Trojan Virus

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Since 6/9/06, everytime I try and launch Internet Explorer from the desktop,
it goes to an address "about blank" and says there's a security warning about
viruses. Then, periodically, a pop up comes on in the lower right corner of
the screen, with different messages about potential problems, and a link to
"Scan for spyware" Also, a screen comes up that appears to be an
advertisement for a variety of anti-spyware programs, with free scans, and
then "buy now" buttons. And, periodically, another message comes up that the
computer is going to shut down, but it doesnt, it goes to the screen for the
purchase of software. The URL tht shows up is www.antispywarebox.com. I
can't get rid of this stuff. Help!!
 
Pat said:
Since 6/9/06, everytime I try and launch Internet Explorer from the
desktop, it goes to an address "about blank" and says there's a
security warning about
viruses. Then, periodically, a pop up comes on in the lower right
corner of the screen, with different messages about potential
problems, and a link to
"Scan for spyware" Also, a screen comes up that appears to be an
advertisement for a variety of anti-spyware programs, with free scans,
and
then "buy now" buttons. And, periodically, another message comes up
that the computer is going to shut down, but it doesnt, it goes to the
screen for the
purchase of software. The URL tht shows up is
Click to expand...
(url munged - antispywarebox)

Do not post real, unmunged url's to malicious sites. Some poor fool may
click on it and become infected.

Do the preparatory steps here:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Then go through the specific steps here:
http://www.elephantboycomputers.com/page2.html#Smitfraud_Trojan

If all else fails, run HijackThis and post your log to one of the
specialty forums listed at the first link above (not here, please).

If the procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a professional
computer repair shop (not your local version of BigStoreUSA).

Malke
 
Have you tried "spybot s&d" it works for me (most of the time) and it's
free. Also what anitvirus software are you using?
 
This same thing has happened to me. At about the same time. I run Trend Micro
PC-cillin Internet Security 12 that came with my Dell. I have scanned with
this, both virus and spyware. Increased the protection levels. I also scanned
with the Microsoft products on the security page. Initially I had and cleaned
problems but now all scans say everything is clean. But... the homepage still
changes, the window still appears with the warning messages and I get warned
that the system is shutting down but goes to http://antispywarebox.com. What
is disturbing to me is this thing uses a warning that is from Windows
Security Center. What to Do?
 
Mike said:
This same thing has happened to me. At about the same time. I run
Trend Micro PC-cillin Internet Security 12 that came with my Dell. I
have scanned with this, both virus and spyware. Increased the
protection levels. I also scanned with the Microsoft products on the
security page. Initially I had and cleaned problems but now all scans
say everything is clean. But... the homepage still changes, the window
still appears with the warning messages and I get warned that the
system is shutting down but goes to xxxx.antispywarebox.com. What is
disturbing to me is this thing uses a warning that is from Windows
Security Center. What to Do?
Click to expand...

Follow the instructions I already gave the Original Poster. Use Method 1
at the Smitfraud link since S!ri has updated his removal tool.

If you have more questions, make a new post instead of tacking onto an
older one as you did.

Malke
 
Got the same identical problem and the spyware is called "TITAN SHIELD
ANTISPYWARE" - Sneaky devils are hiding behind a Windows security message.
So far I haven't been able to remove this junk after using three different
antispyware programs. I have cleaned my C drive, scanned several times and
all virus scanners show no unwanted trojans. I cannot shake this thing and
may have to abort my hard drive and reload. Anyone else up against this?
 
Same thing here. It arrived on 6/9. I will try suggestion above. It's
extortion, isn't it? Let me know if there are any 'cures'.
 
First make sure you have tried scanning in safe mode.
Lots of stuff can hide but is often found in safe mode.
If you have another system, try hooking the infected
drive to the other system and scanning it as just data
(make sure your definitions are up to date). Do NOT
try and run anything on the drive when it is mounted on
another system, just scan it.
 
Took me a day and a half to figure this out. After researching, here's
how I got rid of it:

* I did a thorough AVG Anti-Virus scan before proceeding...

1. Download Spybot Search and Destroy and Update the Definition File.
2. Download Ad-Aware SE from Lavasoft and Update the Definition File.
3. Boot the PC into Safe Mode.
4. Run each program to get rid of the Spyware, Trojans, and Registry
Files that came with it.
5. Use "HijackThis" to get rid of the BHO files, look for the ones that
says "no name" and get rid of the abdpnl.dll file.
6. Reboot the PC back to Normal and that should clear it out.

Also, download Window's new Defender program to protect your PC from
Spyware being downloaded, too. Hope this helps some of you...

WrestHist
 
Back
Top