Spyware problems!

[midget31394]

I was on my other computer, browsing through tutorials on different sites. A pop-up comes saying something about stopping spam, I clicked the red cross at the top right hand corner to close this. Previously, when I started the computer, I installed the latest version of Java. Anyway, I clicked the red cross, 10 or so minutes later, a bubble appears saying "There have been no firewalls detected." I clicked on that bubble and put the windows firewall back in place. 5 or so minutes later my windows restarts, I was kind of expecting something like that because I had clicked "Restart Later" In the installation window. It restarted, I logged on, then I look at my avast icon, it has a red circle next to it. There is a larger red circle as well, from which pops up a bubble "You have been infected with spyware... [didn't get to read the rest]" Next thing I know, it restarts. It keeps on restarting unless I turn it off. I haven't downloaded anything recently except a new display driver from the ati website and a systems requirement checker, from EA, to check if my computer would play Crysis, which my brother downloaded a couple of months ago, with no trouble.


Me and my brother searched "Spyware" in wikipedia. Here are some quotes. I will link at the end.




I scanned my computer with avast not that long ago, it picked up around 5 or 6 different "adware files" or something like that, and a couple of Trojans. I have started to take care in what I download from then.

Some spyware authors infect a system through security holes in the Web browser or in other software. When the user navigates to a Web page controlled by the spyware author, the page contains code which attacks the browser and forces the download and installation of spyware. The spyware author would also have some extensive knowledge of commercially-available anti-virus and firewall software. This has become known as a "drive-by download", which leaves the user a hapless bystander to the attack. Common browser exploits target security vulnerabilities in Internet Explorer and in the Sun Microsystems Java runtime.

A spyware program is rarely alone on a computer: an affected machine can rapidly be infected by many other components. Users frequently notice unwanted behavior and degradation of system performance. A spyware infestation can create significant unwanted CPU activity, disk usage, and network traffic, all of which slow the computer down. Stability issues, such as application, system not turning on, and system-wide crashes, are also common. Spyware, which interferes with networking software commonly causes difficulty connecting to the Internet.

Beginning in April 25, 2006, Microsoft's Windows Genuine Advantage Notifications application[23] installed on most Windows PCs as a "critical security update". While the main purpose of this deliberately non-uninstallable application is making sure the copy of Windows on the machine was lawfully purchased and installed, it also installs software that has been accused of "phoning home" on a daily basis, like spyware

I have had this notification for months. (Around 5 or so.) It is saying my product key was not issued by windows and I needed to buy a new one.

Most spyware is installed without users' knowledge. Since they tend not to install software if they know that it will disrupt their working environment and compromise their privacy, spyware deceives users, either by piggybacking on a piece of desirable software such as Kazaa, or by tricking them into installing it (the Trojan horse method). Some "rogue" anti-spyware programs masquerade as security software, while being spyware themselves.

Thanks for any help you can give me, it is REALLY appreciated.

Link to wikipedia article:
http://en.wikipedia.org/wiki/Spyware#Effects_and_behaviors

Hope you can help.


~midget31394~

 

[midget31394]

My brother and I have went back to a restore point and we are using an anti-spyware program so fingers crossed.

 

[[WTF] SiMoN]

If you do illegal downloading, i might be able to send some tips
if not, just install some free AV's and wait it out.

1) Boot up in safe mode
2) Disable internet connection
3) look @ msconfig.
4) problemo fixed.

Thats if its a simple spyware.
well thats my 2cents

 

[Havegooda {A|R}]

Have you tried Avast at all? It works wonders for me.

~Gooda~

 

[Sqirril]

I scanned my computer with avast not that long ago, it picked up around 5 or 6 different "adware files" or something like that, and a couple of Trojans. I have started to take care in what I download from then.

Good! Also Nod32 is a great anti-spyware program. Google it for I am lazy.

Have you tried Avast at all? It works wonders for me.

~Gooda~

Do you even read the Original Post?

 

[Havegooda {A|R}]

Oo, I missed that.

~Gooda~

 

[Cpt. Lavish]

Problem

This could be a serious problem i guess ive never had t hapen to me before but my friend has and he says its bad.

 

[thepunisher457]

Number 1: Boot up in Safe Mode
number 2: Download and install Avast Run a full virus scan
number 3: when done install Spybot Search & Destroy run scan and delete what it finds
Number 4: Download kaspersky it will ask u to remove avast do that
Number 5: run kaspersky scan
Number 6: Download CCleaner to clean up your registry and Maybe Tuneup 2008 trial
Number 7: Done!

 

[trykael]

First, going back to a restore-point is not going to help you if you are infected with a virus or a lot of spyware. You're going to need to clean everything up. Here's a good working order:

Download and install CCleaner, and then run a normal scan. This will clean up a lot of your temporary files and make the following scans at least a little quicker.

