Spyware Popups

[Brohdaw]

I continually receive a red, white, and grey alert window ---
Alert details: File - C:\WINDOWS\wml.exe
Threat: Abebot
"Possible Spyware infection has been detected on your computer by Security
System."
"To remove detected threat you need to update our PC-Antispyware protection."
"Click here to visit PC-Antispyware website"(link)
----- takes me to http://antispyware-reviews.biz/?wmid=4663&pwebmid=R3n1c2Bg8A

These boxes show up next, unshaded and "unclickable"
Clean, Rename, & Delete

Then another link
Update PC-Antispyware protection and remove detected threats
-----take me to same:
http://antispyware-reviews.biz/?wmid=4663&pwebmid=R3n1c2Bg8A


--------------
Additionally, in the lower right hand corner I have a triangle icon states
which automatically populates a message: "Your computer is infected with
sypware! Windows has detected spyware infection on your PC. It is
recommended that you update your antispyware protection to prevent data loss.
Click here to download and
install the most up-to-date antispyware for you. Click here for more
information."

When I click on this...it brings the red, grey, and white window as
described above.
Then same thing all over again.

My problem is, I do not know if this is legit or not; I have AVG and I ran
that, and
these messages continute to show up. There for I tried Ad-Adware (which I
hear mixed opinions about), and rogue remover --- none of these removed the
problem. I also ran my anti-virus system (CA)-which is always on. As a
result, I think this is some type of 'gimmick' attached to my computer
somehow.

Also receiving...

Window titled: System Integrity Scan Wizard

Warning: Your computer may have critical errors in Windows registry and file
system!

The registry and file system errors lead to computer freezes; system crashes
and slowdowns; corrumption of files and documents.

Immediate system integrity scan and repair is strongly recommended.

To scan your computer for errors please click the "next" buttong below.

A small window appears after clicking "next" and then there is a window
titled "Installer" -- PC Cleaner...Welcome to the Installer! This program
will install PC-Cleaner on your PC. By clicking the continue button below
you are accepting our Terms and conditions.


I use IE 7.0
Operating System: Windows Vista

I have tried everything I can on Window Community Help except the one listed
by Malke -- Elephant Boy Computers; seems like that may take a while and
right at this moment, I do not have that kind of time. I will try it but for
now I wanted to submit for help!

 

[David H. Lipman]

From: "Brohdaw" <[email protected]>

| I continually receive a red, white, and grey alert window ---
| Alert details: File - C:\WINDOWS\wml.exe
| Threat: Abebot
| "Possible Spyware infection has been detected on your computer by Security
| System."
| "To remove detected threat you need to update our PC-Antispyware protection."
| "Click here to visit PC-Antispyware website"(link)
| ----- takes me to http://antispyware-reviews.biz/?wmid=4663&pwebmid=R3n1c2Bg8A
|
| These boxes show up next, unshaded and "unclickable"
| Clean, Rename, & Delete
|
| Then another link
| Update PC-Antispyware protection and remove detected threats
| -----take me to same:
| http://antispyware-reviews.biz/?wmid=4663&pwebmid=R3n1c2Bg8A
|
| --------------
| Additionally, in the lower right hand corner I have a triangle icon states
| which automatically populates a message: "Your computer is infected with
| sypware! Windows has detected spyware infection on your PC. It is
| recommended that you update your antispyware protection to prevent data loss.
| Click here to download and
| install the most up-to-date antispyware for you. Click here for more
| information."
|
| When I click on this...it brings the red, grey, and white window as
| described above.
| Then same thing all over again.
|
| My problem is, I do not know if this is legit or not; I have AVG and I ran
| that, and
| these messages continute to show up. There for I tried Ad-Adware (which I
| hear mixed opinions about), and rogue remover --- none of these removed the
| problem. I also ran my anti-virus system (CA)-which is always on. As a
| result, I think this is some type of 'gimmick' attached to my computer
| somehow.
|
| Also receiving...
|
| Window titled: System Integrity Scan Wizard
|
| Warning: Your computer may have critical errors in Windows registry and file
| system!
|
| The registry and file system errors lead to computer freezes; system crashes
| and slowdowns; corrumption of files and documents.
|
| Immediate system integrity scan and repair is strongly recommended.
|
| To scan your computer for errors please click the "next" buttong below.
|
| A small window appears after clicking "next" and then there is a window
| titled "Installer" -- PC Cleaner...Welcome to the Installer! This program
| will install PC-Cleaner on your PC. By clicking the continue button below
| you are accepting our Terms and conditions.
|
| I use IE 7.0
| Operating System: Windows Vista
|
| I have tried everything I can on Window Community Help except the one listed
| by Malke -- Elephant Boy Computers; seems like that may take a while and
| right at this moment, I do not have that kind of time. I will try it but for
| now I wanted to submit for help!

PC-Antispyware is a rogue and is infact malware!



1. Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

2. Disable Notepad's word wrap:
In Notepad.exe; Format --> uncheck; "Word wrap"

3. Download/run Deckard's System Scanner:
http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post in one of the below
expert forums...


{ Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }

Forums where you can get expert advice for HiJack This! (HJT) and Deckard's System Scanner
Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.malwarebytes.org/forums/index.php?showforum=7

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://aumha.net/viewforum.php?f=30
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13

 

[Brohdaw]

Thanks so much! I have posted these logs to "thespykiller" site; I will let
you know if this solves my problem. However, i will mark this as "helpful"
because it seems to me you tried to give everything you could think of at the
moment and for that I thank you!!!

 

[David H. Lipman]

From: "Brohdaw" <[email protected]>

| Thanks so much! I have posted these logs to "thespykiller" site; I will let
| you know if this solves my problem. However, i will mark this as "helpful"
| because it seems to me you tried to give everything you could think of at the
| moment and for that I thank you!!!
|

YW.

What is the URL of the post you created at the "thespykiller" site.
This information will help me to assist others in the future as well as I can have the
administrator (and/or forum helpers) at the "thespykiller" give you special attention.

 

[Brohdaw]

http://thespykiller.co.uk/index.php/topic,6303.new.html#new

 

[David H. Lipman]

From: "Brohdaw" <[email protected]>

| http://thespykiller.co.uk/index.php/topic,6303.new.html#new
|

I pinged Derek and he responded.
Please return to your thread.

 

[Brohdaw]

Thank you so much. I am running Derek's recommendation right now but I
wanted to let you know this has been the best help I have ever received here
- and I've been getting help from her for over ten years. Usually it's
either a really long wait for help, an answer that makes no sense (computer
language "above" me), or never an answer! Thanks so much for your help

 

[Brohdaw]

Donchi,
Died you try the solutions above given to me from David H. Lipman?

 

[Brohdaw]

I hope this does not jinx me, but I think this has finally helped with the
problem. Thanks so much!!!

(I'm just crossing my hands that as soon as I send this, I do not recieve
another spyware pop-up lol; I guess that might be my pessimistic side!)

 

[Brohdaw]

I think this has finally helped with the problem. Thanks YOU so much!!!
(I'm just crossing my hands that as soon as I send this, I do not recieve
another spyware pop-up lol; I guess that might be my pessimistic side!)

 

[Brohdaw]

I apologize for my April 9 duplicate replies; I did not think the first one
went through!