PDA

View Full Version : Trojan Adware


newlady_evans
Mar 17, 2007, 08:52 AM
Some how I have this message that keeps popping up and no matter how I have run spyware programs it still remains. A yellow triangle that sits near the clock keeps coming up with a message that says,"system alert, detected viruses activity. Use recommended anti spyware Win Anti spyware. Then another box comes up with a message Trogan Adware.W32 exp dwnldr. Please help:confused: :mad:

Curlyben
Mar 17, 2007, 10:13 AM
This is a classic adware route.
DON'T click on the triangle ourwise you will only make matters worse.

When was the last time you did some serious system maintenance on your machine ?
Here's my usual C&P for cases like this:


When was the last time you did some serious maintenance on your system ?

System maintenance includes:
Defrag
FULL patching
Virus scanning
Spyware scanning
removal of rubish files

Defrag is an inbuilt function in XP.
Open My Computer > Right click C: > Tools Tab and its there.

To make sure everything is running fine run both anti virus and anti spyware apps in normal AND safe modes. (make sure that they are updated first ! ;)) (AVG (http://free.grisoft.com/doc/1) is good and free AV)
(A couple of good removal tools are Spybot (http://www.safer-networking.org/) and Adaware (http://www.lavasoftusa.com/software/adaware/))

ALso an on line virus and spyware scanner is Trend Housecall (http://housecall.trendmicro.com/)

Just a note; actively running two AV's on one machine can cause problems.
So if you are thinking about it make sure your current one is disabled first.
Same thing applies to online scanners as well.

Removal of junk files is easy with CCleaner (http://www.ccleaner.com) a free app that does exactly what

If all this fails then a repair install may be in order:

Here's (http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/tips/doug92.mspx) the official Micro$oft way of doing it,
and Here's (http://www.geekstogo.com/forum/index.php?showtopic=138) one with screen shots.

Basically this installs windows over the top of your current setup.
So you don't loose any information you already have.

This lot should resolve your issue.

ANETGames
Mar 17, 2007, 11:47 AM
Hello,
I've dealt with this threat before I do believe. Hopefully we can get this resolved by simply deleting a few files.

More than Likely you are infected with SecurityRisk.2AntiSpyware

Search for and delete any files named:
Msole32.exe
%UserProfile%\Desktop\AntiSpyware.lnk
%UserProfile%\Start Menu\Programs\Startup\Antispyware.lnk
%UserProfile%\Start Menu\Programs\AntiSpyware\AntiSpyware.lnk
%ProgramFiles%\AntiSpyware\data\block.reg
%ProgramFiles%\AntiSpyware\data\block_un.reg
%ProgramFiles%\AntiSpyware\data\desc.dat
%ProgramFiles%\AntiSpyware\data\files.dat
%ProgramFiles%\AntiSpyware\data\registry.dat
%ProgramFiles%\AntiSpyware\modules\ExplorerMenu123 .dll
%ProgramFiles%\AntiSpyware\modules\IEPlugin59.dll
%ProgramFiles%\AntiSpyware\quarantine
%ProgramFiles%\AntiSpyware\AntiSpyware.exe
%ProgramFiles%\AntiSpyware\default.xml
%ProgramFiles%\AntiSpyware\ExplorerMenu.dll
%ProgramFiles%\AntiSpyware\IEPlugin.dll
%ProgramFiles%\AntiSpyware\ignore.xml
%ProgramFiles%\AntiSpyware\quarantine.xml
%ProgramFiles%\AntiSpyware\settings.xml
%ProgramFiles%\AntiSpyware\Uninstall.exe
%ProgramFiles%\AntiSpyware\Update.exe

After you delete any of those files that exist. Please let me know if the reports stop popping up :)

Good luck, and feel free to ask for more help.

Dchdman
May 19, 2007, 09:23 PM
Yes don't click on that link as it could take you to a site which downloads a program called WinantivirusPro2007 or something like that which is a fake security program. Do what Anetgame said and then install some good Anti virus and spyware programs like AVG or Zone Alarm Security Suite which does the lot.

Don't run this two programs at the same time though, always disable one first before running the other.

If this help rate it