Computer problem. I get a windows warning message, "warning, spyware detected on your computer."?

Question

I have windows xp with trend micro antivirus and web root spysweeper. All of a sudden today my screen background turns white and I get a windows message that says "warning, spyware detected on your computer." It says to activate my antivirus program to clean my computer. I did this and it found a virus. After running trend micro it quarantined the virus. I restarted my computer hoping that the problem was gone, and I get the same white background with the same windows warning message. What do I do to fix this??

Answer 1

It certainly sounds like you have been infected with some kind of malware. Unfortunately, if you find one infection, it is highly likely you have another one. A virus, trojan or worm are all different types of infections/malware and there are some great FREE programs that can help you.



First, clean up (delete) your cookies, temp files and temporary internet files. I prefer to use Ccleaner (available at www.filehippo.com) to do this, rather than the built-in DISK CLEANUP, as I feel it does a much more thorough job - for example, it will clean out the index files on your next reboot.



If you want to use Disk Cleanup, you can find it if you:

- Double-Click on My Computer to open it up

- RIGHT-click on your C: drive

- Choose PROPERTIES and then click on the DISK CLEANUP button

- When done, reboot your computer.

Delete these files daily or run Ccleaner every day right before you shut your computer down.



2 - You should also have a good anti-virus program to help protect your computer. AVG FREE is an excellent anti-virus program, which can be downloaded from www.download.com. You might also choose Avast or Avira, both also free programs from www.download.com.



3 -Since NONE of the anti-spyware/anti-adware programs are 100% accurate in finding and removing spyware, you need at least two programs which you will run one after the other, not at the same time.



There are three excellent free ones:

--Spybot, Search and Destroy

--Ad-Aware

--Spyware Blaster

All are available FREE from www.download.com



You will need to download, install, update (and IMMUNIZE in Spybot) and run them, one at a time. Be careful with the NAME of these programs - there are "look-alikes" with very similar names, that are in fact spyware themselves! Reboot after you install each one!



After this current infection is cleared up, be sure to run both of the above programs at least once a week if you are on the internet frequently and/or like to download music or files.



NOTE: Some infections prevent your from downloading the above programs. You may have to use a clean computer to download the programs and copy them to a thumb drive or CD. Then transfer the install files to the infected computer and run.



--Occasionally you will not be able to run these programs without being in SAFE MODE. To get there, reboot your computer and tap the F8 key, repeatedly until a menu comes up. You want to choose SAFE MODE WITH NETWORKING.



4 -You should also have a good firewall to help protect your computer. Zone Alarm makes a totally free version (watch you don't download the 30-day free trial of the paid version). You can download this from the manufacturer at www.zonelabs.com

Answer 2

2

Answer 3

For me, that pesty wallpaper came along with blue screen errors also and is part of Joke.Blusod. The "bluescreen errors" are actually a screensaver. Here is a

norton/symantec site with info on it

http://www.symantec.com/security_response/writeup.jsp?docid=2008-062714-5037-

99&tabid=2 It makes a few files in your system32 folder mine were called

phct69j0e1b3.bmp, and lphct69j0e1b3 but it might be different (random mixed up

letters & numbers). I got it last week and after updating norton it found it but did not kill it for

me so I had to fix it myself. The webpage I listed doesn't mention that fake windows message wallpaper but it is also a part of it. If anti virus doesn't fix it for you, then do these steps:

1. Try to change your wallpaper and also your screensaver (start - settings - control panel - display)

2. Start - run, type taskmgr (or press ctrl + alt + del) and end the process for

the random running program.

3. Start - run, type msconfig and in the startups, uncheck the box for the random crap. Don't restart your computer yet.

4. Go to your system32 folder and choose 'view' from the menu and then 'arrange icons by' and pick 'modified' and look at the files (at the bottom) to the recent date (fix your folders so that the dates show if they don't already) around when the problem showed up and look for the random crap and delete them. In my case there were just 2 (bmp & scr)

5. Start - run, type regedit. When it opens, use the 'find' option and type bluescreen, and hit the 'find next' button and it should bring you to it

(HKEY_CURRENT_USER\Software\Sysinternals\BlueScreen). Delete both the bluescreen

and bluescreen screen saver folders if it has it.Be careful not to mess up with regedit if you're shakey then click 'removal' on the symantec webpage and follow those steps to turn restore off/on. If the link doesn't take you to the info page then type Joke.Blusod into the search option it will take you there.

