Over 1 million tech questions and answers.

uCleaner Malware / Error Cleaner, Privacy Protector, Spyware&Malware Icons

Q: uCleaner Malware / Error Cleaner, Privacy Protector, Spyware&Malware Icons

I have read several posts regarding Ucleaner and spyware. I am having similar problems:

-- There are three new icons on my desktop: (1) Error Cleaner (2) Privacy Protector (3) Spyware&Malware Protection. When mousing over these icons, the popup window indicates that they lead to "http://viruswebprotect.com/shandler/php?..."

-- I periodically get pop up icons that say "someone is trying to attack my computer" and there was a message that stated "Win32.netsky worm has infected my computer"

I have completed the five steps listed in the "before you post" thread. The only deviation from that is that I already have Windows XP SP2 installed. Any help would be much appreciated. Thanks.

RELEVANCY SCORE 200
Preferred Solution: uCleaner Malware / Error Cleaner, Privacy Protector, Spyware&Malware Icons

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: uCleaner Malware / Error Cleaner, Privacy Protector, Spyware&Malware Icons

Bump Bump Bump

Read other 1 answers
RELEVANCY SCORE 170.8

I get these error cleaner/privacy protector/spyware&malware protection icons whenever i reboot my computer..and if I delete them they just come back. I can't access my task manager either. It says "task manager has been disabled by administrator," but this is my computer at home.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:08:45 PM, on 5/1/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16640)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\savedump.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exeC:\PROGRA~1\McAfee\MSC\mcmscsvc.exec:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exeC:\PROGRA~1\McAfee\VIRUSS~1\mcods.exeC:\PROGRA~1\McAfee\MSC\mcpromgr.exec:\PROGRA~1\COMMON~1\... Read more

A:Error Cleaner/privacy Protector/spyware&malware Protection Icons

Hello Zachxy and welcome to BleepingComputer,1. * Clean your Cache and Cookies in IE:Close all instances of Outlook Express and Internet Explorer Go to Control Panel > Internet Options > General tabUnder Browsing History, click Delete. Click Delete Files, Delete cookies and Delete historyClick Close below.* Clean your Cache and Cookies in Firefox (In case you also have Firefox installed):Go to Tools > Options.Click Privacy in the menu..Click the Clear now button below.. A new window will popup what to clear.Select all and click the Clear button again.Click OK to close the Options window* Clean other Temporary files + Recycle bin Go to start > run and type: cleanmgr and click ok. Let it scan your system for files to remove. Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked.Press OK to remove them.2. Please download Malwarebytes' Anti-Malware from Here or HereDoubleclick mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Quick Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed,... Read more

Read other 9 answers
RELEVANCY SCORE 167.2

I got this a couple of days ago and noticed that a couple of people also had this problem and were able to resolve it with your help. These desktop icons keep appearing no matter how many times I delete them and there are several annoying pop ups that have just made my computer experience these past days dull. I got the same exact problem with these two threads http://www.bleepingcomputer.com/forums/t/106853/malware-privacy-protector-error-cleaner-and-spyware-malware-protection/ and http://www.bleepingcomputer.com/forums/t/105116/privacy-protector-error-cleaner-spyware-malware-protection/ and im wondering wether or not to risk following the steps written on those threads or not since I have completley diffrent Anti virus software from them. I got both Kaspersky Anti-Virus and Spyware doctor. Can Anyone help me with this problem? Id really appreciate anyone who is willing to lend a hand, but im not quiet the computer expert and dont have the software mentioned in the other two threads like HijackThis and the other stuff so if you would also link the site to download it that would be great thanks.

A:Maleware, Error Cleaner, Privacy Protector, Spyware&malware Protection Desktop Icons

Hello BaderThanBad and welcome to BC My name is SNOWHITE and I will be helping you with your Malware problem.Please download Deckard's System Scanner (DSS) and save it to your Desktop.Close all other windows before proceeding. Double-click on dss.exe and follow the prompts.When it has finished, dss will open two Notepads main.txt and extra.txt -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply. Note: If you don't have HijackThis installed on your computer, dss will prompt you to download and install it for you, please allow this to happen !Regards,

Read other 8 answers
RELEVANCY SCORE 159.2

Privacy Protector, Error Cleaner and Spyware&Malware protection, it pops up a message saying my computer is infected and keeps opening internet windows even when i change the homepage away from the site it wants to go to. it is really slowing my laptop down, and when u attemp to close the pop ups or delete the desktop icons, it frezzes the laptop and the only way to resolve it is to restart but it just comes back no matter what, norton will not pick it up either. it is causing my laptop start up and loading time to be epic and is making it unusable, this topic has been fixed before by RichieUK on: http://www.bleepingcomputer.com/forums/t/105116/privacy-protector-error-cleaner-spyware-malware-protection/ i have the exact same thing. should i just follow those steps or wait for specific advice for my system? Logfile of Trend Micro HijackThis v2.0.2Scan saved at 00:00:05, on 03/09/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\S... Read more

A:Malware, Privacy Protector, Error Cleaner And Spyware&malware Protection

Hello,* Download Combofix to your desktop.Doubleclick combofix.exeFollow the prompts.Don't click on the window while the fix is running, because that will cause your system to hang.When finished and after reboot (in case it asks to reboot), combofix will open again to gather the necessary information for the log. This may take a bit. When done, Combofix will close and a log should open, combofix.txt. Post the contents of this log in your next reply together with a new hijackthislog.Do NOT post the ComboFix-quarantined-files.txt - unless I ask you to.

Read other 27 answers
RELEVANCY SCORE 158.8

This showed up when i started up my computer last night (I'm running XP). My desktop background changed to red with biohazard type logo, windows keep popping up trying to sell me protection, etc. when it first showed up some of my desktop icons dispeared and i couldn't get into my c drive, but that seems to have stopped for the moment.I've run my Kasperskys Antivirus, which says it can't delete it, disinfects it, but doesn't seem to change anything.I've also used System Mechanic 5, Spybot Search and Destroy, Smitfraudfix (i saw this suggested to someone else veiwing another forum- and it seems to work and everything looks good for 5 minutes, but then low and behold it comes right back) plus RegClean, RegistryFix, Tracks Eraser Pro, BugDoctor- to try and clean stuff out- some things seem to get rid of it, but then it returns. I've been looking it up on google to see what other people did, and trying these things, but obviously this strategy hasn't worked. its just given me a headache.I'm out of my depth. I really need help! Thankyou in advance for your wisdom.Here are my dss reports:Deckard's System Scanner v20071014.68Run by Aqua Dragon on 2008-06-08 11:54:45Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point.-- Last 5 Restore Point(s) --5: 2008-06-08 15:54:53 UTC - RP230 - Deck... Read more

A:I Have An Error Cleaner, Privacy Protector, Spyware And Malware Protection Problem (virus? Malware? Trojan?)

Hi,Please uninstall the following programs since they are known to cause more damage than anything else:RegistryFix v6.2Bug Doctor 3.0.3.8Reboot afterwards.After reboot, * Please visit this webpage for instructions for downloading and running ComboFix:http://www.bleepingcomputer.com/combofix/how-to-use-combofixThis includes installing the Windows XP Recovery Console in case you have not installed it yet.Post the log from ComboFix when you've accomplished that, along with a new HijackThis log.

