Archive for February 21st, 2012

How do i get rid of a virus that i think is in my system files?

When I connect online I get these popups, which i shouldnt get because my pop up blocker is on high (allows no popups). These popups vary from ‘online virus scanner’ sites to blank pages. Most of them I can just close tho some try to force me to download a file but my security settings stop these. Its the blank pages that are the worst because they totally freeze my screen. I cant do anything on any of the web pages I have up and I end up pressing ‘alt, ctrl, del’ and restarting my pc. My Anti Virus And Anti Spyware progs show nothing when i scan my c drive and my firewall doesnt show anything wrong either. help!!
DO NOT CLICK ON THIS LINK!!!!!!!!!

http://www.amaena.com/securityworm5/?ax=0&ex=1&h=10&mpt=1180650052&aid=nm_ik_wav_r5&lid=&affid=nm_67308_e77d7f3e061211dc8a97003048895bfc_cc8f05ca+2b46676903454cda9f55953d4ed7bcbd

This is the ‘address’ of one of the ‘online virus scanner’ sites that keeps popping up. It looks very suspicious, esp the ‘securityworm5′ bit.

You have malware installed on your system. If you follow all the following steps it should get rid of your problem and prevent future problems. All programs listed are free.

———————————————————
Update your antivirus and run a full scan in safe mode

If you do not have full time (active) virus protection install (only one) all are excellent:

AVG Antivirus 7.5 Free Edition

http://free.grisoft.com/freeweb.php/doc/avg-anti-virus-free/lng/us/tpl/v5

http://www.download.com/AVG-Anti-Virus-Free-Edition/3000-2239_4-10669237.html?tag=lst-0-1

or
Free antivirus – avast! 4 Home Edition

http://www.avast.com/eng/avast_4_home.html

or
AOL Active Virus Shield

http://www.activevirusshield.com/antivirus/freeav/index.adp

———————————————————
Install Windows Defender (full time spyware protection)
Perform a full scan.

http://www.microsoft.com/athome/security/spyware/software/default.mspx

———————————————————
Install the following five programs and run weekly or at least monthly. You need all five. They will greatly increase your protection. They are not a substitute for full time spyware and virus protection.

Ad-Aware SE Personal (update + full scan)

http://www.lavasoftusa.com/products/ad-aware_se_personal.php

Spybot Search & Destroy (update + immunize + scan)
Do not enable Tea Timer and SDHelper
After installation: update + scan + immunize

http://www.safer-networking.org/en/mirrors/index.html

SpywareBlaster: Update then open and click “enable all protection”.

http://www.javacoolsoftware.com/spywareblaster.html

SUPERAntiSpyware free version: (update + scan)

http://www.superantispyware.com/

CCleaner: Do not install toolbar option
Removes tracking cookies, unneeded files, history
In options.
Set to run when computer starts.
Place cookies you want to keep in save list

http://www.ccleaner.com/

————————————————————-
Note if a scan detects a problem but is unable to remove, start the computer in safe mode with the internet line disconnected and run a full scan.

In severe cases your system restore files will also be infected. In these cases you will need to turn off system restore to prevent malware hiding in the system restore files and reinfecting the computer during removal or during a future system restore. Turning off system restore deletes the system restore files.

Right click on “my computer”> Properties > System Restore Tab > Check box turn off system restore

After the Malware is removed turn on system restore.
————————————————————-
Run this time only

CWShredder: run

http://www.trendmicro.com/cwshredder/

Roguefix.bat

http://www.internetinspiration.co.uk/roguefix.htm#uninstall

Shoot The Messenger

http://www.grc.com/stm/shootthemessenger.htm

SmitFraudFix

http://www.geekstogo.com/forum/How_to_use_SmitFraudFix-t109268.html

Vundo Fix and
VirtumundoBegone (if VundoFix does not work)

http://www.bleepingcomputer.com/forums/topic18610.html

VX2 tool for Ad-Aware and run tool (Install and run)

http://www.lavasoftusa.com/support/securitycenter/vx2_cleaner.php

———————————————————————-
Additional run this time and monthly.

