Over 1 million tech questions and answers.

Virus Alert Message On Toolbar Clock

Q: Virus Alert Message On Toolbar Clock

I have a message next to the clock saying virus alert, and pop ups appearing for internet explorer regarding homepage changes. i have run smitfraudfix superantispyware and spyhunter (subsequently finding the dll's which apparently were causing issues) and removed them, however the system still runs slowly and the message on the clock is still there ? your help is very much appreciated!
(and also the original pop up which no longer appears was a worm.win32.netbooster warning which i have understood to be a fake warning to con people into buying adaware software?)

(os is windows xp sp3)

RELEVANCY SCORE 200
Preferred Solution: Virus Alert Message On Toolbar Clock

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Virus Alert Message On Toolbar Clock

Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.Make sure that everything is checked, and click Remove Selected.When removal is completed, a log report will open in Notepad.The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.Copy and paste the contents of that report in your next reply and exit MBAM.Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.

Read other 8 answers
RELEVANCY SCORE 98.4

I got a virus that changed registry switches, windows graphics, and disabled many functions- most of this has been fixed (I think), using AVG Anti-Virus and various other tools-

But now- there is still a "VIRUS ALERT!" message embedded in the toolbar clock at the bottom right, basically the clock is followed by a colon and the message- if I hide the clock, the message goes away with it- I ran Hijack this if that helps:

Please Help!?!?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:56: VIRUS ALERT!, on 5/26/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device

Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\syst... Read more

A:Removal of "VIRUS ALERT!" message embedded in toolbar clock???

Virus Alert in windows clock

I made a post (below) about this earlier- but I just realized that the Virus Alert is also embedded in the Date and Time Properties, in the Internet Time tab- next to the time as described below:::

Is there anyway to reinstall the clock and nothing else? I think it's harmless now- but very annoying-



(previous post)

I got a virus that changed registry switches, windows graphics, and disabled many functions- most of this has been fixed (I think), using AVG Anti-Virus and various other tools-

But now- there is still a "VIRUS ALERT!" message embedded in the toolbar clock at the bottom right, basically the clock is followed by a colon and the message- if I hide the clock, the message goes away with it- I ran Hijack this if that helps:

Please Help!?!?
------------------------------

Read other 2 answers
RELEVANCY SCORE 91.2

Hi i am new to this site and have gone through "Preparation Guide for use before posting a HijackThis Log "I have shortcut links to 3 items appearing on my desktop everytime "Malware Defender, Protect your privacy, System Error fixer". Also the word "VIRUS ALERT!" appears on toolbar next to clock on right side. My computer would switch off, but i have managed to get to the point where its not switching off. I have no access to control panel, my computer, my documents, etc and progam list from start button, i only have access to "set program access and defaults" and "conect to" from start button, everything seems to have disappeared. I have ran spybot, ad Aware, avg, stinger, sygate firwall etc, but every time i switch the computer on virus or malware turns up again. Spybot always detects and remover the follwoing: NNC.MGRS, Microsoft.Windows.Explorer, Microsoft.Windows.System, Microsoft.WindowsSecurityCentre.RegistryTools, Microsoft.WindowsSecurityCentre.TaskManager, and most of all Smitfraud-C.CHANGED MY NAME TO USERNAME IN LOGLogfile of Trend Micro HijackThis v2.0.2Scan saved at 20:50, on 20/10/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16735)Boot mode: Safe modeRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\... Read more

A:VIRUS ALERT! on toolbar with clock, Smitfraud-C.

Hi

I'm sorry it took so long to get a reply. Forums have been very busy

If you still need help with this post a fresh hjt log, please.

Read other 2 answers
RELEVANCY SCORE 90

Thought I had got rid of ushopper malware , but this pesky virus alert appears everywhere and has also meant that I have a popup saying I don't have genuine windows notfication etc. HELP! Have attached the log from HiJackthis

Logfile of HijackThis v1.99.1
Scan saved at 14:06: VIRUS ALERT!, on 27/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
C:\Program Files\Ranger Remote Control\client32.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\FolderSize\FolderSizeSvc.exe
C:\Program Files\Google\Update\1.1.25.0\GoogleUpdate.exe
C:\Program Files\Google\Common\G... Read more

A:VIRUS ALERT added to clock on desktop toolbar

Please close/disable all anti-virus and anti-malware programs so they do not interfere with the running of SDFix and make sure you are disconnected from the Internet after downloading the program but before extracting the files.
Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with SDFix and remove some of its embedded files which may cause "unpredictable results".
Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
Remember to re-enable the protection again afterwards before connecting to the Internet.
Download SDFix and save it to your Desktop.

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Please then reboot your computer in Safe Mode by doing the following :
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually
Instead of Windows loading as normal, the Advanced Options Menu should appear
Select the first option, to run Windows in Safe Mode, then press Enter
Choose your usual account.

Open the extracted SDFix folder and double click RunThis.bat to start the script.
Type Y to begin the cleanup process.
It will remove any Trojan Services and Registry Entri... Read more

Read other 2 answers
RELEVANCY SCORE 86.4

My computer has been infected with some pop-up message trojans or viruses. It has at least two visible problems: one is that the system clock now displays both the time and a message "VIRUS ALERT!" right after the time. The other problem is that various pop ups from both reputable and non reputable companies keep invading my IE. Last night a VIRUS ALERT! sign appeared on a message someone sent me on messenger, I have run AVG, ADAWARE, C Cleaner and SPYBOT in the safe mode but to no avail. The VIRUS ALERT! sign seems to be getting more virulent and invading more of my computer. Should I run a Hijack Log? Has anyone any idea! I really would be grateful.

A:Virus Alert! Message In Clock.

Moving to Am I Infected

Read other 18 answers
RELEVANCY SCORE 80.8

This persistent message attached itself to all my files using system clock display.
I cannot remember what Virus/trojan horse it was, but at the time of infection I was running the following:

Spybot resident, Zone Alarm, AVG virus protection.

I ran AD-Aware and it detected some Trojan Horses that were removed.
Unfortunately the "virus alert" display is still active.

A:"Virus Alert" display in toolbar clock

Update.

Finally got rid of nasty " virus alert" pop-up after after the 5 basic steps for virus/spyware removal procedure posted on this site.
Although I had to run and re-run them all about 4 times each to detect all malware.
I think my biggest mistake was failure to update my spyware software on a regular basis.
One question remains:
I have the latest editions of Zone Alarm Firewall with Spy Blocker( free edition), Avast Pro 4.8, Spybot S&D with resident, Spyware Blaster and Hijack This.
Seems my boot-up time slowed down somewhat.
Should I be running all these or could I unistall some?
One final comment:
Without this forum's help , my first thought was to reformat all hard drives and start new ... 2 weeks worth .
Kudos to you all for keeping this going.

Read other 1 answers
RELEVANCY SCORE 78.8

Hi,

This is my first post here, and my computer appears to be infected.

The Symptoms:
-- The desktop has "disappeared" and is replaced by a blank blue screen. The icons on the desktop are all gone.
-- There is no "bar" at the bottom: no start button, no task bar, no clock, no indications of open programs. i.e., the entire screen is blue.

-- However, the situation is different right after I start-up.
-- At first, I see all my programs. Sometimes I see the task bar and start button, clock, etc., sometimes not.
-- But something is wrong even then. The computer is slow. And I know desktop will not last long. Sometimes if I am quick I can double click on a desktop icon before the desktop disappears.
-- Sometimes there is a "transition" period. For a few seconds I'll see the desktop, then for a few it will go "all blue".
-- When it is "all blue", I can still get into programs. If I open up the task manager, I can click on the "New Task ..." button under the "Applications" tab.
-- I can still work with documents, but thinks are slow.
-- When I start in safe mode, I still have the problem of the missing desktop.

