[ziggy]

Help please, when I recently changed my desktop background picture I got a warning that my computer may be infected by spyware which covers my dektop background.When I click on the link it goes to a site called topantispyware.com/overview.php?38. Is this spyware or a virus and how can I get rid of it? I have used spybot, ad-aware and avg antivirus but it still remains it is always there when I log on to the computer I also get a warning popup when I am connected to the internet for the same link which also covers the whole screen.thanks in advance :)

[fredg]

Hi,
There are several things you can do, either one of which might not cure it.
Here is a listing:

If you think you already have Spyware/Advertising Ware in your computer, run these as follows:
Spyware/Advertising ware removal

http://www.security-related.com/download2.htm
Download: SpyBot Search & Destroy; 1.3

AdAware at:
www.lavasoftusa.com
Download: AdAware_SE

Both the above programs run better and much faster when run in SafeMode.
It's best to run the AdAware scan first; 3 times; then re-boot.
Then, run the AdAware scan again 3 times; then run the SpyBot.
Re- Boot.
Reason for running so many times:
Some of these trojans' files can be deleted the first time; leaving some others; but on re-boot, they re-write the files that were deleted.
Running multiple times deletes most of it the first
Time.

If you wish to have a great program, after you clean out Spyware/Advertising Ware:
SpyWare Blaster 3.2
Great, free, program that STOPS spyware, trojans, home page hijacks, etc, BEFORE they get into your computer. Check it out at CNET at link:

http://www.download.com/SpywareBlast...ml?tag=lst-0-2

Two Tips:
If you notice the little green computer lights that show your dial-up connection to the internet staying on when they shouldn't be, located on the bottom right of the system tray, disconnect immediately and run AdAware. These lights staying on means that some URL is sending or receiving spyware/advertising ware to or from your computer, most of the time.

Other Tip: After being on the net, if you have visited any sites you don't really trust, then run AdAware BEFORE you shut down or re-start the computer. This will delete any Spyware easier, before the computer can configure it, set it up, spread it throughout the Registry, and make it more difficult to remove after re-booting.

If the above doesn't work, then try editing the Registry.
First, back up your Registry. The simplest way to do it is to shut down the computer, wait a few seconds, then turn it back on. It will automatically back up the Registry when booting up.

BE CAREFUL when deleting things from the Registry; your computer might not re-boot.
When the computer boots up, the Registry tells it what programs to run; telling it to run the SpyWare/Advertising programs first, if in the computer.
Here are steps for deleting things that startup when you boot up the computer:

Go to Start/Run. Type in "regedit" without quotes, then click on OK.
At the top, Click on "Edit", then "Find".
In the space Find What: type in what you want to find. (in this case, RUN).
Then, put a check mark by "Match whole string only". This will keep the search from stopping at every word it finds, like the word "run", etc.
Then click "Find Next". It will search the registry for the first entry you typed in.
It will "open" a folder on the left hand side of the screen, showing what is in the folder on the right hand side. If you know that an entry on the right hand side is something you no longer have, or has just been added with a name you don't know, then right click on it, then left click "delete", tell it Yes or OK to remove it.
Then, press F3 on the top of the keypad to continue the search.
When finished, at the top, click on File, Exit.

Any StartUp programs, that start when the computer boots up will be listed in folders on the left hand side of the screen with names like:
RUN, RUNSERVICES, RUNONCE, RUN-, etc.
Click on the next folder down with the name RUN in it, to look at its startups on the right hand side.

If the spyware/advertising program has re-set your home page; you will have to type in the home page you want.; click on Apply, and OK.

If any questions or problems, please post back.
Best wishes,
fredg

[cremedies]

This is exactly why running spyware removal software alone is not enough. There are several other steps that must be made before even running any type of spyware remover. If these steps are not done in advance, then your computer will just reinfect itself with more spyware the next time you restart your computer. Try the Spyware-Adware Removal Kit that is available at the link below.

[fredg]

HI,
I went to the site offered by Cremedies and all I found was a $10 software package for spyware removal... no ratings on it.

Have you tried the Registry editing?
Type in the word topantispyware to do a search.
I'll bet you find it in the Registry, and you can delete it.
The Registry tells the computer what to do.

Best wishes,
fredg

[cremedies]

Actually, the $10 package you refer to is NOT software. It is an 11 page, typed written instruction manual that gives step-by-step instructions with "screen shots" on how to make changes in the computers configuration in order for the customers chosen software to work effectively. Anyone who's run a spyware removal program before, only to have spyware still remain on their computer, knows that spyware removal programs alone just do not work effectively enough to get rid of the problem. The Spyware-Adware Removal Kit was written from several hundred hours of experience in removing spyware/adware from many customers computers. I have a little bit of a better insight than most people who don't repair computers for a living. No one knows everything, including myself, but when it comes to something that I deal with on a daily basis from one extreme to the next, I can say that I am definitely an expert when it comes to spyware removal. There is a FREE rotation period for almost every product. One just has to check back often to catch its rotation. I hope this clears up any confusion.

