Computers & Internet Logo

Related Topics:

A
Anonymous Posted on Nov 13, 2017

Remove Web Shield rogue virus

On 5/9/2014, my Windows Vista Desktop encountered a rogue virus or fake security program, and it compromises and acts as Microsoft Essentials, by inactivating it, also won't allow me to download any anti-spyware program even in safe mode. It's hidden in the registry, and it does not shut down IE9 or Google, Google Chrome Browsers

5 Related Answers

Anonymous

  • 1 Answer
  • Posted on Oct 13, 2008

SOURCE: cant load a map because Google has detected unregistered Antivirus 2009 copy on your computer. Google

Google has detected unregistered Antivirus 2009 copy

Ad
luiskiev

Luis Moreira

  • 144 Answers
  • Posted on Nov 13, 2008

SOURCE: Can't browse web pages

Hi,

Its possible that some malware modified your Internet Properties.Open Control Panel -> Internet Options -> Select the TAB "Connections" -> click on Lan definitions and uncheck the checkbox referent to the use of a proxy. If its allready uncheked then there may be a problem in the DNS server. To correct this you must contact your ISP for the correct DNS IPs and put them in: Network Connections - > TCP/IP -> DNS

Anonymous

  • 74 Answers
  • Posted on Apr 30, 2009

SOURCE: Won't load Desktop

Is this running XP? Does the computer shut down or just go back to the welcome screen and ask for your password again?

If it returns to the welcome screen (and it is XP) get the following two files from another xp machine and copy them to the windows\system32 folder.

userinit.exe wsaupdater.exe

Restart the computer and log back in.

Hope this helps

Anonymous

  • 583 Answers
  • Posted on Feb 24, 2010

SOURCE: I have a virus and need to fix. 1. How do I

In order to boot into Safe Mode, you have to press F8 during the initial boot-up of the computer. You'll be presented with an option screen. You'll want to select Safe Mode with Networking. On another computer, download MalwareBytes (can be found at www.downloads.com and search for MalwareBytes), copy the downloaded file to a USB drive. After your computer is in safe mode, install MalwareBytes from the USB drive onto your netbook and run a full scan. Delete all infected files. Reboot your computer and run the program again. This should restore your computer to a state where you can download virus software.

Anonymous

  • 3 Answers
  • Posted on Apr 01, 2010

SOURCE: virus problem

download combofix.exe boot the laptop in safe mode and run combofix.exe

Ad

Add Your Answer

×

Uploading: 0%

my-video-file.mp4

Complete. Click "Add" to insert your video. Add

×

Loading...
Loading...

Related Questions:

2helpful
1answer

Can't login to youtube

You launch your Web browser, but your homepage has changed. You type in a Web address, but the browser sends you to a site you\'re never heard of. Whenever you try to go to a new destination, it sends you right back, sometimes covering your screen in pop-up ads. If this sounds familiar, you\'ve got a serious problem on your hands. It\'s called browser hijacking, and it\'s something you need to fix right away. What is a Browser Hijacker? b> A browser hijacker is a type of computer virus that targets your Web browser. Some hijacking programs try to make you click on bogus pop-up ads that spawn incessantly. Others are purely malicious, designed only to cause trouble. Infected browsers sometimes redirect you to pornographic websites, while others may take you to fake search engines. Even if a site looks legitimate, if you didn\'t tell your browser to go there, don\'t click on anything. b> How Did I Get Hijacked? b> Browser hijackers disguise themselves in various ways. Pop-up ads are a common infection point for browser hijackers, which is why virtually all Web browsers come with aggressive pop-up blocking protection. Ads promising free electronics or large cash prizes are common sources of browser hijackers as well. Some hijackers hitch a ride on bogus software downloads or hyperlinks. In the future, don\'t download files from unknown sources, and don\'t click on any ads that sound too good to be true. Fake Security Software b> If your browser issues are accompanied by security pop-ups from a desktop security program, be careful. Some current browser hijackers masquerade as security software, as well as infecting your browser. These programs are particularly dangerous, as they often camouflage themselves to look like a legitimate software program. Use your common sense before clicking on a security alert. If the security program is not one that you have installed or that you have ever seen before, or if there are spelling errors within the alert, don\'t touch it. b> How To Get Rid of a Hijacker b> Browser hijackers can usually be sorted out by running a full system scan with your anti-virus software. Make sure that your anti-virus software is up to date before running your scan. Even after the virus is removed, you may need to reset some of your browser settings, particularly your homepage. If the browser hijacker made a mess of your settings, it may be faster for you to perform a clean reinstall of your browser software.
http://www.microsoft.com/security/pc-security/antivirus-rogue.aspx

A YouTube account makes it possible to upload and share videos and to create customized pages. Creating a YouTube account is nearly effortless and requires only an email address, a password and a username. If you have different usernames and passwords for different websites, it can be easy to forget just what combination unlocks your YouTube account. Fortunately, you can recover your YouTube login information even if you can\'t remember your username. Hope this helps.
http://www.youtube.com/forgot_username
tip

