How do I stop this virus message?

Question

Here's what the message says:
System alert!
System has detected a number of active spyware applications that may impact the performance of your computer. Click the icon to get rid of unwanted spyware by downloading an up-to-date antispyware solution.

That little message keeps popping up in a small balloon at the bottom right corner of my screen every minute or so. The icon is a little white question mark inside a blue circle, the icon for help and support for windows. I already removed the spyware it's talking about with my antivirus but I'm still getting this balloon. If I try to right click the icon it just brings up a link to a program called spy locked. How can I make it go away??

Answer 1

How To Remove Spylocked (removal Instructions)
http://www.bleepingcomputer.com/forums/topic85376.html

If you do not have firefox get it now and use it instead of internet explorer so you dont get any more spyware http://securitynewsfromthenet.blogspot.com/

to remove the spyware run steps 1-2-3

1) If you have not already scanned your comp with spybot http://spywarekiller.hyperboards.com/index.php?action=view_topic&topic_id=4 do that now .Update it (Latest updates 21-3-2007) and then run it so it gets rid of all the spyware and trojans in safe mode

1b) Run AVG Anti-Spyware Free
http://spywarekiller.hyperboards.com/index.php?action=view_topic&topic_id=39&latest=1


2) Do an online virus scan to check and remove virus and spyware if you still have viruses on your computer. And let us know if the online virus scan still finds any virus or spyware .
http://spywarekiller.hyperboards.com/index.php?action=view_topic&topic_id=11

3) Get another anti virus program if your present anti virus program is not protecting you any longer
http://spywarekiller.hyperboards.com/index.php?action=view_topic&topic_id=12&latest=1

If you believe your computer has spyware, the FTC wants to know. File a complaint with the FTC.
https://rn.ftc.gov/pls/dod/wsolcq$.startup?Z_ORG_CODE=PU01

Answer 2

2

Answer 3

SpyLocked (Spy Locked) is a rogue program that is installed by a trojan called Zlob. Of course you need to remove SpyLocked, but more importantly, you need to ALSO remove the Zlob trojan that installed it. Zlob infects your computer and starts generating warning messages in hopes of scaring you into buying SpyLocked. Download SpyNoMore to scan your PC, it is very effective against the Zlob trojan and SpyLocked
http://www.spynomore.com/spylocked.htm

Answer 4

There are basically three types of Trojans that download this type of Adware. Since you do not say what useless Antispyware program it wants you to purchase I must give you the fix for all three types. Start with the first using ewido and AdAware, then the Smitfraud Trojan removal, then the Vundo Trojan removal.

Download and Update Ewido (now called the AVG Antispyware). Do not run:

http://www.ewido.net/en/download/

Download AdAware SE and update. Do the setup. Do not run:

http://www.filehippo.com/download_ad-aware/

AdAware SE Setup:

1. Select "use custom scanning options" then select "customize". Make sure the following options are enabled: "scan within archives," "scan active processes," "scan registry," "deep scan registry," "scan my IE favorites for banned URLs," "scan my Hosts file."

2. Select the "tweak" option. Under "scanning engine," make sure "unload recognized processes and modules during scan" is enabled. Enable "scan registry for all users instead of current users."

3. Under "cleaning engine" turn on "always try to unload modules…," "during removal unload explorer and IE if necessary," "let windows remove files in use at next restart," and "delete quarantined items after restoring."

4. Use the "select drives and folders to scan" option to ensure that your entire hard drive is scanned (if you have more than one hard drive, scan all of them (of course, do not include floppy and CD/DVD).


TEMPORARILY SHOW HIDDEN FILES AND FOLDERS.

1. Click Start, and then click Control Panel.

2. Click Appearance and Themes, and then click Folder Options.

3. On the View tab, under Hidden files and folders, click "Show hidden files and folders", and clear(uncheck) the "Hide protected operating system files" check box.

IMPORTANT: Files are hidden by Windows for a very good reason. It is not wise to experiment with these files. Unfortunately, to successfully remove modern spyware we must turn this protection off temporarily. Please turn the protection back on when you have finished cleaning your system.


EMPTY INTERNET EXPLORER BROWSER CACHE:

1. On the Internet Explorer Tools menu, click Internet Options.

2. On the General tab, in the Temporary Internet Files section, click the Delete Files button. Select the Delete all offline content check box in the confirmation dialogue box that appears, click OK. Click OK again.

RESTART IN SAFE MODE:

To do this you need to hold down or repeatedly tap the F8 key while the computer is booting (when the computer is displaying a black screen with white text). When the boot menu appears, use your keyboard arrows to select "Safe Mode."

Safe Mode can look quite ugly. The color may look bad, and all of your desktop icons will be very large. This is normal.



START THE SCAN WITH YOUR PROGRAM(S).



When the scan and removal are completed REBOOT COMPUTER. This will restart you in normal mode.

RESET HIDDEN FILES AND FOLDERS.

The RESTORE POINTS may be infected with the Malware and cannot be used. Delete the old one(s) and make a new one.

CLEAR OLD RESTORE POINT(S). HERE'S HOW:

1. Click Start, and then click Control Panel.

2. Click Performance and Maintenance, click System, and then click on the System Restore tab.

3. Select the Turn Off System Restore check box, click Apply, then restart your computer.

4. Return to the System Restore Tab and turn System Restore back on.


TO SET A NEW RESTORE POINT:

1. Click the Start button.

2. Point to Programs, then navigate to Accessories, then System Tools, then click System Restore.

3. Choose Create a restore point, and then click Next.

4. In the Restore point description box, type a name for your restore point, and then click Next.

5. Click OK.

NOTE: If you are using Windows XP Service Pack 2 (SP2) and are unable to access the Internet after removing Malware, there is a command that may fix the problem. It works by resetting the winsock catalogue. Click on Start, then Run and type CMD in the box. Click OK. Type "netsh winsock reset" (no quotes)into the DOS window that appears.




ADDITION INFORMATION ABOUT TROJANS:

There are Trojans that fall into the Smitfraud family. Smitfrauds are usually Homepage/Browser Hijackers. A Homepage Hijacker takes you to a website other than what you have set on your computer. A Browser Hijacker directs you to websites other than what you just selected. These require the use of a specialized program for removal. Here are two sites that specialize in removing these:

http://www.internetinspiration.co.uk/roguefix.htm

http://siri.urz.free.fr/Fix/SmitfraudFix_En.php



Another type of Trojan that requires a specialized removal program is Vundo Trojans.

The procedure should fix Vundo-based Winfixer(WinAntiSpyware, WinAntiVirus, Blackworm, Amaena)problems.

http://www.atribune.org/content/view/24/2/

Answer 5

THE OLNY WAY YOU CAN DO THAT IS TO TOTALLY WIPE THE SYSTEM AND DO A FRESH INSTALL AND THATS F DISKING AND REINSTALLING WINDOWS XP SYSTEM AND THAT WILL GIVE YOU A CHANCE TO PUT WHAT YOU WANT ONTHE SYSTEM AND SET IT UP THE WAY YOU WANT IT TO BE AND RUN THE WAY YOU WANT IT TO RUN AND I HOPE THIS HELPS OUT IF NOT PLEASE EMAIL ME AND I WILL HELP YOU FURTHER OK THANKS MY EMAIL IS [e-mail] THANKS.......