ok, so i know i have spyware or some kinda virus on my computer because all of a sudden these files were on my desktop for some bogus 'protection' program that i never installed on my computer. and it has an icon in my task manager and keeps popping up saying 'you have spyware on your computer, click hear to download software to remove it' and it links me to some site for antivirus/antispyware software.
i found on my computer a folder w/ program files in it that match up with the stuff that has been popping up and i can't delete the files. everytime i try to, my computer says 'can not delete (file name): It is being used by another person or program. Close any programs that might be using the file and try again'
but i don't have any other programs open. i've ran my 'nortan antivirus' and anti spyware program to scan my whole computer and even the folder containing these files, but it never does anything
how can i delete these files and fix my computer? please help!
this is for the first person who responded to me:
yes! that's exactly it! do you have any idea how to get rid of it?
Related posts:
9 responses so far ↓
1 Lola Mandailing //
Let me guess… it's it VirusHeat or NetProject?
Has a little icon come on down in the toorbar near the clock?
Looks like a "norton" shield icon kinda?
Gotta ask…
PS.. btw if it is what I think it is…. Norton and macAfee, forget it won't take it off.
==============================================
Sorry, My daughter was sick and I couldn't make it back until now… That virus you have is one of the BIGGEST PAIN IN THE BUTTs I've ever fought with, and I've tried MOST of what the guys below me said.. it did not work! It took me 3 days of no sleep and a case of diet redbull to get that sucker off!
ALL THE INFO I'm GOING TO GIVE YOU is so YOU do not make the same mistake again….(I sure as hell won't!)
VirusHeat (VirusHeat v3.9) is a rogue anti-spyware program installs itself onto your PC without your permission, usually through a Trojan known as Zlob. Once the Zlob Trojan is installed, it launches on Windows startup and bombards you with false warning messages. VirusHeat also shows misleading scan results in order to trick you in obtaining the full version of the program. It is extremely difficult to remove VirusHeat or Zlob manually because this program may continue to try to recreate itself. VirusHeat is associated with other rogue anti-spyware programs, including VirusProtect Pro, VirusRay and AntiVirGear.
Detection of VirusHeat:
VirusHeat is difficult to detect and remove. VirusHeat is not likely to be removed through a convenient "uninstall" feature. VirusHeat, as well as other spyware, can re-install itself even after it appears to have been removed.
You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove VirusHeat and other spyware, adware, trojans and viruses on your computer.
Run a FREE VirusHeat scan/check to successfully detect all VirusHeat files with SpyHunter the Spyware Detection Tool.
http://www.wiki-security.com/download/Free-SpyHunter-Scanner100247p2s12.exe
(Ohh and turn off you other security software while doing this)
The OTHER thing I used was..
http://www.pchubs.com/blogs/virusheat-removal-process-remove-virusheat
and: http://www.virusheat-removal.com.removal-instructions.com/remove118-VirusHeat.html
Pay Attention to the manuel removal on BOTH pages.. I got parts of both with it.. But what NEITHER one of these mention is the program for that ICON! I found this:
Please download SmitfraudFix (by S!Ri) to your Desktop.
Double-click smitfraudfix.exe
http://siri.urz.free.fr/Fix/SmitfraudFix.exe
Select option #1 - Search by typing 1 and press Enter
This program will scan large amounts of files on your computer for known patterns so please be patient while it works. When it is done, the results of the scan will be displayed and it will create a log named rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in your next reply.
C:\Program Files\NetProject I had to uninstall myself after doing all that and rebooted and NO MORE ICON
Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
Also My friend got it after me showed me a: Deleting the c:\windows\system32\wbchha.dll file was what work to get rid the icon
The bad part about this Virus its a Damned Virus and Program in one shot… That little Norton-esk sheild I asked you about it's a program to keep that balloon popping up warning you about infection it gave you and a FAKE antivirus solution! MEAN and TWISTED!!
Use spyware terminator and cccleaner.com (Crap Cleaner)
and get the little parts of all the left over programs off your computer…
GOOD LUCK!!!
2 jenniferlebo //
Download both the Ad-aware and spybot free programs and run them. Hopefully they will catch and remove the spyware and whatever else is going on.
3 notnoveu //
Step 1: Make sure that you have an up to date antivirus program. If you don't, install AVG. You should only have one antivirus program. (If you need to uninstall your antivirus, use RevoUninstaller)
Step 2: Visit the Google Pack website, and use it to download Spyware Doctor.
Step 3: Download and install ThreatFire.
Step 4: Make sure to use Mozilla's Firefox from here on out. Also, install the Adblock Plus and NoScript add-ons for it.
Step 5: Make sure that you have a firewall program on your computer. If you don't, install Comodo.