You need to get 2 spyware cleaners. People all have different opinions on what works best. I personally use Ad Aware and Spybot Search and Destroy, but there are others out there that work as well. Anyway, download a couple of spyware cleaners, make sure you have the latest updates, THEN reboot into safe-mode (boot, and hit f8 at POST until the boot options for Windows come up) and run a scan with each one.

Make sure your anti-virus is up to date, and then run a complete scan with that. It may take a couple of hours depending on your system and the size of your hard drive, but it's the only way to clean up your virus.

Finally, be aware that the only fix may be formatting your drive and doing a completely fresh install of Windows. If you dealing with multiple bad infections this is sometimes the only way to really get everything out. You'll want to back-up your important documents and make sure you have your Windows key and everything before doing this. It may be a decent option, anyway - formatting your system is good for it!!

 

[Havegooda {A|R}]

Number 1: Boot up in Safe Mode
number 2: Download and install Avast Run a full virus scan
number 3: when done install Spybot Search & Destroy run scan and delete what it finds
Number 4: Download kaspersky it will ask u to remove avast do that
Number 5: run kaspersky scan
Number 6: Download CCleaner to clean up your registry and Maybe Tuneup 2008 trial
Number 7: Done!

Lol, you made the same mistake I did He's got Avast already.

~Gooda~

 

[sokO]

I had a very similar thing happen to someone I knew. They were downloading free music and the virus infected their boot process.

Answer this:

Your compuster is starting in a circle? It keeps rebooting itself during the boot process?
Do you still have a copy of Windows XP?
Do you know the name of the virus? (i.e. Trojan.lmp)

I know I did a quick google search of the virus my friend had and it said that it deleted a driver for Windows XP, which would cause the re-boot 'circle.'

In his case, he was unable to do anything with Windows XP, not even go into safe mode. What I had to do with him was go into his BIOS and boot from the Windows XP CD, and re-install windows. What this did was created another user account. He had ADMIN and ADMIN.PAL

ADMIN being the infected user,
ADMIN.PAL being the new, clean user.

As far as I am concerned, Viruses cannot switch to different or new user accounts unless you open up a file from the infected user. The files were still on his computer, but he was not getting a message that he was infected from his virus protectiona fter running numerous scans (Norton I think).

I hope this helps, I'll check up on this thread later on today.

 

[midget31394]

The restarting, we fixed, we hit F8 for safe mode and an option "Disable Automatic restart for system failure" appeared, so XP was trying to save my computer after a system failure, mainly, now, we need to get rid of the Spyware, AVG wont install. So I am gonna redownload Avast to see if that works.

 

[midget31394]

Right, since the thing I have has stopped Avast from working at any time, I downloaded and installed Avira, I have Ad-Aware, I cant get Spybot S&D to work, I also downloaded a Firewall. Hopefully these will remove the stuff, Im guessing its a pretty complicated infection if its shutting avast up =/ Let this be a warning, to everyone. Make sure you download the best security you can. Im surprised this happened, because of the FF add ons that I downloaded to tell me about sites that can harm your computer.

 

[midget31394]

WOOOOOOOOOOO!!!!!!!


I think I have defeated the beast! My new AntiVirus picked something, I deleted it or quarantined it (Cant remember) My computer froze up, I turned the power off, rebooted and now there are no alerts or nothing. My new Firewall is acting like vista, security wise, I think once I have used most of the things I use, it will loosen up a bit. For anyone that wants the things Im using, eg my antivirus, anti spyware, etc. I will post teh links.


Avira AntiVir - #2 in antivirus (according to download.com)
Avira Antivirus

ZoneAlarm firewall - #1 in firewall software (as above)
ZoneAlarm Firewall

Spybot Search and Destroy - #4 in spyware removal (as above)
Spybot S&D

Ad-Aware - #1 in spyware removal (as above)
Ad-Aware 2008


I would like to thank everyone that has helped, it was really appreciated.

 

[gamblor]

Im guessing its a pretty complicated infection if its shutting avast up =/

This is actually becoming common behavior. Malware is getting stealthier and worse all the time, and subverting or disabling anti-virus software is becoming more and more common.

Glad to hear that you have things cleared up!

 

[XxBladesxX]

you should try hitman pro it's a consolidated all in 1 anti-spyware, utility, using the top rated programs out there...

www.hitmanpro.nl/hitmanpro/content/view/3/9/

*WARNING* it takes a LOT of time to completely scan... but it is thorough

 

[thepunisher457]

Lol, you made the same mistake I did He's got Avast already.

~Gooda~

:O