Urgent problem UNWANTED program

[covert]

Hi Nev, thanks I will upgrade my Vista, I don't use the XP desktop really that much but will upgrade that to SP3 when I get chance too. Thanks, glad to know I am hopefully clear, long day but very worth it, and JB has been a great help! I hope to get Kaspersky soon, but for now am running all the protection recommended by you guys, so should keep me safe for now. Thank you and big whoop whoop lol :)

[Jelly Bean]

Thankyou Nev.

 

Covert I think you should be fine now.

 

Is the computer running faster?

 

As Plastic Nev said I would update to service pack 2 for your Vista computer.

 

Your very welcome covert if you need help in the future please pop back and ask.

 

JB.

[covert]

Hi JB, yep it's running great thanks so much, was a scary day but glad it's sorted. I really appreciate all your help, and anyone else who chipped in. I will do the VIsta update, and will keep my security up to scratch now. And I always know where to come for any help or info. THANK YOU :)

[Jelly Bean]

Excellent.

[Plastic Nev]

I will add a final thing here, as you already know please do keep all your security software up to date.

If not already using it change your browser to Firefox, it is more secure and also get the add ons, McAffee site advisor, and WOT (Web Of Trust), also in Firefox get AddBlock Plus, that keeps all those annoying adverts at bay, you can find them on the Mozila Firefox site.

 

Finally, don't use peer to peer sites for downloading music or other files, they can operate as an open tube to install malware onto your computer from those unscrupulous malware writers and spreaders. Have a look at our rules regarding P2P sites, rule 3 http://extremetechsupport.com/forum/introductions/5272-rules.html

There is good reasons for that as the use of P2P can leave you exposed to all sorts of nasties as I explained above, but also a tremendous amount of material available from those sources is very much illegal, either in its content or the fact it is breaking copyrights.

Hope you continue to enjoy your computer use hassle free, and secure.

Please do come back if any other problems, or you never know, you may be able to help some one else.

Nev.

[covert]

Hiyah Nev, I don't use P2P, havent done for years. I swap my dvd's for dvd's lol But thanks for the tip. I am mainly on facebook apps and a couple of other social type sites. This is what concerns me about all these problems I have picked up, the sites I use are good popular sites.

And yes I have firefox, I will try to remember to use it more, but I can't for my main site I use so have to have IE8 for that. Thanks very much, I will take this all on board, I was recommended AVG as a good Virus blocker, apparently NOT lol This was a long time ago,before I discovered your site, I will get all recommendations from here in future! Thankies muchley :)

[covert]

Sorry 1 question, which SP2 update would I need? 64 bit? thanks (big cheesy grin lol)

[Plastic Nev]

Which version of Vista are you using? is the reply question :D

Have a look at your system properties for that, Start, run, sysdm.cpl Works in XP but not sure about vista but try it, it should tell you whether it is the 32 or 64 bit operating system there.

Nev.

[covert]

Thanks Nev, no it doesn't work for Vista but still told me how to find out, and I have 32 bit thanks very much :)

[Jelly Bean]

Excellent covert have you installed the latest service pack now?

[Tootech]

which SP2 update would I need? 64 bit? thanks

 

It doesn't matter. Use Windows Update and all will be ok.

[covert]

Hiyah,

Noit yet, I did get the download, but not the 32 bit one as it wasn't an option on the site, so I haven't activated it yet, I do have auto downloads on already, and have alwyas installed any updates when told, so I will try that way first thanks to Tootech's tips too :)

[covert]

You will be glad to know I now have SP2 for vista fully installed. I also haven't had any more infections thanks to you guys, and keep everything updated everyday and running, I feel so safe, THANK YOU :)

[Jelly Bean]

That is excellent covert.

 

We now have a Security Team expert on the forum so if you have any issues with infections we can help you further.

[covert]

yay

 

That is excellent covert.

 

We now have a Security Team expert on the forum so if you have any issues with infections we can help you further.

 

Yes I did notice the security team addition, great stuff.

I have been notified af a few virus and bugs being passed thru Facebook recently, and so far I haven't had any of them, a good sign that my security is working well

And I will always be coming back just to read up on things, or for any help or if I can ever, help others in return.

Thank you JB

[danzil]

just for future reference there is a rogue apap on facebook at the moment.

called fan check, this prog supposedly lets you see a list of the poeple who view your profile...

this once installs PRETENDS to try and update its database, before failing and asking you to go to a website to manually do it...

when you reach this site you are presented with a message saying you are infected with ****trojans, click ok to clean or cancel to leave.

both ok and cancel will install the virus>malware.

this variant is a pop that sits in your taskbar and constantly pops up fake warnings about being infected and wants your money to fix these.,...

 

Facebook is aware of this but hey ** facebook have not done anything as yet..

 

so please be aware of it...

if you do get it, smitfraudfix will remove it instantly, all you have to do is boot into safe mode and run it....

 

smitfruad can be found here SmitFraudFix

 

hope that helps anyone that gets it, and others that are unaware of it.

take care all

regards

danzil

[Plastic Nev]

Thanks for that heads up Danzil, I may copy this to somewhere else to make sure the message is spread. There are many folk using facebook who could just fall for that one.

[chiaz]

Hello Danzil,

 

Glad to hear SmitfraudFix worked for you but to be honest, it is not really up-to-date and may not catch all the new infections out there.