Other Signs:
-- When I can see the clock, it says "VIRUS ALERT!" followed by the time. My google searches inform me that this is a common symptom.

What I have done so far:
-- I've done the Norton "Quick Scan" -- found something the first time, and fixed i... Read more

A:Fake Anti-virus -- No Start Menu/task Bar/clock -- Or Has "virus Alert" At Clock

Welcome to BC no_more_virusIf you're using Windows 2000/XP, please print out and follow the instructions for using SDFix in BC's self-help tutorial "How to use SDFix". This program is for Windows 2000/XP ONLY.-- When using this tool, you must use the Administrator's account or an account with "Administrative rights"-- Disconnect from the Internet and temporarily disable your anti-virus and any anti-malware real time protection before performing a scan.When done, the SDFix report log will open in notepad and automatically be saved in the SDFix folder as Report.txt. Please copy and paste the contents of Report.txt in your next reply. Be sure to renable you anti-virus and and other security programs before connecting to the Internet.To fix the policy restrictions created by this infection, please open the SDFix folder or download XP_CodecRepair.inf and save it to your desktop. for Windows XP ONLY. Right-click on XP_CodecRepair.inf and select Install from the Context menu.Note: To download the .inf file, go to File, choose "Save page as" All Files and save XP_CodecRepair.inf to your desktop.Then log off or reboot to apply the changes.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on Download_mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has f... Read more

Read other 3 answers
RELEVANCY SCORE 68

I had a virus alert next to the clock in addition to numerous other problems. Saw the fix here with using Malwarebyte's Anti-Malware, installed the program and ran it. It found numerous problems and fixed them, however I still have some issues. My wallpaper is gone. It shows up after booting then just goes to white. Also, on booting I get the message "cannot find 'file:///c:/Windows/privacy_danger/index.htm' " The computer is running much better and it appears that the Malwarebyte's program fixed most things but not all. Any more suggestions? I ran the program twice and it did find another problem the second time. I did reboot. Should I try a complete scan? Here are the logs:

First time:Malwarebytes' Anti-Malware 1.26
Database version: 1126
Windows 5.1.2600 Service Pack 3

9/7/2008 8:43:44 PM
mbam-log-2008-09-07 (20-43-44).txt

Scan type: Quick Scan
Objects scanned: 49284
Time elapsed: 8 minute(s), 3 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 3
Registry Keys Infected: 15
Registry Values Infected: 29
Registry Data Items Infected: 13
Folders Infected: 1
Files Infected: 33

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
C:\WINDOWS\SYSTEM32\efcDwUKB.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\SYSTEM32\wregiimn.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\SYSTEM32\xwnldn.dll (Trojan.Vundo) -> Delete on reboot.
... Read more

A:Virus Alert Next To Clock

Please download ATF Cleaner by Atribune & save it to your desktop. alternate download link DO NOT use yet.Please download and install SUPERAntiSpyware FreeDouble-click SUPERAntiSypware.exe and use the default settings for installation.An icon will be created on your desktop. Double-click that icon to launch the program.If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here and unzip into the program's folder.)Under the "Configuration and Preferences", click the Preferences... button.Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.Click the "Scanning Control" tab, and under Scanner Options, make sure the following are checked (leave all others unchecked):Close browsers before scanning.Scan for tracking cookies.Terminate memory threats before quarantining.Click the "Close" button to leave the control center screen and exit the program.Do not run a scan just yet.Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow key... Read more

Read other 12 answers
RELEVANCY SCORE 68

Okay, I admit I was dl torrents and now Im in some trouble. I had my many virus protection programs running. As soon as I ran a recently dl program. All my vp programs went nuts! It stopped most of them but my search, control panel, run and my comp are missing. So, im in desperate need of some help. Thnx in advanced.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Diana\Application Data\inst.exe
C:\WINDOWS\erem.exe
C:\WINDOWS\SYSTEM32\fhiPoUvw.ini
C:\WINDOWS\SYSTEM32\fhiPoUvw.ini2
C:\WINDOWS\SYSTEM32\svevsbly.ini
C:\WINDOWS\system32\ylbsvevs.dll
.
---- Previous Run -------
.
C:\WINDOWS\gpefaowr.exe
C:\WINDOWS\system32\oeminfo.ini

.
((((((((((((((((((((((((( Files Created from 2008-06-14 to 2008-07-14 )))))))))))))))))))))))))))))))
.

2008-07-13 17:26 . 2008-07-13 17:26 116,864 --a------ C:\WINDOWS\SYSTEM32\mmmghb.dll
2008-07-13 17:26 . 2008-07-13 17:26 116,864 --a------ C:\WINDOWS\SYSTEM32\hjjcbnwq.dll
2008-07-11 11:27 . 2008-07-11 11:27 <DIR> d-------- C:\Program Files\Trend Micro
2008-07-11 09:46 . 2008-07-11 09:46 321,792 --a------ C:\WINDOWS\SYSTEM32\wvUoPihf.dll
2008-07-10 11:32 . 2008-07-10 11:32 <DIR> d-------- C:\Program Files\SymNetDrv
2008-07-10 00:34 . 2008-07-10 11:33 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2008-07-10 00:34 . 2008-07-11 09:46 <DIR> d-------- C:\Documents and Settings\All Users\Applicati... Read more

Read other answers
RELEVANCY SCORE 68

i let my friend on my computer while i was at work, came home computer is screwed up /sighControl Alt Delete Disabledfiles are hiddenClock has a VIRUS ALERT Beside itSafemode works.i ran these following programs in safemode.Malware Bytes - Anti MalwareAd-ware Personal - SpywareAd-ware 2008 AVG?? Cannot run for some reason.Search and DestroyA-squaredSDFixSmitfraudFixPlease help, thanks, Morth.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 04:52:59, on 7/12/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: Safe mode with network supportRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\SYSTEM32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware2008\aawservice.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Internet Explorer\iexplore.exeC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0ZR5LBX4\HiJackThis[1].exeR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - Default URLSearchHook is missingO2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)O2 - BHO: {c1e31e8c-a12e-d8a8-1eb4-bba4f8dc0e11} - {11e0cd8f-4abb-... Read more

A:Clock - Virus Alert? - Hj Log

Bump

Read other 4 answers
RELEVANCY SCORE 68

Hi,I was downloading a keygen the other day and I got a virus where it displays "Virus Alert" on the clock and it changed all the setting in my computer. I was able to resolve a lot of it. The only one that I have left is the wall paper setting. When I tried to change the wall paper setting. i got the following error... file:///C:/Windows/privacy_danger/indexi have posted the Hijackthis log below. hopefully, somebody could help...thanks....Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:18:10 PM, on 8/30/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16705)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exeC:\Program Files\Dell Network Assistant\hnm_svc.exeC:\Program Files\Common Files\LogiShrd&... Read more

A:Virus Alert On Clock

HiPlease visit this webpage for download links, and instructions for running ComboFix tool:http://www.bleepingcomputer.com/combofix/how-to-use-combofixPlease ensure you read this guide carefully and install the Recovery Console first.The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.Once installed, you should see a blue screen prompt that says:The Recovery Console was successfully installed.Please continue as follows:Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
Remember to re-enable them afterwards.

