Spyware

[sunshine48091]

How do I disable the pop-up saying computer is copying info and then download
this product for whatever price. I just want the pop-up warning to shut off.

 

[Malke]

How do I disable the pop-up saying computer is copying info and then download
this product for whatever price. I just want the pop-up warning to shut off.

Since you forgot to include the name of whatever the malware product is,
I can't give you specific removal steps. It could be a variant of
Smitfraud, Vundo, Zlob, etc.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://www.pctipp.ch/downloads/sicherheit/35905/multi_av_scanning_tool.html
- download site

The site is in German but David's tool is in English so don't let that
worry you. Scroll all the way down to almost the bottom of the page and
you'll see a box titled "Infos Zum Download - Multi-AV Scanning Tool".
You'll see "Download von www pctipp.ch" and the live link to download
Multi_AV.

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).

Standard disclaimer: I can't see and test your computer myself, so these
are just suggestions based on many years of being a professional
computer tech; suggestions based on what you've written. You should not
take my suggestions as a definitive diagnosis. If you can't do the work
yourself (and there is no shame in admitting this isn't your cup of
tea), take the machine to a professional computer repair shop (not your
local equivalent of BigComputerStore/GeekSquad). Please be aware that
not all local shops are skilled at removing malware and even if they
are, your computer may be so infested that Windows will need to be
clean-installed. If possible, have all your data backed up before you
take the machine into a shop.


Malke

 

[nass]

How do I disable the pop-up saying computer is copying info and then download
this product for whatever price. I just want the pop-up warning to shut off.

Go through these Cleaning steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

Lots of tools to download and disinfect your machine (offline scanner):
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/

After the scan run disk cleanup on your drive.


2- Download the Hijackthis and send the report to one of many
forums for analysis and troubleshooting:
http://www.merijn.org/index.php
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis) is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.

HTH.
Let us know how it is going.
nass

 

[sunshine48091]

This is what it says word for word: Warning! Potential Spyware Operation!
Your computer is making unauthorized copies of your system and Internet
files. Run full scan now to prvent any unauthorized access to your files!
Click yes to download spyware remover!
First off, they can't even spell right. It gives a yes or no button to
click on, I click no, but it doesn't take no for an answer.
Thanks

How do I disable the pop-up saying computer is copying info and then download
this product for whatever price. I just want the pop-up warning to shut off.

Go through these Cleaning steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

Lots of tools to download and disinfect your machine (offline scanner):
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/

After the scan run disk cleanup on your drive.


2- Download the Hijackthis and send the report to one of many
forums for analysis and troubleshooting:
http://www.merijn.org/index.php
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis) is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.

HTH.
Let us know how it is going.
nass

 

[nass]

This is what it says word for word: Warning! Potential Spyware Operation!
Your computer is making unauthorized copies of your system and Internet
files. Run full scan now to prvent any unauthorized access to your files!
Click yes to download spyware remover!
First off, they can't even spell right. It gives a yes or no button to
click on, I click no, but it doesn't take no for an answer.
Thanks

I think you may have a Trojan fake Alert, Vundo variants, or this:

Trojan-Downloader.Win32.Adload.aq or Troj/SpyDldr-E

Virus Profile: FakeAlert-D
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=140346

Trojan.Crypt.AB
http://www.bitdefender.fr/VIRUS-1000231-fr--Trojan.Crypt.AB.html

Can you please e-mail me your Hijackthis log at:
to_you_ross(at)yahoo.co.uk
Note it is ( _ not -) in the e-mail address.
Thanks,
nass

 

[David H. Lipman]

From: "nass" <[email protected]>


|
| I think you may have a Trojan fake Alert, Vundo variants, or this:
|
| Trojan-Downloader.Win32.Adload.aq or Troj/SpyDldr-E
|
| Virus Profile: FakeAlert-D
| http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=140346
|
| Trojan.Crypt.AB
| http://www.bitdefender.fr/VIRUS-1000231-fr--Trojan.Crypt.AB.html
|
| Can you please e-mail me your Hijackthis log at:
| to_you_ross(at)yahoo.co.uk
| Note it is ( _ not -) in the e-mail address.
| Thanks,
| nass

It could be a FakeAlert Trojan but, I think this is SmitFraud/ZLob Trojan related.

 

[pcbutts1]

Use Remove-it version 18, it's fast and free. It now has over 9500
signatures to remove All variants of Rogue scanners, Desktop/Homepage
Hijackers, Trojans, Codec's, and related Malware/Spyware. Download it here
http://pcbutts1.com/downloads/tools/tools.htm


--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell

This is what it says word for word: Warning! Potential Spyware Operation!
Your computer is making unauthorized copies of your system and Internet
files. Run full scan now to prvent any unauthorized access to your files!
Click yes to download spyware remover!
First off, they can't even spell right. It gives a yes or no button to
click on, I click no, but it doesn't take no for an answer.
Thanks

How do I disable the pop-up saying computer is copying info and then
download
this product for whatever price. I just want the pop-up warning to
shut off.

Go through these Cleaning steps:
1... First, try to clean up your caches, Internet files and delete
cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

Lots of tools to download and disinfect your machine (offline scanner):
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/

After the scan run disk cleanup on your drive.


2- Download the Hijackthis and send the report to one of many
forums for analysis and troubleshooting:
http://www.merijn.org/index.php
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis)
is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.

HTH.
Let us know how it is going.
nass

 

[Leythos]

Remove-it version 18

Hosted on the same site as filthy pornographic material created by
butts, blocks access (according to butts) to reputable malware sites, no
backup of deleted files/data..... Do you really want to trust something
like that?


--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(e-mail address removed) (remove 999 for proper email address)

 

[nass]

From: "nass" <[email protected]>


|
| I think you may have a Trojan fake Alert, Vundo variants, or this:
|
| Trojan-Downloader.Win32.Adload.aq or Troj/SpyDldr-E
|
| Virus Profile: FakeAlert-D
| http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=140346
|
| Trojan.Crypt.AB
| http://www.bitdefender.fr/VIRUS-1000231-fr--Trojan.Crypt.AB.html
|
| Can you please e-mail me your Hijackthis log at:
| to_you_ross(at)yahoo.co.uk
| Note it is ( _ not -) in the e-mail address.
| Thanks,
| nass

It could be a FakeAlert Trojan but, I think this is SmitFraud/ZLob Trojan related.

You could be right, but I seen lots of Trojans Fake alert develop this skill
and copy cat Smitfraud in their behaviour of conning users and Avs.
HTH.
nass

 

[David H. Lipman]

From: "nass" <[email protected]>

|
| You could be right, but I seen lots of Trojans Fake alert develop this skill
| and copy cat Smitfraud in their behaviour of conning users and Avs.
| HTH.
| nass

Yepper!