more computer virus help please??

Question

home page hijacked
the system alert shows: trojan-spy.win32@mx
type spyware/trojan
i have norton anti virus and spy sweeper and i have tried spybot but still no good.

Answer 1

If you check,you'll probably find that your problem is a file called pmsnrr.exe. A good sign is that, no matter what you do,on line or off, yhou keep getting messages that you have a trojan on your system,and all of those messages direct you to a website for SpyGuard, Malaware or both. Chances are that you were on a site where you were told that you needed to add an ActiveX add-on, and you said OK.

As far as I can tell, SpyGuard, Malaware etc. are the ones who put the trojan there in the first place,to force you to buy their ani-virus,anti-spyware sofware.

If you "google" the text, "pmsnrr" you'll be directed to all sorts of sites and blogs who can give you all sorts of sophisticated advice, which may work. The virus appears to be self-replicating and self-repairing, so deleting things related to it don't appear to work.

Here's what I did. (It took me a week to figure this out.) In add/remove programs in control panel, I removed any reference to internet alerts that did not have a reputable company name (some referring to SpyGuard, Malaware etc. and some not referring to any company name or product.) At leastone of them told me it could not delete the program because of a tie in to ActiveX, so I deleted ActiveX as well. (You can re-download it again from Microsoft when you're done.)

Then I rightclicked on the taskbar,went to Customize, and applied the command "always hide" to any unidentifed alert messages. (Don't worry.You can always go back and change these last commands later.)

Last (and this was my wife's idea, so I can take credit) I ran a search (Start-Search) for pmsnrr.exe. It turned up two references. The file itself, and a link to the file in C:\windows\prefetch. If I understand correctly, the second reference loads the file on startup. Right click on the file itself,and go to "Rename". Change the file name to whatever you want. I called mine shite.exe to express my frustration, but the new name is irrelevant. I did that 24 hours ago.I've booted up about ten times since then. So far (he said with his fingers crossed), the problem is gone.

Hope this works. I'm a sophisiticated user, but I'm no guru.

If it doesn't, "google" as aforesaid, and good luck.

Answer 2

Join the forums at http://www.bleepingcomputer.com

These guys are awesome and made my computer good as new with step-by-step instructions.

You will likely need to download a program called HijackThis which surveys your registry and makes a log file. Post the log file on the forum and they will know exactly what to do.

Answer 3

Go to www.download.com

Get all the spyware and virus removal tools you need.

Answer 4

i think the best antivirus is: avast home edition, its got allot of fetters like "p2p shield" "boot-scan" and it comes with a screen saver, so wen your pc go's to screen saver, it scans all your files!!
link:http://www.avast.com/eng/avast_4_home.html


hope this helps!! -kb-

Answer 5

visit http://www.vivayx.com/spyware.htm to have a spyware remover.

Answer 6

www.sygate.com you can download a free virus detector and remover.

Answer 7

try kaspersky