My computer has veen infected - your advice would be welcome?

Question

These are the features.
1. Default homepage - although my ISP is set as default a click on the Home icon takes me to http://safeiepage.com/ and a warning about W32.Myzor.FK@yf pops up (with the purpose of encouraging me to downlaod their products).
2. I have a new toolbar, entitled "Protection bar" which will not be hidden.
3. A small icon on the bottom right keeps warning of a "Critical System Error!" regarding spyware.
4. My McAfee Internet Security Suite does not detect any infection.

This happened because stupidly I allowed a download, which McAfee had tried to prevent. Is there a simple way to remove all this, or is it recommended that I reload everything? If I do have to reload, then is there a bets way to do it (e.g. do I uninstall programmes first)?

Answer 1

This is a new variant of the Spy Heal and Pest Trap Infection.

Detailed Prevx Info on Spy Heal:
http://virusinfo.prevx.com/pxparall.asp?PXC=566246957890

The best and easiest way to remove Spy Heal is by installing the Free Trial of Prevx1. This will scan your PC and remove this and any other infections free of charge.
http://www.prevx.com

Answer 2

Before you reformat your entire platform, I would suggest that you turn off Mcafee, or remove the program as it is pure junk like Nortons. And just gets worse every year. Neither one knows a virus and will not destrory anything found.


Here are two free program that you can try. The one that is an antivirus, you must turn off Mcafee, or remove as you can not run two antivirus at the same time. Here is the antivirus program: http://www.avast.com This is excellent state of the art technology that I use in my secondary pc. They will ask you for your email so they can send you a key. The key is good for one year. After one year you must ask for another key. Download their free home personal use. The purchased is the same software, they just charge corporate. You can daily auto updates. Scans all 175,000 objects, in my system plus compressed files an all my favorites. This program should detect and destroy the virus.

If your home page has been hijacked, or you have spyware here is an excellent free program I use. The purchased version is an upgrade, and you only get automatic updates an a guard that runs in the background. This program is known to find the very hard spyware and trojans that no other program can find or destroy. I use it always.

http://www.superantispyware.com

You have to take better care when you are working on the pc as it is a very dangerous place. If you don't you will always find yourself with this mess. An worse of all a trojan can destroy your entire system.

Clinical Psychiatrist, France

Answer 3

You can get tid of it though it is not easy. First uninstall everything that you can in the way of spyware (some of the companies not allow you to uninstall after downloading there free uninstaller) Next download adaware and or microsoft defender both free programs that will help you. I would then download avg anti virus it is much better than mcafee they also have a rootkit detection program i would run if I where you.

Answer 4

Sounds like a adware / spyware infestation

A word of caution: This process may render any shareware or free ware programs you may have installed inoperable. You may need to reinstall them, at the risk of introducing more spyware into your PC.

Download, install and update these free tools

Adaware
Spybot Search and Destroy
AVG Anti-Spyware NOTE: This is a full version that changes to a more limited free version after 30 days. The free version is still very good.
And the Norton Spyware from the Yahoo! toolbar

After installing and updating each program, restart your PC in safe mode. In safe mode, most of the nasty spyware won't easilly start, making them easier to remove.

Start in safe mode by pressing the F8 key while the PC is booting, before Windows starts. If you see Windows starting instead of the Start menu, you missed it and need to start over. Select Safe Mode from the start menu

Run each of the above spyware programs, one at a time, removing any spyware they find. If you have multiple users setup on your PC, you will need to log in as eac user and repeat this process.

After runing each anti-spyware program, reboot in normal mode. Repeat the process of running each anti-spyware program, removing anything they find.

As a preventive measure to avoid having this happen again, I strongly recommend using McAfee Site Advisor. It will help let you know if you are about to enter a bad website or about to download a bad program.

Answer 5

Is that each and each physique you notice? in case you are able to not quite get your computing device to do popular computing device issues, it looks like there is a few thing incorrect with the verbal exchange between the reveal screen and the computing device. it appears that evidently the reveal screen is in attempt mode, which you will see video reveal contraptions do in the event that they are not hooked as much as a working laptop or computing device, or no longer hooked as much as a working computing device. So, the two some thing extremely common is incorrect with the relationship, that's possible, pondering maximum cords on laptops flow for the time of the hinge, putting undue rigidity on it. Or, you computing device could desire to be thoroughly busted. Its quite complicated to tell with out further information. attempt taking it to the shop, i do no longer think of there is something you're able to do.

Answer 6

You are infected with Spyware and Adware and possible Browser Hijacker.

Get Adaware, Install, Update and Run it to remove Spyware. Also run your Antivirus program. If you do not have an Antivirus program(YIKES) then get AVG Free, it is as good if nto better than all the "big name" antivirus programs and it is FREE!

All those programs can be found at
http://www.download.com

Answer 7

You have to uninstall the program first, then go to all program file, accessories, system tools, system restore and restore your computer to a date before the date you download that file, let us say last week and do not worry, you will not loose any important files. Try this if it does not work, try to buy an anti spy aware program and install it. good luck!