Answer 4

The first 3 are usually the most effective:



Wallpaper Hijacker Removal Tool:

http://www.majorgeeks.com/Wallpaper_Hijack_Remover_d4816.html

Note: You should hit all "Repair" buttons even though it may not say "Found!" This will fix a wallpaper hijack everytime if all repair buttons are pressed.



Malwarebytes Anti-Malware:

http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?hhTest=1.

Download, install, update and select Full Scan.

Remove all infections that it finds after scan.



Spybot S&D:

http://www.safer-networking.org/en/download/index.html

Download, install, update and Immunize, turn off Tea Timer then click 'Check for problems' then when complete select all and then 'Fix Checked'



Spyware Doctor Free Basic Edition - Realtime monitoring:

http://pack.google.com/intl/en/pack_installer_new.html?hl=en&gl=us&ciNum=12

Its free with Google pack, untick all boxes except Spyware Doctor. Download install, update and run.



SUPERAntiSpyware Free Edition:

http://www.download.com/SUPERAntiSpyware-Free-Edition/3000-8022_4-10523889.html

Download, install, check for updates, then select Scan your Computer, select your drive and select Perform Complete Scan



VundoFix:

http://www.symantec.com/content/en/us/global/removal_tool/threat_writeups/FixVundo.exe

Disconnect your computer from the internet

Run vundo

Restart your computer

Run the tool again to ensure no traces are left.

If there are the reboot into Safe Mode and run FixVundo again.



A-Squared Free:

http://www.download.com/A-squared-Free/3000-2239_4-10262215.html

This is not a limited version but a full tool to clean your computer from Malware, Spyware, Trojans, Backdoors, Worms, Dialers and Keyloggers.

How to use:

http://cotojo.wordpress.com/2008/07/07



If the problem persists, turn OFF System Restore and scan with the above programs in Safe Mode, Right click My computer > select Properties > System Restore Tab > Tick Turn Off System restore on all drives.



After scans are complete and machine is clean remember to turn system restore back ON and create a new restore point.

Answer 5

This is a new trojan that has been going around. It can be a pain to get rid of, but you should first try Windows System Restore.



Start | Run

In the Run box enter msconfg

Click the Launch System Restore button

Follow the instructions to restore your system.



You should chose a date (in the calendar) before you started seeing this message. Your system will reboot as part of the process.

Answer 6

Do you remember the date when you got the virus? If you do, go to the Start Menu, then Programs, Accessories, System Tools and then System Restore. Click on the day before you got the virus. Some files that you saved to your computer won't be there because you restored your computer to the way it was before. But at least, it's restored to the point before you got the virus. : )

Answer 7

i got this a few days ago i could go any where else but where i wanted --i just kept getting this ms spy ware and virus warning and it would shut down internet xplorer so i tried another browser sane thing and i ran all my mcafee software no result what it really wanted was for me to go to msupdates and download miceosoft defender ===i have had this a couple of times when ms wants you to do something ---anyway defender is free antivirus and spybot and adware program i loaded it ran it and it couldnt find anything but ie iworking fine again

Answer 8

your screwed :( you've been infected with Antivirus 2008/2009. You can try this guide http://www.bleepingcomputer.com/malware-removal/remove-xp-antivirus-2008-2009

to remove the infection.



System restore won't work, the files will remain that the antivirus infection has downloaded and you'll still be infected.



Easier to just back up what data you need to save and format/reinstall though, even using that tool and those listed above don't completely clean your computer.

Answer 9

You should try running the virus scan is SAFE MODE that should fix it.

Answer 10

u need to take your computer to a shop to clean and restart your hard drive