Read other 2 answers
RELEVANCY SCORE 158.4

These programs embedded itself into my system. It changes my desktop and keeps poping up with warnings and websites. It is called Privacy Protector, Error Cleaner and Spyware&Malware protection. I have tried to fix this but have had no luck.

Thanks!
 

A:Error Cleaner, Privacy Protector, & Spyware/Malware Protector -hijackthis included

Read other 11 answers
RELEVANCY SCORE 158.4

These programs embedded itself into my system. It changes my desktop and keeps poping up with warnings and websites. It is called Privacy Protector, Error Cleaner and Spyware&Malware protection. I have tried to fix this but have had no luck. I have ran Kaspersky, Ad-aware, but nothing has worked. Please get this virus out of my computer. Any help you can give would be appreciated!!

A:Error Cleaner, Privacy Protector, & Spyware/Malware Protector hijacking my conputer

Hello and welcome to TSF

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.
What DSS will do: create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

========================
Logs Required
C:\Deckard\System Scanner\main.txt
C:\Deckard\System Scanner\extra.txt<---Attached

Read other 18 answers
RELEVANCY SCORE 158.4

These programs embedded itself into my system. It changes my desktop and keeps popping up with warnings and websites. It is called Privacy Protector, Error Cleaner and Spyware&Malware protection. I have tried to fix this but have had no luck. I have the Shield Anti-Virus and Uni-Blue Spy eraser but they didn't help. Please help me !!!

A:Error Cleaner, Privacy Protector, & Spyware/Malware Protector hijacking my conputer

PLease help soon!!!

Read other 8 answers
RELEVANCY SCORE 157.6

The three spyware things I have listed above managed to attach them to my pc, getting past norton 2007. I tried everything to get rid without success. I downloaded spybot but that didnt get rid of it. Then this morning I decided to have another go. Spybot box came up saying important registry change had occurred and did I want to allow it. In desperation I agreed. The three spyware icons disappeared and pc seems to be working alright. Am I clear - how do I find out?

A:Error Cleaner Privacy Protector Spyware Malware Protector

Hello jimisis and welcome to the BleepingComputer forums.Please download SmitfraudFix (by S!Ri)Extract the content (a folder named SmitfraudFix) to your Desktop.Open the SmitfraudFix folder and double-click smitfraudfix.cmdSelect option #1 - Search by typing 1, and press Enter. A text file will appear, which lists infected files (if present).Please copy/paste the content of that report into your next reply.

Read other 6 answers
RELEVANCY SCORE 153.6

Hi Guys,In advance i would like to say thanks for your time with this little problem. A friends PC as been infacted with Malware viruses, Keyloggers and olther nasty bugs. I have managed to remove most of the affending items, less the Privacy Protector & error cleaner plus i'm sure there are a few more lurking on the system. They seem to hijack the active desktop, redirect his webpages and download and install system_defender installer which auto runs. There is also a VIRUS ALERT label in the Task Bar area, which also displayes it's shelf on all system mesg boxes.Below are the Kaspersky Log & DSS log.RegardsPaulKASPERSKY ONLINE SCANNER REPORT Tuesday, June 03, 2008 11:45:45 PMOperating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)Kaspersky Online Scanner version: 5.0.98.0Kaspersky Anti-Virus database last update: 3/06/2008Kaspersky Anti-Virus database records: 826461 Scan Settings Scan using the following antivirus database extended Scan Archives true Scan Mail Bases true Scan Target My Computer A:\C:\D:\ Scan Statistics Total number of scanned objects 60330 Number of viruses found 8 Number of infected objects 35 Number of suspicious objects 0 Duration of the scan process 00:47:44 Infected Object Name Virus Name Last Action C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All User... Read more

A:Privacy Protector?, Error Cleaner, Spyware&malware,

Hello chics and welcome to BC. Let's see what we can find. Please follow the steps below in order:Before running a new scan let's clean out the temporary folders. Download ATF Cleaner to your Desktop.Double-click ATF-Cleaner.exe to run the program.Click Select All found at the bottom of the list.Click the Empty Selected button.If you use Firefox browser, do this also:Click Firefox at the top and choose Select All from the list.Click the Empty Selected button.NOTE : If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browser, do this also:Click Opera at the top and choose Select All from the list.Close ALL Internet browsers (very important).Click the Empty Selected button.NOTE : If you would like to keep your saved passwords, please click No at the prompt.Click Exit on the Main menu to close the program.Now download OTScanIt.exe to your Desktop and double-click on it to extract the files. It will create a folder named OTScanIt on your desktop.Note: You must be logged on to the system with an account that has Administrator privileges to run this program.Close ALL OTHER PROGRAMS.Open the OTScanIt folder and double-click on OTScanIt.exe to start the program (if you are running on Vista then right-click the program and choose Run as Administrator).
In the Drivers section click on Non-Microsoft.Under Additional Scans click the checkboxes in front of the following items to select them:Reg - BotCheck
Reg - Software Policy Settings
Fi... Read more

Read other 8 answers
RELEVANCY SCORE 153.6

i cant get rid of these programs; Error Cleaner, Privacy Protector,and Spyware&Malware Protection. I also keep getting these messages. Can somebody please help me.
this is my hjt log file.
any help would be great

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:46:54, on 30/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Fi... Read more

A:Error Cleaner, Privacy Protector,and Spyware&Malware

Hi Welcome to TSG!!

Please close/disable all anti-virus and anti-malware programs so they do not interfere with the running of ComboFix and make sure you are disconnected from the Internet after downloading the program and before scanning.
Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix and remove some of its embedded files which may cause "unpredictable results".
Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
Remember to re-enable the protection again afterwards before connecting to the Internet.

Download ComboFix and save it to your desktop.

**Note: In the event you already have ComboFix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**

Close any open browsers and make sure you are disconnected from the net. Unplug the cable if need be before running ComboFix.

WARNING: IF you have not already done so ComboFix will disconnect your machine from the Internet when it starts.
Please do not re-connect your machine back to the Internet until ComboFix has completely finished.
If there is no Internet connection when Combofix has completely finished then restart your computer to restore the connection.

Double-click on combofix.exe and follow the prompts... Read more

Read other 3 answers
RELEVANCY SCORE 152

This program embedded itself into my system. It changes my desktop and keeps poping up with warnings and websites. It is called Privacy Protector, Error Cleaner and Spyware&Malware protection. I have tried to fix this but have had no luck. I have ran norton, stinger,AVG, spybot, etc. but nothing has worked. Please get this virus out of my computer. Any help you can give would be appreciated!! Below is my hiJack this log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 8:22:16 PM, on 8/21/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\Program Files\Common Files&... Read more

A:Privacy Protector, Error Cleaner, Spyware&malware Protection

anyone can help...please!!

Read other 13 answers
RELEVANCY SCORE 152

Hi,

Some malware is embedded in my computer. It has messed with my ability to access my drives and has put phony shortcuts on my desktop called "Privacy Protector", "Error Cleaner", and "Spyware&Malware Protection". I also keep getting false windows security alerts saying "Windows has detected an internet attack attempt... Somebody's trying to infect your PC with spyware or harmful viruses. Run full system scan now . . ." and "Spyware Alert - Security Warning! Worm.Win32.NetBooster detected on your machine. This virus is distributed via the Internet through e-mail and Active-X objects. The worm has its own SMTP engine which means it gathers e-mails . . .". It has also taken over my Internet Explorer and keeps trying to open the site virus-webscanner.com/2008/2/freescan.php. I tried to perform the 5 Step Process recommended by your forum but Panda ActiveScan keeps giving me an error and saying try back later. I also cannot update Windows, as my Internet Explorer keeps giving false messages and errors when I try to download Windows updates.