Manually Removing Any Trojan Horse Virus.trojan Zlob Virus Horse Removal

<br />Description<br /><br />The Trojan horse virus is a computer virus that attaches itself to certain files and programs downloaded from the Internet. Once it finds its way onto a computer, it Downloads Fake Rogue Antivirus Application attaches to other files and multiples. This makes the computer slow down, and some users may even find that they can't Open exe Files or perform certain actions. The only way to fix this is to manually remove the Trojan horse virus by removing all of the infected files and programs from the computer.<br /><br />Malwarebytes' Anti-Malware Free Download<br /><a href="http://www.malwarebytes.org/">http://www.malwarebytes.org/</a><br /><br />Free Remote Desktop Help <br />Because the Trojan horse virus can be hard to remove please add me to one of the following resources for free remote desktop help <br /><utube src="1ZV1UK5s608">
tip

Antivirus 2009 and 2010 Scam

If you have seen any of these popups shown below, on your computer, you have been infected with a fake antivirus. Not only is it fake, but it tries to force you to buy it, which is illegal and is considered fraud by authorities.
This program and it's many variants, take over administrative control of your PC, disable Task Manager, and regedit as well as replacing your desktop wallpaper with their fake warning. Well, it WOULD be fake, if this program weren't a Virus program all by itself.


Quoted From Bleepingcomputer.com


What this programs does:
Antivirus 2009 is a new rogue (Fake) anti-spyware program from the same family as Antivirus 2008 and Doctor Antivirus . Antivirus 2009 is installed and advertised through the use of misleading web sites that attempt to make you think your computer is infected with a variety of malware. Once installed, Antivirus 2009 will scan your computer and list a variety of fake infections that can't be removed unless you first purchase the software. These fake infections are only being shown to scare you into purchasing the malware.
When Antivirus 2009 is installed, a Internet Explorer browser helper object is also installed that displays fake messages when using Internet Explorer. These messages range from a line at the top of the browser stating an infection was found to adding a box to the Google homepage stating Google detected that your computer was infected. These tactics are just two more methods where Antivirus 2009 uses false information to scare you into purchasing their software.
1f33d03.jpg

Doctor Antivirus below

693d5ca.gif

Antivirus 2010 looks almost the same as 2008 and 2009.

e799bc4.jpg


Antivirus 2010
is a rogue anti-spyware program from the same family as Antivirus 2008 and Antivirus 2009. Like its previous incarnations, Antivirus 2010 is distributed through the use of advertisements on the Web pretending to be online anti-malware scanners. These advertisements pretend to scan your computer and then state that your computer is infected and that you should download and install Antivirus 2010 to remove these infections. These rogues are also known to be advertised and installed through Trojans that display fake security alerts in your Windows taskbar stating you are infected. Once you click on one of these alerts, it will bring you to the download page for Antivirus 2010, or even download and install it without your permission.
Once Antivirus 2010 is installed on your computer, it will be automatically configured to run when you logon to Windows. This is done by adding a startup that launches the C:WindowsSystem32wingamma.exe executable. This executable will then launch the AV2010.exe and the fake Windows Security Center. Once running, it will scan your computer and list a variety of infections that cannot be removed unless you first purchase the software. This infection will also randomly display fake security alerts on your computer stating that you are infected or have some sort of security risk. If you click on these alerts, it will prompt you to purchase the software. These fake alerts, along with a fake Windows Security Center that advertises Antivirus 2010, are used to further scare you into thinking you are infected so you will purchase this malware.
Another new addition to these types of rogues, is the creation of a fake Blue Screen of Death. At random intervals, Antivirus 2010 will create what appears to be a Windows crash, but in reality is just a hoax. These fake crashes are used to further scare you into purchasing this malware. If you receive this crash, you can simply reboot your computer , or try pressing Alt-Tab or Control-Alt-Delete to get out of it. The text of the crash is:
***STOP: 0x000000D1 (0x0000000, 0xF73120AE, 0xC0000008, 0xC000000)
A spyware application has been detected and Windows has been shut down to prevent damage to your computer
SPYWARE.MONSTER.FX_WILD_0x0000000
If this is the first time you've seen this Stop error screen, restart your computer. If this screen appears again, follow these steps:
Click to make sure your antivirus software is properly installed. If this is a new installation, ask your software manufacturer for any antivirus updates you might need.
Windows detected unregistered version of Antivirus 2010 protection on your computer. If problem continue, please activate your antivirus software to prevent computer damage and data loss.
*** SRV.sys - Address F73120AE base at C0000000, DateStamp 36b072a3


END QUOTE HERE:


As you can see, all of this looks so very legitimate, as well it should, since THESE particular crooks have taken malware to a whole new level.
Yes, they will get caught, they always do.


The real difference here is that these particular scammers have decided to strong arm you much like a mobster demanding protection money, so the crime as well as the consequences will be much more severe.


The GOOD news though, is that even if you are infected at this very moment with this nasty program, you will be able to remove it before you reboot your PC and come back to Fixya!