Click Yes to allow ComboFix to continue scanning for malware.When the tool is finished, it will produce a report for you. Please include the following reports for further review, and so we may continue cleansing the system:C:\ComboFix.txtNew HijackThis log.A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

Read other 2 answers
RELEVANCY SCORE 68

hi all...a past few days my comp. affected with XP antivirus 2008..i've scan with Malwarebytes' Anti-Malware.but now beside my clock still got "virus alert"..can anyone hel me to slove this problembelow is my HijackThis..tqLogfile of Trend Micro HijackThis v2.0.2Scan saved at 11:25: VIRUS ALERT!, on 7/21/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16674)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exec:\program files\common files\logitech\lvmvfm\LVPrcSrv.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\PC Tools Internet Security\pctsTray.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exeC:\Program Files\Creative\MediaSource\GO\CTCMSGo.exeC:\WINDOWS\system32\CTSvcCDA.EXEC:\Program Files\... Read more

A:Virus Alert Beside My Clock

HiFirst ... as you've run Malwarebytes' Anti-Malware ... please post the log THEN ...Download Deckard's System Scanner (formerly Comboscan) to your Desktop.Note: You must be logged onto an account with administrator privileges.1. Close all applications and windows. 2. Double-click on dss.exe to run it, and follow the prompts. 3. When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized 4. Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt in your next reply.5. Then do the same with extra.txtNote: you'll find extra.txt here :- C:\Deckard\System Scanner\extra.txtPlease remember to post both txt files ...Note: some firewalls may warn that sigcheck.exe is trying to access the internet - please ensure that you allow sigcheck.exe permission to do so.THEN ..Please run a Kaspersky Online Scan Please do an online scan with Kaspersky WebScanner Click on Kaspersky Online Scanner Click AcceptYou will be promted to install an ActiveX component from Kaspersky, Click Yes. The program will launch and then begin downloading the latest definition files: Once the files have been downloaded click on NEXT Now click on Scan Settings In the scan settings make sure that the following are selected: Scan using the following Anti-Virus database: Extended (if available otherwise Standard)
Scan Options: Scan Archives Scan Mail BasesClick OK Now under select a target to scan: Select My Co... Read more

Read other 2 answers
RELEVANCY SCORE 67.2

Good evening, eveyone.

I have a VIRUS ALERT! message next to my time clock which has been changed to military time. I ran symantec norton antivirus, windows defender and also spybot, none of which got rid of the message or changed my time clock back. When I go to my computer, I do not see any of my drives either. Please help me to fix this. I've been working on it for two days and I'm getting frustrated.

Thank you in advance.

Tweety

A:Virus Alert! Next To Time Clock

Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back at the main Scanner screen, click on the Show Results button to see a li... Read more

Read other 6 answers
RELEVANCY SCORE 67.2

Good afternoon.

I have an issue with my computer (obviously). My clock is now showing up with VIRUS ALERT! beside it. My homepage has also been hijacked to hxxp://pc-antispypro.com/?wmid=6010&mid=MjI6Mjo4OQ==&lndid=2

Please let me know if there is anything you can do to help me out, I have run a number of antispyware scans and have run my Norton a number of times and haven't been able to get rid of this so far, so I figured it was time to try to get some help before I spend many more hours and getting no where on my own.

This is the first time I've had to ask for assistance on this sort of issue, so please let me know if you require any further information.

A big thank you in advance for any assistance you can provide.

Here is the log file from RSIT:

Logfile of random's system information tool 1.04 (written by random/random)
Run by agordon at 2008-10-28 15:51:49
Microsoft Windows XP Professional Service Pack 3
System drive C: has 22 GB (29%) free of 74 GB
Total RAM: 1014 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:51:55, on 10/28/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Pr... Read more

A:Virus Alert beside clock / popups

Hello, and Welcome to TSF.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------
Download ComboFix from one of these locations:

Link 1
Link 2
Link 3

* IMPORTANT !!! Place combofix.exe on your Desktop
Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with ComboFix.
Double click on combofix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed.

Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.





The Windows recovery console will allow you to boot up into a special recovery mode that allows us to help you in the case that your computer has a problem after an attempted remov... Read more

Read other 11 answers
RELEVANCY SCORE 67.2

My computer was recently infected by a trojan (Trj\Downloader) but I believe that it has been deleted. Now, I'm trying to restore affected programs (including my Start Menu for which All Programs will not appear). My concern at the moment, though, is that my clock is consistantly in Military Time with the words "VIRUS ALERT!" after them. I found a similar thread on this website concerning this problem and followed the instructions given there (download a program called dss.exe, run the scan feature, and post the logs of the scan). Now I have no idea how to read the scan and was hoping someone here could help me out. I just need the time in Central Time (US) and the "VIRUS ALERT!" message to go away. Is this possible?

Main.txt

Deckard's System Scanner v20071014.68
Run by Tonya on 2008-07-13 21:26:35
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 2 Restore Point(s) --
2: 2008-07-14 02:26:40 UTC - RP2 - Deckard's System Scanner Restore Point
1: 2008-07-14 00:01:32 UTC - RP1 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.

Total Physical Memory: 504 MiB (512 MiB recommended).


-- HijackThis (run as Tonya.exe) -----------------------------------------------

Logfile of Trend Micro HijackT... Read more

Read other answers
RELEVANCY SCORE 67.2

Have VIRUS ALERT! on time clock tool bar and has been converted to military time. How to fix?

Results of scan:
Deckard's System Scanner v20071014.68
Run by Owner on 2008-07-12 09:34:04
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
35: 2008-07-12 13:34:10 UTC - RP323 - Deckard's System Scanner Restore Point
34: 2008-07-09 00:57:37 UTC - RP322 - System Checkpoint
33: 2008-07-06 03:48:13 UTC - RP321 - Installed AVG 8.0
32: 2008-07-06 03:47:24 UTC - RP320 - Removed AVG 8.0
31: 2008-07-05 20:36:32 UTC - RP319 - Avg8 Update


-- First Restore Point --
1: 2008-04-08 16:25:17 UTC - RP289 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-07-12 09:35:42
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-A... Read more

A:VIRUS ALERT! on time clock

Hello and welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please save this page to Notepad in order to assist you when carrying out the following instructions.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding.
Ensure that there aren't any opened browsers when you are carrying out the procedures below.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------


Quote:




C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\AIHEOGZP\dss[1].exe




Please note that tools are best Run from the Desktop. Easier to find and perform specialized functions which may be required.

Save to the Desktop and then Run f... Read more

Read other 1 answers
RELEVANCY SCORE 67.2

virus alert is in my task bar. the clock is reading in the 24 hour mode. I downloaded hijack this and have a file saved. I'm hoping for some helpMod Edit: Topic moved from Windows XP to more appropriate forum~ TMacK

A:Virus Alert Is In My Task Bar Next To The Clock

Hi uoi, and welcome to BleepingComputer.Please read this guide before going any further.

Read other 1 answers
RELEVANCY SCORE 67.2

I know you are prolly getting tired of this on but here it goes. I have the virus alert in the bar by the clock and some start menu items are missing or locked by admin,i am the admin. No control panel and IE is FUBAR. My whole system is EXTREAMLY slow . I keep getting alerts from SpyWare Dr. about Explorer.exe trying to write to the registery but Spyware Dr. stops it.

HJT log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:59: VIRUS ALERT!, on 7/18/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\CyberLink\PowerDVD8... Read more

A:Virus Alert in taskbar next to clock

Welcome to TSG
Before we start fixing anything you should print out these instructions or copy them to a NotePad file so they will be accessible. Some steps will require you to disconnect from the Internet or use Safe Mode and you will not have access to this page.

Download SDFix and save it to your desktop.
Double click SDFix.exe and it will extract the files to %systemdrive%
(this is the drive that contains the Windows Directory, typically C:\SDFix). DO NOT use it just yet.