Would greatly appreciate your help.

A:Privacy Protector, Error Cleaner, and Spyware&Malware Protection

BUMP, please

Read other 2 answers
RELEVANCY SCORE 152

Deckard's System Scanner v20071014.68Run by Alex on 2007-10-22 22:12:30Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point.-- Last 2 Restore Point(s) --2: 2007-10-23 02:15:13 UTC - RP2 - Deckard's System Scanner Restore Point1: 2007-10-22 23:55:44 UTC - RP1 - System CheckpointBacked up registry hives.Performed disk cleanup.Total Physical Memory: 510 MiB (512 MiB recommended).-- HijackThis (run as Alex.exe) ------------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:18:09 PM, on 10/22/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Symantec AntiVirus\DefWatch.exeC:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exeC:\... Read more

A:Error Cleaner, Privacy Protector, Spyware And Malware Protection

Welcome to the BleepingComputer HijackThis Logs and Analysis forum tchopple11 My name is Richie and i'll be helping you to fix your problems.Viewpoint Manager is considered as foistware instead of malware since it is installed without users approval but doesn't spy or do anything "bad". This changed in 2006,read this article: http://www.clickz.com/news/article.php/3561546You are well advised to remove the program now. Go to Start > Settings > Control Panel > Add/Remove Programs and remove the following programs if present,then restart your pc:ViewpointViewpoint ManagerViewpoint Media PlayerGo to Start > Settings > Control Panel > Add/Remove Programs and remove the following program if present,then restart your pc:MyWaySADownload SDFix.exe and save it to your desktop:http://downloads.andymanchesta.com/RemovalTools/SDFix.exe* Double click on SDFix on your desktop,and install the fix to C:\ Please then reboot your computer into Safe Mode by doing the following:* Restart your computer* After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;* Instead of Windows loading as normal, a menu with options should appear;* Select the first option, to run Windows in Safe Mode, then press "Enter".* Choose your usual account.* In Safe Mode,go to and open the C:\SDFix folder,then double click on RunThis.bat to start the script.* Type Y to begin the script.* It will remove the Troj... Read more

Read other 1 answers
RELEVANCY SCORE 152

I have picked up some sort of virus that keep bringing up pop-ups pretending to be windows that direct me to websites to buy anti-virus software. It has also changed 3 icons on my desktop to Error Cleaner, Privacy Protector and Spyware & Malware. It has changed my background to a big red picture with a hazard symbol that says "Your privacy is under threat" or something along those lines. I can no longer bring up task manager because it has changed my administrative authority. God knows what else it has changed. I have seen other people have also had this virus. I have followed the steps and got the 3 logs from Panda and DSS. I can post these when you need them. Please help! Thanks in advance. Adam

A:Virus (Error Cleaner, Privacy Protector, Spyware & Malware)

DSS log

Deckard's System Scanner v20071014.68
Run by Adam on 2008-04-15 12:53:06
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
88: 2008-04-15 11:53:12 UTC - RP191 - Deckard's System Scanner Restore Point
87: 2008-04-14 22:34:55 UTC - RP190 - Installed iTunes
86: 2008-04-14 19:42:46 UTC - RP189 - System Checkpoint
85: 2008-04-13 18:10:06 UTC - RP188 - System Checkpoint
84: 2008-04-12 16:28:17 UTC - RP187 - System Checkpoint


-- First Restore Point --
1: 2008-01-15 20:19:15 UTC - RP104 - Installed Sid Meier's Civilization 4


Backed up registry hives.
Performed disk cleanup.



-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-04-15 12:54:46
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\Program Fil... Read more

Read other 2 answers
RELEVANCY SCORE 152

Okay I did something stupid by downloading & trying to run a program where I didn't know where it was comming from. My fault but now my computer is completely useless & I really need help fixing it. I don't have a bunch of money to take it in to get it repaired so I am hoping I can get some help here.

I mean useless in the fact I can not access Task Manager, I can not RUN anything, they all have disappeared from the menu. If I try to even run Internet Explorer it won't let me. Any program I try to use is immediatly shut down. It runs for like a few seconds then goes away. I am not a computer savy person when it comes to things like this. I really am begging for some help. I have no idea where to begin. I can't download any programs to help me. I can't even access the internet. I have it unplugged from the internet now & am using another computer to write this. Is it even possible to fix my problem now? I'm not sure but there is nothing I have tried that worked. I even had ComboFix on my computer & it wouldn't let me access it. I changed the name of the program & tried it again but then it disappeared from my desktop. I need help please!

Read other answers
RELEVANCY SCORE 152

Hello, i hope someone can help me. About a week ago i recieved these three icons on my desktop: error cleaner, privacy protector, spyware and malware protection. I also had links for each in my favorite places folder in internet explorer. My desktop background was hijacked by a red clickable screen with a warning saying "your privacy is in danger" and would sometimes turn to a completely white background. I recieved numerous pop-ups of fake virus/spyware programs at the same time of infection.

My main virus protection software is Norton, which found nothing. I googled the three viruses and saw numerous forum topics on this matter. I followed the directions most of the tech personnel instructed the poster however obviosly was not allowed to post my logs for review. I installed hijackthis and other programs as many of the users who experienced the problem where instructed to do. Since then error cleaner, privacy protector, spyware and malware protection have been fixed allong with the desktop background and desktop popups. I didn't touch the registry for anything. The problem that persists is now my computer (laptop HP dv2000) runs extremely slow, hotter than usual????, and internet explorer opens on it's own taking me to random websites.

I hope this information helps, could i still be infected? I would REALLY appreciate it if someone could help me, give me some instructions and look at my logs to see if they can find anything.

A:Had Error Cleaner, Privacy Protector, And Spyware/malware Proteciton

Hi mattv9284, Welcome. Is this an XP pc?IF Vista then Always Start an Application in Administrator Mode on Windows VistaPlease give this a scan and post the report,thanks.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on Download_mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Acan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to ... Read more

Read other 1 answers
RELEVANCY SCORE 152

I keep having the same problem as the person with this post http://www.bleepingcomputer.com/forums/t/105116/privacy-protector-error-cleaner-spyware-malware-protection/ I have run avast! Spybot Search and DEstroy PC Tools Antivirus, and adaware, but everytime I think I have it all gone, the icons for Privacy Protector, Error Cleaner, Spyware&malware Protection reappear on my desktop, and they are just links to dl some crappy wannabe stuff.. Right now in I have found Win32:Zlob-AJP in C:\System Volume Information\_restore{129201FH-B0AC-49B2-DEB8B913727B\RP1 in A0000033.dll Win32:Adpatrol in C:\System Volume Information\_restore{129201FH-B0AC-49B2-DEB8B913727B\RP2 in A0000294.dll and Win32:Agent-LTS in C:\System Volume Information\_restore{129201FH-B0AC-49B2-DEB8B913727B\RP2 in A0002469.dll and I found those in an avast! bootscan, I don't know what those .dll files are for, so I just put them in the avast! "Virus Chest" but every time something with a virus gets deleted, another one pops back up later and that's when those icons come and popups with virus warnings and and website. PLEASE PLEASE help me get rid of this... :thumbsup:









removedtype='text/javascript'>
ipb.global.registerReputation( 'rep_post_767125', { domLikeStripId: 'lik... Read more

A:Privacy Protector, Error Cleaner, Spyware&malware Protection.. Help Get It Off Please

How is you computer running now? Any more reports/signs of infection?

