Hello again, can't say i wanted to be here. But A forum is better then Google for my type of problem. Ok, here is the thing, You know windows firewall pops up something when you install a new game saying would you like to block this or not right? well i think some hacker or something has planed one of those windows things saying, You have Spyware!! Called ISpy something. It pops up, every few hours i click X. If i click the Help us get rid of it button, It downloads a trojan that avast finds. It is bugging me to death, it minimizes any game i play and avast and my Stop Sign can't find anything wrong With the pop up. Any way to get rid of this? (When i get home i will update post with more detail on the pop up)
Computer Problem
- Thread starter Maxy :3
- Start date
- Joined
- Aug 14, 2008
- Messages
- 1,246
i had something like that last month i just rebooted my pc with the basic disc and saved everything important to a flash drive
- Joined
- Nov 14, 2008
- Messages
- 1,283
Try spybot s&d. If it can't remove it right then, it will ask you if you want to run a scan on next reboot. Should take care of it. Also, screen shot would help, if possible.
- Joined
- Nov 7, 2008
- Messages
- 4,560
Maxy,
When you say a Windows "thing" pops up, are you referring to a browser pop-up or do you mean a true Windows message box?
Both are somewhat serious, but the browser pop-up is somewhat easier to clean. If you're experiencing a real Windows message pop-up, then you have some serious issues.
First, STOP clicking on the button that says "Click here" or whatever that causes you to download something. This is a widespread trick to lull people into downloading a trojan.
Second,
- What version of Windows are you running?
- What is the specific trojan that Avast warns you and says you have installed?
- What software firewall are you using? You mention Windows Firewall - is this running? Have you authorized any exceptions in it's rules to permit a new program?
- Please run this program, HijackThis, and review the log to see what is autorunning on your PC. If you need help, post the results log, here, in this thread
Note, posting the results in this thread may result in personally identifying information being publicly revealed.
http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html
- Are you running Windows Defender? If so, what are the scan results from Windows Defender? If you aren't running it, why not?
At this point, I don't think, based on what you've said, you're PC is infected with a trojan. Avast seems to be doing its job and warning you on malware when you try to download (stop doing that!). You do seem to have a resident program, either in your browser or OS, which is causing that message window to appear and make you think you need to do something.
When you say a Windows "thing" pops up, are you referring to a browser pop-up or do you mean a true Windows message box?
Both are somewhat serious, but the browser pop-up is somewhat easier to clean. If you're experiencing a real Windows message pop-up, then you have some serious issues.
First, STOP clicking on the button that says "Click here" or whatever that causes you to download something. This is a widespread trick to lull people into downloading a trojan.
Second,
- What version of Windows are you running?
- What is the specific trojan that Avast warns you and says you have installed?
- What software firewall are you using? You mention Windows Firewall - is this running? Have you authorized any exceptions in it's rules to permit a new program?
- Please run this program, HijackThis, and review the log to see what is autorunning on your PC. If you need help, post the results log, here, in this thread
Note, posting the results in this thread may result in personally identifying information being publicly revealed.
http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html
- Are you running Windows Defender? If so, what are the scan results from Windows Defender? If you aren't running it, why not?
At this point, I don't think, based on what you've said, you're PC is infected with a trojan. Avast seems to be doing its job and warning you on malware when you try to download (stop doing that!). You do seem to have a resident program, either in your browser or OS, which is causing that message window to appear and make you think you need to do something.
Well, hopefully you haven't downloaded the thing that says "Click here to fix it," because that makes the problem worse.
Scan your computer, and check for viruses, if it doesn't find anything, search through the system32 folder for suspicious files, then use google to see if it's needed.
Lastly, google search the spyware name.
http://i242.photobucket.com/albums/ff241/Max0911/Meh.jpg
Picture answers most of your questions,
Running Windows xp
Not ruining windows defender, why idk i thought avast would be enough, Ruining Spybot now hopeing will fix problem.
Avast isn't picking up the Trojan a virus scan called stop sign is. (stop sign is a program from eAcceleration)
- Joined
- Nov 7, 2008
- Messages
- 4,560
Maxy,
1. Microsoft just pushed out an update which resolved many (not all) false security center alerts and resolved many "infections" of computers. Have you updated your PC recently?
2. Even with a program like Avast (or StopSign - not familiar with that), I always highly recommend using Windows Defender. Defender is anti-malware specific. Avast and other programs (AVG, etc) are focused more on viruses (virii?) although they increasingly focus on malware too. It's free and if you can't trust Microsoft...well, wait a minute. Just enable and use Windows Defender. Make sure you connect and download the latest signature update.
3. Spybot S and D is a good program (can't beat free either) but is still signature based. It does not have any intelligence to guess or be proactive. Once you're done with the scan, be sure to use the "immunization" function which places many bad websites into a null route and also does some things browser side to help protect you.
4. Another good program, which I highly recommend (and is free!) is Spyware Blaster. http://www.javacoolsoftware.com/spywareblaster.html The catch with Spyware Blaster (and with Spybot) is you have to manually update each program on your own. If you want to pay money, you can have Spyware Blaster automatically update.
5. Please run HijackThis and review the log or post it here. Hopefully, Spybot will find it, but it's clear there's a program resident which is running periodically giving you the pop-up (thank you!). If Spybot doesn't find it (I'd give it 50/50 odds) then you will need to manually ferret it out.
1. Microsoft just pushed out an update which resolved many (not all) false security center alerts and resolved many "infections" of computers. Have you updated your PC recently?
