How can I get rid of virus W32MyzorFK@yf ?

Question

I have Norton and ran Live Update and Full System Scan. This virus is not on their list. Norton asked if I meant W32Myzor.FK@if. I told them "No".

I emailed Norton yesterday asking how to remove it. No reply yet.

Meanwhile, I keep getting the Security Screen and the pop-up about the virus, instead of Yahoo. They're trying to sell me "anti everything" software. Sometimes I can get Yahoo by typing the address. The computer is slower with the virus. Google shows nothing on it.

Should I uninstall Norton, and try AVG or some other free software? Could that virus be buried in the hard drive? I'm open to suggestions. HELP!!

I'm sure I got the virus on Yahoo answers when I clicked a website in an answer. That's the last time I'll do that!

Everyone gave great answers. I think jibberjab got it right when he said This is a rogue virus, a scam to fool us into buying software by holding my homepage hostage. But I couldn't remove the virus with the instructions in his suggested website.The "blue screen" was not as stated in the prompts.I'll explore other ways. Thanks.

Answer 1

There is no such "Real" virus as W32.Myzor.FK@yf. It is a scam caused by a Smitfraud infection on your computer.

"W32.Myzor.FK@yf is a new rouge anti-spyware program . When it is installed it hijacks your homepage and creates fake popup messages warning you of a W32.Myzor.FK@yf virus. This infection is designed to fool users into paying for a commercial version of the program."
http://www.technibble.com/how-to-remove-syssecuritysitecom-w32myzorfk/

SmitFraudFix v2.102 is the standard way that is used by professionals to remove Smitfraud. Free from:
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php

These trojans sneak into your computer by-

WMF exploit. An image vulnerability in un-patched Windows systems


Codec. Codecs usually for Windows Media player to allow a short movie clip, install a variant of Trojan.Zlob.
Infected Codecs include - Codec Pack - All In 1, DVDCodec, eCodec, emediacodec, icodecpack, HQ_codec, icodecpack, IntCodec, media-codec, mpvideocodec, Pcodec, StrCodec, sv-codec, svideocodec, vcodec, video icodec, VideosCodec, WinMediaCodec, zipcodec.


DigiKeygen, Digipass, PornMag Pass, x password manager, various utilities to allow porn sites to be viewed


Java exploit. A vulnerability in out dated versions of Java software.


Visiting cool web search web sites


P2P file sharing programs such as Limewire.


Deceptive advertisements and Sponsored ads displayed on Search engine results.






Good luck.

Answer 2

2

Answer 3

Get rid of norton. It uses too much of your system resources anyway.

That virus name seems like it was randomly generated. I dont think you found the main source yet. That might be why it wasnt in Nortons database. They only catalog the "head of the snake". It would be impossible to record every randomly generated virus name. A trojan can get into your computer and create viruses to further infect you. It is also possible the main source isnt in your computer, but it somehow infected you remotely (CD, network, WiFi, internet, etc..). It is also possible that it was a false positive. Sometimes a virus scanner will pick up spyware or malware and think it's a virus.

Do a remote virus scan here:
http://www.bitdefender.com/scan-online/

Get AVG for free here:
http://free.grisoft.com/doc/1

Answer 4

How To Remove Computer Viruses - For Free

1. Download, install and update Anti-Virus Software.

* There are many 'free for personal use' versions of anti-virus software available. My personal favorite is AVG Anti-Virus. You can download AVG Anti-Virus Free Edition here http://www.malwaresolutions.com/tools_anti_virus.html

Download, install and update AVG or which ever anti-virus product you choose to use. Follow the program's instructions for updating the virus definitions. This way the software "know what to look for". It will have a much better chance at removing viruses if it the virus definitions are up-to-date!
2. If you are using Windows ME or Windows XP, disable System Restore.
* What is System Restore? System Restore is a feature built into Windows XP and Windows ME that allows users to 'roll-back' to specific restore points without affecting data files. A restore point is automatically created (as long as System Restore is turned on) when new software and/or drivers are installed. If there is a problem with the installation System Restore allows a user to select a restore point (a date) to revert back to. The problem here is this, if a computer is infected with viruses, spyware and/or adware when a restore point is created, rolling-back to that restore point will re-infect the computer. Follow these instructions to turn off System Restore in Windows XP
* click Start
* click Control Panel
* click System
* click the System Restore tab
* un-check the box that reads 'Turn off System Restore on all drives' (to turn System Restore on put a check back in the box)
3. Disconnect from the Internet.
4. Open Internet Explorer (or the browser of your choice) - clear your cookies and cache.