Read other 11 answers
RELEVANCY SCORE 152

ok, my cousin has gotten some type of virus/spyware that i can't remove. it has added error cleaner, privacy protector, spyware&malware proctection icons to the desktop that point to a website. here is the hjt log. please let know i need to add anything else. i have already ran avg, stinger, ad-aware, and spyboy s&d to clean up as much i could. i couldn't access the internet to run the online scans.thanks in advance.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:29:36 PM, on 3/31/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16608)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\System32\wltrysvc.exeC:\WINDOWS\System32\bcmwltry.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Symantec AntiVirus\DefWatch.exeC:\Program Files\Executive Software\Diskeeper\DkService.exeC:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exeC:\WINDO... Read more

A:Hjt Log For Error Cleaner, Privacy Protector, Spyware&malware Proctection

swebb32_99 Sorry for the delayRe Run HijackthisAt the Main window select "Open the misc tool section"Then select "Open uninstall manager"Then "save list" and save it to your desktopCopy and paste that list as a reply to this thread

Read other 27 answers
RELEVANCY SCORE 150.4

Smitfraudfix posted here worked temporarily, but my machine keeps getting taken over by this virus. If anyone can help interpret what i have here, I would appreciate it. Internet explorer changes my homepage without permission to this ucleaner website. This started from a fake myspace blog I opened. I get shortcuts to error cleaner, privacy protector, and spyware-malware protection urls.here is the smitfraud fix log:SmitFraudFix v2.274Scan done at 15:56:58.68, Thu 12/27/2007Run from C:\Documents and Settings\Administrator\Desktop\fixes\SmitfraudFixOS: Microsoft Windows XP [Version 5.1.2600] - Windows_NTThe filesystem type is NTFSFix run in safe mode???????????????????????? SharedTaskScheduler Before SmitFraudFix!!!Attention, following keys are not inevitably infected!!!SrchSTS.exe by S!RiSearch SharedTaskScheduler's .dll???????????????????????? Killing process???????????????????????? hosts127.0.0.1 localhost???????????????????????? Winsock2 FixS!Ri's WS2Fix: LSP not Found.???????????????????????? Generic Renos FixGenericRenosFix by S!Ri???????????????????????? Deleting infected filesC:\DOCUME~1\ADMINI~1\Desktop\Error Cleaner.url DeletedC:\DOCUME~1\ADMINI~1\Desktop\Privacy Protector.url DeletedC:\DOCUME~1\ADMINI~1\Desktop\Spyware?Malware Protection.url DeletedC:\DOCUME~1\ADMINI~1\FAVORI~1\Error Cleaner.url DeletedC:\DOCUME... Read more

A:Error Cleaner-privacy Protector-spyware Malware Urls Reoccurring

Hello juleeeaaa and welcome to BleepingComputer!Apollogies for the delay. The forum has been very busy lately. If you are still having problems please post a brand new HijackThis log as a reply to this topic. Before posting the log, please make sure you follow all the steps found in this topic:Preparation Guide For Use Before Posting A Hijackthis Log.Thanks,Johannes

Read other 2 answers
RELEVANCY SCORE 150.4

I HAVE WINDOWS XP PRO
GETTING SEVERAL WARNINGS SAYING MY PC IS INFECTED
I CANNOT ACCESS ANY OF MY HARD DRIVES AND AVG IS NOT DETECTING IT!
PLEASE HELP!!!
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:40: VIRUS ALERT!, on 9/26/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\igfxtray.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\PDF Complete\pdfsty.exe
C:\Program Files\PDF Complete\pdfsvc.exe
C:\WINDOWS\SMINST\Scheduler.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www... Read more

A:Please Help!!! Error Cleaner, Privacy Protector, Spyware and Malware Protection virus

Hi Welcome to TSG!!
Download SDFix and save it to your Desktop.
Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix and remove some of its embedded files which may cause "unpredictable results".
Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
Remember to re-enable the protection again afterwards before connecting to the Internet.

Double click SDFix.exe and choose Install to extract it to its own folder on the Desktop. Please then reboot your computer in Safe Mode by doing the following :
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, a menu with options should appear;
Select the first option, to run Windows in Safe Mode, then press "Enter".
Choose your usual account.

Open the c:\SDFix folder and double click RunThis.cmd to start the script.
Type Y to begin the script.
It will remove the Trojan Services then make some repairs to the registry and prompt you to press any key to Reboot.
Press any Key and it will restart the PC.
Your system will take longer that normal to restart as the fixtool will be running and removing files.
When the desktop loads the Fixtool ... Read more

Read other 1 answers
RELEVANCY SCORE 150.4

Hi,
my friend has this on his laptop. Security warning! Spyware alert, worm.win32.Netsky warning etc.
I have updated all antivirus, spyware and adware applications and run them with no luck.
I have followed the steps for 'if you think you are infected' to remove malware. Any advice would be appreciated.


Deckard's System Scanner v20071014.68
Run by PAUL ANDREWS on 2008-02-07 10:59:05
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
28: 2008-02-07 10:59:13 UTC - RP202 - Deckard's System Scanner Restore Point
27: 2008-02-07 10:39:02 UTC - RP201 - Spyware Begone! Spy Removal
26: 2008-01-21 23:16:31 UTC - RP200 - Spyware Begone! Spy Removal
25: 2008-01-13 03:57:58 UTC - RP199 - System Checkpoint
24: 2008-01-09 21:10:44 UTC - RP198 - Software Distribution Service 3.0


-- First Restore Point --
1: 2007-10-24 14:33:36 UTC - RP175 - Installed Windows XP KB915865.


Backed up registry hives.
Performed disk cleanup.

Percentage of Memory in Use: 86% (more than 75%).
Total Physical Memory: 503 MiB (512 MiB recommended).


-- HijackThis (run as PAUL ANDREWS.exe) ----------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:00:40, on 07/02/2008
Platform: Windows XP SP2 (WinNT ... Read more

A:[SOLVED] Privacy Protector, Error Cleaner and Spyware&amp;Malware protection

Hopefully problem solved. Thanks to anyone who has worked on this problem which seems to be popping up left right and centre.
Cheers
Mike

Read other 1 answers
RELEVANCY SCORE 150.4

HELP! - error cleaner privacy protector/ spyware malware Security and the Web problem. could someone please help me sort this out please

Read other answers
RELEVANCY SCORE 150.4

hi

have got the following symptoms:

- desktop items appeared
-error cleaner
-spyware & malware protection
-privacy protector
-pop-up windows
-spyware alert - worm.win32.netbuster
-windows security alert
-red circle with white cross in system tray
-internet explorer pops up on site www.system-defender.com
-moves between windows as type (makes doing this a real pain!!)

here is the results from deckard system scanner, could not find an extra.txt file

Deckard's System Scanner v20071014.68
Run by Nathen on 2008-04-19 12:42:37
Computer is in Normal Mode.
--------------------------------------------------------------------------------

System Drive C: has 5.97 GiB (less than 15%) free.


