PDA

View Full Version : XP Anti_Spyware 2011 Alerts and other fun things



tweek
2011-03-21, 04:28
Hi,

First let me warn you that I am not Tech-Savy...at all

I opened my computer today and everything was working great until I started getting pop-ups advising me that I have an XP Anti-Spyware 2011 Alert. There are 2 icons that have appeared in the bottom right tray...they look like official shields that we see from Windows. One is Red, Green, Blue and yellow and the other is red with a white X.

Windows keep popping up telling me that I have been infected by "malware" and that I need to register the XP Anti-Spyware 2011 to protect my PC.
I also get a ballon that appears from the tray telling my that my computer is infected....Is has the title "Privacy Protected".

Whenever I start up my browser the home page works but when I try to navigate away it it would tell me that I need to register for the XP Anti-Spyware 2011 spyware...it also looks like it's running a scan which I keep closing (numerous times).

I ran Spybot before coming to the Forum so unfortunately, I didn't know that I had to keep a record of what was deleted. Here is what I could find from the reports:

--- Report generated: 2011-03-20 22:39 ---

Fraud.DesktopSecurity2010: [SBI $FE843DB7] Settings (Registry change, fixed)
HKEY_CLASSES_ROOT\exefile\shell\open\command\

Microsoft.WindowsSecurityCenter.AntiVirusOverride: [SBI $3604910C] Settings (Registry change, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride

Microsoft.WindowsSecurityCenter.FirewallOverride: [SBI $0C94D702] Settings (Registry change, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallOverride

WebTrends live: Tracking cookie (Firefox: Administrator (default)) (Cookie, fixed)


FastClick: Tracking cookie (Firefox: Administrator (default)) (Cookie, fixed)


FastClick: Tracking cookie (Firefox: Administrator (default)) (Cookie, fixed)


FastClick: Tracking cookie (Firefox: Administrator (default)) (Cookie, fixed)


--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---

It seems that my browser is now working....yay for little miracles...

I tried to run the DDS as well but I get an alert telling me that I am not authorized to make changes to that folder and that I should contact my administrator...However, I am the administrator..

My computer is posessed....can someone help me?:fear:

Blade81
2011-03-22, 20:45
Hi,


I tried to run the DDS as well but I get an alert telling me that I am not authorized to make changes to that folder and that I should contact my administrator...However, I am the administrator..
What is the exact error message? Could you try to rename dds -> whatever.com and try to run that?

Blade81
2011-03-29, 20:45
Due to inactivity, this thread will now be closed.

Note:If it has been three days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh DDS log and a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.

If it has been less than three days since your last response and you need the thread re-opened, please send me or other MOD a private message (pm). A valid, working link to the closed topic is required.