system spyware warning

[Guest]

in the taskbar there is a yellow triangle icon with a black dash which keeps
flashing and sends out a popup which reads: 'system performance
monitor:warning'
'system perofrmance slowed down 47%. Probable reason: spyware
applications/adware popup windows. I ran windows defender and mcafee and both
did not find any malware. These popups direct you to download spyware
programs.
There are several popups which are extremely annoying. can any tell me how
i can get rid of this flashing icon and stops the popups? Thank you.

 

[David H. Lipman]

From: "spyware warnings" <spyware (e-mail address removed)>

| in the taskbar there is a yellow triangle icon with a black dash which keeps
| flashing and sends out a popup which reads: 'system performance
| monitor:warning'
| 'system perofrmance slowed down 47%. Probable reason: spyware
| applications/adware popup windows. I ran windows defender and mcafee and both
| did not find any malware. These popups direct you to download spyware
| programs.
| There are several popups which are extremely annoying. can any tell me how
| i can get rid of this flashing icon and stops the popups? Thank you.



Two part reply..

Perform Part 1 then perform Part 2.

If the first two parts don't work, perform the alternate section.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.



Part 1
-----------

Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool -- SmitRem.exe
http://noahdfear.geekstogo.com/click counter/click.php?id=1

http://www.bleepingcomputer.com/forums/topic43659.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it will be
displayed in your browser (Opera, FireFox or Internet Explorer). However, if you are using
WinXP, Win2K or Win2003 your system will be left in a state where you will have to manually
shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in your bowser
but your PC will automatically be shutdown. It is suggested that you move the report out of
c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.


ALTERNATE:

S!ri's SmitfraudFix
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php


Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.

* * * Please report back your results * * *

 

[Guest]

From: "spyware warnings" <spyware (e-mail address removed)>

| in the taskbar there is a yellow triangle icon with a black dash which keeps
| flashing and sends out a popup which reads: 'system performance
| monitor:warning'
| 'system perofrmance slowed down 47%. Probable reason: spyware
| applications/adware popup windows. I ran windows defender and mcafee and both
| did not find any malware. These popups direct you to download spyware
| programs.
| There are several popups which are extremely annoying. can any tell me how
| i can get rid of this flashing icon and stops the popups? Thank you.



Two part reply..

Perform Part 1 then perform Part 2.

If the first two parts don't work, perform the alternate section.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.



Part 1
-----------

Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool -- SmitRem.exe
http://noahdfear.geekstogo.com/click counter/click.php?id=1

http://www.bleepingcomputer.com/forums/topic43659.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it will be
displayed in your browser (Opera, FireFox or Internet Explorer). However, if you are using
WinXP, Win2K or Win2003 your system will be left in a state where you will have to manually
shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in your bowser
but your PC will automatically be shutdown. It is suggested that you move the report out of
c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.


ALTERNATE:

S!ri's SmitfraudFix
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php


Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Re: David H. Lipman

Your reply might have been okay, but I remembered 'Spybot S&D' and I simply
downloaded it. Problem solved. That flashing icon in the Task Bar was
itself a Spyware agent. So, if anyone encounters this problem of 'spyware
warning', just download SPYBOT S&D(search and destroy). It does just that:
search and destroys all malware. Thank you. By the way, Windows Defender
SUCKS!

 

[David H. Lipman]

From: "spyware warnings" <[email protected]>


| Your reply might have been okay, but I remembered 'Spybot S&D' and I simply
| downloaded it. Problem solved. That flashing icon in the Task Bar was
| itself a Spyware agent. So, if anyone encounters this problem of 'spyware
| warning', just download SPYBOT S&D(search and destroy). It does just that:
| search and destroys all malware. Thank you. By the way, Windows Defender
| SUCKS!


It is a SmitFraud infection and that was a symptom.. Usually use of Ad-aware SE and/or
SpyBot S&D is inadequate. You may be have been lucky enough to have an older variant that
SpyBot S&D was able to remove.

I would NOT state this will be the case in all situations.