-- HijackThis (run as Nathen.exe) ----------------------------------------------

Unable to find log (file not found); running clone.
-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-04-19 12:43:42
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\b... Read more

A:pop-ups+ error cleaner, privacy protector and spyware & malware protection on desktop

Download Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Quick Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply along with the following log.

Please download ATF Cleaner by Atribune.
This program is for XP and Windows 2000 onlyDouble-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on ... Read more

Read other 7 answers
RELEVANCY SCORE 150.4

Somehow i have error cleaner, privacy protector, spyware and malware protection on my desktop and it has also set my homepage as a fake spyware site. I have tried smitfraud and re-insalling windows but still no luck. I would appreciate any help!

A:Error Cleaner, Privacy Protector, Spyware And Malware Protection. Need Help Removing Please!

Hello there and welcome to BleepingComputer.Please follow our Preparation Guide For Use Before Posting a HijackThis Log; running all of the scans before posting your HijackThis log in your next reply.

Read other 16 answers
RELEVANCY SCORE 150.4

These are the log files in reference to this thread.

Rapport.txt = Smitfraudfix

I have followed all steps in my original thread. When installing spywareblaster i try to run it and get this error message: "This program has been damaged, possibly by a bad sector of the hard drive or a virus. Please reinstall it." and get the same when reinstalling etc.

I have noticed some programs wont open, they give me a message saying file corruped, manipulated by a virus and may be infected, program will not work anymore.

The popups come every couple of hours. When they come up i restart in safe mode and run simtfraudfix, then restart in normal mode and everything is fine for 2/3 hours, then i have to do it again when the popups come.

A:Logs: Error cleaner, Privacy protector, Spyware/Malware protection

These was no minimized extra.txt???



Deckard's System Scanner v20071014.68
Run by LeeAndrew on 2008-01-29 15:38:03
Computer is in Normal Mode.
--------------------------------------------------------------------------------



-- HijackThis (run as LeeAndrew.exe) -------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:39, on 2008-01-29
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Seagate\Basics\Service\SyncServicesBasics.exe
C:\Program Files\Common Files\LightScribe\LSS... Read more

Read other 19 answers
RELEVANCY SCORE 150.4

It showed up on my computer as 3 programs - Error Cleaner/Privacy Protector/Spyware & Malware Protection - which have caused a full screen program (as shown in picture - appears to turn my desktop red but is closable by finding the x in the corner) and popups warning me my computer is at risk and that I should download their antivirus/spyware/malware products. I have tried using BitDefender, AVG, Stinger, Ad-Aware, Norton, Spyware Doctor and Spybot Search & Destroy. At times a scan has seemingly gotten rid of the problem but on restart of the computer the problem returns (or sometimes on the second restart). Please help me get rid of this. Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:54:59 PM, on 9/1/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exeC:\Program... Read more

A:Infected By Error Cleaner/privacy Protector/spyware & Malware Protection

Please. Anyone that can help me out on this?

Read other 29 answers
RELEVANCY SCORE 150.4

Hello folks! I don't mean to be a newb causing a stir, but I've contracted a virus that won't go away and a search led me to this forum as a likely source of a solution.What's wrong: I was prompted to download a video codec update and was fooled into accepting. Initially the virus presented itself as a desktop hijacker as well as installing Privacy Protector, Error Cleaner, and Spyware&malware Protection icons on my desktop, shooting up annoying pop-ups, and switching between programs at random when I have more than one window open. After I took measures against it, the desktop spread went away, but a new, unnerving symptom has arisen: the computer plays sound clips every so often, completely unprompted and unfamiliar prior to the infection. (The other symptoms, aside from the desktop spread, still remain.)What I've done so far: I've run SmitFraudFix and Eusing Registry Cleaner, in addition to a scan by my own Symantec AntiVirus Corporate Edition. I've also tightened up my Windows firewall settings to limit background access to the internet. Once I got here, I downloaded and ran HJT, and the log will be at the end of this post. Thanks in advance for helping me out!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:40:36 AM, on 2/25/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\W... Read more

A:Infected By: "privacy Protector, Error Cleaner, Spyware&malware Protection"

Hi, Wellcome to Bleeping Computer Forums!You might want to save this page on your favorites, so you can find it again when you return.Please take note of the following:I will be handling your log and helping you, please do not make any system changes yet. The process is not instant. Please continue to review my answers until I tell you that your computer is clean. Be patience.The fixes are specific to your problem and should only be used for this issue on this machineIf there's anything that you don't understand, please ask your question(s) before proceeding with the fixes.Please reply to this thread. Do not start a new topic.Please give me some time to look over your log and I will get back to you as soon as possible.

Read other 10 answers
RELEVANCY SCORE 150.4

OK for starters i am working on my moms computer that had become severly infected with many virus and spyware. Anti-virus scanners found many of them and got rid of them but the one that put Error Cleaner and Privacy Protector and so on on the computer just will not go away. I am not computer stupid I can get around one ok and i have tried to get rid of this in many ways including searching for and quarantineing suspicious files created on the date the virus and spyware were first detected. Files i have deleted have come back as soon as i restart the machine. I also ran the virus scanners in safe mode to get rid of a few of the infected files that windows locks in normal mode. I do not have any more ideas Please help me

I have used ActiveScan and will include that log

I installed Spyware Blaster, ie-spyad, and Zoned Out to help prevent any further infection.

I have also updated windows

Please let me know of anything else i need to do to help you assist me i figuring out this issue.

Thanxs in advance.

Main log from Deckard's System Scanner will follow
and extra log is attached

Panda ActiveScan Log
Incident Status Location ... Read more

A:[SOLVED] Error Cleaner, Privacy Protector, and Spyware& Malware Protection Won't Go

Hello and Welcome to TSF.

I am currently reviewing your log. Please note that this is under the supervision of an expert analyst, and I will be back with a fix for your problem as soon as possible.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please be patient with me during this time.

Read other 15 answers
RELEVANCY SCORE 150.4

Hey I have tried all the steps and nothing...I have Error Cleaner, Privacy, and Spyware and malware protection my computer. I tried programs left and right and cant get it off. I usually can get them off but I am lost for words on this one. Ive Downloaded Spyblaster and ie-spyadzo and got nothing. I play Computer games and work on my computer...really tried my patience. I did the DSS.exe thing....


Deckard's System Scanner v20071014.68
Run by Polli on 2008-01-14 00:32:33
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 2 Restore Point(s) --
2: 2008-01-14 06:32:48 UTC - RP2 - Deckard's System Scanner Restore Point
1: 2008-01-14 06:16:23 UTC - RP1 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-01-14 00:34:56
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\SYSTEM32\SMSS.EXE
C:\WINDOWS\SYSTEM32\WINLOGON.EXE
C:\WINDOWS\SYSTEM32\SERVICES.EXE
C:\WINDOWS\SYSTEM32\LSASS.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EX... Read more

A:I have Privacy Protector,Error cleaner, and Spyware and malware protection and popups

Apologies for the delay in responding.

The workload on this forum is intense, and sometimes it is not possible to respond to every inquiry.