Before we start with the fix, we need to fix the restrictions.
Navigate to the SDFix folder (usually C:\SDFix).
Right-Click on XP_CodecRepair.inf OR W2K_CodecRepair.inf depending on your Operating System.
XP for all versions of Windows XP and W2K for Windows 2000.
Click o Install
Your desktop may refresh a couple of times, don't be alarmed.
Please reboot into Safe Mode and follow the instructions below.

Reboot your computer in SAFE MODE" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup [but before the Windows icon appears] press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Open the SDFix folder and double click RunThis.bat to start the script.
Type Y to begin the cleanup process.
It will remove any Trojan Services or Registry Entries found then prompt you to press any key to Reboot.
Press any Key and it will rest... Read more

Read other 1 answers
RELEVANCY SCORE 67.2

I was infected by several trojans (including Smitfraud.C and Antivirus2008) yesterday, but managed to get rid of the worst of them with Spybot S&D, Onescan, Windows Defender, Ccleaner and SUPERAntiSpyware. The "VIRUS ALERT!" next to my Windows clock, however, can't seem to be removed. Also, I can't seem to access my C drive from My Computer. Would appreciate any/all assistance. Deckard's System Scanner v20071014.68Run by April Han on 2008-08-02 14:24:00Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point.-- Last 5 Restore Point(s) --79: 2008-08-02 06:24:10 UTC - RP419 - Deckard's System Scanner Restore Point78: 2008-08-02 02:51:28 UTC - RP418 - Cleaned registry with Windows Live OneCare safety scanner77: 2008-08-01 19:20:41 UTC - RP417 - Windows Defender Checkpoint76: 2008-08-01 18:11:37 UTC - RP416 - Installed SUPERAntiSpyware Free Edition75: 2008-08-01 17:59:29 UTC - RP415 - Windows Defender Checkpoint-- First Restore Point -- 1: 2008-08-01 03:12:48 UTC - RP341 - Software Distribution Service 3.0Backed up registry hives.Performed disk cleanup.-- HijackThis (run as April Han.exe) -------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 14:25: VIRUS ALERT!, on 8/2/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Interne... Read more

A:"virus Alert!" Next To Windows Clock

Hello Widowpoison and welcome to BleepingComputer,1. * Clean your Cache and Cookies in IE:Close all instances of Outlook Express and Internet Explorer Go to Control Panel > Internet Options > General tabUnder Browsing History, click Delete. Click Delete Files, Delete cookies and Delete historyClick Close below.* Clean your Cache and Cookies in Firefox (In case you also have Firefox installed):Go to Tools > Options.Click Privacy in the menu..Click the Clear now button below.. A new window will popup what to clear.Select all and click the Clear button again.Click OK to close the Options window* Clean other Temporary files + Recycle bin Go to start > run and type: cleanmgr and click ok. Let it scan your system for files to remove. Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked.Press OK to remove them.2. Please download Malwarebytes' Anti-Malware from Here or HereDoubleclick mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Quick Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is compl... Read more

Read other 6 answers
RELEVANCY SCORE 67.2

Hello.

A few days ago I accidentally downloaded some malware onto my computer. My computer had slowed to a crawl, I couldn't access my hard drive, I kept getting messages about viruses and spyware and the words "VIRUS ALERT!" appeared next to my clock.

After following some instructions I found on another thread, everything seemed to be back to normal. My computer is working at full speed, the pop-up messages have stopped and the "VIRUS ALERT!" message has disappeared.

But I still can't access my hard drive. Does this mean I'm still infected with something or do I need to sort something out in my computer settings?

I would be very grateful for any help with this.

A:VIRUS ALERT! next to clock: Aftermath

What exactly do you mean by "still can't access my hard drive"? Can you provide more information. How are you trying to access the hard drive? Do you get any error messages?

Read other 4 answers
RELEVANCY SCORE 67.2

Hi, I would appreciate any help with this..

i keep getting a popup that says :
“Windows Security Alert” warning:
windows has detected an internet attack attempt... somebody's trying to infect your pc with spyware or harmful viruses. run full system scan now to protect your pc from internet attacks, hijacking attempts and spyware! click here to download spyware remover for total protections

I have Mcafee on the system but now I cannot change registry, my start menu is messed up (no icons) etc...
Here is my hijackthis log:
--
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:22: VIRUS ALERT!, on 10/4/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Funk Software\Odyssey Client\odClientService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
C:\WINDOWS\system32\svchostBT.exe
C:\Program Files\CA\SharedComponents\CAM\bin\cam.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\FolderSize\FolderSizeSvc.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Netw... Read more

A:Solved: Virus Alert in clock

Thanks to the forum... this reply solved my problem.
http://forums.techguy.org/6175760-post2.html

--- here is the log from MalwareByte---
Malwarebytes' Anti-Malware 1.28
Database version: 1230
Windows 5.1.2600 Service Pack 2

10/5/2008 19:08:37
mbam-log-2008-10-05 (19-08-37).txt

Scan type: Quick Scan
Objects scanned: 56130
Time elapsed: 7 minute(s), 48 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 5
Registry Keys Infected: 21
Registry Values Infected: 5
Registry Data Items Infected: 18
Folders Infected: 0
Files Infected: 24

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
C:\WINDOWS\system32\geBTJyXR.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\sbajslyg.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\ljJCrPIC.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\neksolda.dll (Trojan.Zlob) -> Delete on reboot.
C:\WINDOWS\xgpsarbm.dll (Trojan.FakeAlert) -> Delete on reboot.

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{674855c3-b0b1-4413-9bb4-bfa6a9b5257b} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ljjcrpic (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{674855c3-b0b1-4413-9bb4-bfa6a9b5257b} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser H... Read more

Read other 1 answers
RELEVANCY SCORE 67.2

I was getting the virus alert in the clock area and was getting a lot of pop ups for virus scans. I read some of the forms and down loaded the Malwarebytes' Anti-Malware and ran some others as well. I was able to change the clock after getting the control panel and start menu back. I think I have everything taken care of but my firewall is turn off and I cant turn it on because of group Policy. I beleave that this can be cured buy the XP_CodecRepair.inf. You said that the link was taken away and I should start a new topic to resolve my problem. Thank you for all your help with this.

Read other answers
RELEVANCY SCORE 67.2

Hi, any help anyone can give me is greatly appreciated. I have this virus that changed my system clock to military time, won't let me bring up my computer and has put a VIRUS ALERT! next to the system clock. Again any help would be much appreciated. My hijack this logLogfile of Trend Micro HijackThis v2.0.2Scan saved at 17:32: VIRUS ALERT!, on 9/29/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16705)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exeC:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Comodo\CBOClean\BOCORE.exeC:\WINDOWS\system32\drivers\CDAC11BA.EXEC:\WINDOWS\system32\LxrJD31s.exeC:\Program Files\Network Associates\Common Framework\FrameworkService.exeC... Read more

A:Virus Alert Beside System Clock

Hi John05, Welcome to the forums!My name is Ken, on these forums I am known as ktreffin. I will be helping you with your current problem. I know that you need your computer working as quickly as possible, and I will work hard to help see that it happens. HiJackThis logs do take some time to review and research. I would appreciate it if while you are waiting, you could please do the following for me:Please make an Uninstall List using HiJackThis.To access the Uninstall Manager you would do the following:1. Start HijackThis 2. Click on the Config button 3. Click on the Misc Tools button 4. Click on the Open Uninstall Manager button. 5. Click on the Save list... button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. Simply copy and paste the contents of that notepad here in a reply.As we work together to resolve your problem, please read these instructions carefully. You may wish to print them off or copy them to Notepad.Lastly, please keep these points in mind:If you have questions, please DON'T hesitate to ask!The instructions I give are specific to your current problem and should not be used on other systems.Please post your replies only to this topic, and please DO NOT start a new thread.Since there may be multiple issues with your system, please continue to follow this thread until I have given you an "All Clean!"I am reviewing your log now, and will be back wi... Read more

