The "Movieland" virus?

Question

This virus has come up in a scan of my computer, and I was wondering if anyone here is familiar with it?
I've never seen it before and my norton anti virus did'nt give any recommendations about it.
Should I be worried about it?

I'd like to add that I'm not very computer literate so could you please make any suggestions in "English" please?!?
Thanks!

Answer 1

How to remove Movieland
Problem:


Movieland has gotten onto your computer. It takes over the whole screen and probably has a girl talking to you.

Movieland may have been installed on your computer following a visit by you (or someone at your computer) from a paid link for a "3 Day Free Trial". The software continues to pop up and request payment for services following the 3 day trial. This is a software package we refer to as malware, as it hinders and inhibits the user's ability to use their computer.

The real problem with Movieland is their Terms of Use, which you (or someone using your computer) may have agreed to by clicking "run" in the Internet Explorer Security Warning.

Solution:

Movieland installs a number of files that allow it to keep popping up requests for payment (which you may or may not have unwittingly agreed to when clicking "run" without reading the terms of service).

Here's how to get rid of it:

Click the Start menu, and Control Panel should be in there (or Settings, then Control Panel). Then open Add/Remove Programs. It should open with a big list of things. Look through the list for:


AltPayments,
Download Manager

Media Pipe

MyAccessMedia, or

P2Pnetworks.

Probably just P2PNetworks will be there, and so click on it so it's highlighted, and then click the Remove (or Change/Remove or Add/Remove) button. Tell it you do want to uninstall, and go through its process, then click close. Now it should be gone from the list. If any of the other ones do happen to be there, do the same process to remove them.

Now close Add/Remove Programs and we're going to Program Files. Open My Computer, then open "Local Disk (C:)", then open Program Files (click on show contents if contents are hidden in either folder). The items we want to delete in there are:


AltPayments or altpayV2
Download Manager

fsupport

ITBills (If you have this one, you probably will have to go into safe mode to remove. Or you can end the itbill process if you know how to do that and then delete the folder.)

MediaPipe
MyAccessMedia
Anything with Notifier or Notification in the name.

You also have something called MovieLand Terms or MovieLand Hotmail Something (I don't remember exactly, sorry), possibly at the end of the list rather than under "M" where you'd expect. Delete that also. Anything with Movieland in the title, delete.

You probably don't have p2pnetworks in Program Files (since we just removed it in Add/Remove Programs), but if you do delete it too.
Now once all that is gone, go back into Add/Remove Programs and see if you have Notification Utility. If you do have it in the list, remove it (thanks to the commenters below for this tip). If trying to remove this takes you to the movieland website, make sure you removed all the things from Program Files.

If It Didn't Work:

You may get a message that says it cannot delete the file due to it is being used by another person or program and to close all programs. If you get this message, you've got to do more work. Do the following:

1) Download Pocket KillBox from: http://www.downloads.subratam.org/KillBox.zip . You probably won't need it, but just in case, we might as well download it now, before we go into Safe Mode.

2) Restart your computer into safe mode now. To go into safe mode, go into the Start menu, choose Restart just as you normally would (click Shut Down or Turn Off Computer and then select Restart if you are not sure how to restart and can't find Restart in the menu), then start hitting the F8 key at the top of the keyboard. Just keep hitting F8 over and over every second or so until it brings you to a black screen giving you some choices. Using your arrow keys on the keyboard, choose Safe Mode, then hit Enter twice. Then wait a while and it will eventually bring you into Windows Safe Mode. (If it just restarted normally instead of going into safe mode, click here and follow the instructions for a different method of getting to safe mode)

3) Try deleting the folders in safe mode. Quite possibly you will be able to successfully delete them now. If not, continue with the steps below to have Pocket KillBox force them to delete.

4) Double-click on Killbox.exe to run it.

5) Now put a tick by Standard File Kill.

6) In the "Full Path of File to Delete" box, copy and paste C:/Program Files/altpayv2 , C:/Program Files/MediaPipe , C:/Program Files/p2pnetworks , and any of the other folders you couldn't delete one at a time. Then click on the button that has the red circle with the X in the middle after you enter each file. It will ask for confimation to delete the file. Click Yes. Continue with that same procedure until you have copied and pasted all of these in the "Paste Full Path of File to Delete" box.

Note: It is possible that Killbox will tell you that one or more files do not exist. If that happens, just continue on with all the files. Be sure you don't miss any.

So, to recap, paste these folders in and make sure Deltree is checked before hitting the red x:

C:/Program Files/altpayv2 (and/or AltPayments)
C:/Program Files/MediaPipe
C:/Program Files/p2pnetworks
C:/Program Files/[any folder or file with Movieland in the title]
Also delete ITBills and fsupport and Download Manager if they are present (Thanks to the commenters below for letting us know about these variants!). Also anything with Notification or Notifier in the name is highly suspect and should probably be deleted. Also, one person has reported the presence of a MyAccessMedia folder in the C Drive. So, you should also delete
C:/MyAccessMedia
if it is present.

Hopefully that does it!

Deleting these files has successfully cleaned Movieland. So, the hijacking and pop-ups should stop now. But, it's possible there's more than one version of Movieland, so if this doesn't work, you could get serious and do some of the more thorough and time-comsuming steps here:

http://forums.techguy.org/security/421861-movieland-media-pipe-spyware-removal.html

or here:

http://www.bleepingcomputer.com/forums/topic36432.html

**Update: Movieland's installation does seem to keep morphing slightly, possibly to prevent people from removing it using these instructions. I will make some attempt to keep these instructions up to date. If you encounter a variant that requires additional steps to remove, just leave a comment below the article.**

Also, if you had Movieland, chances are good you have other malware or spyware as well. So to prevent things like this from happening again, and get rid of anything else you might have, you really should also do the steps in the Preventing Spyware Problems article here: http://home.vcn.com/knowledgebase/article.php?id=346 .

