Computer advice please ...?

Question

I have an irritating problem with my pc, and as I'm no expert with computers, I need some help .
For the past 2 weeks, whenever I login and go to Internet Explorer, this comes up :
Privacy Violation in Progress ( 490 AVP Warning )
It goes on to tell me that I need a special software to resolve this problem..click here now !
I don't want to buy this software, as I have nothing to worry about, but this " page" includes two whole lines of the filthiest words in the English language, that are supposedly in my hard drive ( which is not true) and as I have two young children who use the pc quite often, I don't want them seeing such words !!
My question is, has anyone else had a similar problem, if so, how can I get rid of it without buying software that I don't need ?
I would really appreciate any help or advice, thank you .

Answer 1

Before attempting to remove malware you must switch off System Restore as back up files will be hiding in there, and it will just restore itself. Go to Start - programs - accessories - system tools - system restore.
Run Avast and Ewido in Safe Mode. To get into Safe Mode repeatedly press the F8 key after the bios screen loads but before Windows loads. You'll know if you made it because the screen will be at 800 x 600 and your pc will be slow.

Then beef up your security. Its easier to prevent malware getting on to your sytem in the first place rather than trying to remove it.

The Windows firewall doesn't stop malware on your pc from dialling out. Either of these firewalls are free for personal use and stop unwanted incoming and outgoing traffic. You choose which programs are allowed to access the internet. They are both fairly easy to use and updated regularly.
http://www.zonelabs.com Zone Alarm firewall
http://www.kerio.com Kerio firewall

Shields Up security site, check your firewall works
https://www.grc.com

http://www.mozilla.com/ Firefox web browser
http://www.opera.com/ Opera web browser
Instal both these web browsers, turn off javascript on one and use that browser for vising unknown websites. They don't support Active X so thats one less way for problems to get on your pc.

Winpatrol is a handy utility that tracks cookies on your pc and stops unwanted changes to your startup folder.
http://www.winpatrol.com

Spywareblaster works with Internet Explorer and Firefox. It won't uninstall spyware that is already on your pc, but it will prevent hijacks and other malicious changes to your browser.
http://www.javacoolsoftware.com

http://www.siteadvisor.com -Site Advisor warns about malware on sites you are about to visit.

http://www.avast.com - Avast Antivirus

http://www.trendmicro.com/vinfo/ - Trend Micro online virus guide
http://housecall.trendmicro.com/ - Trend Micro PCillin online scan

http://www.ewido.net - Ewido anti trojan

Ad-Aware SE Personal anti adware
http://www.lavasoft.com

Spybot Search and Destroy anti spyware
http://www.safer-networking.org

http://spywarewarrior.com/rogue_anti-spyware.htm - The Spyware Warrior site identifies fake anti spyware programs.

http://www.bitdefender.com -BitDefender can be used as a second, on demand anti virus.

http://www.ccleaner.com Cr*pcleaner Registry cleaner and privacy tool

Microsoft have two free online scanners that look for malware.
http://safety.live.com/site/en-US/default.htm
http://www.microsoft.com/security/malwareremove/default.mspx
You can also download Microsofts free Windows Defender from the official Microsoft site, and the Malicious Software Removal Tool.

Remember to update and run all of you anti malware programs at least once a week.

Answer 2

I don't know what that problem is. But do this: Go to Tools menu, click on "Internet Options", click on "Clear History" and clean the history by doing that. Then Click on "Delete Cookies", and say yes if ask for a confirmation, then click on "Delete Files" and say yes. You will be removing stuff from your computer that is more likely that can or cannoto be causing the problem (probably not) but will be ready for the next step if it doesn't solve your problem:
2 choices now:
1 and probably best choice) Go to Start "Windows update" and run all the updates necessary (follow instructions).
2) Install again Internet Explorer, latest version you can, pay attention to the operating system you have, to make sure you are not downloading a version to another operating system.

Answer 3

Hi!
Your homepage has been hijacked (i.e. taken over by a malicious program that's running on your computer)! This is often installed 'inside' another program, e.g. SpySheriff, which contains 'spyware'.
First: Get someone along side you who knows something about computers, then tackle the problem as follows:

1. Open task manager by pressing Ctrl-Alt-Del, and click on the "Processes" tab. Look for Spysheriff there and kill the process if you see it. If you see a process named "winstall" (winstall.exe) then delete this one also.
2. In the control panel goto "Add/ Remove Programs" and remove the "SpySheriff" program. If it says that it cannot uninstall, then you still have it running. It will uninstall once it's not running.
3. Your desktop background will not be restored by that uninstall. Go into the registry by starting RegEdit.exe from the start button.
If your registry editor does not work, read this document "I cannot open the registry editor".
4. Look for this key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop
It will have about 6 values stored that disable certain things. Delete this whole branch ActiveDesktop - the system will work with default values afterwards.
Also delete this branch in your registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
5. Look in your root directory for a file named winstall.exe. Mine was in c:\ and 24064 Bytes in size.
This file is scheduled to execute each time you boot and it will re-install Spysheriff.
Delete that file.
Update:
As MG from Ottawa comments below, there may also be additional executable files that were created at the same time as winstall.exe. Those files may be named 'winstall.exe' and 'ibm00001.exe'. You should delete those files as well. If you have this file ibm0001.exe please see the other article regarding ibm0001.exe.
6. Restart your system.
Done.

Answer 4

You've probably picked up some spyware or a malicious toolbar. My suggestion would be to dump Internet Explorer (stop using it). And switch over to Mozilla Firefox. You can download it for free (check my source). It is far superior to Internet Explorer both with security and customization options.

Try it out. You will not be dissapointed.

Answer 5

Sounds like spyware or similar issue. Download a program such as spy sweeper and it will find most things that cause your computer to do this kind of thing! I've had similar things and it is very annoying!

Answer 6

Sounds like spyware to me. Scan with the following tools:

Spyware Tools:
http://www.lavasoft.nu/software/adaware/
http://www.safer-networking.org
http://www.microsoft.com/windowsdefender
http://www.merijn.org/programs.php

Answer 7

You have a piece of spyware installed . download adaware from www.lavasoft.com and install it and run it to remove the spyware. then run an up to date virus sweep and turn the windows firewall on. if you dont have windows xp sp2 with a firewall download zonealarm from the net as its just as good.

Answer 8

Try using the new Spyware finder on Yahoo toolbar!! Sounds like spyware to me!!

Answer 9

Pop ups are a sign that your PC is infected with spyware.
Goto www.ewido.net and run the free version to find and remove it.
Here is a list of other free ones.
Spybots search and Destroy http://www.download.com/3000-8022-10122137.html?tag=pao
adaware se> http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10399602.html?tag=lst-0-1
http://www.webroot.com/land/freescan.php
a-squared Free> http://www.emsisoft.com/en/software/free/
http://housecall.antivirus.com/housecall/start_frame.asp
http://housecall65.trendmicro.com/
X -Cleaner Micro Edition scan http://www.spywareguide.com/onlinescan.php
http://www.kaspersky.com/virusscanner
http://www.windowsecurity.com/trojanscan/
http://www.bitdefender.com/scan8/ie.html
http://www.pandasoftware.com/products/activescan/com/activescan_principal.htm

http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://www.javacoolsoftware.com/spywareblaster.html
Spywareguard too.
http://www.javacoolsoftware.com/spywareguard.html
http://www.ewido.net/en/onlinescan/

Answer 10

Definetly spyware or malware. Try using hijackthis:

http://www.spywareinfo.com/~merijn/programs.php