Help---2, persistent, pop up warnings.

[Pure]

They look rather official.

These two seem to have infected my machine, and pop up every few mins. they are not easily deleted, and demand that i go to certain websites. How do I root them out. I have Vista Home Premium, run on an HP Pavillion a1730n; 4600+ AMD Athlon 64x2, dual core processor. I have checked for spyware with other programs.:

===

This one in bright red.
"Security System Warning"

alert details:
File c:\windows\wml.exe

threat:
abebot

Possible spyware infection has been detected on your computer by Security System.

To remove detected thread you need to update you PC-Antispyware protection

Click here to vist PC-Antispyware website:

[http://antispyware-reviews.biz/?wmid=4663&pwebmid=R3n1c2Bg8A]

===
In blue:

System Integrity Scan Wizard

Warning: Your computer may have critical errors in Windows registry and file system!

The registry and file system errors lead to computer freezes...

Immediate system integrity scan...

To scan your computer for errors please click the "next" button.

[PC Cleaner: Welcome to the installer.]

 

[Kev H]

Google "msconfig" for your possible answer (this is assuming you have Win 2000 or later OS -- the utility comes with XP and can be downloaded for 2000). This Microsoft mini-program can actually shut down (prevents loading) certain programs that load up upon bootup so they stop bugging you (and in rare cases, this is the only way to get rid of the malware that just reinstalls itself). Regardless, it's a good idea to check every file under the tabs "Startup" and "Services" (again, googling the file names and deselecting those that are dubious). Good luck.

 

[Darkniciad]

If all else fails, go here.

http://forums.spywareinfo.com/

Will probably take a couple of days for one of them to get to your problem, but the forum has a long, solid track record of walking people through the removal of even the most persistant malware without resorting to the old wipe/reinstall last resort.

 

[DesertPirate]

Google for Startup.exe it does the same as msconfig but allows items to be deleted from the startup list, not just unchecked.
Also go to download.com and get Ad-Aware 2007 and Spybot Search & Destroy, install update and run them to clean out ther internal problem. I suspect smitfraud.c which is a pain to clean out. Might wnat to run AA and SB from safemode admin.

 

[jomar]

Google for Startup.exe it does the same as msconfig but allows items to be deleted from the startup list, not just unchecked.
Also go to download.com and get Ad-Aware 2007 and Spybot Search & Destroy, install update and run them to clean out ther internal problem. I suspect smitfraud.c which is a pain to clean out. Might wnat to run AA and SB from safemode admin.

I was giong to suggest that.

You could also google "abebot" and the name of the other threat. You should get to a link on specific steps on how to delete it (which may take you to msconfig and such).

 

[DesertPirate]

I was giong to suggest that.

You could also google "abebot" and the name of the other threat. You should get to a link on specific steps on how to delete it (which may take you to msconfig and such).

Fixed one of these on Tuesday

Also, if desktop background has changed, go to control panel/display/desktop and look at what is listed. Remove it and things should return to normal.

When techs unite to combat evil... thanks Jomar

 

[Pure]

thanks, people.

so far i've used msconfig to uncheck certain items with odd names like ldbhkcsw.exe.

that enabled me to locate those programs; they were files in the "program data" file of windows. including one named 'spybomb.'

lets see if the problem re emerges.

i installed 'spyware terminator.' hope that helps.

 

[DesertPirate]

thanks, people.

so far i've used msconfig to uncheck certain items with odd names like ldbhkcsw.exe.

that enabled me to locate those programs; they were files in the "program data" file of windows. including one named 'spybomb.'

lets see if the problem re emerges.

i installed 'spyware terminator.' hope that helps.

Go with Ad-Aware and Spybot they are as good as you can get and they are free
Been doing this for a living for 6 years now and I use these dailey.

 

[jomar]

Fixed one of these on Tuesday

Also, if desktop background has changed, go to control panel/display/desktop and look at what is listed. Remove it and things should return to normal.

When techs unite to combat evil... thanks Jomar

I'm a pseudo-tech. I'm not in the industry, but not afraid to poke around. I try to stay away from the registry, though.

 

[gauchecritic]

I'm not certain, so you'd best google to be sure but ldbhkcsw.exe looks like a notoriously difficult spy thingy. (just going by the csw part)

CWShredder from Trend micro is a small removal tool that is specific for a range of self-installing bots.

Suoerantispyware sounds like one of those con things but is actually an extremely useful search and destroyer.

 

[ms.read]

go to www dot techguy dot com and you can post your question there, they helped me get the 13 trojan horses of my pc. and its FREE!

 

[kendo1]

Superantispyware sounds like one of those con things but is actually an extremely useful search and destroyer.

Seconded. It's a great program, (I corrected the spelling) and as a Scotsman I appreciate that it is free.

A useful link :http://www.wilderssecurity.com/index.php?
You should find something there.

Scroll down to Ewido anti-spyware forum, it's pretty good.

 

[Zeb_Carter]

You should also install SpywareBlaster it will protect you from bad javascripts while surfing the web and such.

Once a week I run the following, all mentioned here...

Ad-Aware
CCleaner
SuperAntiSpyware
Spybot Search & Destroy

The only time I was infected the Spybot S&D was the only one that was able to remove it. Spybot also has a tool that shows you what programs run at startup time and let's you turn them off of delete them.