Microsoft Update “Custom Mode” install everything

http://update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en-us

Microsoft OneCare Live, run “full service scan”
Updates windows, virus and spyware scan, disk cleanup, disk fragmentation (if needed), backs up registry and then cleans registry, and checks for open firewall ports

http://onecare.live.com/site/en-us/default.htm

Malicious Software Removal Tool (run “full scan”)

http://www.microsoft.com/security/malwareremove/default.mspx

——————————————————-
RootkitRevealer v1.71

http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx

Rootkit Removal Guide

http://safecomputing.umn.edu/guides/scan_unhackme.html

Rootkits Removers
Pick any 2 install and run one each month

AVG Anti-Rootkit

http://www.grisoft.com/doc/products-avg-anti-rootkit-update-app-art/?ver=1.1.0.29

F-Secure BlackLight

http://www.f-secure.com/blacklight/

Sophos Anti-Rootkit

http://www.sophos.com/products/free-tools/sophos-anti-rootkit.html

———————————————————-
———————————————————-
Online Free Scanners:
Run Trend Micro, Kaspersky, and Panda Scan now.
Run a different one each month.

Trend Micro: HouseCall Free Scan (removes what it finds)

http://housecall.trendmicro.com/

BitDefender Online Scanner http://www.bitdefender.com/scan8/ie.html
Kaspersky Labs Online Scanner http://www.kaspersky.com/virusscanner
McAfee http://us.mcafee.com/root/mfs/default.asp?affid=294
Panda ActiveScan Free Online Scanner http://www.pandasoftware.com/products/activescan?
Symantic Online Scanner http://security.symantec.com/sscv6/ssc_eula.asp?langid=ie&venid=sym&plfid=23&pkj=ALUFRHYTINMHDKDCWLL&vc_scanstate=2
——————————————————-
Additional Information read:

http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Overview

http://wiki.castlecops.com/Malware_Prevention:_Prevent_Re-infection

http://www.castlecops.com/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html

http://aumha.org/a/quickfix.htm

http://aumha.org/secure.htm

http://aumha.org/a/parasite.php

http://www.castlecops.com/t102301-Hijackthis_Guidelines_Read_Before_Posting.html

http://www.techsupportforum.com/security-center/hijackthis-log-help/15968-updated-important-read-before-posting-log.html

http://forum.aumha.org/viewtopic.php?t=4075&sid=901703d08c2ace31389ffef2d84b6607

General Computer Help : How to Get Rid of Pop-Up Spyware

Webroot Spy Sweeper AntiSpyware $29.94 …

McAfee VirusScan 2005 [Old Version] $3.99 McAfee VirusScan provides advanced, real-time protection against viruses, mass-mailing worms, Trojans, and potentially unwanted programs (PUPs) such as spyware, adware and dialers. It protects against the threats that originate from e-mail, instant messaging, Internet downloads, file sharing programs, and Web surfing, automatically detecting and cleaning infected files before they can attack your …

McAfee VirusScan 2005 9.0 and Firewall 2005 6.0 Bundle $59.99 McAfee VirusScan provides advanced, real-time protection against viruses, mass-mailing worms, Trojans, and potentially unwanted programs (PUPs) such as spyware, adware and dialers. It protects against the threats that originate from e-mail, instant messaging, Internet downloads, file sharing programs, and Web surfing, automatically detecting and cleaning infected files before they can attack your …

