My computer was basically attacked the other day, and my computer was filled to the brim with spyware and viruses, all because my lazy dad forgot to buy McAfee a few weeks ago, and never did it. I downloaded the trial version of McAfee and removed all the virus i could (i think i got em all). Next i downloaded Ad-Aware because i kept getting fake warning messages and pop-ups about my computer being infected, and things like,download this program! buy this, get rid of spyware and adware! i ran ad-aware and found a total of 948 infections on my computer, and got rid of those. Unfortunatley after restarting my computer, there was still one thing left that it didnt catch, and periodically, it pops up saying that "Somebody's attacking your computer. Click OK to get spyware blocker and protection" i rescanned and found nothing else, can somebody help me get rid of this once and for all?
I tried safe mode already and everything but it didn't work, and yes as stated in one of the answers i agreed to install an Active X codec to watch a video. I feel so stupid, because this is the second time I've fallen for it.
Related posts:
5 responses so far ↓
1 mrrockford // Apr 21, 2008
Howdy,
Here is a step by step set of instructions designed to help you clean up your system.
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
and here is a list of free software to help you design your own Security Suite and to help keep you from getting infected again.
http://wiki.castlecops.com/Roll_your_own_Free_Security_Suite
Safe Surfing!
2 Samuel Adams // Apr 21, 2008
You need to run it in Safe Mode (tap F8 as the computer boots up and choose to boot to safe mode).
Ideally you should run a virus removal program in Safe Mode (without networking) and reboot and repeat the scan and reboot until there is a cycle where no virus is detected.
The idea behind the Safe Mode is that the operating system would only load your essential programs and drivers to the memory and hence there is a “high” chance that the virus-infected file is on the drive but not loaded into memory. This would enable the AV to clean it easily and the next reboot/scan would detect nothing. There could still be a small possibility that one of the drivers or programs that are loaded by the OS in the Safe Mode is infected. That’s why you need to keep rebooting and rescanning to make sure you’ve found them all.
3 jibbarjabar // Apr 21, 2008
Phony pop-up alert boxes, background changes or "balloon" pop-ups from the tray (by the clock) about a trojan, virus or spyware infection and the attempt to sell you some useless software to "fix" the problem usually indicates that your computer has a Smitfraud infection. DO NOT BUY THE PRODUCT THEY TRY TO SELL YOU! IT IS SCAM.
Sounds like your computer may have a variant of this ubiquitous Smitfraud infection.
Almost all "general purpose","all-in one" spyware and virus removal programs such as AVG, Norton, McAfee or Spybot S & D cannot remove it, as you have already found out.
Free specialised Smitfraud removal tool is here (SmitfraudFix)
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php
After running SmitfraudFix, to clean-up any remaining infection traces, scan for trojans,
and spyware and remove (free online scan, no downloaded program) with Ewido Online Scanner ( now known as AVG Anti-Spyware). This is NOT the same as AVG Anti-Virus. Press "Scan your computer now online and clean it for free!" on the left.
http://www.ewido.net/en/
__________________________
You may have caught this infection by attempting to watch a video at some website. The site said you "needed" a codec or a Active-X control so then you downloaded it to watch the video. This was actually a ruse. A scam if you will. It was not a codec at all. (The video would have played fine without that "Codec")! What you actually downloaded was a Trojan called "Zlob".
Or your Windows is not 100% updated with all Critical Updates.
This trojan then connected to the internet,"phoned home" and installed the phony alerts adware on your computer with out your knowledge.
One should never allow any website to download anything to you unless you 1000% know and trust the web-site and you know exactly what you are downloading. Such downloads are almost anyways malware.
Good luck.
4 ahmed // Apr 21, 2008
it is good that your dad forgot to buy mcafee because he was going to do the worst mistake in his life. i used to trust mcafee but i got infected with a virus that made my pc restart manytimes
i downloaded kaspersky antivirus and it found many viruses.Now i am using kaspersky antivirus with zonealarm pro and ad-aware and my pc is running very fast. you can also try nod32
5 Lamborghini // Apr 21, 2008
You need to run it in Safe Mode hold F8 as the computer boots up and choose to boot to safe mode.
Leave a Comment