My computer is infected windows has detected spware

**JonDaviS** · January 28th, 2006, 01:41 PM

On my toolbar a message pops up and says your computer is infected. Windows has detected spyware infection. It is recommended to use special antispyware tools to prevent data loss. Windows will now download and install the most up to date antispyware program for you. Click here to protect your computer from spyware. I clicked on it and nothing happened. So I used MacAfee scan for viruses, spybot, AOL Spyware protection and Ad-aware. I did have some things come up after using these programs and I deleted them or got rid of them. But the message still comes up and says your computer is infected. So what should I do to fix this problem? I also tried to open up task manager but it want let me and this has happened since the message came up your computer is infected. It says task manager has been disabled by your administrator. So what should I do to fix these problems?

**slgrieb** · January 28th, 2006, 02:33 PM

Go to this page:http://wiki.castlecops.com/Malware_R...SpyAxe_Removal download the smitRem.exe tool and follow all instructions exactly.

**rgharper** · January 28th, 2006, 05:25 PM

Originally Posted by JonDaviS

On my toolbar a message pops up and says your computer is infected. Windows has detected spyware infection. It is recommended to use special antispyware tools to prevent data loss. Windows will now download and install the most up to date antispyware program for you. Click here to protect your computer from spyware. I clicked on it and nothing happened. So I used MacAfee scan for viruses, spybot, AOL Spyware protection and Ad-aware. I did have some things come up after using these programs and I deleted them or got rid of them. But the message still comes up and says your computer is infected. So what should I do to fix this problem? I also tried to open up task manager but it want let me and this has happened since the message came up your computer is infected. It says task manager has been disabled by your administrator. So what should I do to fix these problems?

The first thing I would suspect is that this is not a legitimate spyware infestation. No Windows component, not even the new Windows Defender (Microsoft Anti-Spyware) tool does this. You have likely picked up some malware program - most likely not spyware but something attempting to sell you software you don't need - that you need to get rid of.

First, be sure you have the very latest AdAware definitions downloaded and installed. Next, start your computer in Safe Mode and let AdAware remove everything it finds. Then restart in normal mode. If the toolbar and warning are still present I would visit one of the several Web boards that specialize in the HijackThis tool to remove stubborn malware infestations.

**slgrieb** · January 28th, 2006, 05:59 PM

Rg, I've done 4 removals of this bit of malware in the last 3 days, and about a dozen in the last week. The removal works best if you follow the instructions on the link I posted. The notification Jon is getting can be generated by many variants of the smitfraud malware. This bogus popup directs you to download SpywareStrike (the newest variant), SpyAxe, SpySheriff, Security Toolbar, etc.

The current version of smitRem (as of 01/07/2006) removes all known variants of smitfraud, and should be run before scanning with Ad Aware or Spybot, etc. for best results. Ad Aware SE (as of 01/20/2006) recognizes the newer variants, and Spybot (as of 01/24/2006), as well as MS AntiSpyware (not sure of the date this version got included in the database) recognize the bug, but may not be able to remove it unless smitRem.exe has been run first.

After smitRem has been run, the computer should be re-booted and the updated versions of Ad Aware, etc. should be run. They will remove some more files, and Jon should be good to go.

This pop-up can arrive on your computer in a couple of ways. The most common is from several "free" porno sites. You download a "movie" file called either "Vcodec" or "Video Codec", and when you try to play the movie, smitfraud installs, and you get the "windows has detected..." message.

I have also seen this thing install by pretending to be a Windows Media Player Plug-in. Unfortunately, I haven't been able to track the sites responsible, or I would post them

**rgharper** · January 28th, 2006, 10:34 PM

Originally Posted by slgrieb

Rg, I've done 4 removals of this bit of malware in the last 3 days, and about a dozen in the last week. The removal works best if you follow the instructions on the link I posted. The notification Jon is getting can be generated by many variants of the smitfraud malware. This bogus popup directs you to download SpywareStrike (the newest variant), SpyAxe, SpySheriff, Security Toolbar, etc.

Then I bow to your expertise - if you know specifically what it is then a specific cure is best.

**Doc Savage** · January 6th, 2008, 06:28 AM

I got infected with this annoying popup too. I got the symptom to stop (i.e., the popup) by putting the cursor on the right lower toolbar, right clicking, open customize notifications, then setting the notification symbol for the popup to "always hide".

I have been told that Adaware 207 should be able to actually get rid of the program. Working on that now.

Good luck!! At least this gets rid of the annoying popup so you can concentrate on cleaning the system.

Doc Savage

**NooNoo** · January 6th, 2008, 06:47 AM

Just to complete the picture, it is quite easy for the unsuspecting to download programs that claim to fix problems which just increase them...

If you have not heard of a program, or it sounds similar to one you know is good check here first SpywareWarrior maintains lists of the good, the bad and the downright ugly. Read the reasons for being on the rogue list...Spywarewarrior takes the time to explain why.

If you come across one that's not on the list and you think it should be, then email them, it will be investigated.

**slgrieb** · January 6th, 2008, 10:59 PM

Well, Doc, I hope Ad Aware 2007 does it for you, but I'd really be surprised. Frankly, I still don't consider Ad Aware 2007 worth time time it takes to download and install. This is an old thread, and a lot has happened in the world of malware since then. You might want to refer to this sticky to see where things are these days. Generally, I'd say this is still pretty relevant. Mostly, you should remember that your Smitfraud infection may be the tip of the iceberg.

**HipHoper** · January 7th, 2008, 11:01 PM

Just my 2 cents.

You can try Panda, Trendmicro and the new ESET online scans just to IDENTIFY the spyware exactly, And then download a specific tool to deal with it (They will also clean any virus they find for free).

http://housecall.trendmicro.com/

http://www.pandasoftware.com/actives...an/ascan_2.asp

http://www.eset.com/onlinescan/

I've installed ESET NOD32 antivirus which have internal antispyware engine for about 100 computers for the past 5 months, And NON OF THEM got infected by any virus or spyware !!! Check out this GREAT and light-on-resources antivirus