My computer is infected, now opens to http://thesafetynotes.com?

Question

My computer now starts out at http://thesafetynotes.com. I receive a system alert message saying Security Alert: Networm-i.Virus@fp. This just started today, all by itself. My McAfee will not catch the problem. Any suggestions please?

Answer 1

Your computer is infected with a nasty trojan called Zlob. Zlob hijacks your homepage to one of many sites including thesafetynotes.com and then generates warning messages to try and get you to buy fake programs such as SpyCrush, SpyLock, SpyHeal, System Doctor, Dr. Antispy, Security Toolbar and others. Of course it is important to get rid of thesafetynotes.com, but it’s just as important to also remove the Zlob Trojan that implanted it there. In my experience, a program called SpyNoMore is your best bet for removing the Zlob trojan. By removing this trojan, you will also get rid of thesafetynotes.com and all the nastiness that came with it. Another symptom of Zlob Trojan is that it generates fake warning messages like:

System Alert
Critical System Error
System Performance monitor warning
Security Alert: NetWorm-i.Virus@fp
Security Warning: SpyBot@MXt trojan
W32.Myzor.FK@yf

http://www.spynomore.com/thesafetynotes-com.htm

http://www.spynomore.com/spycrush.htm

http://www.spynomore.com/trojan-zlob.htm

Answer 2

First on the top of this page click on tools then click on Internet options. Under the general tab you can change your home page.

Then do a live update with you anti virus program. It may not be called live update but you need to update your software and most anti virus programs will go onto the Internet and download the newest virus/worm/Trojan definitions.

After you do this you need to run a full scan of your computer.

Make sure you run the update program regularly so that this dosent happen again.

Good Luck

Answer 3

your system is completely infected with spyware and worms that McAfee didn't catch. Sounds like your McAfee subscription might not be up to date.

Go and download SuperAntiSpyware from www.superantispyware.com and it will find the hijack in the browser and the worms on the machine.

Answer 4

thesafetynotes.com is dangerous toolbar and comes from very dangerous trojan zlob. It hijack your homepage and
displays fake warning message to download the another fake spyware applications... If your computer is infected
by thesafetynotes.com hijacker then it is very dangerous for your computer.

http://thesafetynotes.com Symptoms:-

User's homepage is changed to thesafetynotes.com or to other unfamiliar websites. Warning messages such as "Virus Alert", "Your Computer is Infected", "Security Alert" Trojan-Spy.win32@mx or Spyware.Cyberlog-X infections are displayed.

I got all the information about this spyware from the below link and there you can also remove it by using the manual and automatic process..

http://www.pcontech.com/thesafetynotes.com-remove.htm

Answer 5

From their own page: http://spynomore.net/

Quote: http://spynomore.net/
---------------------------------------------------------------------------
Please note:
SpyNoMore offers a free spyware scan, but not free removal. SpyNoMore will scan your PC and report to you all findings, complete with details about any detected items. To disinfect your PC, you can purchase SpyNoMore for $29.95 (single license) or $39.95 (3 licenses). SpyNoMore is backed by a 90-day full money-back guarantee in case it is unable to clean your PC.
---------------------------------------------------------------------------
Do you think all these "people" who vote "ThePCguy" as the "best answer" and claim SpyNoMore worked, actually purchased it when there are free alternatives like SmitfraudFix that will remove Zlob/Smitfraud/Rogue Anti-Spyware applications for free???

SmitfraudFix links from reputable security sites:
http://siri.geekstogo.com/SmitfraudFix.php
http://www.bleepingcomputer.com/files/smitfraudfix.php

This is a scam to promote a product that by there own words does not clean infection until you pay for it. If they had confidence in their product they would offer a fully functional free version or a fully functional free trial like countless reputable anti-spyware companies do. I for one do not want to pay to find out if a product has earned my confidence. I only pay after I review a trial and find the product to have superior qualities.

With this in mind, "ThePCguy" http://sg.answers.yahoo.com/my/profile;_ylt=Ahoa._W5VOnUeZZ2DAdQYkIh4wt.?show=fdfd3c7fd188ea7b1ca2a3eae576f48baa currently has 411 answers with 202 of those being "best answers". I'm willing to bet that close to (if not all) 100% of them "best answers" came from recommending SpyNoMore, a product that does not clean until you pay. Once again, logic would dictate that we have a scam here. Reviewing his "best answers in his profile would further strengthen this theory. Running an advertising scam in yahoo answers is deceptive and only proves to me that SpyNoMore is not a company or product I would personally trust to protect my machine. Superior products make their reputation by offering free versions or free trials that not only detect, but also remove what they find.

Answer 6

You could try booting up in safe mode and running your virus scan that way. You also might want to look at your hosts file. C:\WINDOWS\system32
\drivers\etc\hosts

Make sure that you see this line exactly
127.0.0.1 localhost
Also, make sure that nothing is after this.

Answer 7

Try scanning with the following spyware removal programs:

http://www.lavasoft.nu/software/adaware/ad-aware_se_personal.php
http://www.safer-networking.org
http://www.microsoft.com/windowsdefender
http://www.merijn.org/programs.php