* To delete cookies in IE: Tools >> Internet Options >> on the General tab choose Delete Cookies. You will be asked 'Delete all cookies in the Temporary Internet Files folder? Click OK.

* To delete the cache in IE: Tools >> Internet Options >> on the General tab choose Delete Files. Be sure to place a check in the box that says 'Delete all offline content'. Click OK

5. Restart the computer in Safe Mode.

* What is Safe Mode? Safe Mode is a special troubleshooting option built into the most Windows based operating systems.
* To access Safe Mode click Start and then click Shut Down.
In the drop-down list of the Shut Down Windows dialog box, click Restart, and then click OK.
As your computer restarts but before Windows launches, press F8.
Use the arrow keys to highlight the appropriate Safe Mode option, and then press ENTER.
6. While in Safe Mode run a full system scan on the computer using the anti-virus software. This might take some time depending on how much data the anti-virus software needs to sift through. Be patient, let the software do it's job.

7. After all viruses have been quarantined or removed, reboot the computer and connect to the Internet then run Windows Update (Windows XP go to Start, Programs, Windows Update - select all critical updates).

8. If you are not already running a software firewall, now is a good time to install one. I recommend Zone Alarm. It's free for personal use and can be found here http://www.malwaresolutions.com/tools_firewalls.html - A firewall helps protect your computer and personal data from online predators.
9. If you are using Internet Explorer you might want to consider an alternate web browser such as Mozilla Firefox - which can be found here http://www.malwaresolutions.com/tools_browsers.html.

Tips To Help Keep Viruses Off Your Computer:

1. Do not open email attachments - unless you can verify they are 100% safe.
2. Stay away from questionable websites. For example: pornography sites!
3. Be careful when downloading using P2P (Peer to Peer) file sharing software. Always scan your downloads with anti-virus software before you open them!
4. Keep Microsoft Windows up-to-date using Windows Update.
5. Keep your anti-virus software up-to-date and run scans periodically.
6. Do not install Free software unless the source can be verified. When in doubt search for the software title on Google

Answer 5

Install security pack 2 from Microsoft site, you wont see that again, I believe this is not a virus, some one is trying to sell you software.

Answer 6

Try some of these:

Spyware, Adware, Trojans, Malware, Dialers, Popups:
http://www.lavasoftusa.com/software/adaware/
http://www.ewido.net/en/download/
http://www.javacoolsoftware.com/spywareblaster.html
http://www.download.com/Bazooka-Adware-and-Spyware-Scanner/3000-8022-10247782.html
http://www.javacoolsoftware.com/sgdownload.html
http://www.safer-networking.org/
http://www.download.com/HijackThis/3000-8022_4-10379544.html
http://www.emsisoft.com/en/software/download/
Online Scanners:
http://www.webroot.com/consumer/products/spysweeper/freescan.html?
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://www.pandasoftware.com/products/activescan.htm
http://www.bitdefender.com/scan8/ie.html
http://www.windowsecurity.com/trojanscan/
http://www.kaspersky.com/virusscanner
http://www.spywareguide.com/onlinescan.php
http://housecall65.trendmicro.com/
Spyware, Adware, Trojans, Malware, Dialers, Popups List:
http://www.softpedia.com/catList/104
http://www.download.com/Adware-Spyware-Removal/3150-8022_4-0.html?tag=dir
http://www.majorgeeks.com/downloads31.html
http://www.filehippo.com/software/antispyware/setarea
Antivirus:
http://www.grisoft.com/
http://www.avast.com/
http://www.free-av.com/
Antivirus Lists:
http://www.softpedia.com/catList/1
http://www.download.com/Antivirus/3150-2239_4-0.html?tag=dir
http://www.majorgeeks.com/downloads29.html
http://www.filehippo.com/software/antivirus/
Firewall:
http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp?dc=12bms&ctry=US&lang=en&lid=staticcomp_za
Firewall Lists:
http://www.softpedia.com/catList/97
http://www.download.com/Firewalls/3150-10435_4-0.html?tag=dir
http://www.majorgeeks.com/downloads34.html
http://www.filehippo.com/software/firewalls/
IP Blocker:
http://prdownloads.sourceforge.net/peerguardian/pg2-050918-nt.exe?download
Browser:
http://www.mozilla.com/firefox/
Email, News, RSS:
http://www.mozilla.com/thunderbird/
System Cleaner:
http://www.ccleaner.com/
System Cleaning List:
http://www.softpedia.com/catList/98
http://www.majorgeeks.com/downloads12.html
http://www.filehippo.com/software/cleaning/
System Info:
http://www.softpedia.com/catList/92
http://www.majorgeeks.com/downloads9.html