Symantec PC Tools Spyware Doctor $34.99 1 User 21073016 3 PC Built on award-winning Spyware Doctor antispyware technology. Advanced rootkit detection technology identifies and removes hidden threats from your PC. Memory Scanner helps eradicate threats lurking on your PC. Download Guard checks your downloads against a cloud-based network. Uses a combination of reactive blacklists and proactive content analysis. Site Guard blocks you from visiting potentially unsafe or phishing websites and from downloading threats through your browser, IM or email. Cookie Guard automatically removes potentially malicious tracking and advertising cookies. Browser Guard stops automatic downloads, fake AV and malicious files from compromised or exploit websites. IntelliGuard technology stops potential threats before they infect your PC. Game Mode automatically detects your PC switching into full-screen mode for games, movies or presentations and ensures an uninterrupted experience. Power Saving Mode postpones power-intensive tasks until your laptop is plugged in, extending battery life. The ability to disable idle scan for optimal PC performance. Tweak advanced settings for each IntelliGuard, history logs and more. Operating System: Windows 7 (32/64-bit) Windows Vista with Service Pack 1+ (32/64-bit) Windows XP with Service Pack 2+ (32-bit) It defends your computer against malware attacks with multiple layers of protection using proactive, reactive and automatic protection to stop threats at every entry point. Now includes memory scanning, behavior profiling, and report cards to provide up-to-date protection and status monitoring for your PC. Anti-spyware Complete Product New Releases Update Not Applicable PC PC Tools Spyware Doctor Retail Security Software Standard Symantec Symantec Corporation Windows With AntiVirus 2011 www.symantec.com

CA Anti-Virus Plus Anti-Spyware 2008 AVP08SNR03E $5.04 CA Anti-Virus Plus Anti-Spyware 2008 AVP08SNR03E

Symantec PC Tools Spyware Doctor 2011 $25.99 1 User 21072828 3 PC Advanced rootkit detection technology identifies and removes hidden threats from your PC. Memory Scanner helps eradicate threats lurking on your PC. Download Guard checks your downloads against a cloud-based network. Uses a combination of reactive blacklists and proactive content analysis. Site Guard blocks you from visiting potentially unsafe or phishing websites and from downloading threats through your browser, IM or email. Cookie Guard automatically removes potentially malicious tracking and advertising cookies. Browser Guard stops automatic downloads, fake AV and malicious files from compromised or exploit websites. IntelliGuard technology stops potential threats before they infect your PC. Game Mode automatically detects your PC switching into full-screen mode for games, movies or presentations and ensures an uninterrupted experience. Power Saving Mode postpones power-intensive tasks until your laptop is plugged in, extending battery life. The ability to disable idle scan for optimal PC performance. Tweak advanced settings for each IntelliGuard, history logs and more. Operating System: Windows 7 (32/64-bit) Windows Vista with Service Pack 1+ (32/64-bit) Windows XP with Service Pack 2+ (32-bit) Spyware Doctor delivers powerful antispyware protection with minimal impact to your PC. It defends your computer against malware attacks with multiple techniques using proactive, reactive, and automatic protection to stop threats at every entry point. Now includes memory scanning, behavior profiling, and protection report cards to provide up-to-date protection and status monitoring for your PC. Anti-spyware Complete Product English Not Applicable PC PC Tools Spyware Doctor 2011 Retail Security Software Standard Symantec Symantec Corporation Windows www.symantec.com

Combating Spyware in the Enterprise $51.95 Combating Spyware in the Enterprise is the first book published on defending enterprise networks from increasingly sophisticated and malicious spyware. Combating Spyware in the Enterprise begins by examining the various types of insidious spyware and adware currently propagating across the internet and infiltrating enterprise networks. This section closely examines Spyware’s ongoing transformation from nuisance to malicious, sophisticated attack vector. Next, the book uncovers spyware’s intricate economy and network of malicious hackers and criminals. Forensic investigations presented in this section of the book reveal how increasingly sophisticated spyware can compromise enterprise networks via trojans, keystroke loggers, system monitoring, distributed denial of service attacks, backdoors, viruses, and worms. After close examination of these attack vectors, the book begins to detail both manual and automated techniques for scanning your network for the presence of spyware, and customizing your IDS and IPS to detect spyware. From here, the book goes on to detail how to prevent spyware from being initially installed to mitigating the damage inflicted by spyware should your network become infected. Techniques discussed in this section include slowing the exposure rate; web filtering; using FireFox, MacOSX, or Linux; patching and updating, machine restrictions, shielding, deploying anti-spyware, and re-imaging. The book concludes with an analysis of the future of spyware and what the security community must accomplish to win the ware against spyware. * A recent survey published by Information Security Magazine stated that “combating spyare” was the #2 priority for security professionals in 2005 * Despite the high priority placed on combating spyware by security professionals, there are no other books published or announced that address this market * Author Paul Piccard is Director of Research for Webroot, which is a market leader for pure-play anti-spyware vendors

