Chilli Posted December 13, 2008 Posted December 13, 2008 I apologise if this has been mentioned beforehand but my laptop has picked up the nuisance virus About Blank so when I run my laptop it runs very, very slow and when i finally run Internet Explorer after one or two chances to browse i get redirected to a page telling me that my computer is infected and to install the latest anti virus program. I have installed programs such as Stopzilla, Regcure and XoftSpySE and when I run them they all say there is infections but to remove them then I have to get a license key and to do that then I have to pay for it. Am I at the point where I have to pay for programs to remove malware or is there an alternative way. My laptop is running Windows XP Home Edition with AVG Free 8.0 and Commodo Firewall Pro. I have installed Spybot S&D and Advanced Windowscare and they have removed items they found but About Blank is still there. I have run AVG and done a full scan but I have read that because this is not a virus then the anti virus program will not remove it. I would greatly appreciate any help you can give me please, Chilli Quote
sangfroid Posted December 13, 2008 Posted December 13, 2008 Personally I don't use or like Stopzilla or Regcure or XortSpySE. That is my personal preference though. Try installing and updating Malwarebytes' antimalware; Malwarebytes.org . If you don't want real time scanning then no need to pay. I'd also install, update and run Superantispyware; SUPERAntiSpyware.com - AntiAdware, AntiSpyware, AntiMalware! again no need to pay if real time scanning not required. I'd also uninstall the other programs. For 'blockers' I'd use Spywareblaster; SpywareBlaster | Prevent spyware and malware. Free download. and Spybot S&D; The home of Spybot-S&D! Quote
RandyL Posted December 13, 2008 Posted December 13, 2008 I use SpywareBlaster too but Spybot is not a blocker but rather a scanner. An outdated and inefficient at that. SAS will find more. Quote We are all members helping other members. Please return here where you may be able to help someone else. After all, no one knows everything and you may have the answer that someone needs.Get help with computer problems. Join Free PC Help here Donations are welcome. Read Here
RandyL Posted December 13, 2008 Posted December 13, 2008 Chilli if it's what we think it is this is a tough one to remove. Try running our guide and hopefully it will work. If not repeat the SuperAntispyware and Malwarebytes scans from safemode. Required Cleanup StepsDisable the Spybot Search & Destroy TEA TIMER if you use it and if it is enabled Run a Temporary file and cache cleaner (ATF) Run 2 Anti-Malware scanners (Listed Below) Run an Online Anti-Virus / Anti-Malware Scanner (Listed Below) Clear out old System Restore points If continued Malware type activity is present you may be asked to post a TrendMicro™ HijackThis™ Log file, do not do so unless requested. The reason to run multiple scanners is to ensure that no single scanner is missing something. The time it takes will vary depending on your system and your internet connection speed. Typically the SUPERAntiSpyware and Malwarebytes scanners will take between 10 to 90 minutes. The ESET online scan should take between 1 to 3 hours. In most cases, these scans will suffice to clean and disinfect your computer. Heavily infected systems or slower PCs can take much longer to scan and clean. For best results print the following instructions and bookmark this Web page To keep this guide printer-friendly, use your cursor to highlight the contents below. From your browser select File - Print and in the printer dialog box under "Print range" click the Selection choice to print out these instructions for removal of malware. http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/printer-selection.gif ____________________________________________ STEP 1 Disable Spybot Search & Destroys' TEA TIMER: (if installed, if not go to Step 2)Run Spybot-S&D in Advanced Mode. If it is not already set to do this Go to the Mode menu select "Advanced Mode" On the left hand side, Click on Tools Then click on the Resident Icon in the List Uncheck "Resident TeaTimer" and OK any prompts. Restart your computer. __________________________________________________ STEP 2 Follow these instructions carefully. Download ATF-Cleaner from Snapfiles.com to remove un-needed temporary files from your computer that may contain malware. You can also download it from Majorgeeks.com When you run ATF-Cleaner, check the items as shown below for Main. For FireFox, be sure to click on the FireFox tab on top and check the items as shown below for FireFox NOTE: If you don't have FireFox or Opera installed then they will be grayed out and can be ignored Then click on "Empty Selected". http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/atf-cleaner01.gif. http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/atf-cleaner02.gif __________________________________________________ STEP 3 Install and run the free version (not the Professional version) of SUPERAntiSpyware from SUPERAntiSpyware.com Accept any prompts to allow SUPERAntiSpyware to install the latest rules and infection definition files. You do not have to send them your e-mail address, just click next. You can leave the automated check for updates on. You can uncheck "Send a diagnostic report to research center" if you don't want to send the information. DO NOT allow SUPERAntiSpyware to protect your Home Page settings. On the Top Left select the Scan your computer button. Make sure there is a CHECK MARK on all Fixed Drives. Click "Perform a Complete Scan". Click "Next" to Repair issues found and reboot the computer when prompted to do so. __________________________________________________ STEP 4 Install and run Malwarebytes' Anti-Malware from Malwarebytes - (direct download) Accept all defaults for the installer Allow the program to update the definitions Click on the Quick Scan and click Next. If any items are found allow it to clean them and then Reboot your computer. __________________________________________________ STEP 5 Run an online scan with ESET from Free Virus Scan: Use ESET's Online Antivirus Scanner You must use Internet Explorer for this online scan. FireFox, Opera, etc will not work for this scan. If your computer is running Window's Vista, then you must first start Internet Explorer as an Administrator. To do so, right-click on the Internet Explorer icon in the Start Menu and select "Run as administrator" from the popup context menu. Accept the terms and click "Start". Once the scanner is ready, check "Remove found threats" AND "Scan unwanted applications". Click "Start" to begin the scan. When completed restart your computer __________________________________________________ Make sure your internet firewall security is enabled, and then please return to Extreme Tech Support - Free PC Help and tell us how the computer seems to be operating. At that time, you will receive instructions to assist you in removing malicious programs from your Add/Remove program list if warranted. If required this is the download link for TrendMicro™ HijackThis™ Unless instructed to by the Technician helping you then do not download this tool. Once you and the Technician agree that your system appears to be clean then you should delete all your System Restore points and recreate a new one. Please follow the instructions here How to turn off and turn on System Restore in Windows XP How to turn off and turn on System Restore in Windows Vista Quote We are all members helping other members. Please return here where you may be able to help someone else. After all, no one knows everything and you may have the answer that someone needs.Get help with computer problems. Join Free PC Help here Donations are welcome. Read Here
sangfroid Posted December 13, 2008 Posted December 13, 2008 Spybot 'immunises' against certain sites if I'm not mistaken. It's scanning is lacking I agree but it does block. Very rarely it will find things other antimalware programs miss and worth keeping in the arsenal. Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.