Microsoft Operating System Forum

natasha

i am using vista home premium. i just got this computer. i know so much about
computer but just the basic. I have a problem that is poping up on my screen.
I have tryed everything i know to get rid of it. The heading is security
system protection control panel. It is saying possible spyware infection
detected . You need to update pc-anti-spyware as it has detected a trojan
downloader.xs. I have run scans and can't find a problem. When i press on it
it takes me to a anti-spyware site to buy a package. The site it takes me too
is called anti-spyware-reviews.biz 2008. It is driving me crazy. If anyone
would please help to sort this problem i would be greatful. I hope i am in
the right discussion group. If i am not could you please let me know what
group i should go too. Thankyou

Malke

natasha wrote:

> i am using vista home premium. i just got this computer. i know so much
> about computer but just the basic. I have a problem that is poping up on
> my screen. I have tryed everything i know to get rid of it. The heading is
> security system protection control panel. It is saying possible spyware
> infection detected . You need to update pc-anti-spyware as it has detected
> a trojan downloader.xs. I have run scans and can't find a problem. When i
> press on it it takes me to a anti-spyware site to buy a package. The site
> it takes me too is called anti-spyware-reviews.biz 2008. It is driving me
> crazy. If anyone would please help to sort this problem i would be
> greatful. I hope i am in the right discussion group. If i am not could you
> please let me know what group i should go too. Thankyou

Your computer is infected but not necessarily with the trojan downloader.
The program that is giving you the message to buy it is the malware.

Go here to see if there are targeted removal steps for your malware:

Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

If you can't find your malware listed or need help in removing it, register
at BleepingComputer or one of the specialty forums listed below to get
guided help. Read their posting FAQ first. You will generally be asked to:

1. Download and execute HiJack This! (HJT) -
http://www.trendsecure.com/portal/en...HJTInstall.exe

2. Disable Notepad's word wrap - In Notepad.exe; Format --> uncheck; "Word
wrap"

3. Download/run Deckard's System Scanner -
http://www.techsupportforum.com/sect...eckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post at the
forum you chose. DO NOT POST LOGS HERE IN THE MS NEWSGROUPS.

http://aumha.org/downloads/hijackthis.zip
http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Merijn
http://www.bleepingcomputer.com/foru...howtutorial=42 - another
tutorial
http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/...splay.php?f=25
http://www.geekstogo.com/forum/Malwa..._Here-f37.html
http://gladiator-antivirus.com/forum...?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!

natasha

THANKYOU this sorted my problem there were 14 infections and now my computer
working great again. Thankyou again.

"Malke" wrote:

> natasha wrote:
>
> > i am using vista home premium. i just got this computer. i know so much
> > about computer but just the basic. I have a problem that is poping up on
> > my screen. I have tryed everything i know to get rid of it. The heading is
> > security system protection control panel. It is saying possible spyware
> > infection detected . You need to update pc-anti-spyware as it has detected
> > a trojan downloader.xs. I have run scans and can't find a problem. When i
> > press on it it takes me to a anti-spyware site to buy a package. The site
> > it takes me too is called anti-spyware-reviews.biz 2008. It is driving me
> > crazy. If anyone would please help to sort this problem i would be
> > greatful. I hope i am in the right discussion group. If i am not could you
> > please let me know what group i should go too. Thankyou
>
> Your computer is infected but not necessarily with the trojan downloader.
> The program that is giving you the message to buy it is the malware.
>
> Go here to see if there are targeted removal steps for your malware:
>
> Bleeping Computer removal how-to's -
> http://www.bleepingcomputer.com/forums/forum55.html
>
> If you can't find your malware listed or need help in removing it, register
> at BleepingComputer or one of the specialty forums listed below to get
> guided help. Read their posting FAQ first. You will generally be asked to:
>
> 1. Download and execute HiJack This! (HJT) -
> http://www.trendsecure.com/portal/en...HJTInstall.exe
>
> 2. Disable Notepad's word wrap - In Notepad.exe; Format --> uncheck; "Word
> wrap"
>
> 3. Download/run Deckard's System Scanner -
> http://www.techsupportforum.com/sect...eckard/dss.exe
>
> 4. Save the scan results (Main.txt and Extra.txt)
>
> 5. And then post the contents of Main.txt and Extra.txt in your post at the
> forum you chose. DO NOT POST LOGS HERE IN THE MS NEWSGROUPS.
>
> http://aumha.org/downloads/hijackthis.zip
> http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Merijn
> http://www.bleepingcomputer.com/foru...howtutorial=42 - another
> tutorial
> http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
> the stickies *first*.
> http://www.atribune.org/forums/index.php?showforum=9
> http://aumha.net/viewforum.php?f=30
> http://www.bleepingcomputer.com/forums/forum22.html
> http://castlecops.com/forum67.html
> http://www.dslreports.com/forum/cleanup
> http://www.cybertechhelp.com/forums/...splay.php?f=25
> http://www.geekstogo.com/forum/Malwa..._Here-f37.html
> http://gladiator-antivirus.com/forum...?showforum=170
> http://spywarewarrior.com/viewforum.php?f=5
> http://forums.techguy.org/54-security/
> http://forums.tomcoyote.org/
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers
> www.elephantboycomputers.com
> Don't Panic!
>

Malke

natasha wrote:

> THANKYOU this sorted my problem there were 14 infections and now my
> computer working great again. Thankyou again.

I'm very glad to hear that you've got things sorted. Thanks for taking the
time to let me know.

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!

Faisal [MSFT]

Hi Natasha,

Your system seems to be infected. try scan from here:
http://www.pandasecurity.com/activescan/index/

and

http://onecare.live.com/site/en-US/default.htm

HTH

"natasha" <natasha@discussions.microsoft.com> wrote in message
news:B3C850C2-9125-4C36-A678-3390737CA860@microsoft.com...
> i am using vista home premium. i just got this computer. i know so much
> about
> computer but just the basic. I have a problem that is poping up on my
> screen.
> I have tryed everything i know to get rid of it. The heading is security
> system protection control panel. It is saying possible spyware infection
> detected . You need to update pc-anti-spyware as it has detected a trojan
> downloader.xs. I have run scans and can't find a problem. When i press on
> it
> it takes me to a anti-spyware site to buy a package. The site it takes me
> too
> is called anti-spyware-reviews.biz 2008. It is driving me crazy. If anyone
> would please help to sort this problem i would be greatful. I hope i am in
> the right discussion group. If i am not could you please let me know what
> group i should go too. Thankyou

Malke

Faisal [MSFT] wrote:

> Hi Natasha,
>
> Your system seems to be infected. try scan from here:
> http://www.pandasecurity.com/activescan/index/

(snip)

Yes, her system was infected and she cleaned it up by following the
instructions I gave her on 4/11. She came back and said thanks 0n 4/12. The
thread has been closed since 4/12. Why are you reopening it? Why not work
on some of the many open threads in some of the other MS newsgroups?

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!