Step 6: Turn off System Restore, and restart in safe mode
Step 7: Run scans will the programs above.
This is just a quick summary of what you should do. For other recommended programs, and their optimal settings, visit my guide on the matter. http://prometechus.blogspot.com/2007/09/viruses-spyware.html FEEL FREE TO IM ME IF YOU HAVE ANY QUESTIONS.
4 darealhobosfriend //
OK i had the same problem mate, what you need to do is ring up Norton and ask them why there software which you pay good money for can't find viruses and barely has a firewall lol, what you need to do is click ctrl alt del, and then task manager if you are running xp OK now if this hasn't been disabled search for a program which is on the desktop running and click it if something you haven't authorised to be open is then click end task, now what you need to do is click run and type in MSCONFIG into the box now this brings up a list of programs running and if you see that spy ware ad aware thing then click stop service, now you should be able to close the program hopefully, ok now try out avg anti virus it is free i am using it at the moment and i think it is really good it stops alot of viruses and Trojans coming through and it heals them if it finds anything, if there any more problems then let me know and i will get back to you as soon as possible
5 Prince //
Ok, so yours is quite a serious problem, but with a bit of patience and work you might be able to get rid of these viruses.
The problem here is that those files which are infected are running in the background or some kind of activity related to them is going on in the bg which makes it impossible to delete them. There is a way to delete such files:
>HijackThis> Go here and download this small file. http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html
Open this after setting it up and click the button 'Config' in Other Stuff section and go over to the Misc Tools tab. There click on 'Delete a file on reboot…' and select your file to delete.
> You can use other such file deleters on reboot by Googling it.
> If this doesn't work you can try this foolproof method.
> If you have an XP Bootable CD( dont have it, go here,http://www.onecomputerguy.com/install/winxp_bootable.htm), insert it in your CD drive and use it to boot your computer.
But first let us know if the previous method works or not.
You can try SuperAntispyware program which is a superb antispyware client and may be of help to you.
http://www.download.com/SUPERAntiSpyware-Free-Edition/3000-8022_4-10523889.html
6 fantasy //
hi dear
The important thing is.. its too hard to deal with virus or worm without sitting infront of the actual infected system….
Your first aid:
Virus or any infection spread it self making use of ur panic and ur eagerness to get rid of it.. you make mistakes and it continues to harm.
First cool ur mind and think… dont do things which u r not sure about. dont beleave popups… just close them by ALT + F4.
Next, i never beleave in Norton Or Symantec.. They are like paying guest who never pay.
Next, Anti-Virus Programs only meant to detect viruses and that too if they have updated virus signature files but reality of today is that no more viruses are being created… its only the name virus left behing… Spywarewares, trojan and worms are the king of today..
though ur norton can detect trojans and worms but not to that extenct that a real anti-spyware can do.
So always keep there level security.. antivirus, antispyware and something to look after the background processes.. never forget the firewall.
now coming to ur question: (Only outlined solution)
1) Boot in safe mode and see what happens.
2) see what unknown programs are installed on ur system. get rid of them.
3) Check ur startup for unknown applications starting with ur system startup. Remove them. this u need to do first before any other cure. use some startup managing software.
http://www.ccleaner.com
ccleaner can even help clean ur junc.
or advanced windows care… google it. i dont rmember the site. may be alvil software.
4) If u know the culprit and are not able to delete then use this to unlock the threads and delete.
http://www.filehippo.com/download_unlocker/
hope i tried my best. good luck
7 Jeff //
You should use an antivirus program and antispyware software, because your computer is now infected with viruses and/or spyware.
Here you have more information on computer security, as well as good and free programs that you can download into your computer:
The website list top ten the best and newest anti-spyware in 2007.
http://blog.360.yahoo.com/blog-4nngDuI7eqvbd4iXbPpR9XIjP3nADsUR
All are safe and can be trusted and you can download one.
8 Gee S //
Run your anti-spyware in Safe Mode.If you dont have an excellent anti-spyware or your current anti-spyware can't prevent spyware from Invading you computer,download a better one.
There are top 5 anti-spywares reviews,comparisons and download links on
http://www.anti-spyware-center.com
You can download and scan your computer for free.
As the computer is booting press your "F8 Key" repeatly which should bring up the "Windows Advanced Options Menu" . Use your arrow keys to move to "Safe Mode" and press your Enter key.
After into safe mode,run an anti-spyware to remove the spyware and adware on you computer.
Make sure you have 1 or 2 antispyware on your computer and 1 antivirus and also 1 firewall.
GOOD LUCK!
9 andredunne@ymail.com //
i have found some thing i can not remove and do not no if it is part of the computer programs or something that has just intalled its self it shows up in add and remove programs and this is it (3-D_Valentine_Fairs_DemoESD Screen Saver) can someone tell me wha it is please