its like IE pop-up. i try to scan with NAV, AVG, but found nothing.
and if i try to closed that IE window, it will keep open more and more until my PC crash
what should i do ?
Full Version: help with trojan / virus ?
Unexplained Mysteries Discussion Forums > Other > Computers, Gaming & The Internet > Computing Help and Support
my PC always open www.winantiviruspro.com even its not online.
its like IE pop-up. i try to scan with NAV, AVG, but found nothing.
and if i try to closed that IE window, it will keep open more and more until my PC crash
what should i do ?
its like IE pop-up. i try to scan with NAV, AVG, but found nothing.
and if i try to closed that IE window, it will keep open more and more until my PC crash
what should i do ?
Its one of those scam sites telling you download there program and will not stop until you do and will install nothing but spyware and crap telling you to pay more money for upgrades i had something similar happen to me there is a way to remove it but its kind of difficult for most people
If all else fail get spy doctor your going to have to pay for it but it works. When iI caught this I just looked around torrent sites got a spy doctor serial, removed the adware/malware then deleted spy doctor when I was done.
There is also this method at the link never tried it though.
http://www.atribune.org/content/view/28/
QUOTE
This website is bad. It is promoting fake SCAM software that's pretending to be real security software.
Don't buy any of their worthless stuff. If your computer is sending you to this SCAM SITE using alert balloons, pop-ups, a browser toolbar, or a hijack of your browser or your desktop screen, then you need to clean your computer with REAL antivirus and REAL antispyware software.
~ REMOVAL OF INFECTION ~
One easy way to remove an infection is System Restore. In Windows XP or Windows Vista, click Start > All Programs > Accessories > System Tools > System Restore, and “go back in time” to before you got infected. Also follow the steps below, then see the security tips at the end so this doesn’t keep happening.
SUPERAntiSpyware spyware-removal software:
http://www.superantispyware.com
Spybot Search & Destroy spyware-removal software:
http://www.safer-networking.org
SmitFraudFix is an advanced tool that targets this sort of stuff, follow the directions carefully if you use it:
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php
Panda AntiRootkit, rootkit remover:
http://www.majorgeeks.com/Panda_Anti-Rootkit_d5457.html
Update your virus definitions, then run a full antivirus scan. Besides your own antivirus software, also get a "second opinion" from some additional online antivirus scanners, such as these:
http://support.f-secure.com/enu/home/ols.shtml
http://www.pandasoftware.com/products/activescan.htm
http://housecall.trendmicro.com
If antivirus and anti-spyware programs can't completely kill the infection, then you can uproot stubborn stuff manually using HijackThis. Start Windows in Safe Mode to use HijackThis (HJT) most effectively. If you get an error when you run HJT, rename it to something random and run it again (some malware will block it by name):
http://www.spywareinfo.com/~merijn/programs.php (download HJT from here)
http://hijackthis.de/en (online HJT logfile analyzer, shows you which things to kill)
To start Windows in Safe Mode so you can run HijackThis properly, begin tapping the F8 key when you know the first Windows startup screen is about to show, the one with the scrolling bar. You may need to use Safe Mode With Networking so you can use the online logfile analyzer to show you what to kill.
Don't buy any of their worthless stuff. If your computer is sending you to this SCAM SITE using alert balloons, pop-ups, a browser toolbar, or a hijack of your browser or your desktop screen, then you need to clean your computer with REAL antivirus and REAL antispyware software.
~ REMOVAL OF INFECTION ~
One easy way to remove an infection is System Restore. In Windows XP or Windows Vista, click Start > All Programs > Accessories > System Tools > System Restore, and “go back in time” to before you got infected. Also follow the steps below, then see the security tips at the end so this doesn’t keep happening.
SUPERAntiSpyware spyware-removal software:
http://www.superantispyware.com
Spybot Search & Destroy spyware-removal software:
http://www.safer-networking.org
SmitFraudFix is an advanced tool that targets this sort of stuff, follow the directions carefully if you use it:
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php
Panda AntiRootkit, rootkit remover:
http://www.majorgeeks.com/Panda_Anti-Rootkit_d5457.html
Update your virus definitions, then run a full antivirus scan. Besides your own antivirus software, also get a "second opinion" from some additional online antivirus scanners, such as these:
http://support.f-secure.com/enu/home/ols.shtml
http://www.pandasoftware.com/products/activescan.htm
http://housecall.trendmicro.com
If antivirus and anti-spyware programs can't completely kill the infection, then you can uproot stubborn stuff manually using HijackThis. Start Windows in Safe Mode to use HijackThis (HJT) most effectively. If you get an error when you run HJT, rename it to something random and run it again (some malware will block it by name):
http://www.spywareinfo.com/~merijn/programs.php (download HJT from here)
http://hijackthis.de/en (online HJT logfile analyzer, shows you which things to kill)
To start Windows in Safe Mode so you can run HijackThis properly, begin tapping the F8 key when you know the first Windows startup screen is about to show, the one with the scrolling bar. You may need to use Safe Mode With Networking so you can use the online logfile analyzer to show you what to kill.
If all else fail get spy doctor your going to have to pay for it but it works. When iI caught this I just looked around torrent sites got a spy doctor serial, removed the adware/malware then deleted spy doctor when I was done.
There is also this method at the link never tried it though.
http://www.atribune.org/content/view/28/
yep... i use SmitFraudFix and voila! its (almost) clean .
thanks anyway. i'll try some more to keep it perfectly clean
thanks anyway. i'll try some more to keep it perfectly clean
only one problem left. even i try to uninstall and delete IE, its still come pop-up in address http://89.188.16.16/ 10
it come to nowhere. just "page not found"
even when im writing this. that pop-up still come. and im not using IE
it come to nowhere. just "page not found" even when im writing this. that pop-up still come. and im not using IE
ok im not gonna play the jerk here but, are you sure you used Search And Destroy too? Cause i had a similar problem before thanks to a friend of mine and it did work.
some other programs that could help you are: HiJackThis and of course my favorite antivirus NOD32! these two with search and destroy kept me safe for more than 4 years...
some other programs that could help you are: HiJackThis and of course my favorite antivirus NOD32! these two with search and destroy kept me safe for more than 4 years...
I think that clam av seems pretty good and it is genuinely free. http://www.clamwin.com
It is thorough, but slow, it can take a few hours for a full sweep.
Is there a reason why you must use internet explorer? There are other browsers which are less prone to being taken over by malware, because they are not integrated into windows.
It is thorough, but slow, it can take a few hours for a full sweep.
Is there a reason why you must use internet explorer? There are other browsers which are less prone to being taken over by malware, because they are not integrated into windows.
the best I have found for a spyware problem which is what you are describing are Lavasoft adaware se and spybot search and destroy both free programs will clean you up. You can tell if it is really spyware by turning off any program that is accessing the internet and going to run on the start menu type cmd in the run window and it will open up a dos box type netstat and hit enter on the keyboard if you have more than 2 established connection listed in there then you have spyware, the above programs can be found at www.download.com for free download.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.