Virus

[Trinity]

Yeah, I've got that 'Antivirus 2009' virus. I don't understand how though, as my laptop's been fine for ages, and the only thing I've downloaded recently is a new antivirus (ESET).

Anywho, symptoms.
I turned the laptop on before - now that I think about it, it's the first time it's been turned on in 2009, so maybe it was one of those date-triggered viruses - and I got a pop up saying 'Your computer may be at risk' or some similar crap.
I opened task manager and a new little blank window popped up too, which was quite obviously part of the virus.
I ended a couple of processes through task manager, IEXPLORE.exe or whatever, because I knew I didn't have IE open. I also ended WLLProxy.exe or something similar, it sounded suspicious.

Anyone know how to get rid of it?
I did a scan with ESET yesterday and nothing showed up, currently doing another scan but nothings showing yet.

I really don't want to reformat, I don't have an XP disc or anything and backing up is a pain.


Oh look, as I was typing a new window popped up - 'Download Registry Defender'

[Trinity]

Ok, update.
Following the advice from http://answers.yahoo.com/question/index?qid=20080824195845AAhAqoj
Currently scanning with malwarebytes, but when I go to download SuperAntiSpyware the download link leads to:

http://dw.com.com/redir?edId=3&siteId=4&oId=3000-8022_4-10523889&ontId=8022_4&spi=45e2f279c2e4e9f3956010af1eb5883b&lop=link&tag=tdw_dltext&ltype=dl_dlnow&pid=10992921&mfgId=6281995&merId=6281995&pguid=DQh3fgoPjAEAACFabxIAAAC8&destUrl=http%3a%2f%2fsoftware-files.download.com%2fsd%2fdnNH3nzecVRd7RZE5IzTW3A9 yFOYZf04P9oJdj1mTURrLD1bjWv1xN5THumXRF6G57EEwD6k64 sb3Lee_-w9BD7aBzVaXUU1%2fsoftware%2f10992921%2f10523889%2f 3%2fviewtopic.php%3ff%3d2%26t%3d2297%3flop%3dlink% 26ptype%3d1900%26ontid%3d8022%26siteId%3d4%26edId% 3d3%26spi%3d45e2f279c2e4e9f3956010af1eb5883b%26pid %3d10992921%26psid%3d10523889
Is that the right download link? Something doesn't seem right with it.
When I click it, it tries to download 'viewtopic.php'.

I just realised that I downloaded malwarebytes from a similar looking link, so hopefully the link isn't just the virus playing games with me.

[Ardemax]

If you're trying to get that software, the link looks ok, but try download.com firstly to see if it's on there.
Download.com is a safe and trusted site to use.

[shizzle]

I have this same problem, and ESET (NOD32) is running. It keeps popping up.

[Soy]

Try using system restore and then download 'Ad-aware'

Very powerful anti-spyware

[Trinity]

If you're trying to get that software, the link looks ok, but try download.com firstly to see if it's on there.
Download.com is a safe and trusted site to use.

I am using download.com, that's why the link seems a bit weird.


Try using system restore and then download 'Ad-aware'

Very powerful anti-spyware

I'll try that now, thanks.

[Ardemax]

Search the spyware you need and just download it at download.com
It will be fine, don't panic!

[Trinity]

Search the spyware you need and just download it at download.com
It will be fine, don't panic!

Yeah, I downloaded it anyway. I thought seeing as I'm infected anyway, I might aswell risk it.

I've scanned and cleaned with malwarebytes and superantispyware, they both found plenty of stuff, and now the popups have stopped.

So, anyone want to list a load of malware scanners for me? I want to scan with everything I can, just to be sure :)

Oh, and +rep to the people that posted.

[Ardemax]

Yeah, I downloaded it anyway. I thought seeing as I'm infected anyway, I might aswell risk it.

I've scanned and cleaned with malwarebytes and superantispyware, they both found plenty of stuff, and now the popups have stopped.

So, anyone want to list a load of malware scanners for me? I want to scan with everything I can, just to be sure :)

Oh, and +rep to the people that posted.

If no popups come up and two scanners detected it, then it should be sufficient.

I'll get you a list now, if you want to be 110% sure.
To download 'em just click on the link.

Ok, I've got one for you so far, check with this, then tell me if you need more.

http://www.maxpcsecure.com/download/spywaredetectorb.asp?SRC=index

This is the direct download link and its safe.

[Trinity]

If no popups come up and two scanners detected it, then it should be sufficient.

I'll get you a list now, if you want to be 110% sure.
To download 'em just click on the link.

Ok, I've got one for you so far, check with this, then tell me if you need more.

http://www.maxpcsecure.com/download/spywaredetectorb.asp?SRC=index

This is the direct download link and its safe.

That one is useless, you have to pay for it before it will do anything.
Thanks again anyway though.

[Ardemax]

Oh, sorry!
Try:

http://www.stopzilla.com/products/stopzilla/sz-thanks.do


EDIT: Click on "Click here", it basiclly starts the download.

[tyo22]

i guess if you haven't already and want to then try:

spybot search&destroy , be sure to update it before you do so, though.

http://www.spybot.com/en/mirrors/index.html


you can also try a-squared free
http://www.download.com/A-squared-Free/3000-2239_4-10262215.html

or AVG free
http://free.avg.com/download?prd=afe

[Trinity]

i guess if you haven't already and want to then try:

spybot search&destroy , be sure to update it before you do so, though.

http://www.spybot.com/en/mirrors/index.html


you can also try a-squared free
http://www.download.com/A-squared-Free/3000-2239_4-10262215.html

or AVG free
http://free.avg.com/download?prd=afe

Yeah I've tried Spybot, I'll check out a-squared now, thanks :) +rep

[Tim.]

Try AVG Paid trial first, its likely to do more than the free version will.

heres a link to a few one-off virus scans, and theyre more likely to pick up viruses as if they do, they have a chance of selling you something. It will often give you the exact location of the infected file/folder so you can manually remove aswell as infected root keys etc

http://support.euro.dell.com/support/topics/topic.aspx/emea/shared/support/security/en/security_scan?c=uk&l=en&s=gen

Good luck removing the bugger

[Trinity]

Try AVG Paid trial first, its likely to do more than the free version will.

heres a link to a few one-off virus scans, and theyre more likely to pick up viruses as if they do, they have a chance of selling you something. It will often give you the exact location of the infected file/folder so you can manually remove aswell as infected root keys etc

http://support.euro.dell.com/support/topics/topic.aspx/emea/shared/support/security/en/security_scan?c=uk&l=en&s=gen

Good luck removing the bugger

Thanks for the link, I'll check it out now :) +rep