 

I would suggest any members who have unfortunately gotten infected by FB infections to start a new thread here:

Malware Infection Removal - Computer Support Forums - FreePCHelp.co.uk

 

Only then will you be able to truly ensure that your PC has been rid of malware and no remnants remain. :)

[danzil]

new version 2.423

This tool removes Desktop Hijack malware: Advanced Antivirus, Advanced Virus Remover, AdwarePunisher, AdwareSheriff, AlphaCleaner, AntiSpyCheck, AntiSpyware Expert, Antispyware Soldier, AntiVermeans, AntiVermins, AntiVerminser, AntiVirGear, Antivirus 2009, Antivirus 2010, Antivirus 360, AntiVirus Lab 2009, Antivirus Master, Antivirus Sentry, Antivirus System Pro, Antivirus XP 2008, AntivirusGolden, AV Antispyware, AVGold, Awola, BraveSentry, Coreguard Antivirus, Extra Antivirus, HomeAntivirus 2009, IE Defender, IE-Security, Internet Antivirus, Malware Defender 2009, MalwareCrush, MalwareWipe, MalwareWiped, MalwaresWipeds, MalwareWipePro, MalwareWiper, Micro Antivirus 2009, MS AntiSpyware 2009, MS Antivirus, PC Protection Center 2008, Personal Defender 2009, PestCapture, PestTrap, Power Antivirus, Power-Antivirus-2009, PSGuard, quicknavigate.com, RegistryFox, Registry Cleaner, Renus 2008, Security iGuard, Smart Antivirus 2009, Smitfraud, SmitFraudFixTool, Spy Protector, SpyAxe, SpyCrush, SpyDown, SpyFalcon, SpyGuard, SpyHeal, SpyHeals, SpyLocked, SpyMarshal, SpySheriff, SpySoldier, Spyware Guard 2008, Spyware Protect 2009, Spyware Vanisher, Spyware Soft Stop, SpywareLocked, SpywareQuake, SpywareKnight, SpywareRemover, SpywareSheriff, SpywareStrike, Startsearches.net, System Antivirus 2008, System Guard 2009, TheSpyBot, TitanShield Antispyware, Total Protect 2009, Total Secure 2009, Trust Cleaner, Ultimate Antivirus 2008, UpdateSearches.com, UnVirex, Virtual Maid, Virus Heat, Virus Protect, Virus Protect Pro, VirusBlast, VirusBurst, VirusRay, Virus Remover 2008, Virus Shield, VirusResponse Lab 2009, VirusTrigger, Win32.puper, WinHound, WinPC Defender, WiniBlueSoft, Vista Antivirus 2008, WinDefender 2009, XLG Security Center, XP Deluxe Protector, XP Security Center, XPert Antivirus, XP Police Antivirus, Brain Codec, ChristmasPorn, DirectAccess, DirectVideo, EliteCodec, eMedia Codec, EZVideo, FreeVideo, Gold Codec, HQ Codec, iCodecPack, IECodec, iMediaCodec, Image ActiveX Object, Image Add-on, IntCodec, iVideoCodec, JPEG Encoder, Key Generator, LookForPorn, Media-Codec, MediaCodec, MMediaCodec, MovieCommander, MPCODEC, My Pass Generator, NetProject, Online Image Add-on, Online Video Add-on, PCODEC, Perfect Codec, PowerCodec, PornPass Manager, PornMag Pass, Pornovid, PrivateVideo, QualityCodec, Silver Codec, SearchPorn, SexVid, SiteEntry, SiteTicket, SoftCodec, strCodec, Super Codec, TrueCodec, VideoAccess, VideoBox, VidCodecs, Video Access ActiveX Object, Video ActiveX Object, Video Add-on, VideoCompressionCodec, VideoKeyCodec, VideosCodec, WinAntiSpyPro, WinMediaCodec, X Password Generator, X Password Manager, ZipCodec, WinCoDecPRO...

 

majority of the threats above, do exactly the same and have very similar files but just use different names...

i have been dealing with these in a corperate enviroment for 5 years,smitfruad was and is always my first place of call....but as suggest it is ALWAYS best to startup a new thread, that way we can be absolutly sure of what we are dealing with.

regards

danzil

Edited September 13, 2009 by danzil

[chiaz]

Hi Danzil,

 

As far as I know SmitfraudFix has not been updated for close to 3 months. According to the changelog, the last update was on June 24, 2009.

 

majority of the threats above, do exactly the same and have very similar files but just use different names...

Not entirely true.

Yes, all these programs belong to the same Smitfraud/Zlob family, and exhibit similar symptoms on an infected PC. But these malware creators constantly come up with new methods to avoid detection and removal. The infection changes and updates itself frequently. And this is a big reason why this particular infection is now affecting so much of the Internet population.

 

Most of us now suggest MalwareBytes Anti-Malware as an alternative to remove Smitfraud/Zlob. It has been shown to be effective in dealing with most . However ultimately we are always one step behind the malware developers. In fact currently I'm manually dealing with a fresh one on another forum, MBAM is unable to catch it yet.

 

 

Just my 2 cents....

[danzil]

mmmmmmm neglected to read the changelog....lol apologies

regardless it seems to have much effect on these infections when i use the tool..

maybe im just getting lucky and catching a variant that the fix has removal tools for....

totally agree that these infectons always get updated to avoid detection.....

 

Malware bytes has always been a very very usefull tool.and i install it often on Computers i repair or build...

 

regards

danzil

:)

[chiaz]

No problem danzil, we can certainly learn from each other.

[covert]

I have told everyone on my facebook about this fancheck app and the word is spreading, thanks