Answer 2

2

Answer 3

All of these are ones that I personally use and all are free.
Try this scan, its free, it removes
I-Worm/Stration · BackDoor.Generic3.GBB and .GBC · Worm/Generic.FX · Exploit.WMF
http://free.grisoft.com/doc/5390/lng/us/tpl/v5

Spybot - Search & Destroy detects and removes spyware, a relatively new kind of threat not yet covered by common anti-virus applications. Spyware silently tracks your surfing behaviour to create a marketing profile for you that is transmitted without your knowledge to the compilers and sold to advertising companies. If you see new toolbars in your Internet Explorer that you haven't intentionally installed, if your browser crashes inexplicably, or if your home page has been "hijacked" (or changed without your knowledge), your computer is most probably infected with spyware. Even if you don't see the symptoms, your computer may be infected, because more and more spyware is emerging. Spybot-S&D is free, so there's no harm giving it a try to see if something has invaded your computer.
http://www.safer-networking.org/

http://superantispyware.com/
SUPERAntiSpyware is the most thorough scanner on the market. Our Multi-Dimensional Scanning and Process Interrogation Technology will detect spyware that other products miss! SUPERAntiSpyware will remove ALL the Spyware, NOT just the easy ones!
Easily remove over 100,000 pests such as SmitFraud, Vundo, WinFixer, SpyAxe, SpyFalcon, WinAntiVirus, AntiVermins and thousands more!
Make sure after you download any of these, that you update them.

Answer 4

Remove MoviePass:
http://www.schrockinnovations.com/removemoviepass2.php

Answer 5

This badge stuff is unusual because of the fact I now have a badge in Biology, nonetheless it relatively is long gone this morning. I replied a gaggle of biology questions over the final week or 2, nonetheless until now that I doubt if I replied one hundred altogether. i think of we are all being handed over. I wrote to dispute a contravention observe before everything of the month and function no longer gained a respond so a methods. in spite of the undeniable fact that, it style of feels that somebody is taking an activity in my biology solutions. unusual. i desire we are able to shop up a correspondence over on the different place. i'm attempting to drag my dad (age seventy 9) and ultimate chum over there too. one extra element, it is going to be pronounced that it relatively is practically impossible to ask or answer something over in Snapping Turtle Pond (Politics) at the instant. plenty potential expended - for what?

Answer 6

Try some of these:

Spyware, Adware, Trojans, Malware, Dialers, Keyloggers, Popups:
http://www.download.com/Ad-Aware-SE-Personal-Edition/3003-8022_4-10399602.html?tag=tab_rev
http://www.ewido.net/en/download/
http://www.javacoolsoftware.com/spywareblaster.html
http://www.download.com/Bazooka-Adware-and-Spyware-Scanner/3000-8022-10247782.html
http://www.javacoolsoftware.com/sgdownload.html
http://www.safer-networking.org/
http://www.download.com/HijackThis/3000-8022_4-10379544.html
http://www.emsisoft.com/en/software/download/
Online Scanners:
http://www.webroot.com/consumer/products/spysweeper/freescan.html?
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://www.pandasoftware.com/products/activescan.htm
http://www.bitdefender.com/scan8/ie.html
http://www.windowsecurity.com/trojanscan/
http://www.kaspersky.com/virusscanner
http://www.spywareguide.com/onlinescan.php
http://housecall65.trendmicro.com/
Spyware, Adware, Trojans, Malware, Dialers, Keyloggers, Popups Lists:
http://www.softpedia.com/catList/104
http://www.download.com/Adware-Spyware-Removal/3150-8022_4-0.html?tag=dir
http://www.majorgeeks.com/downloads31.html
http://www.filehippo.com/software/antispyware/setarea
http://www.soft32.com/s/Windows/Security/AntiSpyware/3-9-0-0.html
Antivirus:
http://www.grisoft.com/
http://www.avast.com/
http://www.free-av.com/
Antivirus Lists:
http://www.softpedia.com/catList/1
http://www.download.com/Antivirus/3150-2239_4-0.html?tag=dir
http://www.majorgeeks.com/downloads29.html
http://www.filehippo.com/software/antivirus/
http://www.soft32.com/s/Windows/Security/Antivirus/3-1-0-0.html
Firewall:
http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp?dc=12bms&ctry=US&lang=en&lid=staticcomp_za
Firewall Lists:
http://www.softpedia.com/catList/97
http://www.download.com/Firewalls/3150-10435_4-0.html?tag=dir
http://www.majorgeeks.com/downloads34.html
http://www.filehippo.com/software/firewalls/
http://www.soft32.com/s/Windows/Security/Firewalls/3-5-0-0.html
IP Blocker:
http://prdownloads.sourceforge.net/peerguardian/pg2-050918-nt.exe?download
Browser:
http://www.mozilla.com/firefox/
Email, News, RSS:
http://www.mozilla.com/thunderbird/
System Cleaner:
http://www.ccleaner.com/
System Cleaning List:
http://www.softpedia.com/catList/98
http://www.majorgeeks.com/downloads12.html
http://www.filehippo.com/software/cleaning/
System Info:
http://www.softpedia.com/catList/92
http://www.majorgeeks.com/downloads9.html
http://www.soft32.com/s/Windows/System_Utilities/System_Tools/3-50-0-0.html

Answer 7

do what he said