'anti virus 2006 pop-up

'anti virus 2006 pop-up

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
'anti virus 2006 pop-up desperate 04-20-2006
Posted by =?Utf-8?B?ZGVzcGVyYXRl?= on April 20, 2006, 9:29 am
If you were  Registered and logged in, you could reply and use other advanced thread options
i keep on getting a anti virus pop up, telling my my computer is infected,
i've downloaded, spybot, spyware, but didn't help, i'm running norton
internet security 2005, but i can't put the setting any higher, or it doesn't
let me access, my msn messenger. i can't put any of the internet setting
higher, because they don't let me access it either, it there any hints and
tips anyone has as to how i can stop the win anti virus from happening, i'm
desperate, i keep onthinking i've gotten rid of it and it comes back, please
help

Posted by David H. Lipman on April 20, 2006, 10:31 am
If you were  Registered and logged in, you could reply and use other advanced thread options

| i keep on getting a anti virus pop up, telling my my computer is infected,
| i've downloaded, spybot, spyware, but didn't help, i'm running norton
| internet security 2005, but i can't put the setting any higher, or it doesn't
| let me access, my msn messenger. i can't put any of the internet setting
| higher, because they don't let me access it either, it there any hints and
| tips anyone has as to how i can stop the win anti virus from happening, i'm
| desperate, i keep onthinking i've gotten rid of it and it comes back, please
| help



Two part reply..

Perform Part 1 then perform Part 2.

If the first two parts don't work, perform the alternate utility.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.

If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to JRE
Version 5.0. There are vulnerabilities in them and they are actively being
exploited.

Therefore, it is highly suggested that if there are any prior versions of Sun
Java
to Version 5 on the PC that they be removed and Sun Java JRE Version 5.0 Update 6
be installed ASAP.

http://www.java.com/en/download/manual.jsp



Part 1
-----------

Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool --
SmitRem.exe
http://noahdfear.geekstogo.com/click%20counter/click.php?id=1

http://www.bleepingcomputer.com/forums/topic43659.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it
will be
displayed in your browser (Opera, FireFox or Internet Explorer). However, if
you are
using WinXP, Win2K or Win2003 your system will be left in a state where you will
have to
manually shutdown/reboot the PC. On Win9x/ME platforms the report will not be
shown in
your bowser but your PC will automatically be shutdown. It is suggested that
you move the
report out of c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a copy of
the HTML
report for each session.


ALTERNATE:

Secured2K's SpyAxe, PSGuard, Smitfraud, Sinnaka and Alemod removal tool.

http://secured2k.home.comcast.net/tools/AntiPuper.exe

http://forums.mcafeehelp.com/viewtopic.php?t=65072


Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by David H. Lipman on April 20, 2006, 10:50 am
If you were  Registered and logged in, you could reply and use other advanced thread options

| i keep on getting a anti virus pop up, telling my my computer is infected,
| i've downloaded, spybot, spyware, but didn't help, i'm running norton
| internet security 2005, but i can't put the setting any higher, or it doesn't
| let me access, my msn messenger. i can't put any of the internet setting
| higher, because they don't let me access it either, it there any hints and
| tips anyone has as to how i can stop the win anti virus from happening, i'm
| desperate, i keep onthinking i've gotten rid of it and it comes back, please
| help

Maybe I was too hasty in giving you those specific set of instructions.

To be sure I need to ask you some questions, which I should have done in teh
first place.

The Anti Virus Pop-Ups you are getting... Are they generated by Norton ?

What exactly is the Pop-Up stating ?

Is it a Pop-Up for WinAntivirus Pro 2006 or WinAntiSpyware 2006 ?

Does to Pop-Up show, http://www.amaena.com/ as part of a URL ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by =?Utf-8?B?ZGVzcGVyYXRl?= on April 20, 2006, 8:34 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
They say that they have been generated by the windows security centre, if i
turn off the windows firewall, would that help my problem?
It is win antivirus, it was winfixer for the first few now, it's changed,
adn yes theyes you copied is showing up at at times aswell.
http://www.amaena.com/
thanks for the support, but i don't think i could have done half the done
you said to.