Read other 4 answers
RELEVANCY SCORE 66.4
A:Solved: Virus Alert By System Clock

problem soved through another forum. thanks anyhows
 

Read other 1 answers
RELEVANCY SCORE 66.4

Hi,I've had an infection. I researched and performed the combofix/recovery tool programs and seem to be back to normal. Can you please check these logs and make sure there are no traces? Thank you in advance**EDIT**I also seem to not be able to establish an internet connection. I can do so with other laptops(the one I'm on) on the same wireless network, but cannot with the infected one, still.HIJACKTHIS LOG:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 14:55, on 8/4/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Norton AntiVirus\navapsvc.exeC:\WINDOWS\System32\MsPMSPSv.exeC:\Program Files\Common Files�... Read more

A:Virus Alert In System Tray By The Clock

I've ran everything I know of to run.

It says I am connected to my wireless router. But Firefox or IE won't connect to anything.

Any ideas. I'm desperate

Thanks

Read other 3 answers
RELEVANCY SCORE 66.4

i have SuperAntiSpyware, MalwareBytes, and Avira installed trying to remove the virus to no avail.they do not find anything.the PC that im running is an XP SP3 machine with AMD athlon 1800+ @ 1.53GHz , 256 MB DDR ramI also have an HJT log saved if neededDDS LOGDDS (Ver_09-12-01.01) - NTFSx86 Run by TomlinJ at 2:50:36.34 on Thu 03/04/2010Internet Explorer: 7.0.5730.11============== Running Processes ============================= Pseudo HJT Report ===============uStart Page = hxxp://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2uSearch Page = hxxp://websearch.drsnsrch.com/sidesearch.cgi?id=uWindow Title = Microsoft Internet Explorer provided by CompaquSearch Bar = hxxp://websearch.drsnsrch.com/sidesearch.cgi?id=uDefault_Page_URL = hxxp://start.earthlink.netuDefault_Search_URL = hxxp://www.earthlink.net/partner/more/msie/button/search.htmluSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7uSearchURL,(Default) = websearch.drsnsrch.com/q.cgi?q=mSearchAssistant = hxxp://www.google.com/ieuURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dllBHO: Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dllBHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\com... Read more

A:VIRUS ALERT! in system tray clock

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I will ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on Download_mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.The scan will begin and "Scan in progress" will show at the to... Read more

Read other 6 answers
RELEVANCY SCORE 66.4

Hi,

These are the symptoms.

VIRUS ALERT! next to the tool bar clock
Control Panel and other options missing from the Start Menu
A Bugs screensaver (desktop is now blue, if left for 10/15 mins, little bugs start crawling across the screen.
Popups staing Vundo
Updates will not complete (yellow shield on tool bar)

Deckards log below. I would attach extra, but dont seem to have it. Sorry

Deckard's System Scanner v20071014.68
Run by philip on 2008-06-06 15:29:11
Computer is in Normal Mode.
--------------------------------------------------------------------------------

Total Physical Memory: 511 MiB (512 MiB recommended).


-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-06-06 15:29:47
Platform: Windows XP Service Pack 3 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG8\avgwdsvc.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\Program Files\AVG\AVG8\avgemc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\WINDOWS\system32\spool\drive... Read more

A:Vundo & VIRUS ALERT! by tool bar clock

Hello and welcome to TSF

Can you post the extra.txt from Deckard System Scanner, in you reply.

==========

Please follow all instructions and in which order they come, if you have any questions, please ask before proceeding. Its important that you follow this through until i give you the all clear, a lack of symptoms does not mean that it is no longer present.

Please Do Not Attach logs to your posts unless you are advised to do so.

========

Please print out or copy this page to Notepad in order to assist you when carrying out the following instructions.

========

Download SDFix and save it to your Desktop.

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:SDFix)

Please then reboot your computer in Safe Mode by doing the following :Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, the Advanced Options Menu should appear;
Select the first option, to run Windows in Safe Mode, then press Enter.
Choose your usual account.
Open the extracted SDFix folder and double click RunThis.bat to start the script.
Type Y to begin the cleanup process.
It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
Press any Key and it will restart the PC.
When the PC restarts the Fixtool will run again and com... Read more

Read other 9 answers
RELEVANCY SCORE 65.6

Ugh, I hate Viruses. I knew when I clicked on this file it was a virus right away. At first it stripped my nice background image and gave this plain bluish backdrop and came up with virus warnings and many different virus scanner ads that wouldn't go away, they popup continuously. It took over my internet explorer and redirects it to download more viruses when it's opened. The system clock now says the time followed by "VIRUS ALERT!" in the lower right corner. I seem to have lost some icons, not sure what but there are definitely less on my screen now. Settings>Control Panel doesn't show up when you click on the start menu. I ran AVG and it found many different viruses and put them into the vault. Also ran Ad-Ware and stripped everything it found. Only thing left that I can think of is cleaning the registry but I need help in doing so. I'm not familiar with making adjustments to this critical file. Below I'm posting a copy from AVG and HijackThis.I'm having to use my business computer to surf the web for instructions on cleaning this garbage. I depend on this laptop for my wife?s online PhD courses any help would be greatly appreciated. How do we pay for your support? Donations? Box of flowers? Bow and kiss your toes? Give up my first son?DetailsThe laptop: HP Pavilion dv8000 Operating System: Windows XP Service Pack 2Ad-Ware Definitions File: 0117.000AVG Free version 8.0.169 Virus DB: 270.6.21/1669AVG scans over the last week or so: HijackThis information c... Read more

A:Virus Alert! In System Clock & Messed Up Registry

Hi,* Please visit this webpage for instructions for downloading and running ComboFix:http://www.bleepingcomputer.com/combofix/how-to-use-combofixThis includes installing the Windows XP Recovery Console in case you have not installed it yet.Post the log from ComboFix when you've accomplished that, along with a new HijackThis log.

Read other 10 answers
RELEVANCY SCORE 65.6

I first had problems when Virus Alert! appeared next to the clock in windows, icons to various supposed spyware removal tools appeared on the desktop and internet explorer's home page defaulted to another supposed spyware removal site. Alongside general system instability and crashes and no access to the C or D drives.

I ran various scans with AVG and superANTIspyware with the latter showing up trojans which were nominally removed. I edited the registry regarding the clock as per these instructions http://miekiemoes.blogspot.com/2008/...o-restore.html
although I did not adjust the system properties.
I also used the VArestorepolicies.inf file from the above blog to regain access to drives.

Assuming it was the Zlob Media Codec issue I used SmitfraudFix from:
http://vpcsolutions.blogspot.com/200...ownloader.html which has appeared to have made the system more stable but still not properly usable.

Here is the HijackThis logfile
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:58:18, on 19/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Pro... Read more

A:Partially resolved issues with Virus Alert! next to the clock.

Quote:




Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections.

If you think you have similar problems, please post a log in the HJT forum and wait for help.





Hello and welcome to the forums

My name is Katana and I will be helping you to remove any infection(s) that you may have.

