Spyware Infection

[Guest]

Ever since visiting what I thought was a safe website earlier today, I've
continuted to receive this message:

"Your computer is in Danger!
Windows Security Center has detected a spyware/adware infection!
It is strongly recommended to use special antispyware tools to prevent data
loss.
Click here to install the latest protection tools!"

I've tried clicking the balloon that pops up, but nothing happens. I've also
done a Spyware Scan with Mircosoft Anti-Spyware and it came up with no
results. What should I do?

Also, this may be related somehow. Since this "infection", the task manager
has been disabled by my administrator. However, I am the administrator, and I
never disabled the task manager. What's going on?

 

[David H. Lipman]

From: "Chopp" <[email protected]>

| Ever since visiting what I thought was a safe website earlier today, I've
| continuted to receive this message:
|
| "Your computer is in Danger!
| Windows Security Center has detected a spyware/adware infection!
| It is strongly recommended to use special antispyware tools to prevent data
| loss.
| Click here to install the latest protection tools!"
|
| I've tried clicking the balloon that pops up, but nothing happens. I've also
| done a Spyware Scan with Mircosoft Anti-Spyware and it came up with no
| results. What should I do?
|
| Also, this may be related somehow. Since this "infection", the task manager
| has been disabled by my administrator. However, I am the administrator, and I
| never disabled the task manager. What's going on?


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *

 

[Elendil]

Please visit the Detailed Malware Removal page of my website:
www.stopmalware.tk and follow the steps provided. Since David has already
given you instructions to use his Multi_AV (I'm assuming you've used it in
Normal and Safe mode) you can skip all steps that involve it.

Good Luck with Cleaning your Computer!

 

[Guest]

My reply is at the bottom of your message :

Ever since visiting what I thought was a safe website earlier today, I've
continuted to receive this message:

"Your computer is in Danger!
Windows Security Center has detected a spyware/adware infection!
It is strongly recommended to use special antispyware tools to prevent data
loss.
Click here to install the latest protection tools!"

I've tried clicking the balloon that pops up, but nothing happens. I've also
done a Spyware Scan with Mircosoft Anti-Spyware and it came up with no
results. What should I do?

Also, this may be related somehow. Since this "infection", the task manager
has been disabled by my administrator. However, I am the administrator, and I
never disabled the task manager. What's going on?

What is going on is called infection ,dear Chopp!

Nasty malicious software (malware) infection!!!

and you need to clean your computer !

http://pandaman.my.contact.bg
and perform the malware removal instructions to check and clean your computer.

If you need more help , I am here so ask ! ;-)


Regards !

Panda_man

 

[David H. Lipman]

From: "Thota Umesh" <[email protected]>

| your system is infected by a worm that displays such warining messages (do
| not click on any of them) and makes u install all weird software that inturn
| harms ur system more remember windows security center is not a antivirus or
| anyspyware to notify u of infection it just checks to tell u if u have an
| antivirus and firewall with updated virus definations. to remove ur present
| infect check out these links:
| http://safety.live.com (online scanner)
| www.windowsonecare.com (ms antivirus)
| www.freeav.com (avera antivir)
| www.microsoft.com/athome/security/spyware/software/default.mspx (windows
| defender)
|
| Hope this helps...,
| Umesh Thota
| www.windowsworkshop.com
|

There 'ya go suggesting ...

| http://safety.live.com (online scanner)
| www.windowsonecare.com (ms antivirus)

again !

Frankly, they are Beta and in comparison to their Industry peers, they SUCK !

If you want to help, I mean REALLY want to help those who are infected, then go with
Industry leaders of anti malware software. Vendors who have both the ability and reputation
to remove malware.

Microsoft may create soem software, anti virus software is NOT their best and remeber -- it
is still Beta !

Beta software should ONLY be used by paid Beta Testers or thos using sacrificial computers
where bad results of the use of Beta software is not detrimental.

 

[Thota Umesh]

your system is infected by a worm that displays such warining messages (do
not click on any of them) and makes u install all weird software that inturn
harms ur system more remember windows security center is not a antivirus or
anyspyware to notify u of infection it just checks to tell u if u have an
antivirus and firewall with updated virus definations. to remove ur present
infect check out these links:
http://safety.live.com (online scanner)
www.windowsonecare.com (ms antivirus)
www.freeav.com (avera antivir)
www.microsoft.com/athome/security/spyware/software/default.mspx (windows
defender)

Hope this helps...,
Umesh Thota
www.windowsworkshop.com

 

[Edward Luke-Kun BR]

That's not a Spyware infection. It's a spam sended from spammers with the
"messenger" service (it's NOT Windows Messenger)
But Task manager disabled? You should Install a Good Secutiry Suite
software.

For novice users I recommend:

AVG Antivirus Free Edition
Ad-Aware personal Edition
Windows Built-in Firewall software (Activate it using the Security Center)

Good Luck,

Edward_BR