i think my computer has been affected by some trojan or malware thingy, how do i fix it??

Question

so here's the deal. i think i have a virus or malware or a trojan or something. i have a yellow triangle icon on my screen that keeps popping up with these system alert balloons and i know that it's a fake pop up. but i tried to look at the programs list and there was nothing there that looked out of the ordinary. i've had mcaffe scan it i don't know how many times. so does anyone know what to do?

Answer 1

reformat

Answer 2

Are you seeing this triangle icon on your task bar by your clock?
What is the alert balloon saying? It might not be a virus or anything. Your pc might need some attention. A program maybe out of date or something else. When something like this happens take screen shots so we can see what you're seeing.

Since your AV didn't turn up anything run ad-aware and see what happens. I think you're problem isn't with a virus. Takes some snap shots and repost.

Upload the images to imageshack and post the links here or contact me.

Answer 3

I suggest that you try to carryout system restore to a day previous to the day when there was no virus or any problems. It may be a few weeks or months back. You have to decide the date. Detailed instructions are posted at http://fixit.in/systemrestore.html
The problem is likely to be solved. Then,You insatll a standard antivirus soft ware such as Norton, AVG , Avast ( free antivirus software and Ad-aware, Ewido ( free spyware removers). You can download free softwares at
http://fixit.in/antivirus.html and http://fixit.in/spywareremover.html

Answer 4

Go to www.cnet.com.

Search and download Adaware. Update it and run it.

Also @ cnet download AVG 7.5 anti virus. Update it and run it.

Theses are free and work well. I have no problems with any kind of spyware. Update and run these once a week or so. You have to do this manually.

Geek recommended.

Try a free firewall too. I use Sygate also from cnet.

Answer 5

Update and run your Anti-Virus program. Don't have one? You can run a free online scan from Trendmicro. When I have tested it it takes some time to run it but it may be time well spent if it can fix any problems.

Download and run http://housecall.trendmicro.com/


Download, update and run Spybot---http://www.safer-networking.org/ . Don't forget to use the Immunize feature.

Download, update and run Adaware---http://www.lavasoftusa.com/software/adaware/products/select_your_product.php

Answer 6

There's a good list of free virus removal tools here, also has some good info on how to avoid stuff like this.http://www.basicspywaretips.com

Answer 7

Your best defense to remove VirusBuster, or any other spyware, is to quickly detect and delete VirusBuster processes, registry keys, DLL files, and other hazardous VirusBuster files from your computer. Click here to manually uninstall VirusBuster using "Add/Remove Programs" in your PC.


Remove VirusBuster Manually
Note: This manual removal process is difficult and you run the
risk of destroying your computer. I recommend that you use the automatic removal process. http://siri.urz.free.fr/Fix/SmitfraudFix_En.php

Remove VirusBuster processes:
virusburst.exe


Unregister VirusBuster DLL files:
eowygj.dll
httge.dll
gqagksr.dll
titiau.dll


Detect and Delete these VirusBuster files:
virusburst.exe
eowygj.dll
vb.ini
httge.dll
gqagksr.dll
titiau.dll
go to run search nd type the names u will find it then just simply delete and then restart... better u remove in safemodeok?
take care and good luck

Answer 8

It would have been a great help if you told us what the Yellow Triangle Malware thingy told you to do. There are many Trojans that put Yellow Triangle Malware Thingys on your computer and all are different.

Trojans are used to put adware on your computer. The programs listed in the steps below are the best available for removing Trojans and adware. Please follow the steps and use the programs for the best chance of removal. If these two programs do not remove it then go to one of the sites listed at the bottom and try them to remove it.

This procedure works for all Malware. Use any AntiVirus or AntiSpy program you choose.

Download and Update Ewido (now called the AVG Antispyware). Do not run:

http://www.ewido.net/en/download/...

Download AdAware SE and update. Do the setup. Do not run:

http://www.filehippo.com/download_ad-aware/

AdAware SE Setup:

1. Select "use custom scanning options" then select "customize". Make sure the following options are enabled: "scan within archives," "scan active processes," "scan registry," "deep scan registry," "scan my IE favorites for banned URLs," "scan my Hosts file."

2. Select the "tweak" option. Under "scanning engine," make sure "unload recognized processes and modules during scan" is enabled. Enable "scan registry for all users instead of current users."

3. Under "cleaning engine" turn on "always try to unload modules…," "during removal unload explorer and IE if necessary," "let windows remove files in use at next restart," and "delete quarantined items after restoring."