Please observe these rules while we work:
1. If you don't know, stop and ask! Don't keep going on.
2. Please reply to this thread. Do not start a new topic.
3. Please continue to respond until I give you the "All Clear"
(Just because you can't see a problem doesn't mean it isn't there)

If you can do those three things, everything should go smoothly :D

Please Note, your security programs may give warnings for some of the tools I will ask you to use.
Be assured, any links I give are safe

----------------------------------------------------------------------------------------

I apologize for the delay in responding, but as you can probably see the forums are quite busy.
Unfortunately there are far more people needing help than there are helpers.

If you still require help please do the following
Download and Run RSITPlease download Random's System Information Tool by random/random from here and save it to your desktop.
Double click on RSIT.exe to run RSIT.
Click Continue at the disclaimer screen.
Once it has finished, two logs will open:log.tx... Read more

Read other 2 answers
RELEVANCY SCORE 65.6

Hello, I was referred to post my problem here with a HJT log. I clicked on a file that changed my background and changed my clock to military time and it said "VIRUS ALERT" next to it. I followed the directions given to me by one of the moderators in the "Am I infected" forum. The clock is back to normal and it does not say virus alert anymore. However when I try to boot in regular mode, it usually just freezes at the desktop screen. I have run Malwarebytes, Superspy Search and destroy, installed zone alarms firewall, and avg antivirus. The Malwarebytes results with the same 4-6 infected files everytime I scan now. I will post that log along with the HiJackThis log. I appreciate any help I can get.Malwarebytes' Anti-Malware 1.28Database version: 1227Windows 5.1.2600 Service Pack 210/5/2008 4:32:12 PMmbam-log-2008-10-05 (16-32-12).txtScan type: Quick ScanObjects scanned: 54066Time elapsed: 5 minute(s), 38 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 2Registry Values Infected: 0Registry Data Items Infected: 2Folders Infected: 0Files Infected: 2Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata (Trojan.Agent) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\tdss (Trojan.Agent) -> Quarantined and dele... Read more

A:Military Clock Virus Alert Trojan.agent

Hello, dd198608. to BleepingComputer.comMy name is Billy O'Neal and I will be helping you. (Billy or Bill is fine, if you like.)Please give me some time to look over your computer's log(s).Please take note of the following:In the meantime, please refrain from making any changes to your computer.Also, even if things appear to be running better, there is no guarantee that everything is finished. Please continue to check this forum post in order to ensure we get your system completely clean. We do not want to clean you part-way up, only to have the system re-infect itself. If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.Finally, please reply using the button in the lower left hand corner of your screen.One or more of the identified infections is a backdoor trojan.This allows hackers to remotely control your computer, steal critical system information and download and execute files.I would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.Though the trojan has been identified and can be killed, because of it's backdoo... Read more

Read other 10 answers
RELEVANCY SCORE 65.6

I have an infected computer which i am trying to clean, but I am not able to remove all of the viruses or reverse the corrupted settings. The Administrator account has no problems whatsoever, but the other users all have Virus Alert! next to the clock. Also, the Start menu does not have All Programs listed. And, when I press Ctr-Alt-Delete, I get a message that says the Administrator account removed premission to use the task manager. Here is my HiJack This log (main.txt)Deckard's System Scanner v20071014.68Run by Other user on 2008-06-23 16:09:39Computer is in Normal Mode.--------------------------------------------------------------------------------Total Physical Memory: 503 MiB (512 MiB recommended).-- HijackThis (run as Other user.exe) ------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:10:33 PM, on 6/23/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16674)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDevic... Read more

A:Virus Alert! Next To Clock, No All Programs Or Task Manager

Hello singlemp,

Welcome back to Bleeping Computer

Sorry about the delay. If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.

Thanks,
tea

Read other 2 answers
RELEVANCY SCORE 65.6

I have a virus alerts and security alerts popping up and a loss of administrative ability. I also have a virus alert message where the clock is. I cant access alot of functions because of this. I managed to get a HJT log off of it (its a laptop). I cant remove any programs and i dont want to connect to the internet for fear of the malware downloading more stuff. I am transfering everything (HJT logs,programs you tell me to) with a flashdrive till I get this resolved.Hope you can help. You guys havent failed me yet. Heres my log.



Logfile of HijackThis v1.99.1
Scan saved at 13:59: VIRUS ALERT!, on 7/3/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\svchost... Read more

A:Virus alert in clock area and no adminisrtaive ability

Hello and welcome to TSF

You are using an outdated version of Hijackthis. Please uninstall from Add/Remove programs, and delete your current version.

Next, download HijackThis to your desktop

Alternate link

Double-click on the file you just downloaded.
Click on the "Unzip" button to install. It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis

Upon install, HijackThis should open for you.

Should it not open, navigate to C:\Program Files\Trend Micro\HijackThis and double click on HijackThis.exe

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Do not post that log, instead, do this next:

============

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "... Read more

Read other 15 answers
RELEVANCY SCORE 65.6

Hi Forum, I'm new and have got a virus.
My taskbar has VIRUS ALERT! next to the clock, some stuff out of desktop and programs have disappeared.
Ran AdAware and Zonealarm, still not solved the problem, here is my HijackThis log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:58: VIRUS ALERT!, on 06/09/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\vsnpstd.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Netscape\Navigator 9\navigator.exe
C:\WINDOWS\system32\wscntfy.exe
C:... Read more

Read other answers
RELEVANCY SCORE 65.2

Hi, I went through all of the steps, except the only update that was avaiable was Service pack 3, I wasn't sure if I should download it based on your comment about service pack 2. So here's the deal. First, On start up we get two messages, one being the new hardware wizard saying it found an audio device on high definition audio bus, the second beign a Rundll error loading C:\Windows\system32\ydnaajaw.dll, the specifies moduile could not be found.
After that I checked to see if the sound works, it doesn't. I dont know if I should try to find the driver for it or if it is part of some virus. Finding the control panel was a chore because almost all of the start menu is missing, everything on the right side is gone. I dont even get an all programs button. Also the C and D drives in my computer are missing, I can still get to them using the C: command in Win Explorer but I dont know how to put them back in the My computer folder. My clock also says Virus Alert next to it. I think the last thing will be that the internet won't work after about twenty minutes of being on. Anyway, here is the HiJack This log, thank you for any help.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:46: VIRUS ALERT!, on 8/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.e... Read more

A:Clock Virus Alert and start menu missing options

Hi, welcome to tsf!

Please visit this webpage for download links, and instructions for running combofix:

http://www.bleepingcomputer.com/comb...o-use-combofix
Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should see a blue screen prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Click Yes to allow ComboFix to continue scanning for malware.
When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
C:\Qoobox\Add-remove programs.txt
New HijackThis log.

Read other 9 answers
RELEVANCY SCORE 65.2

... as well, when I hit 'ctr + alt + del,' a "Task Manager Disabled By Administrator" message shows up. The VIRUS ALERT! shows up beside each scan in the history of performed scans in AVG Anti-Virus as well.

This happened when I installed a cracked copy of TuneUp Utilities 2008. I shall definitely fully uninstall that when I have a start menu back, as I know you do not condone illegal activity. The folder it came in would not delete, but I used KillBox to get rid of it.

I know this is similar to a thread that was just solved, but reading through that one, mine seemed different enough to post my own thread instead of fumbling about on my own.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:27: VIRUS ALERT!, on 16/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18241)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.ex... Read more

Read other answers
RELEVANCY SCORE 64.4

Hi hope someone can help me i have a virus on my computer which shows Virus Alert on the toolbar next to my clock and it somehow Blocked Me from Going into task manager and from seeing my computer Drives like C and changed my Background to virus Alert when i saw it i did a scan and i found three trojans i Deleted them and i reset my Background and restarted my laptop then i could Gain Access to Task Manager and i can Gain access to C but Not the Normal way and it still showed Virus Alert Next to the clock so i did another scan and it found another three Trojans I just dont know how to get rid of them i have Kaspersky internet security 2009 and i have run HJthis this is my Log If it helps Thanks i hopen you can help me

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:25: VIRUS ALERT!, on 01/09/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Executive Software\DiskeeperLite\DKService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program... Read more

Read other answers
RELEVANCY SCORE 64.4

is there any way in which i can know whether a particular website contain virus or not?
I'm currently using Firefox 3.
thanks u so much in advance..

