Ask Me Help Desk

Ask Me Help Desk (https://www.askmehelpdesk.com/forum.php)
-   Spyware, Viruses, etc. (https://www.askmehelpdesk.com/forumdisplay.php?f=477)
-   -   Trojan Adware (https://www.askmehelpdesk.com/showthread.php?t=72993)

  • Mar 17, 2007, 08:52 AM
    newlady_evans
    Trojan Adware
    Some how I have this message that keeps popping up and no matter how I have run spyware programs it still remains. A yellow triangle that sits near the clock keeps coming up with a message that says,"system alert, detected viruses activity. Use recommended anti spyware Win Anti spyware. Then another box comes up with a message Trogan Adware.W32 exp dwnldr. Please help:confused: :mad:
  • Mar 17, 2007, 10:13 AM
    Curlyben
    This is a classic adware route.
    DON'T click on the triangle ourwise you will only make matters worse.

    When was the last time you did some serious system maintenance on your machine ?
    Here's my usual C&P for cases like this:

    Quote:

    Originally Posted by Curlyben's maintenance tips
    When was the last time you did some serious maintenance on your system ?

    System maintenance includes:
    Defrag
    FULL patching
    Virus scanning
    Spyware scanning
    removal of rubish files

    Defrag is an inbuilt function in XP.
    Open My Computer > Right click C: > Tools Tab and its there.

    To make sure everything is running fine run both anti virus and anti spyware apps in normal AND safe modes. (make sure that they are updated first ! ;)) (AVG is good and free AV)
    (A couple of good removal tools are Spybot and Adaware)

    ALso an on line virus and spyware scanner is Trend Housecall

    Just a note; actively running two AV's on one machine can cause problems.
    So if you are thinking about it make sure your current one is disabled first.
    Same thing applies to online scanners as well.

    Removal of junk files is easy with CCleaner a free app that does exactly what

    If all this fails then a repair install may be in order:

    Here's the official Micro$oft way of doing it,
    and Here's one with screen shots.

    Basically this installs windows over the top of your current setup.
    So you don't loose any information you already have.

    This lot should resolve your issue.
  • Mar 17, 2007, 11:47 AM
    ANETGames
    Hello,
    I've dealt with this threat before I do believe. Hopefully we can get this resolved by simply deleting a few files.

    More than Likely you are infected with SecurityRisk.2AntiSpyware

    Search for and delete any files named:
    Msole32.exe
    %UserProfile%\Desktop\AntiSpyware.lnk
    %UserProfile%\Start Menu\Programs\Startup\Antispyware.lnk
    %UserProfile%\Start Menu\Programs\AntiSpyware\AntiSpyware.lnk
    %ProgramFiles%\AntiSpyware\data\block.reg
    %ProgramFiles%\AntiSpyware\data\block_un.reg
    %ProgramFiles%\AntiSpyware\data\desc.dat
    %ProgramFiles%\AntiSpyware\data\files.dat
    %ProgramFiles%\AntiSpyware\data\registry.dat
    %ProgramFiles%\AntiSpyware\modules\ExplorerMenu123 .dll
    %ProgramFiles%\AntiSpyware\modules\IEPlugin59.dll
    %ProgramFiles%\AntiSpyware\quarantine
    %ProgramFiles%\AntiSpyware\AntiSpyware.exe
    %ProgramFiles%\AntiSpyware\default.xml
    %ProgramFiles%\AntiSpyware\ExplorerMenu.dll
    %ProgramFiles%\AntiSpyware\IEPlugin.dll
    %ProgramFiles%\AntiSpyware\ignore.xml
    %ProgramFiles%\AntiSpyware\quarantine.xml
    %ProgramFiles%\AntiSpyware\settings.xml
    %ProgramFiles%\AntiSpyware\Uninstall.exe
    %ProgramFiles%\AntiSpyware\Update.exe

    After you delete any of those files that exist. Please let me know if the reports stop popping up :)

    Good luck, and feel free to ask for more help.
  • May 19, 2007, 09:23 PM
    Dchdman
    Yes don't click on that link as it could take you to a site which downloads a program called WinantivirusPro2007 or something like that which is a fake security program. Do what Anetgame said and then install some good Anti virus and spyware programs like AVG or Zone Alarm Security Suite which does the lot.

    Don't run this two programs at the same time though, always disable one first before running the other.

    If this help rate it

  • All times are GMT -7. The time now is 03:07 AM.