Okay, I’m having a problem with popups and my computer saying I have spyware. One link that keeps poping up is this http://winsecupdates.com/?aid=444.568
If you click DO NOT download. I do believe this is a Rogue Spyware program.. Now my problem is that I’ve ran my spyware Antivirus and can’t for the life of me make it go away. It keeps making ZEDO pop up among others. It also shut down my Task Manager and I can’t turn it back on. What should I do?
First off > I did mention I ran my antivirus & spyware protection. I don’t need links to programs such as AVG, although I’m grateful for your thoughts, it still won’t help.
I forgot to mention that other sites (such as this one just posted by one of you > http://www.geekstogo.com/forum/Must-Read-Before-Posting-Hijackthis-Log-t2852.html <) won’t load for me because of whatevers wrong.
Many of the links that have ANY information on helping seem to be in some form blocked for me.
Use AVGhttp: / / free. avg. com /
Perform a “system restore” back to a date when you definitely know you were not infected with this spyware. It will almost definitely get rid of it and will not delete any of your files. Otherwise, use SpyBot software to remove the spyware.
go to control panel, add / remove programs, and then remove the program, that might work. . . look for anything that has any of those words, or for anything that looks funky, you know that your computer did not come with or you did not install. Removing something, that could really ruin your computer needs the computer. So make SURE it is not something your computer needs.
It will not be easy but if you go here and follow the directions you will be able to fix it. http://www. geekstogo. com/forum/Must-Read-Before-Posting-Hijackthis-Log-t2852. html
It’s not unusual for a virus program to block access to helpful sites. You could try the links to Major Geeks and any others that I have in my profile but you might not get far with those either. My guess would be that your “hosts” file is affected. The hosts file should be in your Windows folder: C: WINNTsystem32driversetc (Windows 2000) C: Windowssystem32driversetc (Windows XP) Your hosts file should not have much in it unless one of your security programs has added things to it. Mine looks like this (in between the ===):============# Copyright (c) 1993-1999 Microsoft Corporation. # # This is a sample HOSTS file used by Microsoft TCP / IP for Windows. # # This file contains the mappings of IP addresses to host names. Each # entry should be kept on an individual line. The IP address should # be placed in the first column followed by the corresponding host name. # The IP address and the hostname should be separated by at least one # space. # # Additionally, comments (such as these) may be inserted on individual # lines or following the machine name denoted by a ‘#’ symbol. # # For example: # # 102 54th 94th 97 rhino. acme. com # source server # 38 25th 63rd 10 x. acme. com # x client host127. 0th 0th 1 localhost ========= It has not copied well in the typing box but the rules are these: – anything that is a comment line must start with the hash # – Anything that has 127th 0th 0th 1 in front of it will not be able to be got to (except for localhost) For example, if you had: 127 0th 0th Google 1. comyou would not be able to get to Google. You might be able to get to a country based Google web site but not to that one. So I’m wondering if your hosts file has been changed by the virus. I’d suggest renaming the hosts file that is there to hosts. bak, (normally the hosts file has no DOTanything) especially if you are not sure if it looks how it should. Then use NotePad to make a new hosts file and only put in the line that reads: 127 0th 0th Localhostand save it into one where the original hosts file is. If it ends up being a text document called hosts. txt, right-click on the file and choose to rename it to hosts and Windows should object saying if you change an ending, the file may not work. Let the ending get changed because in this case, no ending is correct. See if that lets you get to the sites you are trying to find help from. PS I did a lookup on that domain name and it’s only been registered for about a week by the looks of it: http://www. whois. net / whois_new. cgi? d = winsecupdates & tld = comi would not be trusting it for now. . . .
Hi there, the spy ware has hijacked your internet explorer and the other system files. . . i have had the same problem sometime back and tried my best at to remove the infected files. . . Finally i end up formatting the drive after my data backup. . . . i am not advising you to format and reload your O / S, try to remove the spyware / trojans using the genuine anti-virus / spyware removal software’s and consider reloading the O / S. . Cheers, SM
Pc Protection Center 2008, also known as PCProtectionCenter2008, is the latest rogue anti-spyware software. This software creates a lot of problems for internet users. Pc Protection Center 2008 like other fake anti-spyware uses misleading and exaggerated reports. PC Protection Center 2008 can usually be installed into user’s computer without his permission, through Trojans like Zlob usually, Vundo, Virus or fake software. PC Protection Center 2008 will try to trick users by showing fake system’s alerts, fake security alerts and will try to forse user to buy a “full” version of PC Protection Center 2008 program, in order to delete reported problems. Pc Protection Center 2008 can cause computer users to slow down dramatically and it could even put user’s privacy and data at risk. Delete Pc Protection Center 2008 as soon as possible Instructions how to delete infection: http://www. pcthreat. . com/parasitebyid-7013en html
Same issue here on a customer’s laptop, but I’m not going to bother with figuring it out as they’re also having issues with corrupted Norton AV, Microsoft Office, partial install, and have 192MB of memory running XP and no working anti-virus . * Shakes head * Sorry.