4. Use the "select drives and folders to scan" option to ensure that your entire hard drive is scanned (if you have more than one hard drive, scan all of them (of course, do not include floppy and CD/DVD).


TEMPORARILY SHOW HIDDEN FILES AND FOLDERS.

1. Click Start, and then click Control Panel.

2. Click Appearance and Themes, and then click Folder Options.

3. On the View tab, under Hidden files and folders, click "Show hidden files and folders", and clear(uncheck) the "Hide protected operating system files" check box.

IMPORTANT: Files are hidden by Windows for a very good reason. It is not wise to experiment with these files. Unfortunately, to successfully remove modern spyware we must turn this protection off temporarily. Please turn the protection back on when you have finished cleaning your system.


EMPTY INTERNET EXPLORER BROWSER CACHE:

1. On the Internet Explorer Tools menu, click Internet Options.

2. On the General tab, in the Temporary Internet Files section, click the Delete Files button. Select the Delete all offline content check box in the confirmation dialogue box that appears, click OK. Click OK again.

RESTART IN SAFE MODE:

To do this you need to hold down or repeatedly tap the F8 key while the computer is booting (when the computer is displaying a black screen with white text). When the boot menu appears, use your keyboard arrows to select "Safe Mode."

Safe Mode can look quite ugly. The color may look bad, and all of your desktop icons will be very large. This is normal.



START THE SCAN WITH YOUR ANTI-VIRUS OR ANTI-SPYWARE PROGRAM.


When the scan and removal are completed REBOOT COMPUTER. This will restart you in normal mode. DON'T FORGET TO RESET HIDDEN FILES AND FOLDERS.


NEW RESTORE POINT.

The RESTORE POINTS may be infected with the Malware and cannot be used.

HERE'S HOW:

1. Click Start, and then click Control Panel.

2. Click Performance and Maintenance, click System, and then click on the System Restore tab.

3. Select the Turn Off System Restore check box, click Apply, then restart your computer.

4. Return to the System Restore Tab and turn System Restore back on.


TO SET A NEW RESTORE POINT:

1. Click the Start button.

2. Point to Programs, then navigate to Accessories, then System Tools, then click System Restore.

3. Choose Create a restore point, and then click Next.

4. In the Restore point description box, type a name for your restore point, and then click Next.

5. Click OK.

NOTE: If you are using Windows XP Service Pack 2 (SP2) and are unable to access the Internet after removing Malware, there is a command that may fix the problem. It works by resetting the winsock catalogue. Click on Start, then Run and type CMD in the box. Click OK. Type "netsh winsock reset" (no quotes)into the DOS window that appears.


ADDITION INFORMATION ABOUT TROJANS:

There are Trojans that fall into the Smitfraud family. These require the use of a specialized program for removal. Here are two sites that specialize in removing these:

http://www.internetinspiration.co.uk/roguefix.htm

http://siri.urz.free.fr/Fix/SmitfraudFix_En.php\

If it tells you to get any of these Winfixer based programs (WinAntiSpyware(any version), WinAntiVirus, Blackworm, Amaena) do the following to remove it.

Please download Atribune's VundoFix.exe (version 4.2.71 [as of 21 April '06], or later), from

http://www.atribune.org/ccount/click.php?id=4

and save it to your desktop.

Double-click VundoFix.exe to run it.

Put a check next to Run VundoFix as a task.

You will receive a message saying vundofix will close and re-open in a minute or less. Click OK Note: If VundoFix does not reopen after a minute (or two), then you should skip-over the "Run as a task" step, and continue-on to the following steps to SCAN and REMOVE.

When VundoFix re-opens, click the Scan for Vundo button.

Once it's done scanning, click the Remove Vundo button.

You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.

When completed, it will prompt that it will shutdown your computer, click OK.

Turn your computer back on.

**************************************

If VundoFix fixed your problem, then help prevent a re-infection:

There is much speculation that a "hole" in some older versions of SUN's Java is being exploited by WinFixer. So you should upgrade to the latest version 1.6.0 at this safe download site:

http://www.filehippo.com/download_java_runtime/

Answer 9

Mcafee is not enough.Try other anti virus software like Avast!.

Answer 10

run adaware or spybot s&d...these are 2 very good spyware detectors, if they detect any they will get rid of them when you tell them to

Answer 11

spyware or a hijacker most likely
www.lavasoft.com
get adaware se personal
get update, reboot, and do full scan