unwanted logo link in taskbar keeps saying unwanted spyware in sys

[petew71]

I've somehow managed to get a flashing sheid shaped link in my taskbar. It's
a link to a webpage for a latvain based webpage called "virusprotect". It
keeps flashing a message claiming spyware is in my system. I've run my norton
security and it can find nothing.
Right clicking it just links to the site. I cant find any way to delete
it...even system restore keeps coming up "can not system restore to this
date".
Help!

 

[David H. Lipman]

From: "petew71" <petew71@discussions.microsoft.com>

| I've somehow managed to get a flashing sheid shaped link in my taskbar. It's
| a link to a webpage for a latvain based webpage called "virusprotect". It
| keeps flashing a message claiming spyware is in my system. I've run my norton
| security and it can find nothing.
| Right clicking it just links to the site. I cant find any way to delete
| it...even system restore keeps coming up "can not system restore to this
| date".
| Help!

You are infected withe a ZLob Trojan and a variant of the SmitFraud Trojan.



Download and execute HiJack This! (HJT)
http://www.spywareinfo.com/~merijn/files/HijackThis.exe

Create a HJT log file and post it in one of the below locations...

{ Please - Do NOT post the HJT Log here ! }

Forums where you can get expert advice for HiJack This! (HJT) logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://www.malwarebytes.org/forums/index.php?showforum=7
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

 

[paul]

Re: unwanted logo link in taskbar keeps saying unwanted spyware insys

On Jan 28, 1:36 am, "David H. Lipman" <DLipman~nosp...@Verizon.Net>
wrote:
> From: "petew71" <pete...@discussions.microsoft.com>
>
> | I've somehow managed to get a flashing sheid shaped link in my taskbar. It's
> | a link to a webpage for a latvain based webpage called "virusprotect". It
> | keeps flashing a message claiming spyware is in my system. I've run my norton
> | security and it can find nothing.
> | Right clicking it just links to the site. I cant find any way to delete
> | it...even system restore keeps coming up "can not system restore to this
> | date".
> | Help!
>
> You are infected withe a ZLob Trojan and a variant of the SmitFraud Trojan.
>
> Download and execute HiJack This! (HJT)http://www.spywareinfo.com/~merijn/files/HijackThis.exe
>
> Create a HJT log file and post it in one of the below locations...
>
> { Please - Do NOT post the HJT Log here ! }
>
> Forums where you can get expert advice for HiJack This! (HJT) logs.
>
> NOTE: Registration is REQUIRED in any of the below before posting a log
>
> Suggested primary:http://www.thespykiller.co.uk/index.php?board=3.0
>
> Suggested secondary:http://www.bleepingcomputer.com/forums/forum22.htmlhttp://castlecops.com/forum67.html
>
> Suggested tertiary:http://www.dslreports.com/forum/cle...ums.security-central.us/forumdisplay.php?f=13
>
> --
> Davehttp://www.claymania.com/removal-trojan-adware.html
> Multi-AV -http://www.pctipp.ch/downloads/dl/35905.asp

1. Download and run firefox to protect your from future spyware
attacks and pop ups which are coming in through internet explorer
(Trojan downloaders, win32 ) .Then update your windows through firefox
http://securitynewsfromthenet.blogspot.com/2007/05/spyware-fighter-essentials.html

2. Run the vundo and combo fix
http://securitynewsfromthenet.blogspot.com/2007/05/vundofix-and-combo-fix.html

3. Run the anti spyware remove programs spybot
http://securitynewsfromthenet.blogspot.com/2007/03/spybot-search-and-destroy-spyware-and.html

and superantispyware
http://securitynewsfromthenet.blogspot.com/2007/04/superantispyware-home-edition-free.html
to get rid of the nasties

4. Run a free online virus scan to be sure you computer is virus and
spyware free.
http://securitynewsfromthenet.blogspot.com/2007/03/online-virus-scan.html
download and run McAfee Avert Stinger
Stinger is a stand-alone utility used to detect and remove specific
viruses
http://vil.nai.com/vil/stinger/stinger.htm

5. Get the clean up tools to clean up the spyware from your temp
folder (the place they are stored when downloaded by internet
explorer)
http://securitynewsfromthenet.blogspot.com/2007/03/clean-up-tools-to-prevent-people-from.html

 

[David H. Lipman]

From: "paul" <secmolvolunteer@gmail.com>

< snip >

Please don't respond to me!

Please TAYLOR your responses as well to the specific infector.

Also note that you have suggested McAfee Stinger which is a dead product which has NOT been
upgraded for new threats.

In my reply I posted my Multi AV Scanning Tool whivh includes the McAfee Command line
Scanner which has a superset of whatever Stinger may find.

Assuming Stinger gets just ~55 infectors and variants, the Mcafee Command Line Scanner finds
>300,000 !


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp