can anyone help me get rid of the 'Warning Spyware detected on" virus display?

OneLive doesn't find/cure it.
But I can't get rid of Warning Window.
I can't change my Desktop picture.
"it says it was disable by the Admin. I'm the Admin."

and something funny is happening when I boot up.

vista premium

PS: I can't get to Use a Restore Point either.

Sounds like you picked up one of the "Antivirus 2008" variations tha
are out there. They go by at least 7 or 8 different names an
configurations, but the end result of getting them is always the same

Download, update and run "Malwarebytes" antimalware scanner. Remov
everything it finds and that should free your system up enough to ge
the rest cleaned out with a AV and spybot scan. Use a-squared as well
Be sure you have the UAC on as it will help prevent this kind of thin
from happening again

--
joel406

On Wed, 1 Oct 2008 18:19:21 -0500, FireBrick wrote:

> OneLive doesn't find/cure it.
> But I can't get rid of Warning Window.
> I can't change my Desktop picture.
> "it says it was disable by the Admin. I'm the Admin."
>
> and something funny is happening when I boot up.
>
> vista premium
>
> PS: I can't get to Use a Restore Point either.

"How to ask a question"
http://support.microsoft.com/kb/555375

How to construct a good post..
http://dts-l.com/goodpost.htm

How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

FireBrick wrote:

> OneLive doesn't find/cure it.
> But I can't get rid of Warning Window.
> I can't change my Desktop picture.
> "it says it was disable by the Admin. I'm the Admin."
>
> and something funny is happening when I boot up.
>
> vista premium

Your system is infected with a rogue antivirus program. It is called "rogue"
because it pretends to be A Good Guy but is really Evil. Do not pay them!

Because you didn't give me the name of the program that is trying to get you
to buy it, I can't point you to specific removal steps. Look for them here:

Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

If the rogue is XP (or Win) Antivirus 2008/09, here are removal steps:

http://www.bleepingcomputer.com/malw...antivirus-2009
http://www.bleepingcomputer.com/forums/topic154529.html (earlier versions)

These may work for you and all may be well. However, in many cases the
computer will also be infected with Zlob and/or Vundo trojans and protected
by a rootkit. These machines are extremely difficult to clean.

If your machine is one of these cases, either get guided help at one of the
specialty forums below OR back up your data and do a clean install of
Windows. It is your choice. If you are unsure how to back up your data or
how to do a clean install, you can take your machine to a local computer
professional. I don't recommend using BigComputerStore/GeekSquad types of
places.

PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS.

http://aumha.org/downloads/hijackthis.zip
http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/...splay.php?f=25
http://www.geekstogo.com/forum/Malwa..._Here-f37.html
http://www.malwarebytes.org/forums/i...hp?showforum=7
http://gladiator-antivirus.com/forum...?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/
http://www.thespykiller.co.uk/index.php?board=3.0
http://forums.subratam.org/index.php?showforum=7

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

Thanks for pointing me at MalWareBytes.
It was a bit scary for a while but it cleaned out the spyware and got rid of
the window that replaced my desktop picture.

Thank for the help.
The funny part is....I had UAC enabled, I had OneLive running.
But as I had been shipping a lot via UPS and expecting some merchandise via
UPS
I opened the email and may have said it was ok.

I never did see it any specific program it wanted me to buy but that may
have not gotten past LiveOne or I missed it.




"FireBrick" <> wrote in message
news:OV%...
> OneLive doesn't find/cure it.
> But I can't get rid of Warning Window.
> I can't change my Desktop picture.
> "it says it was disable by the Admin. I'm the Admin."
>
> and something funny is happening when I boot up.
>
> vista premium
>
> PS: I can't get to Use a Restore Point either.
>
>
>

The UPS scam has been around for a while. It typically says "Sorry we missed
you. Click here to rearrange delivery"

They get enough people to click here to make it worth their while.

