Spyware with Update

After updating Windows, a spyware program came with it and started scanning
my computer. I couldn't turn it off until it finished. I deleted the program
using the Control Panel, but I keep getting the message "your computer is
infected" with some text. It comes from icons at the bottom right corner. How
do I get rid of it.

The spyware was named "Pest" something. It wanted me to buy it.

Hi there,

This program is called Pest Patrol and is an antispware program made by
e-trust, it does not come with windows update.

Best regards,
Michel Denie

"Laguna" <> wrote in message
news:9E281751-5E21-495F-885D-...
> After updating Windows, a spyware program came with it and started
> scanning
> my computer. I couldn't turn it off until it finished. I deleted the
> program
> using the Control Panel, but I keep getting the message "your computer is
> infected" with some text. It comes from icons at the bottom right corner.
> How
> do I get rid of it.
>
> The spyware was named "Pest" something. It wanted me to buy it.

From: "Laguna" <>

| After updating Windows, a spyware program came with it and started scanning
| my computer. I couldn't turn it off until it finished. I deleted the program
| using the Control Panel, but I keep getting the message "your computer is
| infected" with some text. It comes from icons at the bottom right corner. How
| do I get rid of it.
|
| The spyware was named "Pest" something. It wanted me to buy it.



Two part reply..

Perform Part 1 then perform Part 2.

If the first two parts don't work, perform the alternate section.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.



Part 1
-----------

Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool -- SmitRem.exe
http://noahdfear.geekstogo.com/click...click.php?id=1

http://www.bleepingcomputer.com/forums/topic43659.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it will be
displayed in your browser (Opera, FireFox or Internet Explorer). However, if you are using
WinXP, Win2K or Win2003 your system will be left in a state where you will have to manually
shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in your bowser
but your PC will automatically be shutdown. It is suggested that you move the report out of
c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.


ALTERNATE:

S!ri's SmitfraudFix
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php



Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Thanks for the instructions but they were a bit complex for a novice like me.
I solved the problem though. Right click at the bottom right and get "Custom
Notifications/then choose "Always hide" for "Your Computer is Infected".
There were several lines where I had to do this.

"David H. Lipman" wrote:

> From: "Laguna" <>
>
> | After updating Windows, a spyware program came with it and started scanning
> | my computer. I couldn't turn it off until it finished. I deleted the program
> | using the Control Panel, but I keep getting the message "your computer is
> | infected" with some text. It comes from icons at the bottom right corner. How
> | do I get rid of it.
> |
> | The spyware was named "Pest" something. It wanted me to buy it.
>
>
>
> Two part reply..
>
> Perform Part 1 then perform Part 2.
>
> If the first two parts don't work, perform the alternate section.
>
> It is suggested that you execute each tool in Normal Mode then in Safe Mode.
>
>
>
> Part 1
> -----------
>
> Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool -- SmitRem.exe
> http://noahdfear.geekstogo.com/click...click.php?id=1
>
> http://www.bleepingcomputer.com/forums/topic43659.html
>
>
> Part 2
> -----------
>
> Download SmitFraud.exe from the URL --
> http://www.ik-cs.com/programs/virtools/SmitFraud.exe
>
> Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
> Choose; Unzip
> Choose; Close
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
> FireWall to enable WGET.EXE to download the needed McAfee related files.
>
> Execute; c:\mcafee\clean.bat
> { or Double-click on 'Clean Link' in c:\mcafee }
>
> A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
> C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it will be
> displayed in your browser (Opera, FireFox or Internet Explorer). However, if you are using
> WinXP, Win2K or Win2003 your system will be left in a state where you will have to manually
> shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in your bowser
> but your PC will automatically be shutdown. It is suggested that you move the report out of
> c:\mcafee before performing another scan.
>
> It would be best to scan in both Safe Mode and in Normal Mode and save a copy of the HTML
> report for each session.
>
>
> ALTERNATE:
>
> S!ri's SmitfraudFix
> http://siri.urz.free.fr/Fix/SmitfraudFix_En.php
>
>
>
> Please Copy and Paste the contents of the HTML Log files;
> C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.
>
> * * * Please report back your results * * *
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

From: "Laguna" <>

| Thanks for the instructions but they were a bit complex for a novice like me.
| I solved the problem though. Right click at the bottom right and get "Custom
| Notifications/then choose "Always hide" for "Your Computer is Infected".
| There were several lines where I had to do this.

Gee, how can I tell ya...

Your computer is infected with malware.
Your data, accounts and personnal information is "At Risk".

Failure to take immediate proactive measures can lead lead to money loos or personal
identity theft.

* * * This is NO joke. * * *

If you are NOT up to the challenge, take your computer ASAP to the nearest qualified and
reputable computer repair shop.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Laguna wrote:
> Thanks for the instructions but they were a bit complex for a
> novice like me. I solved the problem though. Right click at the
> bottom right and get "Custom Notifications/then choose "Always
> hide" for "Your Computer is Infected". There were several lines
> where I had to do this.

Yes... sweep it under the rug where you cannot see it.
At least you'll know where it is when your identity is stolen. =)

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

You have successfully covered the symptom.
The problem is still there.

If you are unable to deal with the real problem, I suggest you take the
computer to a competent professional.
The $ it costs now will probably be saved later.

--
Jupiter Jones [MVP]
http://www3.telus.net/dandemar
http://www.dts-l.org


"Laguna" <> wrote in message
news6C78B04-9AAF-4585-A989-...
> Thanks for the instructions but they were a bit complex for a novice like
> me.
> I solved the problem though. Right click at the bottom right and get
> "Custom
> Notifications/then choose "Always hide" for "Your Computer is Infected".
> There were several lines where I had to do this.