[psi42]

So... you're claiming to have a "magic cure" (more or less) here... but how do we know it's just not 11 pages of screenshots on how to disable ActiveX? (Not that disabling it is bad).

[cremedies]

Look... I'm just trying to share my own positive experiences. Let's not turn this into something that it's not. I'm trying to give some helpful information which was actually free for over 45 days if anyone chose to download it, and you seem to be trying to turn this into a "side show". In fact, I sent it out to several IT professionals as a trial run before I released it, and it received nothing but high marks during the test. I'm not trying to puff my chest out. Either you try the product or you don't, but I have way too much integrity to support a product that does not work. My reputation rides on anything and everything that has my name on it. I WILL NOT RISK IT.

On a different note: I'm trying to provide some useful and accurate information to the people in need of it and I'm being looked at under a microscope. There are several posts by one particular member here who does nothing but insult people, curse and demean on these boards and rarely gives a bit of useful information, but yet I have not seen a single person say anything to them and they're still here making a mockery of this board. Why isn't someone addressing that issue? Anyone who spends time here knows exactly who I'm talking about. Let's not lose sight of what the real issues are. This is a support forum. We should all be mature enough and open to all reasonable suggestions and not take suggestions as a personal attack or insult as there is already one person passing enough of that around already.

[ziggy]

I have tried ad aware and spybot and deleting some registry but its still there I have also posted on another help site with a logfile from hijack this and waiting for a reply from there.
Thanks again
Ziggy

[psi42]

Look...I'm just trying to share my own positive experiences. Let's not turn this into something that it's not. I'm trying to give some helpful information which was actually free for over 45 days if anyone chose to download it, and you seem to be trying to turn this into a "side show". In fact, I sent it out to several IT profesionals as a trial run before I released it, and it received nothing but high marks during the test. I'm not trying to puff my chest out. Either you try the product or you don't, but I have way too much integrity to support a product that does not work. My reputation rides on anything and everything that has my name on it. I WILL NOT RISK IT.

I'm not trying to belittle your work. I have looked at the services/products you offer and they all look very professional.

I'm not trying to attack your reputation or your business.

I just thought your description was a little vague, that's all.

I was just asking a question... no offense meant.

[cremedies]

Fair enough. No harm... no foul.

I realize that I have to be very careful in the wording of my posts from now on. I certainly don't want to come off like a "know it all" because I will be the first to tell you that I am not. At any rate, if you have any questions in the future, feel free to email me directly.

Take care.

[Nez]

Might not be directly aimed at your problem,but on http://www.esecurityplanet.com/alert...le.php/3412761 they talk about a virus called MS04-028 which detects jpg images.The virus allows someone to download a file onto the affected PC,if the image is opened within an infected application.The article is from September 2004,but you might find it useful.If something nasty is on your PC,then you need a removal kit,small free file which will do the job,from any anti-virus site.
Good luck.

Towards the bottom of the article page,you will see a link called Online Threats and Alerts Archive taking you to the latest virus,and spyware updates info.I have bookmarked the page for future reference.

[Amun Ra]

This may sound freakishly simple (or freakishly stupid), but have u tried changing the background again? If not, try. That background message may be nothing more than a link to spam sites.

[ziggy]

Thanks everyone for your help the problem is now sorted so this topic can be closed thanks again ziggy

[psi42]

thanks everyone for your help the problem is now sorted so this topic can be closed thanks again ziggy

I'm sure the guy with the same problem who finds this thread in a search is going to be REALLY happy to see that...

[Nez]

Can't agree more.Topic closed?
So you might have solved your problem,but zillions of others can go to other forums?
This is the best forum on the net for everyone helping each other out,without having to navigate a billion functions,key in ten passwords,and fumble through 2000 pages of intro.
What next.Change all questions after one month?
Stay sensible please.You may need the forum again!

All the best,
Nez.

[fredg]

Hi,
Did you run your AdAware and SpyBot in Safe Mode??
As another expert said, some of this stuff actually rebuilds other files, that were removed by AdAware, as soon as you reboot the computer.

If you didn't use SafeMode,
Start your computer in SafeMode.
Then, run AdAware at least 3 times.
Then, run Spybot.
Re-boot in SafeMode.
Run AdAware a couple more times.
Then reboot, and see if the problem is gone.
Best of luck,
fredg
PS; Did you run CWShredder?
Also, I really like all the Experts here... good ones!!

[Wendy225]

For Spy ware protection and general help cleaning up the computer and registry, Anti Virus protection and software download websites, old and new game downloads, CD & DVD Burning help,I recommend, the following files, as I have found 1 or even 2 is not always enough, as 1 may find something the others do not, so protect yourself with several programs, if may be a pain, but a necessary one.

