virus removal

[loggon]

saying my computer may be at risk i keep getting an xp police antivirus
programme poping up looks like windows security centre but when i click on it
my firewall blocks this and show XP POLICE ANTIVIRUS my firewall and scan
doesnot remove this .please help

 

[Leythos]

saying my computer may be at risk i keep getting an xp police antivirus
programme poping up looks like windows security centre but when i click on it
my firewall blocks this and show XP POLICE ANTIVIRUS my firewall and scan
doesnot remove this .please help

These sites are for downloading Anti-Malware and Anti-Spyware tools, in
order that I would use them myself:

MalwareBytes Anti-Malware
From http://www.bleepingcomputer.com/
http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe

Dave Lipman's tools:
Download MULTI_AV.EXE from the URL --
(this is a non-english site, but it's a great tool)
http://www.pctipp.ch/downloads/dl/35905.asp


--
Leythos - (e-mail address removed) (remove 999 to email me)
Public Service Warning: Learn about PCButts before you trust:
http://www.velocityreviews.com/forums/t513604-author-of-removeit.html
http://www.google.com/search?hl=en&q=pcbutts1+thief
http://tinyurl.com/4rruwd

 

[Malke]

saying my computer may be at risk i keep getting an xp police antivirus
programme poping up looks like windows security centre but when i click on
it my firewall blocks this and show XP POLICE ANTIVIRUS my firewall and
scan doesnot remove this .please help

Your system is infected with a rogue antivirus program. It is called "rogue"
because it pretends to be A Good Guy but is really Evil. Do not pay them!

Look for removal steps at either of these sites:

Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html
or here - Malwarebytes malware removal guides - http://tinyurl.com/5xrpft ]

These may work for you and all may be well. However, in many cases the
computer will also be infected with Zlob and/or Vundo trojans and protected
by a rootkit. These machines are extremely difficult to clean.

If your machine is one of these cases, either get guided help at one of the
specialty forums below OR back up your data and do a clean install of
Windows. It is your choice. If you are unsure how to back up your data or
how to do a clean install, you can take your machine to a local computer
professional. I don't recommend using BigComputerStore/GeekSquad types of
places.

PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS.

http://aumha.org/downloads/hijackthis.zip
http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://www.malwarebytes.org/forums/index.php?showforum=7
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/
http://www.thespykiller.co.uk/index.php?board=3.0
http://forums.subratam.org/index.php?showforum=7

Malke

 

[Santo]

Kill the process xppolice from the task manager and you can delete the xp
police folder and the files from the program files. In order to avoid getting
infected, please clear the temporary files and reset internet explorer.

 

[David H. Lipman]

From: "Santo" <[email protected]>

| Kill the process xppolice from the task manager and you can delete the xp
| police folder and the files from the program files. In order to avoid getting
| infected, please clear the temporary files and reset internet explorer.

How does that help with the DLL, iehost.dll ?
It doesn't exist in the XP Police folder.

 

[loggon]

I have tried to open the task manager but it comes up as task manager is now
disabled.I also tried deleteing the folder it doesnot allow me to do so
because the programme is running .There is no way i can actually stop this
p[rogramme running and it looks exactly like windows security centre with the
shield icon.

 

[Newell White]

Copy and paste the file C:\windows\system32\taskmgr.exe to "My Documents".
Rename it as mytaskmgr.exe, then move this back to C:\windows\system32.
Start... All Programs ... Run... C:\windows\system32\mytaskmgr

You can certainly use this technique to run myregedit.exe if the malware
prevents regedit from running.

Note also that you do not have to remove the malware files/folders to stop
them running. If you re-name malware.exe to zzx_malware.exe, it won't run
after the next reboot, and you can easily find it again. Before you do this,
take a note of its 'modified' date and time. This is a clue as to when you
picked up the infection, and all files which are not Windows components which
were modified within a minute of this are suspect.
--
Regards,
Newell White

I have tried to open the task manager but it comes up as task manager is now
disabled.I also tried deleteing the folder it doesnot allow me to do so
because the programme is running .There is no way i can actually stop this
p[rogramme running and it looks exactly like windows security centre with the
shield icon.

Kill the process xppolice from the task manager and you can delete the xp
police folder and the files from the program files. In order to avoid getting
infected, please clear the temporary files and reset internet explorer.

 

[David H. Lipman]

From: "loggon" <[email protected]>

| I have tried to open the task manager but it comes up as task manager is now
| disabled.I also tried deleteing the folder it doesnot allow me to do so
| because the programme is running .There is no way i can actually stop this
| p[rogramme running and it looks exactly like windows security centre with the
| shield icon.

You are most likely still infected.

Malwarebytes Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

SuperAntiSpyware
http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE

 

[Magazyn]

Research , research , research ... and than decide if it's fake , good or
not.
I wish I can make just 1 cent on every stupid click like that. I can be a
millionaire in just a few weeks !

Check it few times ...you can also use great research tool - GOOGLE search
engine !

Just my 2 cents

Lucas

 

[David H. Lipman]

From: "Magazyn" <[email protected]>

| Research , research , research ... and than decide if it's fake , good or
| not.
| I wish I can make just 1 cent on every stupid click like that. I can be a
| millionaire in just a few weeks !

| Check it few times ...you can also use great research tool - GOOGLE search
| engine !

| Just my 2 cents

| Lucas

Actually, you must be careful using Google as a search can lead you to the dark side of
the Internet. Even a benign, innocent, search.