[Wolfeymole]

Rainman

We are a bit confused here now, are you saying you have internet home page problems and that you actually can change your wallpaper?

[rainman]

Wolfeymole thank you very much for your help,
you where right it was maleware or what ever you call it.
i put on trojan remover and got it fixed, every thing going well thank you every much.
rainman
ps i have a little hart shape thing that keeps coming up telling me,spyware detected,click here to install but nothing happens when i click it.
you got any thing that can help.
thanks again Wolfeymole

[maynardvdm]

Hi

That is a rogue antivirus program and it is actually malware.

I will recommend doing these scans to make sure there is no more malware on your computer:

Your computer could be infected with Malware.

• Malware is software designed to infiltrate or damage a computer system without the owner's informed consent.
  It is a combination of the words malicious and software.
  The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.

• Required Cleanup Steps
  1. Disable the Spybot Search & Destroy TEA TIMER if you use it and if it is enabled
  2. Run a Temporary file and cache cleaner (ATF)
  3. Run 2 Anti-Malware scanners (Listed Below)
  4. Run an Online Anti-Virus / Anti-Malware Scanner (Listed Below)
  5. Clear out old System Restore points
  6. If continued Malware type activity is present you may be asked to post a TrendMicro™ HijackThis™ Log file, do not do so unless requested.

The reason to run multiple scanners is to ensure that no single scanner is missing something.
The time it takes will vary depending on your system and your internet connection speed.
Typically the SUPERAntiSpyware and Malwarebytes scanners will take between 10 to 90 minutes.
The ESET online scan should take between 1 to 3 hours.
In most cases, these scans will suffice to clean and disinfect your computer.
Heavily infected systems or slower PCs can take much longer to scan and clean.

For best results print the following instructions and bookmark this Web page
To keep this guide printer-friendly, use your cursor to highlight the contents below.
From your browser select File - Print and in the printer dialog box under "Print range"
click the Selection choice to print out these instructions for removal of malware.

__________________________________________________

STEP 1

• Disable Spybot Search & Destroys' TEA TIMER: (if installed, if not go to Step 2)
  1. Run Spybot-S&D in Advanced Mode.
  2. If it is not already set to do this Go to the Mode menu select "Advanced Mode"
  3. On the left hand side, Click on Tools
  4. Then click on the Resident Icon in the List
  5. Uncheck "Resident TeaTimer" and OK any prompts.
  6. Restart your computer.

__________________________________________________

STEP 2

• Follow these instructions carefully.
• Download ATF-Cleaner from Snapfiles.com to remove un-needed temporary files from your computer that may contain malware.
• You can also download it from Majorgeeks.com
• When you run ATF-Cleaner, check the items as shown below for Main.
• For FireFox, be sure to click on the FireFox tab on top and check the items as shown below for FireFox
• NOTE: If you don't have FireFox or Opera installed then they will be grayed out and can be ignored
• Then click on "Empty Selected".

.

__________________________________________________

STEP 3

• Install and run the free version (not the Professional version) of SUPERAntiSpyware from SUPERAntiSpyware.com
  • Accept any prompts to allow SUPERAntiSpyware to install the latest rules and infection definition files.
  • You do not have to send them your e-mail address, just click next.
  • You can leave the automated check for updates on.
  • You can uncheck "Send a diagnostic report to research center" if you don't want to send the information.
  • DO NOT allow SUPERAntiSpyware to protect your Home Page settings.
  • On the Top Left select the Scan your computer button.
  • Make sure there is a CHECK MARK on all Fixed Drives.
  • Click "Perform a Complete Scan". Click "Next" to Repair issues found and reboot the computer when prompted to do so.

__________________________________________________

STEP 4

• Install and run Malwarebytes' Anti-Malware from Malwarebytes - (direct download)
  • Accept all defaults for the installer
  • Allow the program to update the definitions
  • Click on the Quick Scan and click Next.
  • If any items are found allow it to clean them and then Reboot your computer.

__________________________________________________

STEP 5

• Run an online scan with ESET from Free Virus Scan: Use ESET's Online Antivirus Scanner
  • You must use Internet Explorer for this online scan. FireFox, Opera, etc will not work for this scan.
  • If your computer is running Window's Vista, then you must first start Internet Explorer as an Administrator. To do so, right-click on the Internet Explorer icon in the Start Menu and select "Run as administrator" from the popup context menu.
  • Accept the terms and click "Start".
  • Once the scanner is ready, check "Remove found threats" AND "Scan unwanted applications".
  • Click "Start" to begin the scan.
  • When completed restart your computer

__________________________________________________

Make sure your internet firewall security is enabled, and then please return to Free PC Help and tell us how the computer seems to be operating.
At that time, you will receive instructions to assist you in removing malicious programs from your Add/Remove program list if warranted.

[rainman]

hello Maynardvdm
did all that you said but still there,now a popup apears called antivrus 2008-micro
which starts to scan my computer for virus then it wont let me run it.
i dont know what to do next.
rainman

[maynardvdm]

That antivirus 2008 is malware.

You already downloaded Mawarebytes, so just do a Full System scan in safe mode.



Reboot your computer in Safe Mode.

• If the computer is running, shut down Windows, and then turn off the power.
• Wait 30 seconds, and then turn the computer on.
• Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again. If F8 doesn't work try F5.
• Ensure that the Safe Mode option is selected.
• Press Enter. The computer then begins to start in Safe mode.
• Log on with an account that has administrator priviledges, usually your own account (NOT the account named Administrator).

__________________________________________________


Download and Run Malwarebytes Anti-Malware

• Download Malwarebytes' Anti-Malware and install the program
• At the end, make sure a checkmark is placed next to:

• 
  o Update Malwarebytes' Anti-Malware
  o Launch Malwarebytes' Anti-Malware
• Click Finish
• If an update is found, it will download and install the latest version
• Once the program has loaded, select Perform full scan, then click Scan
• When the scan is complete, click OK, then Show Results to view the results
• Be sure that everything is checked, and click Remove Selected
• When completed, a log will open in Notepad. Include this log in your next reply

Note:
If you for some reason lose the log, it can be retrieved manually from this location:
C:\Documents and Settings\<your username>\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt

[Dalo Harkin]

do as Maynard has suggested then:-

can you open a command window and type in msconfig and go to the startup tab and take a screenshot please.

[Wolfeymole]

If you are confused over any aspect of this procedure Rainman then please say so and we will break it down piece by piece.

Rest assured that we will endeavour to do our very best to help you.

[rainman]

well Dalo Harkin i think it did the trick between Wolfeymole and you,
I Thank you both i thank you i thank you.
rainman

[rainman]

WOLFEY your great.thanks.
rainmam

[rainman]

thank you to maynardvdm what a team great.
thanks again all.
rainman