I have personally tested each program on this list and I had taken them from the top review sites around the net as ones already chosen as the top performers.

Remember that just any Spyware Adware program is not always good, there are literally dozens of them out, and more coming every day, but most do not do the job, and many even install their own Spy and Adware on your systems, the ones below I have personally tested and so have many other people I know, they seem to be the best for Spyware & Adware Removal

Spyware
Microsoft New SPyware program-Formerly Giant spyware, they bought it out.
Spysweeper
Spybot search and destroy
Adware SE
Aluria's Spyware Eliminator
BPS Spyware
Spyhunter
Spyware Doctor
Pest Patrol

This one prevents certain Spyware that it contains in it’s data base from being installed on your system.
Spyblaster 2 http://www.download.com/3001-8022_4-10305680.html

I would suggest at the very least 3 or more of the above programs.

Registry and Fix and Repair programs
Fix it Utilities 5 this one has an excellent Scandisk, better than the one with your OS
Advanced System Optimizer
Ace Utilities
System Mechanic 5
Registry First Aid
Tuneup Utilities

Any 2 or more of these.

And download the Google toolbar with built in pop up stopper for your browser is good.

And a good solid Anti Virus Program or 2, updated weekly.
PC-Cillin
AVG Anti Virus
Bit defender
Etrust EZ Anti virus

Also free online Virus scans
http://housecall.trendmicro.com/
http://www.bitdefender.com/scan/licence.php
http://www.thepcmanwebsite.com/virus_help.shtml
http://www.pandasoftware.com/actives..._principal.htm
http://www.ravantivirus.com/scan/
http://www.kaspersky.com/scanforvirus
http://www.thefreecountry.com/security/antivirus.shtml

I would suggest using 2 of these.

A good defragging Program or 2
Diskeeper Lite or Even better the full Pro version
Perfect Disk
O&O Defrag V4 Professional Edition 4.0.508
MST Defrag

Also run from Start/run type in chkdsk then let that run then type in chkdsk /f to help fix WinXP errors.

2 Excellent Programs to erase your tracks and where you go online.
Tracks Eraser Pro
Evidence Eliminator
CCleaner This one is free at www.ccleaner.com but the above 2 programs do a lot more thorough cleaning job than Ccleaner, but it’s good to have them all 3.

Also use the below website, that tests and reviews some of the best programs out for many

Different things, they give you side by side comparisons and rate each one in many categories.
http://www.toptenreviews.com/

If you need computer parts try this website
www.newegg.com they are the best and fastest retailer, I have ever dealt with on the net, great service, delivery and solid competitive pricing.

PC Security Checks
http://www.grc.com/

Download sites for reviews and trying out new products
http://www.Soft32.com
http://www.tucows.com
http://www.topshareware.com/
http://downloads-zdnet.com.com/2001-...ml?legacy=cnet
http://www.download.com/

An excellent program I can’t do without, it is a Windows Explorer replacement, much better
Powerdesk,

Old Games Downloads & Abandonware

http://www.the-underdogs.org/ No cost, just get a password and join for free, it’s loaded with older computer games and they rate them.

http://www.freeoldies.com/ more of an old game search engine

http://www.argosoft.com/games/dos.html strictly old Dos games

Good Peer 2 Peer file sharing Programs
These are all better and Safer than Kazaa Lite

You can find all of the above programs with these 2 programs, but If you use them then please eventually purchase them.

Also you can find some of the programs here

http://www.bi-torrent.com/43.htm
You must download & install the free file Bit torrent.exe to download files 1st.

Ares Installs 1 file that Spyware may detect, but it’s just the program file itself, so ignore it. Good solid file sharing progam.

WinMX Sometimes slower than Ares, but neither install Spyware or Adware.

Bearshare has tons of items and is fast, but it loads down your computer with Spyware, Adware and who knows what else, but for that, 1 hard to find file, they may have it, but beware of all the problems.

DVD & CD Burning review, Help and Download sites
http://dvd-burning-software-reviews.com/ mainly reviews DVD software
http://www.burnworld.com/ A very thorough and complete website on burning.
http://www.cdfreaks.com/ Another huge Burning website
:)

[ziggy]

Sorry got it wrong don't close this topic and thanks for the sarcasm nez and psi42 much appreciated as it says under username newbie thought it would be better to close to save space than for people to keep posting solutions.

[psi42]

thanks for the sarcasm nez and psi42 much appreciated

You still haven't posted your solution.

[eurpac]

I have Spybot Search and Destroy. When I run it, I get a box that says "creating system restore point. XP allows you to revert to a point before system changes have been made...." It then says if it is not needed, switch to advance mode and disable in settings. This box seems to hang around a long time. Can I safely disable system restore point in XP without causing problems? Advance mode in Spybot seem to discourage fooling with the advance settings. Thanks