Spyware will not go away? What do I do? Ive tried EVERYTHING!?

Question

I have installed and run: ad-aware, spybot search and destroy, avast antivirus and cleaned out things but there is one piece of spyware I cannot get rid of. Every 5 minutes i hear a voice telling me "congratulations, you have won a free gift card" or "congratulations, you have won a free ipod nano".

And I get popups on Internet Explorer cor circuit city and for a computer company. What is even worse is even when my computer is not connected to the internet, I hear a clicking noise like its trying to open the spyware. Even worse, when I am not even logged into my laptop yet, I hear clicking noises. What is going on? And how do I fix this annoying problem?

Thanks in advance

Answer 1

For this, you are going to need your recovery cds that should have come with the computer.  If you don't have them and are still under warranty, you should be able to request more.'

Now, turn off your computer.  You won't need it yet.  Go into the store and buy yourself an external hard drive that is the same or bigger size that you have.  Go home, and go into the windows utility that backs up your computer.  After you have run the backup, disconnect the external hard drive.  

Run the recovery cds.  This could take a good 1 to 2 hrs.

After you are done, go online to www.eset.com .  Buy and download Eset Smart Security.  (I didn't say this would be cheap.)  Download the 32 bit version unless it says you know you have a 64 bit.  Disable all of your other anti virus, including windows firewall.  Hook up your external drive.  Go back to the backup utility, except this time, click the restore button.  Restore only the programs(located in program files) and documents(most likely in my documents) that you need.

A word on Eset Smart Security.

I had a virus and performed the same procedure above, except it was with a virus named the "zlob".  The zlob virus had been out for just a few weeks, and eset already had a fix for it.  It is simpy the best, and the fastest(scans five hundred gigs of hard drive in 20 minutes).

Good luck, it won't be easy.

Answer 2

Remove Restrictions Tool:

http://www.softpedia.com/progDownload/RR...

Download from Softpedia Secure Download (RO), install, run and check all boxes then click Apply and then reboot. This tool re-enables what codecs/viruses have disabled.

Malwarebytes Anti-Malware:

http://www.download.com/Malwarebytes-Ant...

Download, install, update and select Full Scan.

Remove all infections that it finds after scan.

SmitFraud Removal

Firstly, download the removal tool from here:

http://siri.urz.free.fr/Fix/SmitfraudFix...

How to use:

Disconnect from the internet to stop it from trying to reload itself on to your system.

Double-click SmitfraudFix.exe to run the first stage of the program.

On the first screen select 1 and hit Enter, this will create a report of the infected files.

The report can be found at the root of the system drive, which is usually located at C:\rapport.txt

Secondly, reboot into Safe Mode, keep tapping F8 key before Windows splash screen.

Double click the Smitfraudfix.exe and on the screen that opens type in 2 the hit Enter to delete any infected files.

You will then be prompted with ‘Do you want to clean the registry?’ Type Y and again hit Enter to remove the Desktop background and clean any registry keys that are associated with this infection.

The tool will then check to see if winnet.exe is infected. If it is you will be asked if you want to replace infected file? Type Y and again hit Enter to restore a clean file entry to the registry.

You may be required to reboot after the cleaning process, and you can then reconnect to the internet.

Another option is to restore Trusted and Restricted sites, type in 3, hit Enter.

You will then be prompted with ‘Restore Trusted Zone?’ Type Y, hit Enter.

Some anti-virus programs detect process.exe as a ‘risk’. It is NOT a virus, it is a program used to stop system processes.

VundoFix:

http://www.symantec.com/content/en/us/gl...

Disconnect your computer from the internet

Run vundo

Restart your computer

Run the tool again to ensure no traces are left.

If there are the reboot into Safe Mode and run FixVundo again.

Answer 3

Try a online virus scan here are some address to try Safety.Live.com...TrendMicro.com... get some protection Comodo.com is offering a complete security suite free and yes they can be trusted if you want to do it yourself I recommend Avira.com along with Safer-Networking.org(spybot search&destory) or SpywareBlaster from majorgeeks.com or Lavasoft.com...MalwareBytes.org is another good one to consider althrough the last two don't offer free protection some even recommend two anti-spyware scanners just to be on the safe side the other bit of advice i have to offer is external firewalls they hardwire to the machine with usb or firewire hook up now thats cutting edge tech.Remember paid is usally better than free however since Comodo.com kind offer that may not be the case anymore      

Answer 4

Yes, this definitely a spy-ware program has been installed into your system.  Try to download a free trial "Kaspersky Internet Security 2009" @ http://www.kaspersky.com to remove this spy-ware.  This virus program is the best in the market now.

Answer 5

Try to scan your pc with one of these remover and delete infected files :

http://www.pcthreat.com/removers.html