Spyware $70.1 Spyware. Malware, Keystroke logging, Adware, Kazaa, CoolWebSearch, Movieland, MyWay Searchbar, Zango, Zlob trojan, Internet Spyware Prevention Act, Rogue security software, Computer surveillance Author: Miller, Frederic P./ Vandome, Agnes F./ McBrewster, John Binding Type: Paperback Number of Pages: 96 Publication Date: 2010/08/02 Language: English Dimensions: 5.98 x 9.01 x 0.22 inches

Gateway Anti-Virus/Spyware IPS and Application Firewall for the TZ 200 Series (3 Year) $809.99 SonicWALL Gateway Anti-Virus Anti-Spyware and Intrusion Prevention Service delivers intelligent real-time network security protection against a comprehensive array of dynami

PC Tools Spyware Antivirus 2011 – 3 User. $29.99 Provides protection against:Viruses.Spyware and trojans.Phishing.Behaviour guard intelligently analyses computer processes to accurately blockmalicious activity faster than traditional antispyware and antivirus software.Advanced root kit detection removes hidden threats that may give cybercriminals access to your computer.Intelli-Scan swiftly hunts and kills active spyware utilising patent-pendingspider scanning technology to quickly identify and remove threats.Constant real-time IntelliGuard protection monitors for malicious activityinvolving spyware, viruses, tracking cookies, suspicious ActiveX objects, browser hijackers, keyloggers, trojans, and more.New memory scanner helps eradicate threats lurking on your PC.Provides essential coverage without the confusing features.Install, set, and forget with our default settings that are automatically set to optimise protection.General information:3 user licence key.1 year licence.Minimum PC system requirements:Windows 7/Windows Vista (SP2)/Windows XP SP2+ operating system.30MB available hard disk space.

ParetoLogic Anti-Virus $39.97 ParetoLogic Anti-Virus PLUS protects against viruses, malware and spyware. It will scan, clean and completely remove even the most deeply rooted viruses, spyware, adware and even rootkits, which attempt to cover the tracks of potentially damaging malware. The sophisticated product will warn you, and block malware-related websites. As well, it protects against the drive-by-download and guards against threats in scripts and compressed files while blocking potentially harmful malware from social media sites. ParetoLogic Anti-Virus features customizable scanning as well as free database updates to keep you protected against the latest threats. While other anti-virus software may tie up valuable resources and slow down your gaming and Internet activity, ParetoLogic Anti-Virus PLUS is compact and efficient to make sure that your system is running at top speed as well as receiving maximum protection.As with all ParetoLogic programs, Anti-Virus PLUS is a fast acting and easy-to-use, customizable application that is supported by regular updates. It also has a small footprint so it does not take up valuable space that you need for your important programs or gaming. ParetoLogic Anti-Virus PLUS is also backed by the company’s customer care and support team that is second to none, ensuring that you are never alone in your fight against spyware,malware, and viruses.

Norazza Premoistened Popup Wipes $6.99 259000 Instant cleaning power in one easy step. Soft, non-abrasive ammonia free consistently dispenses one wipe at a time. Excellent for cleaning computers, PDA’s, keyboards, telephones, cell phones, audio equipment, CD’s, DVD’s, Game discs, copiers, fax machines, and desk-top. Ammonia-free Anti-static Audio Equipment Cellular Phone Cleaning Wipe Copier Desktop Computer Endust Fax Machine Keyboard Non-abrasive Norazza, Inc Optical Media PDA Premoistened Popup Wipes Streak-free Telephone www.norazza.com

Spyware and Adware $99 "Spyware and Adware" introduces detailed, organized, technical information exclusively on spyware and adware, including defensive techniques. This book not only brings together current sources of information on spyware and adware but also looks at the future direction of this field. "Spyware and Adware" is a reference book designed for researchers and professors in computer science, as well as a secondary text for advanced-level students. This book is also suitable for practitioners in industry.