"YOUR COMPUTER WAS INFECTED BY UNKNOWN TROJAN IT'S DANGE..."

I need help, when I use windows explorer or internet explorer. I know it's a
fake because i've done my research, "Your computer was infected by unkown
trojan. It's dangerious or you system (critical files can be lost)." I tryed
downloading a programe called spyware doctor. I downloaded it and tryed to
install it. It keeps "not working". So i'm stranded. I know you can manualy
uninstall it but I can't. Please help me. It's so annoying.

Thanks.

You should post this question in a forum dedicated to removing malware. I
like this one.

http://www.aumha.net/

This can take several days. The people there are volunteers. They may have
you perform several procedures and post back with the results before the
computer is clean.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca/phpBB2/



"Tristan" <> wrote in message
news:E7B18A3B-DB66-4AF5-A03C-...
>I need help, when I use windows explorer or internet explorer. I know it's
>a
> fake because i've done my research, "Your computer was infected by unkown
> trojan. It's dangerious or you system (critical files can be lost)." I
> tryed
> downloading a programe called spyware doctor. I downloaded it and tryed to
> install it. It keeps "not working". So i'm stranded. I know you can
> manualy
> uninstall it but I can't. Please help me. It's so annoying.
>
> Thanks.

From: "Tristan" <>

| I need help, when I use windows explorer or internet explorer. I know it's a
| fake because i've done my research, "Your computer was infected by unkown
| trojan. It's dangerious or you system (critical files can be lost)." I tryed
| downloading a programe called spyware doctor. I downloaded it and tryed to
| install it. It keeps "not working". So i'm stranded. I know you can manualy
| uninstall it but I can't. Please help me. It's so annoying.
|
| Thanks.


Download MULTI_AV.EXE from the URL --
http://www.pctipp.ch/ds/28400/28470/Multi_AV.exe

http://www.pctipp.ch/downloads/dl/35905.asp

English:
http://www.raymond.cc/blog/archives/...irus-for-free/

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file.

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

"Tristan" <> wrote in message
news:E7B18A3B-DB66-4AF5-A03C-...
> I need help, when I use windows explorer or internet explorer. I know it's
a
> fake because i've done my research, "Your computer was infected by unkown
> trojan. It's dangerious or you system (critical files can be lost)." I
tryed
> downloading a programe called spyware doctor. I downloaded it and tryed to
> install it. It keeps "not working". So i'm stranded. I know you can
manualy
> uninstall it but I can't. Please help me. It's so annoying.
>
> Thanks.


Your virus checker should be able to remove it...
just run a scan and let it do it's thing...
it may require a reboot to allow the malware to be deleted prior to it being
loaded

Run Spybot Search and Destroy in safe mode and it will remove it in no time.

http://www.spybot.info/en/index.html

My policy is not to use any 3-rd party anti-malware except Spybot S&D.
Windows Vista offers sufficient protection against malicious software
writers some of them I am sure watch this forum very carefully.

Download Microsoft Windows Baseline Security Analyzer. It is Beta 2.1 for
Vista and I think it is safe to download. Run it.

<http://www.microsoft.com/downloads/details.aspx?FamilyId=F32921AF-9DBE-4DCE-889E-ECF997EB18E9&displaylang=en>

It will give you all your vulnerabilities, especially in your firewall
settings. You should read the report and if it suggests any changes, you
should consider them.
Your Windows firewall setting will be analyzed.

Download Microsoft® Windows® Malicious Software Removal Tool (KB890830). It
will want to run upon install. Choose the FULL scan although it may give you
a threatening message that it might take a few hours. It will scan your
entire computer in about half an hour or less if you do not have a lot of
stuff in it.

<http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&displaylang=en>

Some reassuring information: Malicious Software Removal Tool
<http://www.microsoft.com/security/malwareremove/default.mspx>
The Microsoft Windows Malicious Software Removal Tool helps remove specific,
prevalent malicious software from computers that are running Windows Vista,
Windows Server 2003, Windows XP, or Windows 2000
http://support.microsoft.com/?kbid=890830

You can also go to Protection Center (Microsoft)
<http://onecare.live.com/site/en-US/center/howsafe.htm?s_cid=mscom_msrt>
and click "Protection Scan." There will be a dropdown menu and a button:
"Launch Full Scan or Vista." You can do it if you wish.