A:Is there any way in which i can get a virus alert in my toolbar?

Is this what you are looking for?McAfee SiteAdvisor is a free browser plug-in that warns you about risky websites sites that can't be trusted, gives safety advice and ratings about websites before you click on a possible risky site.WOT (Web of Trust) - WOT for Firefox is a free browser add-on that warns you about risky websites sites that can't be trusted and those which are trusted by the WOT Community Trust Network.Norton Safe Web allows you to look up websites and obtain a site rating. It is a very good resource for getting second opinions on sites which WOT or SiteAdvisor may indicate as risky.avast! WebRep provides a color-coded mark which rates the reputation of every site visited when using Internet Explorer or Firefox.AVG LinkScanner detects poisoned web pages by testing the destination of each URL link in real time and does not rely upon blacklists that can quickly become outdated.Note: SiteAdvisor, WOT and avast are essentially safe browsing tools which use a community of volunteer members who exchange knowledge of websites. They utilize a rating system to indicate overall safety based on trustworthiness, vendor reliability, privacy and child safety. While these tools are useful, they are not foolproof and sometimes may provide misleading ratings. Just because you visit a risky site does not automatically mean the site is bad or that your system has been infected by going there.

Read other 3 answers
RELEVANCY SCORE 64.4

Hi,I am running Windows XP Pro with AVG free and i downloaded a file that i that i thought was safe.it installed shortcuts to url's for privacy protectors and others. My Start bar is missing "all programs" and settings, search etc. next to files there is a clock and next to that is VIRUS ALERT! and i have a icon on the taskbar that says i have been infected and have to download a program. i ran security task manager and removed a couple infected Sys32 files that were reported "!Elderado" (dont know what it means) oh yeah and this is a screenshot.
 virus_alert.gif   251.37KB
  18 downloads Im running malware bytes now.EDIT: MALWARE BYTES LOGMalwarebytes' Anti-Malware 1.23Database version: 1008Windows 5.1.2600 Service Pack 212:35:23 AM 7/30/2008mbam-log-7-30-2008 (00-35-23).txtScan type: Quick ScanObjects scanned: 46395Time elapsed: 33 minute(s), 45 second(s)Memory Processes Infected: 0Memory Modules Infected: 3Registry Keys Infected: 50Registry Values Infected: 9Registry Data Items Infected: 16Folders Infected: 11Files Infected: 54Memory Processes Infected:(No malicious items detected)Memory Modules Infected:C:\WINDOWS\system32\rqRKEXqQ.dll (Trojan.Vundo) -> Delete on reboot.C:\WINDOWS\eqvwamkl.dll (Trojan.FakeAlert) -> Delete on reboot.C:\WINDOWS\wnslvxtf.dll (Trojan.FakeAlert) -> Delete on reboot.Registry Keys Infected:HKEY_CLASSES_ROOT\Interface\{e4e3e0f8-cd30... Read more

A:Task Manager Disabled, Virus Alert Next To Clock, And Rqrkexqq.dll Appeared!

The same thing happened to me. I got the use of my taskbar back thanks to Spybot Search and Destroy, but I still have the "virus alert!" next to my clock and my C drive doesn't show up under my computer. I also ran SUPERanti spyware and norton 360 and they picked up a few things. Did the virus create a administrator account? I can't seem to get rid of the new account either.

Read other 3 answers
RELEVANCY SCORE 64.4

Hello.
my computer was infected by my own stuipd fault and i cannot regain control. I have tried many things and i am having no luck... please help.... I am running Windows XP Pro. Service Pack2

This is what i see.
1st of all, i had a huge splash aross my desktop with a red background that said "this computer is infected, please download sypware cleaner to disinfect" my clock changed formats to Army time and says VIRUS ALERT next to it. When i start up the PC my desktop goes BLUE, then that RED screen shows up. When i click on MY COMPUTER i cannot see my C: drive or any of my CD/DVD drives. I get a message that windows cannot find folder names "privacy_danger".
all kinds of dos prompts pop up showing Windows32.dll (never seen that before)....

I've read other forums that sound like they have similar problems and i have followed their steps and remved alot of infections, but i still cant see my c:drive or cd/dvd drives, and my computer is soooooo slow now.....

I ran in safemode and offline, and did a SUPERantispyware clean up... it worked fine.
then i tried to do a Malwarebytes clean up in normal mode and on-line (as suggested); removed all items... it asked me to reboot my computer to remove the rest of the infections. i did that, and i still get all the same errors listed above.

I don't know what else to do..... i really don't want to wipe my PC and start over.

Please help!!!!

Thank you.

A:Computer Infected. Clock Changed To Army Time And Says Virus Alert Next To It....

Please print out and follow these instructions: "How to use SDFix". When using this tool, you must use the Administrator's account or an account with "Administrative rights"Disconnect from the Internet and temporarily disable your anti-virus, script blocking and any real time protection programs before performing a scan.When done, the SDFix report log will open in notepad and automatically be saved in the SDFix folder as Report.txt.If SDFix is unable to run after rebooting from Safe Mode, run SDFix in either Mode, and type F, then press Enter for it to finish the final stage and produce the report.The SDFix report log (Report.txt) will open in Notepad and automatically be saved in the SDFix folder.Please copy and paste the contents of Report.txt in your next reply.Be sure to re-enable you anti-virus and and other security programs before connecting to the Internet.Note: If the computer has been infected with the VirusAlert! malware warning from the clock and the Start Menu icons or drives are not visible, you will need to fix the policy restrictions created by this infection. Open the SDFix folder, right-click on either the XP_VirusAlert_Repair.inf or W2K VirusAlert_Repair.inf (depending on your version of Windows) and select Install from the Context menu. Then reboot to apply the changes.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on m... Read more

Read other 8 answers
RELEVANCY SCORE 64.4

clock is in militaryie: 20:39: virus alert!can't use task manager, tried regedit, says disabled by adminitrator. I am the administrator. Went through all of the stuff on the "new" page. it's better, but not 100%. Somehow got the following programs-error cleaner, privacy protector, spyware&malware protection. All programs does not show on my start menu and my hard drive does not show in "my computer". HELP!!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 20:36: VIRUS ALERT!, on 9/21/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16705)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\AOL\ACS\AOLAcsd.exeC:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exeC:\Program Files\McAfee\MBK\MBackMonitor.exeC:\PROGRA~1\McAfee\MSC\mcmscsvc.exec:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exec:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exeC:�... Read more

A:Can't Use Explorer-says Error And Must Close. Clock Says Time In Military And Virus Alert!

virus scan ran and found and quarantined the following trojansvundo, puper, generic.dx, ad clicker-fc, generic downloader.x, unwanted programs: generic pup.x (cannot be completely removed) and advanced cleaner (removed)This is the new logfile.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 06:15: VIRUS ALERT!, on 9/22/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16705)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\AOL\ACS\AOLAcsd.exeC:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exeC:\Program Files\McAfee\MBK\MBackMonitor.exeC:\PROGRA~1\McAfee\MSC\mcmscsvc.exec:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exec:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exeC:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exeC:\Program Files\McAfee\MPF\MPFSrv.exec:\PROGRA~1\mcafee.com\agent\mcagent.exeC:\WINDOWS\system32&... Read more

Read other 15 answers
RELEVANCY SCORE 63.6

Thanks in advance if anyone can help.