"David H. Lipman" wrote:

>
> | i keep on getting a anti virus pop up, telling my my computer is infected,
> | i've downloaded, spybot, spyware, but didn't help, i'm running norton
> | internet security 2005, but i can't put the setting any higher, or it doesn't
> | let me access, my msn messenger. i can't put any of the internet setting
> | higher, because they don't let me access it either, it there any hints and
> | tips anyone has as to how i can stop the win anti virus from happening, i'm
> | desperate, i keep onthinking i've gotten rid of it and it comes back, please
> | help
>
> Maybe I was too hasty in giving you those specific set of instructions.
>
> To be sure I need to ask you some questions, which I should have done in teh
first place.
>
> The Anti Virus Pop-Ups you are getting... Are they generated by Norton ?
>
> What exactly is the Pop-Up stating ?
>
> Is it a Pop-Up for WinAntivirus Pro 2006 or WinAntiSpyware 2006 ?
>
> Does to Pop-Up show, http://www.amaena.com/ as part of a URL ?
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

Posted by David H. Lipman on April 20, 2006, 9:00 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| They say that they have been generated by the windows security centre, if i
| turn off the windows firewall, would that help my problem?
| It is win antivirus, it was winfixer for the first few now, it's changed,
| adn yes theyes you copied is showing up at at times aswell.
| http://www.amaena.com/
| thanks for the support, but i don't think i could have done half the done
| you said to.
|

I was too hasty. It wasn't a ZLob/SmitFraud Trojan problem it was a
Vundo/WinFixer Trojan
problem !



Two phase answer...

Perform Part 1 then perform Part 2

If the first two parts don't work, perform the alternate utility.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.

If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to JRE
Version 5.0. There are vulnerabilities in them and they are actively being
exploited.
This is most likely why you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of Sun
Java
to Version 5 on the PC that they be removed and Sun Java JRE Version 5.0 Update 6
be installed ASAP.

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version...

C:\Program Files\Java\jre1.5.0_06


http://www.java.com/en/download/manual.jsp



Part 1
------------
Download Adware-Virtumundo Removal Tool --
http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

Information on the Adware-Virtumundo Removal Tool:
http://forums.mcafeehelp.com/viewtopic.php?t=57049

Part 2
------------
Download WinFixerFix.exe from the URL --
http://www.ik-cs.com/programs/virtools/WinFixerFix.exe

Execute; WinFixerFix.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it
will be
displayed in your browser (Opera, FireFox or Internet Explorer). However, if
you are using
WinXP, Win2K or Win2003 your system will be left in a state where you will have
to manually
shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in
your bowser
but your PC will automatically be shutdown. It is suggested that you move the
report out of
c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a copy of
the HTML
report for each session.


ALTERNATE:
--------------

Download Atribune's VUNDOFIX.EXE
http://www.atribune.org/ccount/click.php?id=4

Save VUNDOFIX.EXE to "C:\" ( C:\VUNDOFIX.EXE ) and execute it from there.


Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.

* * * Please report back your results * * *



--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Similar ThreadsPosted
anti virus June 17, 2005, 1:11 am
anti-virus? July 31, 2007, 6:10 pm
anti virus use August 5, 2007, 8:54 pm
Notron Anti Virus November 4, 2005, 6:32 pm
Remove Anti-Virus December 30, 2005, 1:09 am
Anti-Virus software December 14, 2006, 10:43 am
vista anti virus July 16, 2008, 7:49 pm
Need advise about anti-virus and firewalls. July 8, 2005, 11:48 pm
Program that disables my anti-virus August 28, 2005, 3:47 am
Norton Anti-Virus Problem! September 24, 2005, 4:30 pm

The site map in XML format XML site map

Contact Us | Privacy Policy