Ask Leo! by Leo A. Notenboom

Why won't this "Your Computer Is Infected" warning go away?

Search First! Then browse: Categories | Full Archive | By Date | Newsletter

Home » Viruses and Malware » Malware Detection

Comments

Read the article that everyone's commenting on.
RSS feed Subscribe to the RSS Feed for comments on this article.

Comment Page:  1  |  2  |  3 

Definitly don't click ANYTHING ON THE SCREEN shut down and run spybot and lavasoft or superantispyware in safe mode no internet connection as some these trjans reinvent their registry details ok

Posted by: Martin Edmunds at January 14, 2009 1:15 AM

Sometimes you have to click on the little warning bubble, with internet disabled of course, to see where it tries to take you so you will know what infection you are dealing with. Especially if you need the instructions to delete the infection manually because all of your security products fail.

http://www.geocities.com/terryhollett2003/

Posted by: Terry Hollett at January 14, 2009 5:52 AM

Yes, be very careful If any of those warnings come up, and I have found the following to be an excellent way to get rid of them:
1. restart in "safe mode w/ networking"
2. open Internet and go to www.malwarebytes.org"
3. D/L malwarebytes program and install AND update it.
4. disconnect from the network if you are on a cable/dsl connection.
5. TURN OFF system restore.
6. run full scan with malwarebytes program.
7. remove everything it finds.
8. restart in normal mode and run the malwarebytes again. DO NOT CONNECT TO INTERNET YET!
9. When scan is complete and nothing more is to be removed, then shut down, reconnect network, start the system.
This will get rid of all the malware on the system.

I guess some people have nothing better to do that mess up other peoples systems.....

Posted by: Paul Seifert at January 14, 2009 4:38 PM

I too got the "Windows 2008 antivirus spyware, lickily for me I was very familar with Microsofts software & knew what I had. So I uninstalled & deleted it. Since I got the free Avast Antivirus software I have been able to stop all attacks, I also got another freeby called SpywareBlaster which I've been using for a few years now. Thanks Leo for all the good information & all the people who contribute! TW

Posted by: Tony Williams at January 14, 2009 5:34 PM

This type of virus is "real time" which means it's occurring while your veiwing it. It's very unlikely that its been hanging around on your HD waiting for the right moment to pop up (although I've seen some that do). If you've taken Leo's advice and been doing regular backups of your PC then getting rid of the virus is simple and painless. Disconnect from the internet, open your backup program and do a complete system restore. I keep a complete backup of my entire system on an external HD. It takes about thirty minutes to replace 30 GB. It beats spending an evening trying to remove a virus that might leave leftovers. I recommend Acronis True Image.

Posted by: Mike Parsley at January 14, 2009 5:59 PM

I got this virus, more than once, while surfing sites that featured... (shall we say: "ladies of the night").

Many people on this forum said that Malwarebytes worked well to remove it from their systems. But it didn't work so well for me. I still had traces and vague remnants even after running malwarebytes. (I feared those remnants could resuscitate the virus.)

Fortunately, however, I have a clone of my harddrive (in a perfect state). So I wiped out my harddrive, and then recloned it, using Acronis True Copy.

It was a drastic method, but it's the only method I could use to wipe out this "beast". It's a particularly nasty virus, I must say.

Posted by: Velocity Wave at January 15, 2009 12:07 AM

PS:
In fact this particular virus is so nasty, and so reoccuring on the Internet that I now only use Ubuntu when I am surfing to the more shady and dangerous web-sites.

I installed Ubuntu onto a flash-drive. When I want to surf to dangerous sites, I simply boot the flash drive and use it.

To be honest I much prefer windows to ubuntu, but Ubuntu is a great operating-system to use if you like to surf dangerous websites from time to time.

For simple instructions on installing Ubuntu onto a flash drive google: "ubuntu pen drive".

Interestingly, Ubuntu can also join a Windows workgroup, so if you download any files while doing your dangerous surfing, you can transfer them over your workgroup network to a windows machine, and then scan them on the windows machine.

By the way: I really have to say that in all my years of surfing the Internet, I've never seen a virus like this one. It really just bowls over Windows -- and windows seems defenseless against it. That's why the only real option I have found so far is to use Ubuntu (booted off a flash drive) when I am knowingly taking risks on the Internet.

Posted by: Velocity Wave at January 15, 2009 12:17 AM

This is my solution to the XP-Antivirus 2008-2009
Trojans.
And it has popped up on my screen more
then 20 times in the course of a month.
Not once has it gotten into my computer.
Comodo-firewall/antivirus/comodo-antimalware.

And have removed these 2 trojans from other
peoples computers using malwarebytes.org.
And leo i look forward to your Emails every
week as i learn a lot from your infinite
and wise experiences.
You are top notch in my book.
2 thumbs up to you my friend.

Posted by: fastfreddie1959 at January 15, 2009 8:00 PM

I guess I've been lucky. I haven't seen a single pop-up in many years.

The previous replies lead me to ask this perhaps naive question: how does one disconnect from/shut off/disable one's internet connection? I've never seen, as suggested above, a right-click option anywhere.

My connection is via cable. I suppose if I ever did want/need to disconnect from the internet I'd simply unplug my cable modem. Am I missing something?

Physically unplugging is typically the most practical, but you can also right-click on the network connection icon in Control Panel -> Networks and click on "Disable".
- Leo
19-Jan-2009
Posted by: Duane at January 18, 2009 12:40 PM

Thanks Leo, now how do I get rid of it now that is on my computer.

Ever case is different, but you can read what I did in: How did you clean up your friend's infected machine?
- Leo
20-Jan-2009

Posted by: Roberta at January 19, 2009 8:19 AM
Comment Page:  1  |  2  |  3 
Read the article that everyone's commenting on.
RSS feed Subscribe to the RSS Feed for comments on this article.
Post a Comment

Question? Ask Leo!