Spyware Attack

clairemoon · #1 02-23-2006, 01:06 AM

Please help, i have tried endless suggestions to get rid of this virus, but nothing has worked. Its the one that hijacks you desktop and supplies a link to an ad-aware program that is fake!!!!!!!! Please help.

p.s sorry if this is in the wrong place

ANZAC_ELITE · #2 02-23-2006, 02:14 AM

Define endless suggestions

Have you identified this "virus" via an AV programme?

What is the name of the ad aware programme that it directs you to?

By the way ...... Welcome to the forum

clairemoon · #3 02-23-2006, 02:23 AM

I have tried numerous spyware programs, like spybot, spysweeper, McAfee Stinger, xoftspy, hijackthis!... None of them are working! I have tried deleting all the critical files that have been identified.

The Desktop changes to a black screen with a warning message saying that me pc has been infected with spyware blah blah. Then there is a hyperlink to an ad-aware (not the real one) download site, which you have to pay to download the software.

Also every 30 seconds or so.... 2 warning messages pop up in my system tray saying something along the lines of ' Windows has detected spyware in you system, this is potenially critical etc....'
The other one says things like ' You are receiveing spam click here to protect your system. or 'Your system has just been accessed to try to hack your credit card details.'

These all take me to the fake ad-aware site.

BTW - Thanks for the welcome.

ANZAC_ELITE · #4 02-23-2006, 02:55 AM

the sys tray thing has been around a while, for the life of me I can't remember the name of it .......... there is a fix, can you give me the name?

The desktop hijack is a new one on me, it is desktop and not homepage yes ???

clairemoon · #5 02-23-2006, 03:03 AM

Is this the name? Zero-day IE .WMF Exploit

Yeah, its definatly the desktop. It has a hyper link in it.

xzworks · #6 02-23-2006, 03:20 AM

try scanning/ad-aware/spybot/soyware doctor and hijackthis @ safemode.

ANZAC_ELITE · #7 02-23-2006, 04:21 AM

I guess this is it (link)

At this stage I have yet to locate a fix ..........

Can you do a system restore to before you got this thing ????

Kevin_gibson · #8 02-23-2006, 05:20 AM

Right click on the desktop, and click on properties, it should give you a file name, copy and paste it in here, or do an internet search (google it)
and it should give you a removal tool.

clairemoon · #9 02-23-2006, 06:47 AM

Quote:

Originally Posted by ANZAC_ELITE

I guess this is it (link)

At this stage I have yet to locate a fix ..........

Can you do a system restore to before you got this thing ????

Yeah thats it.
Yes I have tried doing this but it will not let me restore. I have also tried doing all the scans with the system restore turned off.

I'll try the safemode option when I get home and also the right - click properties name.

Thanks for all the suggestions people. I will report back later. I just have to remain calm!!!!

clairemoon · #10 02-23-2006, 11:51 AM

http://www.topadwarereviews.com/?adv=196&ads=d

The hyper link on my desktop takes me here!

clairemoon · #11 02-23-2006, 04:31 PM

WOW, thank you so much everyone!
The running of spyware checks in safe mode solved it!
excellent!

I have now made sure my anti - virus etc is fully up to date and am going to do a system backup soon. Any suggestions on the best way to do this?

Once again thanks!!!!!

ANZAC_ELITE · #12 02-23-2006, 06:11 PM

I prefer Norton Ghost (unfortunately it is not free) for my back ups, it takes a "snap shot" image of your hard drive that you can restore also it allows for daily incremental back ups to the image. I tried the Windows back up utility a couple of times but it always seemed to create corrupted images.

If you wish to try the back up utility in XP go to start > Help and Support, type in back up, read the results.