Hi,
I used to get spyware warnings on system tray but unable to download anti-spyware b/c PC restarts at a moment I try to download. I used system restore and was able to download an anti-spyware and it found 2 browser hijackers in the start up and cleans it but the virus reappears again and again and always restarts whenever I type or search words like spyware, browser hijacker, malware, removal, etc.
Please help. I’m in the middle of a job-project that my file might be damaged.
My PC is Intel Pentium 4, win XP sp2, 1.7 GHZ, 512MB ram.
Many Thanks
Henny




Download and run AdAware and Spybot and run them. Go here to get both – http://www. download. comYou might consider getting Windows Defender too. It protects against browser hijacking and is free from Microsoft. Good luck – you will get it solved.
Have you tried the Windows Defender (Beta 2) yet. . . It’s for XP, you may have some luck with this one
First you need to write down exactly as you have Which hijackers many of the tougher ones have to be manually deleted from the registry. IF that’s the case, Google the type of infection you have to find answers for removal. Try turning off your system restore, then run your anti-spy program reboot to remove them, and then. Many times these viruses will come back via system restore.
you should most probably install a good anti-virus software such as McAfee or Norton Antivirus. So if you have one then you get these errors then you should back up all your imp. docs. and then format your computer and reinstall windows XP pro and service pack 2 (sp2). then install any good antivirus program and all other programs you need. if u dont know how to do this yourself then call a computer specialist for this job. Make sure you keep both your computer and anti-virus program updated regularly.
Try use Windows Live Safety Center beta, quite nice.
Ur computer has been affected by multiple viruses. . . . since u say that even after removal by the anti-spyware, the virus seems to reappear. before i tell u the reasons I’ll tl u what u must do as there is no easy solution to this problem, since the contents of the original MBR (master boot record) is lost. The only solution for the anti-virus program is to detect that there is a problem, and to overwrite the contents of the MBR with a valid MBR program, Which the anti-virus program will have to carry with itself. If your favorite anti-virus program is not that smart, consider replacing it with a better one, or just boot from a write-protected DOS 5 Uninfected 0, diskette and execute the program with the option FDISK / MBR. This will re-create the executable code in the MBR without modifying the partition table data. In general, infection by multiple viruses of the same file or area is possible and vital areas of the original may be lost. This can make it difficult or impossible for virus disinfection tools to be effective, and replacement of the lost file / area will be necessary. U must have proper back-up for the projects that are going on. If there are no back ups then i think u have to loose some stuff. THIS IS WHAT HAS HAPPENEDThe first of these viruses that infects the computer will overwrite the Master Boot Record with its body and store the original MBR at a certain place on the disk. So far, this is normal for a boot-record virus. But if now the other virus infects the computer too, it will replace the MBR (which now contains the virus that has come first) with its own body, and store what it is the original MBR Believes (but in fact is the body of the first virus) AT THE SAME PLACE on the harddisk, OVER WRITING Thus the original MBR. When this happens, the contents of the original MBR are lost. Therefore the disk becomes non-bootable. When a virus removal program inspects such a hard disk, it wants to see the SECOND virus in the MBR and will try to remove it by overwriting it with the contents of the sector where this virus normally stores the original MBR. However, this sector now contains the body of the FIRST virus. therefore, the virus removal program will install thefirst virus in trying to remove the second. In all probability it will not wipe out the sector where the (infected) MBR has been stored. When the program is run again, it will find the FIRST virus in the MBR. By trying to remove it, the program will get the contents of the sector where this virus normally stores the original MBR, and will move it over the current (infected) MBR. Unfortunately, this sector contains the silent body of the FIRST virus. Therefore, the body ofthis virus will be re-installed over the MBR ad infinitum.
First get disconnected from the internet. Then click on the start menu. Then select Run. Under this prompt write ‘msconfig’ without quotes. Then under Startup tab click on the button “Disable all”. Then press Apply button. Again under the Services tab check the option named “Hide all Microsoft services”. Then click on the “Disable All” button. Again apply and then press ok. Restart the machine and perform a full system scan with the antivirus software installed. Follow the instructions mentioned by the anti-virus software. Then install Spybot with all updates and scan the hole machine.