View Single Post
  #7  
Old 01-05-2006, 05:39 AM
Help for you
 
Posts: n/a
Default RE: Spyware Infection Notice -- TRY THIS AS I HAVE THE SAME PROBLM

Hai admannj,
May peace be upon you. I have the same problem 'spyware Infected' in black
box behind blue screen. To my surprise me too have Norton AV 2005, Microsoft
Antispyware, Ad-aware from Lavasoft.

What I did when the problem happened to me

1. Turn off System restore immedately
- Right Click My Computer->Properties->select System Restore
This will stop viruses, and infected files, spywares, adwares & other
malicious softwares from being RESTORED later

2. Download a Trial Software Norton Internet Security from its website
- 2.1) Update the Norton Internet Security->Youmay get failed news->try
again
(it will display in Green colour sometime will display in red that your pc
is not protected)->Click Protect Me Now Untill you Get Norton Icon in
OK(green Tick Mark) at the bottom right corner of the desktop
- Run a full System Scan
- View Quarantine List (by Clicking at Left Norton Anti Virus->Reports)
and select all those Infected files and Select submit (this will help the
Norton Co to do research & update their Anti-Virus Softwares and help people
like us in future) and at last DELETE (BEFORE DELETE WRITE THE LOCATION OF
INFECTED FILES FOR DOUBLE CHECK TO ENSURE IT IS COMPLETELY REMOVED)

VERY IMPORTANT: - 3. Then download FREE ONLINE SCAN from McAfee.Com and
Click OK to download ActiveX Controls to scan your computer. After the
download completes it will display what to scan page(here go to File of the
web page->Send->Shortcut to Desktop)

(read the steps follows you will need to redo the process for atleast five
times)

and 3.1) Scan Crive (By doing this I found some Infected files still not
detected by a) Norton Internet Security b) Microsoft AntiSpyware c) Ad-aware )

3.2) Take a fresh paper and write up the location and NAME of the infected
file
then close all the programs and [do the following thing ONCE "Right Click
Recycle Bin->Properties->Select Do Not Move Deleted files to Recycle Bin"
dOING tHIS oNCE iS eNOUGH ] THEN
3.3) Click Start ->Choose Run ->type msconfig ->enter
3.4) choose BOOT.INI->Select /SafeBoot check box (Now the Computer start
in Safe Mode)
3.5) Click Start button->Search->all files and folders->type the file
name(e.g if the McAfee online scan shows an infected file name called
Appwrap[1].exe you just type Appwrap
- The search will find the infected file and display
- Write the FULL PATH of the file in a paper and SELECT the files->Right
Click->Delete

3.6) Then restart your computer in Normal Mode by UN-CHECKING SAFEBOOT
(Run->msconfig->BOOT.INI->UNCHECK the SafeBoot check box and click the first
tab and select Normal Mode check box) as Internet will not work in Safe Mode

3.7) Then 1) Update Norton Internet Security->Scan fully and REDO THE
PROCESS 2.1) and then goto desktop click McAfee Online Virus Scan SHORTCUT
aand REDO THE PROCESS 3.1 to 3.7 ATLEAST FIVE TIMES AS I AM ALSO DOING THE
SAME THING

FOR ME THE INFECTED FILES WERE DELETED AND THE MESSAGE AT THE CENTRE OF
DESKTOP AND BLUE BACKGROUND WERE GONE but the only thing is I have a WHITE
Back ground and i cant change desktop background as I cant click at desktop
top at its properties

Ok try this I spent almost 1 1/2 hr to write to you inorder to save people
like me who got trouble because of these problems

Good luck to you reply me your feed back at gazzalionline@hotmail.com

















"admannj" wrote:

> I use Windows XP Home with Norton Anti-Virus 2005, Microsoft Anti-Spyware
> Beta 1 and Ad-aware 6. Some how, my computer became seriously infected with
> spyware over the weekend. Still not sure how this happened, but that is
> irrelevant for now.
>
> Anyway, Windows XP Home recognized the spyware issue and replaced my desktop
> image with a black box inside a blue screen with the following text:
>
> SPYWARE INFECTION
> Your system is infected with spyware. Windows recommends you to use a
> spyware removal tool to prevent loss of important data and increase system
> performance. Using this PC before having it cleaned from spyware threats is
> highly discouraged.
>
> After hours of "deep cleaning" via Norton, Microsoft Anti-Spyware an
> Ad-aware, Windows has stopped popping up "infection" messages and I believe
> my system is 100% clean. However, the desktop image still remains. I cannot
> "right-click ... properties" and change my desktop image back to what it was.
>
> Any thoughts / help is GREATLY appreciated.
>
> Thank you.

Reply With Quote