs. virus 13
New Virus? 9
How to remove virus and spyware problems in Windows 1
OK Same Spyware Hell (about: blank) - but, more! 4
virus infested machine 5

Top