in my experience in computing i found that there are viruses (in this case malware) that make your system show a fake windos error prompt (usually telling you that there is spyware or viruses in the computer although there isn't) and that you need to download the offered software (in which i find suspicous windows doesn't just offer free software through an error prompt for free) and i also found out that if you try to click don't install is triggers virus installation and if you click the X in the corner it will also trigger a virus installation
it downloads rogue software that automatically installs itself into your comuter (it is malware that disquises itself as a spyware protection program, virus protection program, or a registry cleaner) and acts as it is scanning your system and shows fake threats and says that if you want to get rid of them you have to buy there product.
how do you cancell these you whenever you encounter a promt that seems like it will download one
Tagged with: acts • comuter • free software • malware • program virus • promt • registry cleaner • rogue software • spyware protection • virus installation • virus protection program • viruses
Filed under: Registry Cleaners
The problem is that you need to clean your system; this is characteristic of smitfruad and virtumonde.
First, you will need to get some software programs to help you. They are free for personal use.
Anti-Spyware Software
• CWShredder – You can find it at [www.trendmicro.com/cwshredder]
• Lavasoft's Ad-Aware – You can find it at [www.lavasoftusa.com]
• Spybot S&D – You can find it at [www.spybot.info]
• AVG AntiSpyware – You can find it at [free.grisoft.com] / [www.ewido.net]
Anti-Virus Software
Download each of the above programs and then install them. After you install them, you MUST update them so you will have the latest protection. There is one small exception: CWShredder is a stand-alone program that doesn't need to be installed, but you do need to have it check for an update to ensure that you have the latest version. If you don't update these programs and you are infected with the latest parasites, you will not be able to effectively detect and clean them from your computer, so remember to update, update, update.
1) Turn off System Restore
• Viruses can hide in your restore files, and if you do restore at some point you might reinfect yourself. Because of this, it is recommended to turn off System Restore before you test, and when you're done, turn it back on so you are still protected from standard computer problems.
Click Start.
Right-click the My Computer icon, and then click Properties.
Click the System Restore tab.
Check "Turn off System Restore" or "Turn off System Restore on all drives."
Click Apply.
When turning off System Restore, the existing restore points will be deleted. Click Yes to do this.
Click OK.
2) Carefully Look at Windows Add/Remove programs for suspicious programs
• Many of the spyware threats actually install into your system like a program. Many appear to be utilities that you may think are helpful but in reality aren't. Look for add-an toolbars, while toolbars like those provided by Google, MSN, Yahoo and other are great utils, there are many more that aren't and if in doubt check it out to see if ones you have are parasitic. Another common exploit are the Search helpers, WinTools, Gator products, IE Helper, Comet Cursor and many others just to name a very few. Peer-to-Peer (P2P) programs are another common source for these and even the ones that doen't come with spyware themselves are a security risk that may lead to your system being infected or to spread infections like these. Remove all suspicious programs, if you are wrong, you may always re-install them later.
3) Run Disk Clean-Up
• This actually comes with Windows. Click the Start Button and then go to Programs / Accessories / System Tools / Disk Clean-up. I recommend selecting all of its options except the ones for Office Setup Files and Compress Old Files if you have them. While you may select those if you wish, they aren't as important. This will clean up all of the temporary files so your testing will go faster, and may also delete any spyware that may hiding there if the spyware isn't already running.
4) Empty your Internet Explorer cache
• Open Internet Explorer and go to Tools..Internet Options… and under the General tab, in the Browsing History section, click Delete… and then select Temporary Internet Files. This probably won’t eliminate any viruses but will make the scanning go faster.
5) Run CWShredder
• This is made for detecting and cleaning of the infamous CoolWebSearch exploits. Currently there are about 40 types of these, each with up to 4 variants and growing. These are some of the toughest ones to get rid of.
6) Run Ad-Aware next
• This handles the next toughest types the best. When it finally presents you with the list of parasites it has found, put a check mark in the box next to the ones you want to get rid of, I suggest checking them all. If it says it can't get rid of a problem right now, it will ask if you want to run it again after you restart your computer, answer yes and restart your computer so it may test again.
7) Run Spybot next
• When you run it, it will automatically select all the spyware that it finds, if there is something you don't want to get rid of for some reason, deselect it and then let Spybot fix all of the rest of the problems that it finds. This program also will ask to restart your computer so it can test again if it has problems removing something, so let it.
8) Now Run The AVG Program
• Run the “Complete system scan” option. AVG will scan all of the files when you scan your computer; it will likely take a long time to complete.
• If it found anything, restart your computer and test everything again. There are times that after cleaning certain parasites you will need to test again because something may have been hidden earlier by the infection. So repeat this process of testing and restarting until you find no more parasites.
• Run the scans again in Safe Mode. This will keep many of the parasites from loading and being able to hide from your protection software. To access Safe Mode on most versions of Windows, start tapping the [F8] key after you first start or restart your system, start tapping it before you ever see a Windows Splash Screen and continue until you get the Menu where you may select it from the list. On WinNT, this is called VGA mode and on Win2k you actually start tapping just after the first splash screen shows. For Detailed instructions see Restarting Your Computer in Safe Mode
9) Reboot your computer normally.
• If you're still having problems, continue with the following:
10) Go to
http://www.spywareinfo.com/~merijn
• and download HiJackThis. (Look on the left of the page, click on “Downloads” and select “HiJackThis”). Run the program, which will create a log file. Go to
http://forums.spywareinfo.com/
• and post your HiJackThis log. You will get an extremely rapid, very precise answer on the forum (they don’t e-mail responses to you) as to whether or not you still have any infections and, if so, exactly what to do.
11) After everything is all cleaned up
• I recommend installing SpywareTerminator (also free):
http://www.spywareterminator.com/
Good luck!
NEVER PRESS OK, CANCEL OR X FROM THE TOP RIGHT CORNER.
when you will se that window, don't press any button, open task manager and force closing the browser.
usually, this type of addware come in your computer using cookies. you should set your browser to block all cookies and accept cookies ONLY from the sites you have accounts and need to log in, like yahoo.com.
read this article from wiki:
http://en.wikipedia.org/wiki/Drivecleaner