I'm running XP sp2 with all updates and Computer Associates Etrust Anti Virus 7.0. There is an Icon on the toolbar by the clock in the bottom right hand corner that says Virus Alert! It switches back and fourth between a red x and a fake Microsoft logo. It keeps downloading Contra Virus and putting it all over the computer. The contra virus is easy to get rid of using RougeRemover from http://www.malwarebytes.org/. Although the Virus Alert is still on the toolbar and it re-downloads contra virus advertisements after restarts. So far I have tried the Etrust scan, Kaspersky online scann, spybot s&d, and adaware s.e. kaspersky and etrust showed nothing. Can anyone please help get rid of this pest?

edit.....
I went into msconfig and found a file that runs at start up called xpuupdate. I googled that which turned out to be some sort of malware that downloads other malware. I did a search in xp and found the file for xpuupdate in the system 32 file. I deleted that file ran spybot again, and I restarted. So far it looks like everything is back to normal but I'm not entirely sure.
 

A:toolbar virus alert downloads contra virus

* Click here to download HJTsetup.exe.
Save HJTsetup.exe to your desktop.

Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
 

Read other 3 answers
RELEVANCY SCORE 63.6

Hi there,
I am running Windows XP SP2
I have constant bogus system and virus alerts along with VIRUS ALERT! displayed by the clock. In addition to this when I select the 'Start' button the options for 'All programs', 'My Computer', 'Control Panel', 'printers and faxes', 'help and support', 'search' and 'run' have all disappeared. The only ones left are 'Set program access and defaults' and a 'connect to'
I have worked through your steps 1 to 5 with the following results:

STEP 1
I have AVG free and McAfee Security centre running, I have tried to uninstall McAfee but when I try and uninstall it I get an error message saying that legacy items must be removed first. At this point I am unable to select the uninstall option so I have had to leave it running for now.
In accordance with your malware list I removed 'ShopperReports by Hotbar' and 'Viewpoint Media Player'. There was nothing on spyware warrior that I needed to remove.

STEP 2
I have downloaded Panda Active Scan but when I try to install it I get an error message at 100% requesting me to try again. I have tried numerous times, it won't install. Hence there is no Panda scan log.

STEP 3
I have downloaded Spyware blaster and ie-spyad. Whilst installing ie-spyad and having to browse to select the file I noticed that there was no 'C' drive displayed in 'my computer'

STEP 4
Up until these problems started I had always kept windows up to date. When checking the latest updates as per your link I get an error me... Read more

A:Constant bogus system alerts and VIRUS ALERT! displayed alongside the clock

Bump please

Read other 13 answers
RELEVANCY SCORE 63.6

My computer was crashing all day yesterday with a blue screen of death saying 'Page Fault In Nonpaged Area' yet I hadn't made any recent hardware changes. It was crashing every two hours or so, and I left it off all night. However when I booted it up this morning I found my clock saying Virus Alert, all the icons on my desktop were deleted and three are now there saying 'System Crash Fixer', among other things. Also the start menu is limited and you can't open anything from it. I tried running combofix which I already had and nothing happened, so I downloaded SDFix and tried running that, again nothing happened. I re-booted into safe mode and yet they would still not run. Hijackthis will not run either, and task manager won't open. Also if not in safe mode, explorer.exe will close about five minutes after starting the computer up, and since task manager doesn't work, there's no way to bring it back.

I fail to see how I can eradicate this virus if it's stopping me from running anything to get rid of it.

Please help.
 

A:Solved: Clock Says Virus Alert/Combofix & SDFix Won't Run/All Icons On Desktop Delete

Read other 16 answers
RELEVANCY SCORE 63.2

Hi, I have a blue circle with a ? in it that alternates to a red circle with a slash in it in my icon tray on the bottom right of my screen. Also, my homepage has been changed to //www.syssecuritysite.com/
on top of that, I have three new shortcut icons on my desktop, which I have already deleted.
ewido didn't find anything, and I don't see anything new in my startup menu through msconfig.
I did remove the program with the same icon through the controll panel, but it is still there.
The circle in the icon tray occasionally comes up with a red and gray screen that says "your computer is infected... click here.."

What is this, and how do I get rid of it, and why didn't ewido see it?

//Mod edit to modify URL above to protect others

A:Annoying Virus Alert Icon In Toolbar

Hello cplkittleLets try this. You should print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.Please download, install and update Ewido Anti-Spyware v4.0 if your using version 3.5. If you already have version 4.0, then just update the definitions for now. DO NOT perform a scan yet..Print out the Ewido Install and Scan Instructions. Go here and follow the instructions for using SmitfraudFix. Read "How to create/extract a ZIP File in Win ME/XP/2003" or "How to create/extract a ZIP File in Win 9x/2000" if your not sure how to do this.After using the tool reboot again in "SAFE MODE" and Clean out your Temporary Internet files as follows:Quit Internet Explorer and quit any instances of Windows Explorer.Click Start, click Control Panel, and then double-click Internet Options.On the General tab, click "Delete Files" under Temporary Internet Files.In the Delete Files dialog box, tick the "Delete all offline content check box", and then click "OK".On the General tab, click "Delete Cookies" under Temporary Internet Files, and then click "OK".Click on the Programs tab then click the Reset Web Settings button. Click "Apply" then "OK".Click "OK".Next Click Start, click Control Panel and then double-click Display. Click on the Desktop tab, then click the Custo... Read more

Read other 1 answers
RELEVANCY SCORE 63.2

including [email protected]...

need help getting rid of these, this is my hijack this log...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:53:57, on 24/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOW... Read more

A:security toolbar 7.1 and other virus alert popups

Please download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/proc...processutil.htm
 

Read other 1 answers
RELEVANCY SCORE 63.2

I have a problem with my laptop. My first evidence was that the wallpaper changed to a message about a Virus Alert. I have been a computer user and hobby programmer since the Apple II days so I recognized this right away as a problem. I soon realized that I had shortcuts on my desktop for Error Cleaner, Privacy Protector, and Spyware & Malware Protection also. I recognized these from a friend's description from a problem he had a year ago. I then noticed that where my traybar clock should indicate AM or PM the text VIRUS ALERT! was present. I didn't realize that text could even BE changed. I also started getting fake dialog boxes popping up warning me of a virus threat and wanting me to install the recommended software to fix it. I knew better than that so I closed those using Alt-F4 as much as I could. I also had Internet Explorer windows popping up and trying to load pages from a risking looking URL. I turned off my wireless adapter's antenna so I wouldn't be on the internet. Apparently the virus had started working on broadcasting before I noticed this because a little later my ISP called to let me know I had a virus and that he had shutdown my connection temporarily. I told him I knew and that I had disconnected the offending machine from the internet already. He wished me luck and told me he would turn my connection back on so I could use another computer to troubleshoot the problem. I downloaded AVG 8.0 and ran it twice. The first ... Read more

A:Virus Alert! Next To Clock. Error Cleaner, Privacy Protector On Desktop. Wallpaper Changed

Hello and welcome to Bleeping Computer.A bit more info is needed. The Operating system (XP,Vista etc..). You can download now correct?Please follow these instructionsin our tutorial,ask any questions needed. How to remove Privacy Protector or PrivacyProtector (Removal Instructions)Post a copy of the scan report in your next reply. The report can be found at the root of the system drive, usually at C:\rapport.txt Follow with this scan and log:Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on Download_mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan bu... Read more

Read other 15 answers