Answer 7

http://www.superantispyware.com/superant...now that u have what u need....lets clean the pc first
go to start..run..type in msconfig.....press ok...new window...press start up..select disable all.press apply..press ok
go to start..run..type in prefetchin new window in top left corner..select edit..select all..press delete.......yes..delete all...
go to start..all programs..system tools..disc clean up..select c drive..after it has finished analyzing..check all the boxes..press ok..when it has finished cleaning..it will disappear...
now go to start..control panel...folder options.....view...u will see a option that says "show all hidden files and folders"..check that..press apply..press ok.....
ok....now we need to go into safe mode....turn off ur computer.....as soon as u turn it back on...u have to press f8 repeatedly until u see a screen that shows u several different options.....u need to enter the option " safe mode" use the arrow keys on keyboard to scrool to it..then press enter...after u afew moments..u will see log on as.....admin or user....select user....after that u will see ur desktop......now open antispyware..( please update this b4 going into safe mode)..click scan my computer....select full or complete system scan.....then press next..it might take ahour or so..after it has finished..remove what ever it finds...now close superantispyware....
go to start.run..type in...%temp%...press ok..new window..go to edit.select all..press delete..tes..delete all....
go to start..control panel...folder options.....view...click reset to default..press apply..press ok...
now restart your computer...u will see a pop up from system configuration...put a check mark in the little box..press ok

if this does not work.....go here...http://noahdfear.geekstogo.com/
download a program called smitrem...folow instructions and u will be fine

Answer 8

First, please move HijackThis to a folder on your Desktop.
Rightclick on an empty space on your desktop and choose New > Folder
Name it HijackThis (HJT, or whatever)
Rightclick HijackThis.exe, choose Cut.
Doubleclick (to open) the folder you created.
Rightclick inside and choose Paste.

Please disable Windows Defender so that it does not interfere with our fix.
* Open Microsoft Windows Defender. Click Start, Programs, Windows Defender
* Click on Tools, General Settings
* Under Real-time protection options, unselect the Turn on real-time protection check box
* Click Save

Also disable your Symantec Script Blocking from within your Norton so it does not interfere with anything during our fixes now or later. You can enable this whenever we have verified that your system is clean.
To disable Norton AntiVirus Script Blocking:
1. Start Norton AntiVirus.
If Norton AntiVirus is installed as part of Norton SystemWorks or Norton Internet Security, then start that program.
2. Click Options.
If you see a menu, click Norton AntiVirus.
3. In the left pane, click Script Blocking.
4. In the right pane, uncheck Enable Script Blocking (recommended).
5. Click OK.

After all of the fixes are complete it is very important that you enable Real-time Protection again.

Download smitRem.exe and save the file to your desktop.
If you cannot access that link, here are alternate links:
smitRem.exe
smitRem.exe
Double click on the file to extract it to its own folder on the desktop.

Place a shortcut to Panda ActiveScan on your desktop.

Download ewido anti-spyware from HERE and save that file to your desktop.
This is a 30 day trial of the program
Once you have downloaded ewido anti-spyware, locate the icon on the desktop and double-click it to launch the set up program.

Select “Change state" to inactivate 'Resident Shield' and 'Automatic Updates'
Right click on ewido in the system tray and uncheck "Start with Windows".
Go to Start > Run and type: services.msc
Press "OK".
In Services, click the "Extended tab" and scroll down the list to find ewido anti-spyware 4.0 guard.
When you find the guard service, double-click on it.
In the Properties Window > General Tab that opens, click the "Stop" button.
From the drop-down menu next to "Startup Type", click on "Manual".
Now click "Apply", then "OK" and close the Services window.
Once the setup is complete you will need run ewido and update the definition files.
On the main screen select the icon "Update" then select the "Update now" link.
Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
If you are having problems with the updater, manually update with the Ewido Full database installer from here.
Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
Under "Reports"
Select "Automatically generate report after every scan"
Un-Select "Only if threats were found"
Close Ewido anti-spyware, Do Not run a scan just yet. We will shortly.

