Spyware/possible virus

Hewlett-packard / A1324n
March 14, 2009 at 16:42:39
Specs: Windows XP, 1GB
Trying to fix a friends computer. Spybot showed 85 entries. I have removed them all except for three that won't see to go away...FRAUD.XPAntivirus, Microsoft WindowsSecurityCenter_disbales, and Win32.Winlagon.co. The Security Center may be okay as he has Norton installed.

In addition IE and Firefox crashe whenever it is started on a problem with a C++ library. Can someone hlp me clean try clean up the machine.


See More: Spyware/possible virus

Report •


#1
March 14, 2009 at 16:49:33
You want to be in the Virus forum, not here.

Who in their right mind would ever need more than 640K of RAM!?
Bill Gates, 1981


Report •

#2
March 14, 2009 at 18:33:17
Okay Thanks.

Report •

#3
March 14, 2009 at 19:05:20
It won't let me post in the other forum. It keeps telling me it is a duplicate post.

Report •

Related Solutions

#4
March 14, 2009 at 19:30:51
According to info I found, IF AND ONLY IF there is NO space between XP and Antivirus in FRAUD.XPAntivirus, SpyBot S&D should get rid of that, if it's been updated - has it?.

What location is SpyBot finding them in?

If they're ONLY in
C:\System Volume Information\_restore{...........

they're ONLY in the Sysytem Restore restore points - they cannot infect or re-infect the computer, unless you load the infected restore points yourself!.

ONLY if there are no symptoms anymore, turn off System Restore to get rid of them.

DO NOT turn off System Restore yet if there are still symptoms. You may NEED to load an un-infected restore point later.

Any malware found in the restore points cannot infect or re-infect the computer, unless you load the infected restore points yourself!.

..........

"In addition IE and Firefox crashe whenever it is started on a problem with a C++ library."

That probably has nothing to do with malware.

We need the EXACT error message.
If there any Details, quote that too.
.........

I find nothing when I search with:

Microsoft WindowsSecurityCenter_disbales
or
Microsoft WindowsSecurityCenter_disables
or
Win32.Winlagon.co

Quote the EXACT name - check you spelling -if it's got spaces or underlines or whatever between the words include them - if it doesn't do not!



Report •

#5
March 14, 2009 at 20:28:02
"he has Norton installed"

Dump that bloated piece of crap & replace it with something decent.


Report •


Ask Question