Download and install Spybot Search & Destroy, a marvelous piece of software
which is free for individuals but corporations pay fees. You may be asked
for donations but it is up to you. It is very up to date and every week you
will have to download new updates, sometimes even more often. You should
check for updates every time you run it. It will give you all su*kers
leached into your registry and ask you if you wanted to remove them. Many of
them have masqueraded themselves under MS Windows names like
Windows.something. Do not hesitate to kill them all. You can trust SB S&D.

http://www.spybot.info/en/index.html

It also allows you to IMMUNIZE your system. It means that when you go to a
website and they try to download some kind of a Trojan to you SB S&D will
either kill it silently, or ask you if you want to do it or will kill it and
give you a notice. It is better to let it kill them all in silence.

Listen to Mark Russinovich's (MS) webcast: Advanced Malware Cleaning

<http://www.microsoft.com/emea/spotlight/sessionh.aspx?videoid=359>





"Tristan" <> wrote in message
news:E7B18A3B-DB66-4AF5-A03C-...
>I need help, when I use windows explorer or internet explorer. I know it's
>a
> fake because i've done my research, "Your computer was infected by unkown
> trojan. It's dangerious or you system (critical files can be lost)." I
> tryed
> downloading a programe called spyware doctor. I downloaded it and tryed to
> install it. It keeps "not working". So i'm stranded. I know you can
> manualy
> uninstall it but I can't. Please help me. It's so annoying.
>
> Thanks.

Once this is on your computer most AV solutions will not be able to remove
it.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca/phpBB2/



"philo" <> wrote in message
news:%...
> Your virus checker should be able to remove it...
> just run a scan and let it do it's thing...
> it may require a reboot to allow the malware to be deleted prior to it
> being
> loaded
>
>

AlexB wrote:
> Run Spybot Search and Destroy in safe mode and it will remove it in no
> time.
>
> http://www.spybot.info/en/index.html
>
> My policy is not to use any 3-rd party anti-malware except Spybot S&D.
> Windows Vista offers sufficient protection against malicious software
> writers some of them I am sure watch this forum very carefully.

(snip rest of incorrect advice)

I'm sorry, but much as I like Spybot S&D as part of my toolbox of
malware removal tools, it alone will not remove the OP's malware. The OP
should follow the advice given by David Lipman and Kerry Brown instead.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP

"Kerry Brown" <*a*m> wrote in message
news:6A7E1858-D418-416D-AAC5-...
> Once this is on your computer most AV solutions will not be able to remove
> it.
>
>


Thank you for the correction...
I missed the part where it was mentined that it was a fake

I am sorry, but I am speaking from my own experience. I had an identical
case with a piece of malware implanted into one of my Vista machines back in
November, I believe. It was my secretary's machine who goes to all her crazy
sites.

The only thing I did was to run SB S&D and it was already up to the task
after I updated it. That malware was in its database.

I think it was a Chinese contraption as I read in the papers or on the web a
week later.

He has absolutely no risk in running it. But he has to update it properly
before he did. And as DanS pointed out it is much better to run it in safe
mode.

"Malke" <> wrote in message
news:...
> AlexB wrote:
>> Run Spybot Search and Destroy in safe mode and it will remove it in no
>> time.
>>
>> http://www.spybot.info/en/index.html
>>
>> My policy is not to use any 3-rd party anti-malware except Spybot S&D.
>> Windows Vista offers sufficient protection against malicious software
>> writers some of them I am sure watch this forum very carefully.
>
> (snip rest of incorrect advice)
>
> I'm sorry, but much as I like Spybot S&D as part of my toolbox of malware
> removal tools, it alone will not remove the OP's malware. The OP should
> follow the advice given by David Lipman and Kerry Brown instead.
>
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP

In article <#Sb#>,
AlexB <> wrote:
>
>Windows Vista offers sufficient protection against malicious software
>writers some of them I am sure watch this forum very carefully.
>
Lol.

"Microsoft's Live OneCare placed last in a test on the effectiveness
of anti-virus security packages by Austrian researchers."

http://www.theregister.co.uk/2007/03...fails_av_test/

Original data on this page: http://www.av-comparatives.org/