If you have not already installed Ad-Aware SE 1.06, follow these download and setup instructions, otherwise, check for updates:
Please download Ad-Aware SE Personal and install it. If you already have Ad-Aware SE, please configure it as indicated below. If you have a previous version of Ad-Aware, please uninstall your current version and install the newest version SE 1.06.
1) Run Ad-Aware, and click Check for updates now.
2) Select Configurations (click the Gear wheel at the top) as follows:
General Button > Safety & Settings: Check (Green) all three.
Tweak Button > Cleaning Engine > UNcheck "Always try to unload modules before deletion".
Don't run it yet!
Exit Ad-aware.

Next, please reboot your computer in SafeMode by doing the following:
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
Instead of Windows loading as normal, a menu should appear
Select the first option, to run Windows in Safe Mode.
==================================================

Go to Add/Remove Programs and see if you can uninstall "Protection Bar". Whether it is listed or not, please proceed with the following:
Run HijackThis, and press "Scan". When the scan is complete place a check mark next to the following entries:

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/...//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {202a961f-23ae-42b1-9505-ffe3c818d717} - C:\Program Files\IntCodec\isaddon.dll
O2 - BHO: Zango Search Assistant Helper - {56F1D444-11BF-4879-A12B-79CF0177F038} - c:\program files\zango\zangohook.dll (file missing)
O3 - Toolbar: Protection Bar - {860c2f6b-ca82-4282-9187-beccbb66f0af} - C:\Program Files\IntCodec\iesplugin.dll
O21 - SSODL: bestreak - {874443fe-aa33-4ebf-a6ac-73208787e62d} - (no file)

This is a button for RealPlayer. If you no longer use it, place a checkmark next to this:
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

After checking these items CLOSE ALL open windows EXCEPT HijackThis and click "Fix Checked."
===================================================
Close Hijackthis.

Then search for and DELETE the following file(s)/folder(s) IF STILL PRESENT:
C:\Program Files\IntCodec <--folder
c:\program files\zango <--folder

Open the smitRem folder, then double click the RunThis.bat file to start the tool. Follow the prompts on screen.
Wait for the tool to complete and disk cleanup to finish.

The tool will create a log named smitfiles.txt in the root of your drive, eg; Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in your next reply.

Open Ad-aware and do a full scan. Remove all it finds.
Open Ewido-anti-spyware by double-clicking the icon on your desktop.
Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
Ewido will now begin the scanning process, be patient this may take a little time.
Once the scan is complete do the following:
If you have any infections you will prompted, then select "Apply all actions"
Next select the "Reports" icon at the top.
Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
Close Ewido

Next go to Control Panel click Display > Desktop > Customize Desktop > Web > Uncheck "Security Info" or "Desktop Uninstall" if present.

Reboot back into Windows and click the Panda ActiveScan shortcut.
- Once you are on the Panda site click the Scan your PC button
- A new window will open...click the Check Now button
- Enter your Country
- Enter your State/Province
- Enter your e-mail address and click send
- Select either Home User or Company
- Click the big Scan Now button
- If it wants to install an ActiveX component allow it
- It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
- When download is complete, click on Local Disks to start the scan
- When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.
Post the contents of the Panda scan report, along with a new HijackThis Log, the contents of smitfiles.txt and the Ewido Log by using Add Reply.
Let us know if any problems persist.

** It could be possible, after reboot that the system is using the windows classic theme again.
To restore this and set it back to XP-theme, rightclick on your desktop > properties > tab Appearances and choose Windows XP style again under windows and buttons.
Click apply and OK

** Note: You seem to be running two anti-virus applications. That can cause slowdowns and conflicts. Please disable or remove one per the vendor's instructions. It is not always as simple as using Add/Remove Programs because some components may need to be removed in a certain sequence.
For Norton: How To Uninstall All Norton Products Tool-Automatic
http://service1.symantec.com/SUPPORT/tsgen...sv_lvl=&seg

If you've got an older version installed:

How to uninstall Norton AntiVirus 2002/2003
http://service1.symantec.com/SUPPORT/nav.n...src=bar_sch_nam

Answer 9

http://computercomponents.spaces.live.com/
call us now