I have Trend Micro and yesterday a pop-up appeared from my tool bar on the bottom of the screen, it says Windows has detected spyware infection and that it’s going to download the most up to date antispyware for me if I click on it. So I click on it and nothing happens, but it keeps popping up once a minute. I ran a scan with Trend and it said it removed some Trojan stuff so I thought it was all good. The pop-up kept telling me my computer was infected, so I thought it was a little behind on the times and restarted my computer so the pop-up could get with the program. Well, the first time the computer started up but a couple seconds later it made one of those error noises and shut back down, then restarted itself. So, the second time starting up, a black box (one of those ones that says :/C and that kind of thing) appeared on the screen and it said Error: can’t be accessed or something to that effect multiple times. I already ran a scan and downloaded the latest windows update and my antivirus is up to date. I also ran CCleaner to delete all my cookies and temporary internet things. I have no idea what to do. Everything else is working fine, it’s just that the pop-up keeps telling me the computer is infected. Please help!
Related posts:
14 responses so far ↓
1 Samuel Adams // Nov 20, 2008
It's great that you have TrendMicro but you also need anti-spyware. Download and scan with Malwarebytes and/or SUPERAntiSpyware. Cheers!
Malwarebytes and SUPERAntiSpyware are the best anti-spyware applications available (you can have more than one). Other free anti-spyware programs would be Spybot Search & Destroy, Adaware, AVG Anti-spyware (formally Ewido), A-squared, Spyware Terminator and SpywareBlaster.
Running virus removal programs in Safe Mode (tap F8 as the computer boots up and choose to boot to safe mode) can be more effective. The idea behind the Safe Mode is that the operating system would only load your essential programs and drivers to the memory and hence there is a “high” chance that the virus-infected file is on the drive but not loaded into memory.
I strongly recommend using FireFox, it's a far better and safer alternative to Internet Explorer. If you add-on McAfee SiteAdvisor, it will warn you of potentially harmful sites. I also recommend CCleaner which is a free system optimization and privacy tool.
2 Jaewoong C // Nov 20, 2008
try wista
3 Joe R // Nov 20, 2008
antivirus never works, it gives you more virus.
4 Lindsay G // Nov 20, 2008
In order to remove spyware, you need spyware protection such as spybot. Antivirus programs are best suted to remove virus and not always best to get rid of spyware.
5 zach C // Nov 20, 2008
Yea hate to tell you this, but the pop up was probably some ad off of a website, and that you just downloaded some spyware infested anti-virus, or even spyware itself. That is how they sucker most people. Do a System Restore to about 3 days ago.
Start > All Programs > Accessories > System Tools > System Restore
6 Shalako // Nov 20, 2008
You have a malware that is un detectable by Trend Micro
Please Visit http://www.lavasoft.com/
Download their free version and update it and then run a full scan of your PC.
Will pop up with details, have it deleted for malware and restart the PC.
You should be clean
Shalako
7 terry.ebbs@btinternet.com // Nov 20, 2008
you have classic malware a popup that tells you you have a infetion and then trys to sell you some software just download a malware blocker from download.com they are free so feel free to try a few
8 cancankant // Nov 20, 2008
Sounds like a malware “antivirus” program. These are particularly nasty. I did not have much luck getting rid of the one that struck my computer, but a friend recommended Malwarebytes to remove malware. It’s freeware.
You can download it here…http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html.
Good luck.
9 GluedHands // Nov 20, 2008
You probably have malware/spyware. not a virus per say. Download Spybot S&D and scan your system with that.
http://www.safer-networking.org/en/download/index.html
10 mclovin35@ymail.com // Nov 20, 2008
sounds like that Vundo trojan. I hate that thing. If you have xp update it. Microsoft released a new malicious software remover this month just for that spyware. It gets rid of it as soon as you update your computer OS.
And guess where I first got it from? Right here on YA! if you see a response of "now answer mine" with a link to it dont click on it.
11 tyrone k // Nov 20, 2008
Download and Scan SmitFraudFix Press here http://siri.geekstogo.com/SmitfraudFix.php
Try To Scan Use SuperAntispyware http://www.superantispyware.com/
Malwarebyteshttp://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=contentBody;mostPopTwoColWrap&cdlPid=10896905
How to use ComboFix Press here http://www.bleepingcomputer.com/combofix/how-to-use-combofix
12 Don // Nov 20, 2008
trendmicro offers a online scan it’s free detects and removes all intruders including spyware/adware
13 Northman // Nov 20, 2008
Malware Bytes Anti Malware gets rid of all rogue Antivirus 2008/2009 variants.
XP Antivirus 2008, XP Antivirus 2009, and XPAntiVirus are rogue antivirus programs that, when run, display false results as a tactic to scare you into purchasing the software. Older versions of XP Antivirus would create 9 entries in your Windows Registry that impersonate infections on your machine. In reality, though, these registry entries were harmless and had absolutely no effect on your computer. Instead, these entries were set so that XP AntiVirus can find them when scanning your computer and report them as infections. The newer of versions of the program , such as XP Antivirus 2008 and XP Antivirus 2009, instead just display false results when scanning your computer that state infections were found. In order to remove these fake infections, though, you would first need to purchase the software as the trial does not allow you to remove them.
While running, XP Antivirus will also display fake alerts stating that you are infected or under attack from some type of threat. These alerts are fake and can be ignored. If you do click on the alert, though, it will prompt you to purchase the software. Examples of text contained in these alerts can be found below.
Privacy Violation alert!
XP antivirus detected Privacy Violation. Some program is secretly sending your private data to untrusted internet host. Click here to block this activity by removing threats (Recommended).
or
System files modification alert!
Some critical system files of your computer were modified by malicious program. It may cause system instability and data loss. Click here to block unathorised <sic> modification by removing threats (Recommended).
As you can see these programs are fraudware because they make changes to your computer and then state these changes are infections as a scare tactic to have you purchase the software. It goes without saying that under no circumstances should you buy it. The older program, XPAntivirus, does come with a removal option in the computer's Add or Remove Programs list, but when you attempt to uninstall it, all that happens is the entry is removed from the list and program's process is terminated. Next time you reboot, XP AntiVirus will start up again. The newer versions of the program do not contain an entry in the Add or Remove Programs list at all.
14 cotojo // Nov 20, 2008
It’s a malware infection caused by a rogue program that infects users computers and finds non-existent problems in a bid to get users to purchase the fake software.
Use the following free programs, download, install, update and reboot into Safe Mode to remove:
Malwarebytes Anti-Malware:
http://www.malwarebytes.org/mbam.php
Select Full Scan.
Remove all infections that it finds after scan.
SUPERAntiSpyware Free Edition:
http://www.superantispyware.com/superantispywarefreevspro.html
Select Scan your Computer, select your drive and select Perform Complete Scan and remove infections, then click on Preferences, click Repairs Tab and click on any of the System and Browser Repair Items that you may have problems with then click Perform Repair.
Use BOTH for maximum effect as they work slightly differently.
Leave a Comment