WARNING: Fake Anti-Spyware, Pop-ups

Gait_Keeper · August 6th, 2005, 09:28 PM

Also remember to update Ad-Aware and spybot

just click the update in each

rycwil · January 7th, 2006, 04:29 PM

Hi,

Does anyone have experience with bogus virus/spyware warnings popping up in the Windows notification box (WinXP)? I've managed to remove the bogus spyware program, so now when the notification is clicked it just takes me to the bogus spyware webpage, as opposed to actually starting the program. But the notifications simply won't go away. Oh, and I'm also still getting popups.

Thanks very much for any tips,

Ryan

Jarhed7276 · January 7th, 2006, 04:45 PM

Welcome to TechIMO.

Look in your Task manager and see if mssearchnet.exe or nvctrl.exe are running.
HAve you used AdAware or Microsofts AntiSpyware (the new one dated 6-31-06)?

rycwil · January 7th, 2006, 05:17 PM

Yes, those two processes are running. Is it possible to track down where they're running from?

I've got Symantec AntiVirus, but nothing else. Sounds like I should look into that.

Thanks!

nomaxim · January 7th, 2006, 05:25 PM

D/L Highjack this update and run.

Then cut and paste your log here

Remove any funkie objects.

EDIT:
Welcome to TechIMO!

Jarhed7276 · January 7th, 2006, 05:42 PM

If those two processes are running then you have the Spy Axe virus.

Download the smitRem.exe file from this site http://www.bleepingcomputer.com/forums/topic36868.html
Then boot into safe mode and run the file.

That should take care of it for you.

rycwil · January 7th, 2006, 07:59 PM

Great! I'm all set now. Thanks Jarhed.

Jarhed7276 · January 7th, 2006, 08:09 PM

Your welcome, rycwil.

xelnanga · January 7th, 2006, 10:23 PM

lol, I got an e-mail because I still had the subscription to this thread... thanks for the reviving a year old thread.

mimic · January 7th, 2006, 10:41 PM

Quote:

Originally Posted by ted61

I have a 5 year old that clicks ok to everything that pops up. Needless to say, I was totally dominated by popups. Nothing worked in my quest to get rid of the popups. Some of the infected programs installed on my machine would not let me have access to delete them. I had to put the win2k install disk in then boot to pseudo dos to delete the corrupt files. That seems like a major security flaw to me btw.

I wound up installing windows on an f: drive for boot up. That solved my problem but my paths for running a few programs is a little off at times.

To begin with...You should try a different browser than IE.

Opera is my preference but Firefox doesn't use ActiveX either. I've never had any spyware in all the years I've used Opera. Konqueror is another good browser that I love. Either of these and you never have to worry about such mundane things like spyware or viruses.

Linux helps also. I use SUSE and don't worry about any of this stuff.

Reading some of these threads around here it sounds like the beginning of the end but if you use a *nix distro you don't have to worry about any of these things.

jmo since it seems so many are so scared of this stuff and go to any lengths to rid themselves of it. I've just never heard anyone mention this previously in all the years I've been around.