Answer 8

Hi there,
Here I got Mad Checkers for free: http://bitly.com/1pUL2cX

it's a perfectly working link, no scam !
If you are a true chess game fanatic, then Mad Checkers is definitely an essential application for your vast collection of computer software.
It's amazing.

Answer 9

Safeiepage.com is added by a Trojan in the Smitfraud family. This requires specialized programs for removal. Go to the bottom to this procedure to the Smitfraud sites. After removal do the procedure and program listed to ensure you are clean.

Trojan Removal Procedure.

Removing infections from your computer is never as easy as aquiring them. Malware infections are not meant to be removed, so, it takes TIME and PATIENCE to get rid of them. ONLY RESORT TO A REFORMAT AFTER ALL ELSE FAILS TO REMOVE THE INFECTION.

This procedure works for all Malware. Replace the Ewido and AdAware SE programs with any AntiVirus or AntiSpy program you choose.


Download and Update Ewido (now called the AVG Antispyware). Do not run:

http://www.ewido.net/en/download/...

Download AdAware SE and update. Do the setup. Do not run:

http://www.filehippo.com/download_ad-aware/

AdAware SE Setup:

1. Select "use custom scanning options" then select "customize". Make sure the following options are enabled: "scan within archives," "scan active processes," "scan registry," "deep scan registry," "scan my IE favorites for banned URLs," "scan my Hosts file."

2. Select the "tweak" option. Under "scanning engine," make sure "unload recognized processes and modules during scan" is enabled. Enable "scan registry for all users instead of current users."

3. Under "cleaning engine" turn on "always try to unload modules…," "during removal unload explorer and IE if necessary," "let windows remove files in use at next restart," and "delete quarantined items after restoring."

4. Use the "select drives and folders to scan" option to ensure that your entire hard drive is scanned (if you have more than one hard drive, scan all of them (of course, do not include floppy and CD/DVD).


TEMPORARILY SHOW HIDDEN FILES AND FOLDERS.

1. Click Start, and then click Control Panel.

2. Click Appearance and Themes, and then click Folder Options.

3. On the View tab, under Hidden files and folders, click "Show hidden files and folders", and clear(uncheck) the "Hide protected operating system files" check box.

IMPORTANT: Files are hidden by Windows for a very good reason. It is not wise to experiment with these files. Unfortunately, to successfully remove modern spyware we must turn this protection off temporarily. Please turn the protection back on when you have finished cleaning your system.


EMPTY INTERNET EXPLORER BROWSER CACHE:

1. On the Internet Explorer Tools menu, click Internet Options.

2. On the General tab, in the Temporary Internet Files section, click the Delete Files button. Select the Delete all offline content check box in the confirmation dialogue box that appears, click OK. Click OK again.

RESTART IN SAFE MODE:

To do this you need to hold down or repeatedly tap the F8 key while the computer is booting (when the computer is displaying a black screen with white text). When the boot menu appears, use your keyboard arrows to select "Safe Mode."

Safe Mode can look quite ugly. The color may look bad, and all of your desktop icons will be very large. This is normal.



START THE SCAN WITH ADAWARE SE. THEN DO IT WITH EWIDO.

NOTE: Let AdAware complete its scan. Sometimes AdAware will be unable to remove everything that it finds and will prompt to be allowed to try again after restarting. If that happens, when the scan finishes restart immediately and allow the scan to finish.


When the scan and removal are completed REBOOT COMPUTER. This will restart you in normal mode. DON'T FORGET TO RESET HIDDEN FILES AND FOLDERS.


NEW RESTORE POINT:

The RESTORE POINTS may be infected with the Malware and cannot be used.

HERE'S HOW:

1. Click Start, and then click Control Panel.

2. Click Performance and Maintenance, click System, and then click on the System Restore tab.

3. Select the Turn Off System Restore check box, click Apply, then restart your computer.

4. Return to the System Restore Tab and turn System Restore back on.


TO SET A NEW RESTORE POINT:

1. Click the Start button.

2. Point to Programs, then navigate to Accessories, then System Tools, then click System Restore.

3. Choose Create a restore point, and then click Next.

4. In the Restore point description box, type a name for your restore point, and then click Next.

5. Click OK.

NOTE: If you are using Windows XP Service Pack 2 (SP2) and are unable to access the Internet after removing Malware, there is a command that may fix the problem. It works by resetting the winsock catalogue. Click on Start, then Run and type CMD in the box. Click OK. Type "netsh winsock reset" (no quotes)into the DOS window that appears.


ADDITION INFORMATION ABOUT TROJANS:

There are Trojans that fall into the Smitfraud family. These require the use of a specialized program for removal. Here are two sites that specialize in removing these:

http://www.internetinspiration.co.uk/rog...

http://siri.urz.free.fr/fix/smitfraudfix...

Answer 10

I helped a woman yesterday with this and the only thing we found after we ran every scan we knew of on your list of answers.And the only thing we found to remove this is spybot search * destroy,It removed it with no problems good luck