Please download SmitfraudFix
Extract the files to the Desktop

~~~~
Start the computer in Safe Mode:When the machine reboots, tap the F8 key before Windows starts
You are presented with a Windows XP Advanced Options menu.
Select the option for Safe Mode using the arrow keys.
Press Enter to boot into Safe Mode.

~~~~
Open SmitfraudFix Double-click smitfraudfix.cmd
Select Option 2 - Clean by typing 2 and press Enter (Deletes infected files)
You are prompted: Do you want to clean the registry? answer Y (yes) and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection.
The tool also checks if a relevant file, wininet.dll, is infected.
You may be prompted to replace the infected file (if found).
Replace infected file? Answer Y (yes) and hit Enter to restore a clean file.

~~~~
Restart the computer to complete the removal process.

~~~~
Now, download ComboFix
Save it to the Desktop

Double-click combofix.exe to run the program
Follow the prompts.
(Don't click on the window while the program is running, it may cause your system to stall.)

When finished, a log, ComboFix.txt, is produced.

~~~~
Run HijackThis once again to obtain a new log.

~~~~
Please post the SmitFraudFix report located at C:\rapport.txt , the ComboFix.txt, and a ne... Read more

Read other 1 answers
RELEVANCY SCORE 150.4

Please help!! This programs have embedded themselves somewhere in my computer! I was having endless pop-ups and could barely get on the internet, but I purchased the highest Norton Anti-virus available and have managed to clean some of it out, but not all. I still get a tool bar and a popup blocker from them. Also, instead of ads on the webpages, I end up with videos. Please help me clean my computer!!!! Thank you!!

A:Error Cleaner, Privacy Protector & Spyware/Malware hijacking my computer!!

Hello and welcome to TSF

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.
What DSS will do: create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

===================
Logs Required
C:\Deckard\System Scanner\main.txt
C:\Deckard\System Scanner\extra.txt<---Attached

Read other 3 answers
RELEVANCY SCORE 150.4

Got zapped with the above mess the evening of 4/16 and became unbearble on 4/17. Had to do a System Restore back to 4/15 to get a usable system. Things appear to be okay, but want to make sure I get rid of any potential lingering threats. Icons for all 3 are still on the Desktop but appear to be disabled. Not sure if there are any threats that might be ready to blast me unexpectedly.

Ran through all 5 pre-post steps.

Main.txt
Deckard's System Scanner v20071014.68
Run by Larry Guy on 2008-04-18 23:54:42
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
64: 2008-04-19 04:54:55 UTC - RP738 - Deckard's System Scanner Restore Point
63: 2008-04-19 04:38:32 UTC - RP737 - Software Distribution Service 3.0
62: 2008-04-18 10:27:51 UTC - RP736 - Restore Operation
61: 2008-04-17 06:52:43 UTC - RP735 - System Checkpoint
60: 2008-04-16 02:28:34 UTC - RP734 - System Checkpoint


-- First Restore Point --
1: 2008-01-21 22:37:10 UTC - RP675 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.

System Drive C: has 7.24 GiB (less than 15%) free.


-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-04-18... Read more

A:Cleanup of Error Cleaner, Privacy Protector, and Spyware&Malware Protection

Hello and welcome to TSF.

Sorry for the delayed response. If you have not received help elsewhere and still need help, please post a fresh HijackThis log, as it has been a while since you posted.

Read other 1 answers
RELEVANCY SCORE 150.4

i have tried mcafee virus scan, smit fraud fix, avg spyware scanner, adware spyware scanner with no luck. I get error message that some one is trying to infect my pc with spyware and viruses. internet explorer is not working and has become unresponsive. I took all the steps advised here and now posting hjt log and combofix log here.

hjt log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:32:48 PM, on 3/18/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsof... Read more

A:can not remove error cleaner, privacy protector, spyware and malware protection

Please copy this page to *Notepad* and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.

It's IMPORTANT to carry out the instructions in the sequence listed below.
1. Close any open browsers.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Open *notepad* and copy/paste the text in the quotebox below into it:


Quote:





Killall::


File::
C:\WINDOWS\drnpfdxrqv.dll
C:\WINDOWS\altvxvm.dll
C:\WINDOWS\bokpkov.dll
C:\WINDOWS\drnpfdxrqv.dll
C:\WINDOWS\system32\tmp.reg
C:\WINDOWS\fmsxwqs.exe





Save this as CFScript.txt, in the same location as ComboFix.exe which is on the Desktop.




Refering to the picture above, drag CFScript.txt into ComboFix.exe


When finished, it shall produce a log for you at C:\ComboFix.txt

Please copy and paste the ComboFix.txt along with a fresh HijackThis log in your next reply please.


*Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall*

Read other 3 answers
RELEVANCY SCORE 150.4

hi, this is my first time here:)looks like i have caught a virus..my computer constantly freezes and throws up pop-ups. My desktop background has changed by itself, with the words writing, OUR PRIVACY IS IN DANGER! DOWNLOAD PRIVACY PROTECTION SOFTWARE NOW. icons of programs Error Cleaner, Privacy Protector and Spyware & Malware Protection have also appeared on the desktop.Im also geeting a red circle flashing in the right bottom corner. i tried various adwares and spyware but non of them seemed to work. PLEASSEEEE HELP ME DELETE THIS MESS OF MY COMPUTER.here is my Hijackthis LogLogfile of HijackThis v1.99.1Scan saved at 16:32:25, on 28/08/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16512)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\AOL\1179502606\ee\AOLSoftware.exeC:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exeC:\WINDOWS\system32\rundll32.exeC:\WINDOWS\vsnpstd3.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Files\QuickTime\qttask.exeC:\Program... Read more

A:Helpp!error Cleaner, Privacy Protector And Spyware & Malware Protection.

Hello goran88, I am SifuMike and I will be helping you. Sorry for the delay. We have many logs backed up. NOTE: If you have downloaded SmitfraudFix previously please delete that version and download it again! Please download SmitfraudFix You should print out these instructions, or copy them to a Notepad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site. Please reboot your computer in Safe Mode by doing the following :Restart your computer After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually; Instead of Windows loading as normal, a menu with options should appear; Select the first option, to run Windows in Safe Mode, then press "Enter". Choose your usual account.Once in Safe Mode, double-click SmitfraudFix.exe Select option #2 - Clean by typing 2 and press "Enter" to delete infected files. You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection. The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter". The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart anyway... Read more

Read other 2 answers
RELEVANCY SCORE 150.4

hi, i have Error Cleaner, Privacy Protector, Spyware And Malware Protection icons on my desktop, and in my favorites under documents and settings. i get spammed with a bunch of fake anti-virus popups now, and i don't know how to get rid of them. system restore doesn't work, and my anti-virus/anti-spyware can't get rid of them. please help

A:Error Cleaner, Privacy Protector, Spyware And Malware Protection. Need Help Removing Please!

See info in link below for using Smitfraudfix unless you have Vista.http://www.bleepingcomputer.com/forums/t/98801/how-to-remove-privacy-protector-or-privacyprotector-removal-instructions/Install Super Antispyware free. Run it in safe mode. Allow it to quarantine whatever it finds. http://www.superantispyware.com/Run the online scan for Bit Defender in normal mode. Allow it to quarantine whatever it finds.http://www.bitdefender.com/scan8/ie.htmlHow to Start Windows in Safe Mode:http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/ Post back for further instructions after doing the above.

