Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Virus/Malware from web link in e-mail - desktop.

Oct 5, 2008 3:29AM PDT

Hi this is posted on behalf of a friend who knows even less than I do about viruses and mal;ware.

She runs XP Pro on an HP pc. She has Panda antivirus software that is always kept up to date.
She clicked on a link in an e-mail without checking the sender. It purported to be a greetings card from a friend. Now her original desktop has disappeared and has been replaced by another desktop with a window warning "Your antivirus software is not up to date" Below that, it lists " Win32/Adware.Virtumonde" and "Win32/PrivacyRemover.M64". It has proven impossible to remove this window.There is no active program showing on the taskbar.
The display properties (right click on desktop) produce the usual options apart from the screensaver tab. That has completely disappeared. I can find no way to set a screensaver. It has also proven impossible to set any desktop without the above warning window superimposed on it.

All contributions gratefully received.

Dave

Discussion is locked

- Collapse -
Give this A Try
Oct 5, 2008 5:26AM PDT

Try scans with these two programs in the following order:

Download Malwarebytes' Anti-Malware from one of these locations:
http://www.besttechie.net/tools/mbam-setup.exe
http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html

Double Click mbam-setup.exe to install the application.

* Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select "Perform Quick Scan", then click Scan.
* The scan may take some time to finish,so please be patient.
* When the scan is complete, click OK, then Show Results to view the results.
* Make sure that everything is checked, and click Remove Selected.
* When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
* The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.

NOTE: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.

Download and scan with Super Anti-Spyware Free for Home Users. It is available here: http://www.superantispyware.com/
*Double-click SUPERAntiSypware.exe and use the default settings for installation.
* An icon will be created on your desktop. Double-click that icon to launch the program.
* If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download and unzip them from here.)
* Under "Configuration and Preferences", click the Preferences button.
* Click the Scanning Control tab.
* Under Scanner Options make sure the following are checked (leave all others unchecked):

Close browsers before scanning.
Scan for tracking cookies.
Terminate memory threats before quarantining.

* Click the "Close" button to leave the control center screen.
* Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
* On the left, make sure you check C:\Fixed Drive.
* On the right, under "Complete Scan", choose Perform Complete Scan.
* Click "Next" to start the scan. Please be patient while it scans your computer.
* After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
* Make sure everything has a checkmark next to it and click "Next".
* A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
* If asked if you want to reboot, click "Yes".

Let us know how things are running after that.

- Collapse -
Give this a try
Oct 9, 2008 12:29AM PDT

Hi Bugblatter.
Thanks very much for all of your assistance. I shall try it all as soon as I can. Although this is the first time I have needed help from cnet, I read all of the weekly emails a get and find that all of the info posted by other members to be of invaluable assistance in expanding my IT knowledge.

Dave

- Collapse -
SmitFraudFix
Oct 5, 2008 3:33PM PDT

1. Download SmitfraudFix (by S!Ri) to your Desktop (Win2k/WinXP only!).
http://siri.urz.free.fr/Fix/SmitfraudFix.zip
Extract all the files to your Destop. A folder named SmitfraudFix will be created on your Desktop.

How to extract (decompress) zipped or compressed files

- Collapse -
SitFraudFix
Oct 9, 2008 12:25AM PDT

Thanks very much for the info. I shall try it all as soon as I can. Although this is the first time I have needed help from cnet, I read all of the weekly emails a get and find that all of the info posted by other members to be of invaluable assistance in expanding my IT knowledge.

Dave