Download and run, Malwarebytes Anti malware.
Don't forget to update it first though, just in case the fake antivirus has changed its nature to evade detection.
So far, this is the only program I have found to eliminate this problem, but I'm pretty sure others will follow the same path.


Follow up with Avast Antivirus, if you want something stronger than what others pay hard cash for at the store. Dont forget to uninstall your current Antivirus first, after all, it did fail to kill Antivirus 2010 didn't it?




Happy Hunting!

Please Vote for this Tip if you found it helpful.
Bob S.

on Apr 02, 2010 • Computers & Internet
0helpful
1answer

Windows Security Center alert ?

The fake Windows Security Center is a virus that invades a computer and threatens the user that his computer is infected with multiple viruses. Although this "tool" looks legitimate, it is actually rogue malware. It can be time-consuming to remove this fake Windows Security Center from your computer, but you can do it for free.

Download and install a legitimate free anti-malware program, such as Malwarebytes Anti-Malware (malwarebytes.org), on your computer. Restart your computer and hold down the "F8" key for a few seconds before the Windows logo appears to start the computer in safe mode. Run the anti-malware program and allow it to perform a full scan of your system. This may take hours, depending on a number of factors, but allow the anti-malware software to do its job so that you will be able to fully remove fake Windows Security Center from your computer. http://www.malwarebytes.org/ rather than pay for it http://corbitek-antimalware.soft32.com/free-download Free reliable antimalware solution with realtime protection and automatic update Click to put a check mark next to all of the malware files detected in the scan and click "Delete." Download and install CCleaner (piriform.com/ccleaner). http://www.piriform.com/ccleaner This free program will scan and clean out all temporary files on your computer. Run the program, and when it finishes, your computer should be free from the fake Windows Security Center. Restart your computer to exit safe mode.
2helpful
1answer

On windows vista some desktop icons have a security shield on right side of icon. how do you remove shield and not lose the security?

The icons having Shield icon associated with it means that they need administrator privileges every time they run. Not any kind of security as you think, this thing simply says that they should be run from any administrator's account or other account with administrator password.


Hope this helps, Mrityunjay.
2helpful
1answer

On windows vista some desktop icons have a security shield on right side of icon. how do you remove shield and not lose the security?

The icons having Shield icon associated with it means that they need administrator privileges every time they run. Not any kind of security as you think, this thing simply says that they should be run from any administrator's account or other account with administrator password.


Hope this helps, Mrityunjay.
2helpful
2answers

Security shield license key?

Security Shield is a rogue security software, a form of computer malware that deceives or misleads users into paying for the fake or simulated removal of malware, or that installs other malware. So you really don't want it on your computer. Instead of getting a license key for it, you need to remove it.

If it won't let you do anything on the computer, follow the instructions on this link to remove it. If you can install programs on your computer, follow only steps 7 and 8 from the above link to get Microsoft Security Essentials on and remove Security Shield.
1helpful
1answer

The only thing that comes up is a Red Cross Antivirus window, cant seem to remove it. I already have an antivirus downloaded.

Red Cross Antivirus is a rogue anti-virus program that is installed via the Fake Microsoft Security Essentials Alert Trojan. This rogue is installed via a fake Microsoft Security Essentials alert that states you are infected and then prompts you to install 1 of 5 rogues, including Red Cross Antivirus. When the program is installed it will reboot your computer and start before you see the Windows desktop. It will then scan your computer and state that there are numerous infected files found, but will state that it will not be able to clean some of them as it requires the heuristics module in order fix them. In order to activate this heuristic module you will need to first purchase the program. This is a scam, though, as none of the files it states are viruses are actually infected.
Go to TrendMicro.com and run a free online virus scan to eliminate this rogue.
Jim
0helpful
1answer

My pc keeps telling me that it has been hijacked my firewall is turned off.buy vista smart security

Vista Smart Security 2010 is a fake alert which is secretly installed by trojan. It is a part of rogueapplication. A rogue software application designed to trick users intobuying a fake product by using scare tactics.It will bombard you with pop ups in order to try and scam you out ofmoney.

You may search in google any Vista Smart Security 2010 remover, free download.

Or you may also try this website:
http://www.myantispyware.com/2010/03/18/how-to-remove-vista-smart-security-2010-removal-guide/

Good luck!
1helpful
3answers

I downloaded the program Antivirus 2009 Professional but i cannot access it or find a way to make sure it is installed

Antivirus 2009 is a hoax. It a virus/spyware intended only to harm your computer. To get it off is way hard. Check my website.

http://sites.google.com/site/turbospeedmycomputer/
Not finding what you are looking for?

49 views

Ask a Question

Usually answered in minutes!

Top Computers & Internet Experts

Grand Canyon Tech
Grand Canyon Tech

Level 3 Expert

3867 Answers

Brad Brown

Level 3 Expert

19187 Answers

Cindy Wells

Level 3 Expert

6688 Answers

Are you a Computer and Internet Expert? Answer questions, earn points and help others

Answer questions

Manuals & User Guides

Loading...