Read other 2 answers
RELEVANCY SCORE 148.8

These programs embedded itself into my system. It changes my desktop and keeps poping up with warnings and websites. It is called Privacy Protector, Error Cleaner and Spyware&Malware protection. I also get security warnings saying 'spyware alert' asking me to click to remove.

Read other answers
RELEVANCY SCORE 148.8

Alright, I posted earlier but now I found the real problem. I had malware installed on my computer and it was the Privacy Protector, Error Cleaner, Spyware&malware Protection problem.I just ran SD fix.exe and it found a lot but now that my computer is up, I am still getting the attack messages.I followed the instructions here:http://www.bleepingcomputer.com/forums/t/105116/privacy-protector-error-cleaner-spyware-malware-protection/These are the results of my fix:SDFix: Version 1.205 Run by Administrator on Tue 07/15/2008 at 06:26 AMMicrosoft Windows XP [Version 5.1.2600]Running From: C:\SDFixChecking Services :Restoring Default Security ValuesRestoring Default Hosts FileRestoring Windows ProductId To Remove Fake Virus AlertRebootingChecking Files : Trojan Files Found:C:\Documents and Settings\user\Desktop\Error Cleaner.url - DeletedC:\Documents and Settings\user\Favorites\Error Cleaner.url - DeletedC:\Documents and Settings\user\Desktop\Privacy Protector.url - DeletedC:\Documents and Settings\user\Favorites\Privacy Protector.url - DeletedC:\Documents and Settings\user\Desktop\Spyware&Malware Protection.url - DeletedC:\Documents and Settings\user\Favorites\Spyware&Malware Protection.url - DeletedC:\WINDOWS\system32\s.bat - DeletedC:\WINDOWS\EPEB.EXE - DeletedRemoving Temp FilesADS Check : Final Check :catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.netRootkit scan 2008-07-15 06:39:03Windo... Read more

A:Privacy Protector, Error Cleaner, Spyware&malware Protection - Just Finished Using Sdfix.exe - Someone Let Me Know If I...

My ComboFix log:ComboFix 08-07-13.11 - user 2008-07-15 6:56:27.1 - NTFSx86Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.616 [GMT -4:00]Running from: C:\Documents and Settings\user\Desktop\ComboFix.exeWARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).C:\Documents and Settings\user\Application Data\inst.exeC:\Documents and Settings\user\Desktop\Error Cleaner.urlC:\Documents and Settings\user\Desktop\Privacy Protector.urlC:\Documents and Settings\user\Desktop\Spyware&Malware Protection.urlC:\Documents and Settings\user\Favorites\Error Cleaner.urlC:\Documents and Settings\user\Favorites\Privacy Protector.urlC:\Documents and Settings\user\Favorites\Spyware&Malware Protection.urlC:\WINDOWS\system32\mcrh.tmp.((((((((((((((((((((((((( Files Created from 2008-06-15 to 2008-07-15 ))))))))))))))))))))))))))))))).2008-07-15 06:19 . 2008-07-15 06:20 <DIR> d-------- C:\WINDOWS\ERUNT2008-07-15 06:18 . 2004-04-08 01:42 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\InterTrust2008-07-15 06:18 . 2008-07-15 06:18 <DIR> d-------- C:\Documents and Settings\Administrator2008-07-15 ... Read more

Read other 4 answers
RELEVANCY SCORE 148.8

Hi; I picked up this worm a couple of days ago. I get constant popups telling me how I'm infected etc, my pc has slowed and frequently freezes, outlook is a joke. In short it;s a mess. How can I get rid of this thing and where do I find the perpetrator so I can inflict serious damage on his juvenile, penis challenged body? I'm running Windows XP Professional 2002 on a Dell desktop[ pc.
 

A:win32 error cleaner/privacy protector/spyware and malware protection virus

Read other 9 answers
RELEVANCY SCORE 147.6

Hi,Repeated popups and warnings led to a Google search on the Subject above and finding this forum.I initially attempted a "Restore Point" rollback but that would not complete successfully.I then completed the following -- Uninstall "XP Anti-Virus"- Ran SmitfraudFix- Ran SDFix- Ran ComboFix- Installed and Ran HijackThis(Attempted a "Fix Checked" without success of "O2 - BHO: (no name) - {EE5A1465-1E73-4784-8F63-45983FDF0DB8} - C:\WINDOWS\system32\awtuvULB.dll")- Installed and Ran SUPERAntiSpyware(found 0 errors or problems in any category)HijackThis still displays "O2 - BHO: (no name) - {EE5A1465-1E73-4784-8F63-45983FDF0DB8} - C:\WINDOWS\system32\awtuvULB.dll" which concerns me so I am posting so the guru's can check out the logs....As a newby to the forum I appreciate any help/advice :^) Thanks.Deckard's System Scanner v20071014.68Run by administrator on 2008-04-18 16:18:31Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point.-- Last 5 Restore Point(s) --96: 2008-04-18 23:18:37 UTC - RP324 - Deckard's System Scanner Restore Point95: 2008-04-18 22:49:23 UTC - RP323 - Installed SUPERAntiSpyware Free Edition94: 2008-04-18 21:40:02 UTC - RP322 - Restore Operation93: 2008-04-18 21:27:20 UTC - RP321 - Restor... Read more

A:Removal Of Xp Anti-virus, Privacy Protector, Error Cleaner And Spyware&malware Protection

Hello there and welcome to Bleeping Computer's security forum.My name is David, I will be helping you with your log today.It is a good idea to print off these instructions. There is a possibility some of the instructions will need to be carried out where internet access is not available. It is important that you complete the instructions in the right order, and that you don't miss out any steps.Please set your system to show all files. Click Start, open My Computer, select the Tools menu and click Folder Options.Select the View Tab. Under the Hidden files and folders heading, select Show hidden files and folders.Uncheck: Hide file extensions for known file typesUncheck the Hide protected operating system files (recommended) option.Click Yes to confirm.Start HijackThis, close all open windows leaving only HijackThis running. Place a check against each of the following if still present:O2 - BHO: (no name) - {EE5A1465-1E73-4784-8F63-45983FDF0DB8} - C:\WINDOWS\system32\awtuvULB.dllO20 - Winlogon Notify: awtuvULB - C:\WINDOWS\SYSTEM32\awtuvULB.dllO21 - SSODL: DriveSys - {7dc6ff88-ddc9-4b18-a143-ef3f8f110be0} - C:\WINDOWS\Resources\DriveSys.dll (file missing)O21 - SSODL: SysBoot - {fd5ffa08-e23f-467f-867a-8a5770344bc3} - C:\WINDOWS\Resources\SysBoot.dll (file missing)Click on Fix Checked when finished and exit HijackThis.Make sure your Internet Explorer is closed when you click Fix Checked!Open hijackthis, click 'conf... Read more

Read other 1 answers
RELEVANCY SCORE 136.8

Hello, please help me with this mal ware problem which also keeps popping up security alert Spyware alert. The work around is to kill my explorer.exe and therefor lose my start menu bar aswell). here is my main.txt=============================================================Deckard's System Scanner v20071014.68Run by dtran on 2008-04-24 23:10:14Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------System Restore is disabled; attempting to re-enable...success.-- Last 1 Restore Point(s) --1: 2008-04-25 06:10:20 UTC - RP950 - System CheckpointBacked up registry hives.Performed disk cleanup.-- HijackThis (run as dtran.exe) -----------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:16:20 PM, on 4/24/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\basfipm.exeC:\Program Files\McAfee\MBK\MBackMonitor.exeC:\Program Files\Common Files\McAfee ... Read more