2. Even with a program like Avast (or StopSign - not familiar with that), I always highly recommend using Windows Defender. Defender is anti-malware specific. Avast and other programs (AVG, etc) are focused more on viruses (virii?) although they increasingly focus on malware too. It's free and if you can't trust Microsoft...well, wait a minute. Just enable and use Windows Defender. Make sure you connect and download the latest signature update.
3. Spybot S and D is a good program (can't beat free either) but is still signature based. It does not have any intelligence to guess or be proactive. Once you're done with the scan, be sure to use the "immunization" function which places many bad websites into a null route and also does some things browser side to help protect you.
4. Another good program, which I highly recommend (and is free!) is Spyware Blaster. http://www.javacoolsoftware.com/spywareblaster.html The catch with Spyware Blaster (and with Spybot) is you have to manually update each program on your own. If you want to pay money, you can have Spyware Blaster automatically update.
5. Please run HijackThis and review the log or post it here. Hopefully, Spybot will find it, but it's clear there's a program resident which is running periodically giving you the pop-up (thank you!). If Spybot doesn't find it (I'd give it 50/50 odds) then you will need to manually ferret it out.
- Joined
- Nov 7, 2008
- Messages
- 4,560
Just saw your latest post, if Spybot is finding all sorts of things - that's bad news, of course.
You can work to clean your computer, but if you factor in all the time necessary to run each program sweep and check things, it might be easier to just reinstall.
Especially because you have to ask yourself - did Spybot/Norton/AVG/Avast/Kapersky/McAffee/Ewido/Spyware Doctor/Spy Sweeper/etc, etc, etc really and truly catch everything...?
How viable is it for you to reinstall?
**Note: Spyware Blaster just prevents spyware. Doesn't disinfect.
Note 2: You should, from a "safe and clean" computer, begin changing any and all of your passwords. If your PC is that infected, you don't know what programs were installed and may have been capturing your userids and passwords to various accounts. Steam, of course. But also your e-mails, facebook, IM, bank, school, etc.
Note 3: Are you running the Windows Malicious Software Removal Tool? It does a pretty good job of finding things too...
You can work to clean your computer, but if you factor in all the time necessary to run each program sweep and check things, it might be easier to just reinstall.
Especially because you have to ask yourself - did Spybot/Norton/AVG/Avast/Kapersky/McAffee/Ewido/Spyware Doctor/Spy Sweeper/etc, etc, etc really and truly catch everything...?
How viable is it for you to reinstall?
**Note: Spyware Blaster just prevents spyware. Doesn't disinfect.
Note 2: You should, from a "safe and clean" computer, begin changing any and all of your passwords. If your PC is that infected, you don't know what programs were installed and may have been capturing your userids and passwords to various accounts. Steam, of course. But also your e-mails, facebook, IM, bank, school, etc.
Note 3: Are you running the Windows Malicious Software Removal Tool? It does a pretty good job of finding things too...
- Joined
- Nov 7, 2008
- Messages
- 4,560
If you truly have a system wide infection, it would be likely be easier and simply to do a reinstall. But you can't do a system restore as it's possible (not probably - but certainly possible) the system archives are infected.
Nor can you do a system back-up and restore from a back-up, because you don't know what's been infected and could just as easily reinfect your PC. The best and ideal would be do a low-level format, delete the partitions, do a secure disk wipe, format again, and then reinstall from disk media (CD or DVD).
Nor can you do a system back-up and restore from a back-up, because you don't know what's been infected and could just as easily reinfect your PC. The best and ideal would be do a low-level format, delete the partitions, do a secure disk wipe, format again, and then reinstall from disk media (CD or DVD).
- Joined
- Nov 17, 2008
- Messages
- 174
ok man listen i've come to help. i know something about viruses/trojans as i had at least two lethal infections and struggled before with incredible smut, popups, and trojans. heres what u do. trendmicro's program is ok but takes tremendous time. your best solution is downloading DrWeb CureIT (free scanner) http://www.freedrweb.com/ and after running the scanner and letting it finish, press COMPLETE SCAN and let it scan (a couple of hours). DrWeb is the best at finding things in my experience. also (and this is important) it FIXES and only if it cant it delets to a quarantine folder. but it's always fixed me. before i had a horrible infection. also safe internet practices can't be beat - DONT CLICK anything unknown or "something for nothing," "you've already won," etc. BACK EVERYTHING UP! (documents, favorites, music, pictures, save game files, etc., etc. only AFTER drWeb finishes scanning.) i tell ya - if drWeb won't find it - it's a false alarm. i swear by that program (we russkies do good work).
buying some type of an interactive firewall will help. i got NOD32 S.S. the firewall set to interactive and ASKS me if anything wants IN or OUT. also kaspersky or drWeb programs are very nice.
buying some type of an interactive firewall will help. i got NOD32 S.S. the firewall set to interactive and ASKS me if anything wants IN or OUT. also kaspersky or drWeb programs are very nice.
- Joined
- Nov 17, 2008
- Messages
- 174
guy, listen, if its a virus - then more likely it's already infected sys restore/volume info/windows/etc. do DrWeb anyway! if it was a trojan - only that file is usually affected. i had a trojan.muldrop recently DrWeb got rid of it. scan anyway! you never know! (once system restore screwed my photoshop installation)
p.s. i also recommend highly crap cleaner. its a free program and it scans the registry for unused lines. it also makes a registry backup so u wont fry ur pc if something vital gets deleted.
