Apparently have a virus leading me to a site?

Question

I seem to have some virus that is making **** popup, I've ran two full system scans and updating my virus update bullshit on norton. .

Every like 10 minutes it makes an icon in the bottom left by the time which is the same as the automatic updates and saids different things each time, either I need to update my automatic update thing or that I have a spyware problem or something and it links me to:

http://www.xp-shield.com/download/?aid=102&tid=7

I have no choice but to go there or the d**n bubble will just sit in my bottom right, everytime I connect to it it can't connect.

Anyone know what this is and/or how I can get rid of it?

Only ideas I have is that it came with CCleaner, a comptuer cleaning program I read on some legit computer site, I think PCworld or about.com, and it said it was helpful.

Otherwise I've only downloaded CCleaner and ONLY Mp3's off of limewire lately. .

Sorry for so much words but I'm not good in this field. .

any help will do <33! Thanks in advanced :)

Answer 1

That&#039;s called adware.  First, try running Norton in Safe Mode or Safe Mode With Networking.  Both tend to prevent malware (viruses, trojans, adware, ...) from protecting itself.  Norton may work better that way.

If it doesn&#039;t, I suggest you download Ad-Aware 2008 and Spybot S&amp;D (they’re free), install them, update them and run them. If any of the above (or any anti-malware, for that matter) doesn’t seem to be able to run properly or get rid of everything it reports finding, try running it again in Safe Mode.

Also, turn off System Restore to evict any copies of bad stuff that might be lurking there.  

To get into Safe Mode or Safe Mode with Networking:

1. Log out and reboot your machine.

2. When the machine starts the reboot sequence, press the F8 key repeatedly.

3. Select Safe Mode or Safe Mode with Networking from the resulting menu.

4. When the login screen comes up, log in as Administrator.  By default, Administrator has no password.

5. The machine will continue booting, but the Windows desktop will look different.  

6. When you&#039;re finished doing what you need to do, log out and reboot back into normal mode.

Note that even if the anti-malware programs get rid of the malware, they may not be able to reverse the effects.  Search the Web for possible fixes.

Update and run everything regularly, not just when you think you already have malware.

Good luck.

Answer 2

Download, install, update, and run one or all of these:

Malwarebytes&#039; Anti-Malware

http://www.malwarebytes.org/mbam.php

SUPERAntiSpyware Free

http://www.superantispyware.com/download...

a-squared Free

http://www.emsisoft.com/en/software/down...

Run your scans from safe mode. Tap F8 during boot, to get there.

*************************

Please edit your post and add a space in the url of the site. That will make it non-clickable. Others should not go there.

Answer 3

XP-Shield is a rogue anti-spyware program that is in the same family as AntiVirProtect and WinXProtector. When XP-Shield is installed, it will scan your computer and list a variety of security risks that can only be removed if you first purchase the software.  For example, it lists the C:\Windows\System32\dllcache\pdh.dll file as the Complexel Trojan, when in reality it is a legitimate Microsoft DLL file.

Go down to &#039;Automated Removal Instructions for XP-Shield using Malwarebytes&#039; Anti-Malware:&#039;

Bear in mind that it&#039;s FREE.  PLEASE update first.  Avoid the adverts at top of the page.

simple instructions &gt; download &gt; update &gt; run in quick scan &gt; you may be prompted to reboot

http://www.bleepingcomputer.com/malware-...

Answer 4

This is not Messenger Spam, this is a malicious codec. Use the following free tools to remove which have been successful in hundreds of cases of this problem.

Malwarebytes Anti-Malware:

http://www.download.com/Malwarebytes-Ant...

Download, install, update and select Full Scan.

Remove all infections that it finds after scan.

Wallpaper Hijacker Removal Tool:

http://www.majorgeeks.com/Wallpaper_Hija...

Note: You should hit all &quot;Repair&quot; buttons even though it may not say &quot;Found!&quot; This will fix a wallpaper hijack everytime if all repair buttons are pressed.

Spybot S&amp;D:

http://www.safer-networking.org/en/downl...

Download, install, update and Immunize, turn off Tea Timer then click &#039;Check for problems&#039; then when complete select all and then &#039;Fix Checked&#039;

Spyware Doctor Free Basic Edition - Realtime monitoring:

http://pack.google.com/intl/en/pack_inst...

Its free with Google pack, untick all boxes except Spyware Doctor. Download install, update and run.

SUPERAntiSpyware Free Edition:

http://www.download.com/SUPERAntiSpyware...

Download, install, check for updates, then select Scan your Computer, select your drive and select Perform Complete Scan

VundoFix:

http://www.symantec.com/content/en/us/gl...

Disconnect your computer from the internet

Run vundo

Restart your computer

Run the tool again to ensure no traces are left.

If there are the reboot into Safe Mode and run FixVundo again

A-Squared Free:

http://www.download.com/A-squared-Free/3...

This is not a limited version but a full tool to clean your computer from Malware, Spyware, Trojans, Backdoors, Worms, Dialers and Keyloggers.

How to use:

http://cotojo.wordpress.com/2008/07/07

If the problem persists, turn OFF System Restore and scan with the above programs in Safe Mode, Right click My computer &gt; select Properties &gt; System Restore Tab &gt; Tick Turn Off System restore on all drives.

After scans are complete and machine is clean remember to turn system restore back ON and create a new restore point.

Once your scans are complete and your machine is clean, uninstall some of the programs, I suggest that you keep Malwarebytes for manual scanning, Spyware Doctor for realtime monitoring and Spybot. The remainder can be removed to save drive space, but you may want to keep the installers for future use.

Answer 5

MESSENGER SPAM

STEP #1,if this does not solve your problem,e-mail me for step #2

do you get pop ups claiming that your computer is at risk?

those are called &quot;Messenger Spam&quot; ! to stop messenger spam:

open start page,open administrative tools,open services

these services are in alphabetical order.you need to close two:

a] Alerter

b] Messenger

NOT related to MSN messenger or any other instant messenger

right click each service,click properties,from drop down menu,select disable

another method to deal with those that get through is to copy the pop up address at the top of the pop up or pop under [ starts up AFTER you close a window ]

open internet options [ start--control panel--internet options ]

open content tab,open settings,open enable,enter address,click never,close

open Advanced tab: check to see if pop up blocker is checked,close

reboot

please don&#039;t forget to choose Best Answer

this answer has been selected as Best Answer 25 times