A:Error Cleaner, Privacy Protector, Spyware&malwere Protection Icons On My Desktop

Hi and welcome to Bleeping Computer! My name is Sam and I will be helping you. Please download ComboFix and save it to your desktop.Prior to running Combofix.exe you should disable your antivirus program and disconnect from the internet.Double click combofix.exe and follow the prompts.When it's done running it will produce a log for you. Please post that log in your next reply.Important Note - Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

Read other 16 answers
RELEVANCY SCORE 134

HeyI'm hoping you guys can help me with a serious problem:My Little Brother has installed a horrible virus on his computer, he sayd he opened a link from a email he got from a friend.The following is a list of the symptoms i have noticed:3 new icons on the desktop: - "Privacy Protector" - "Error Cleaner" - "Spyware&malware Protection"A Virus alert has been added next to the windows clock: "VIRUS ALERT!"Different pop-ups appered saying the computer is infected and you need to run this scanning program, but they where all just part of the virus."Internet Explorer" trying to access different websites, but I have unplugged the network cable.The Local Drive (C:\) in "My Computer" is not there anymore, but the drive can still be accessed by typing "C:" in another window.All buttons in the "START" menu exept "Network access" has been removed.When trying to access REGEDIT.exe an alert window pops-up saying:It's in danish, but translating it to english it says:"The Administrator has removed the possibility for editing the registrationsdatabase"And finally the computer is extremely slow.I ran a full system scan with AVG Free (newest version), but it found NOTHING.Then I ran the cleaning part of "SmitFraudFIx" in safe mode, but without the succes of cleaning the registrationsdatabase, because of the before mentioned problem.It removed the new icons, the popups and t... Read more

A:Infected With Virus, No Access To Regedit.exe & New Icons On Desktop: "privacy Protector, Error Cleaner, Spyware&ma...

Never mind, windows was tottally messed up, so I just format C: and installed WindowsXP.

I migth upload a new hijack this log after I have run a lot of different antivius and spyware software.

Read other 2 answers
RELEVANCY SCORE 134

PLEASE HELP. I have been struggling to remove this worm for over a week now. I have tried using the Smitfraudfix but it hasn't worked. Within a few hours the icons and pop-ups are back. Is there any fix for this albeit a complete re-format? I'm running an XP system and McAfee suite.

A:worm.Win32.netsky/privacy protector/error cleaner/spyware protenction icons & popups

Please follow MicroBell's 5 Step process outlined here:

http://www.techsupportforum.com/secu...oval-help.html

After running through all the steps, please post the requested logs.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 133.6

I am having problems with Spyware and Malware. At first i got a Trojan that took off my background and was all red with a picture in the middle and blood dripping down saying my privacy was in danger. I scanned my computer with Spysweeper, AVG, AD-AWARE, SPYBOT, CCcleaner and others and everytime it seemed as if the computer was getting closer to being fixed, when i would restart the computer, the same problems would arise again. I have icons on my comupter that say Privacy Protector, Error Cleaner and Spyware&Malware Protection..Also i am sure i have something called Huntbar on my computer and two trojans that keep coming back. Ive tried many scanners and nothing has worked. I tried to manually delete Privacy protector from the computer via searching the Hard DRives, yet when i restarted it was there again. Also, i have tried to use SDFix the icon wouldtnt show on my computer when i was in safe mode.. There are also pop ups claiming to be Windows saying my computer is in danger.. Help me please! I would love not to have to pay Geek Squad 199 dollars to fix this! My Hijack This Log is attached Thank you!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:30:42 PM, on 4/29/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\... Read more

A:Removing Privacy Protector, Error Cleaner, Huntbar And Other Malware!

HiI need to see some more logs from you ...Download Deckard's System Scanner (formerly Comboscan) to your Desktop. 1. Close all applications and windows. 2. Double-click on comboscan.exe to run it, and follow the prompts. 3. When the scan is complete, a text file will open - ComboScan.txt 4. Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of ComboScan.txt in your next reply. 5. A folder, C:\ComboScan, will also open. In it will be another text file, Supplementary.txt. 6. Please copy and paste the contents of Supplementary.txt to your post.Please remember to post both txt files ...Note: some firewalls may warn that sigcheck.exe is trying to access the internet - please ensure that you allow sigcheck.exe permission to do so.THEN...Download Malwarebytes' Anti-Malware from Here :-http://www.majorgeeks.com/Malwarebytes_Ant...ware_d5756.htmlor here :-http://www.besttechie.net/tools/mbam-setup.exeDouble Click mbam-setup.exe to install the application.* Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.* If an update is found, it will download and install the latest version.* Once the program has loaded, select "Perform Quick Scan", then click Scan.* The scan may take some time to finish,so please be patient.* When the scan is complete, click OK, then Show Results to view the results.* Make sure that everything is checked, and click Remove Selected.* When disinfection... Read more

Read other 2 answers
RELEVANCY SCORE 129.6

I am trying to remove these programs from a mates pc. Im not an expert at this stuff but have a bit of experence. have used a program called smit fix which i ran in safe mode, it told me it had deleted the bloody thing but on rebooting its still there.... HELP SOMEONE!!!!!!
 

A:Error cleaner/ privacr protector/ drive cleaner and spyware and malware protertor

The spyware removal thread is HERE
 

Read other 1 answers
RELEVANCY SCORE 121.6

This is really annoying. I need to get rid of this programs that just suddenly appeared. They are called Error Cleaner, Privacy Protector, & Spyware

A:Error Cleaner, Privacy Protector, & Spyware need help getting rid of it

Deckard's System Scanner v20071014.68
Run by Owner on 2007-12-19 02:34:31
Computer is in Normal Mode.
--------------------------------------------------------------------------------

Total Physical Memory: 495 MiB (512 MiB recommended).
-- HijackThis Clone ------------------------------------------------------------
Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2007-12-19 02:35:32
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Washer\WasherSvc.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program... Read more

Read other 2 answers
RELEVANCY SCORE 121.2

Hello everybody.i really hope you can help me.3 or 4 days ago i started my pc and i had this 3 icons on my desktop.my pc was very slow and the processor was working 100% all the time.a lot of pop ups and messages came out all the time telling me to download some products or showing me web pages in internet explorer when i often use mozilla firefox.i used spyware doctor and it cleaned it but after some hours the infection appeared again.then i searched the web for a solution and i followed the steps that are on this page: http://www.pchell.com/support/ultimatedefender.shtml , to remove this infection.i followed this steps and now the icons has gone and after one day the infection has not appeared.one of the steps says that i have to post the hijackthis log.i am posting it here in hope you can help me because i am not sure if this infection is gone.i must say my pc seems ok now...but just to be sure.thank you.

hijackthis log

Logfile of HijackThis v1.99.1
Scan saved at 22:03:30.MD, on 15/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Flori\Desktop\HijackThis.exe

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Compa... Read more

A:Solved: 3 icons on desktop:error cleaner,privacy protector...help pls

Read other 14 answers