--

Richard Urban
Microsoft MVP
Windows Desktop Experience


"FireBrick" <> wrote in message
news:...
> Thanks for pointing me at MalWareBytes.
> It was a bit scary for a while but it cleaned out the spyware and got rid
> of the window that replaced my desktop picture.
>
> Thank for the help.
> The funny part is....I had UAC enabled, I had OneLive running.
> But as I had been shipping a lot via UPS and expecting some merchandise
> via UPS
> I opened the email and may have said it was ok.
>
> I never did see it any specific program it wanted me to buy but that may
> have not gotten past LiveOne or I missed it.
>
>
>
>
> "FireBrick" <> wrote in message
> news:OV%...
>> OneLive doesn't find/cure it.
>> But I can't get rid of Warning Window.
>> I can't change my Desktop picture.
>> "it says it was disable by the Admin. I'm the Admin."
>>
>> and something funny is happening when I boot up.
>>
>> vista premium
>>
>> PS: I can't get to Use a Restore Point either.
>>
>>
>>
>

Well they sure got me. lol
I was waiting for UPS to arrive, as I knew the packages I was expecting were
due to be delivered that day.
Timing is everything.



"Richard Urban" <> wrote in message
news:...
> The UPS scam has been around for a while. It typically says "Sorry we
> missed you. Click here to rearrange delivery"
>
> They get enough people to click here to make it worth their while.
>
> --
>
> Richard Urban
> Microsoft MVP
> Windows Desktop Experience
>
>
> "FireBrick" <> wrote in message
> news:...
>> Thanks for pointing me at MalWareBytes.
>> It was a bit scary for a while but it cleaned out the spyware and got rid
>> of the window that replaced my desktop picture.
>>
>> Thank for the help.
>> The funny part is....I had UAC enabled, I had OneLive running.
>> But as I had been shipping a lot via UPS and expecting some merchandise
>> via UPS
>> I opened the email and may have said it was ok.
>>
>> I never did see it any specific program it wanted me to buy but that may
>> have not gotten past LiveOne or I missed it.
>>
>>
>>
>>
>> "FireBrick" <> wrote in message
>> news:OV%...
>>> OneLive doesn't find/cure it.
>>> But I can't get rid of Warning Window.
>>> I can't change my Desktop picture.
>>> "it says it was disable by the Admin. I'm the Admin."
>>>
>>> and something funny is happening when I boot up.
>>>
>>> vista premium
>>>
>>> PS: I can't get to Use a Restore Point either.
>>>
>>>
>>>
>>
>

Timing certainly is everything.

If they send out 20 milling bogus emails, how many recipients do you think
just "may" be waiting for a package?

It is very effective - and nasty.

--

Richard Urban
Microsoft MVP
Windows Desktop Experience


"FireBrick" <> wrote in message
news:...
> Well they sure got me. lol
> I was waiting for UPS to arrive, as I knew the packages I was expecting
> were due to be delivered that day.
> Timing is everything.
>
>
>
> "Richard Urban" <> wrote in message
> news:...
>> The UPS scam has been around for a while. It typically says "Sorry we
>> missed you. Click here to rearrange delivery"
>>
>> They get enough people to click here to make it worth their while.
>>
>> --
>>
>> Richard Urban
>> Microsoft MVP
>> Windows Desktop Experience
>>
>>
>> "FireBrick" <> wrote in message
>> news:...
>>> Thanks for pointing me at MalWareBytes.
>>> It was a bit scary for a while but it cleaned out the spyware and got
>>> rid of the window that replaced my desktop picture.
>>>
>>> Thank for the help.
>>> The funny part is....I had UAC enabled, I had OneLive running.
>>> But as I had been shipping a lot via UPS and expecting some merchandise
>>> via UPS
>>> I opened the email and may have said it was ok.
>>>
>>> I never did see it any specific program it wanted me to buy but that may
>>> have not gotten past LiveOne or I missed it.
>>>
>>>
>>>
>>>
>>> "FireBrick" <> wrote in message
>>> news:OV%...
>>>> OneLive doesn't find/cure it.
>>>> But I can't get rid of Warning Window.
>>>> I can't change my Desktop picture.
>>>> "it says it was disable by the Admin. I'm the Admin."
>>>>
>>>> and something funny is happening when I boot up.
>>>>
>>>> vista premium
>>>>
>>>> PS: I can't get to Use a Restore Point either.
>>>>
>>>>
>>>>
>>>
>>
>