HELP: Just got a screen flash from AVG. I have Trojans. virus's and other

[Paper Roses]

good stuff going on. I had been doing some research today and must have hit something evil. I ran malwarebytes and am going to run AVG soon.
The message said:
I have 2 Trojans, 3 virus's and I think it said spy-ware.
Scared the heck out of me because I don't quite know how to cope.
I ran Malwarebytes and I guess I will go to major Geeks to see if there is a program to remove Trojans. I have not yet run AVG.

I will wait a while to see if you have any suggestions. This has never happened to me before and I'm nor sure what to do.
PS, need Freeware, have no $$ to pay for repair.
Any guidance would be appreciated.
PR

[BlueJazz]

1. Make sure you update both programs and run again...Also download..

"Spywareblaster"

Here: http://www.javacoolsoftware.com/sbdownload.html

[Paper Roses]

2. Last night I ran both Malwarebytes and AVG. Both are updated.

Neither one found anything. I don't know where to go from here. If I get that huge screen message from AVG, there must be something going on. I did not download Spywareblaster yet. I read about it on MajorGeeks. Some of the commentary was not favorable.Can anyone suggest a program that I can install that will go through the computer and fix any Trojans and virus found? I don't know how to find out the current status of the system in regard to infection.
Sometimes programs, as I interpret the information, say they will find stuff that should not be on my machine. Never tells me it will remove it. The Trojans and virus's, are they still here?

I also ran CCleaner.

THanks
PR

[woo me with science]

3. Run Superantispyware also. nt

[Earth Bound Misfit]

4. First off, make sure that this is an AUTHENTIC AVG message...

If I get that huge screen message from AVG...

there is a ROGUE AVG application going around: http://www.f-secure.com/weblog/archives/00002090.html

FAKE:


REAL:


If you determine yours is the ROGUE, try Bleepingcomputer.com Remove AVG Antivirus 2011 (Uninstall Guide):
http://www.bleepingcomputer.com/virus-removal/remove-avg-antivirus-2011


If it's authentic, the two programs already suggested (Malwarebytes & SUPERAnti) are excellent programs, but there is often no one program or tool which removes ALL traces of infestation. Try one (or more) of these free, online scanners to see if anything has slipped by your AVG protection--(most require that you use Internet Ex-PLODE-r)

http://www.eset.com/onlinescan/ (Recommended)
http://onecare.live.com/site/en-us/center/whatsnew.htm
http://housecall.trendmicro.com
http://www.bitdefender.com/scan8/ie.html
http://support.f-secure.com/enu/home/ols.shtml
http://www.pandasecurity.com/homeusers/solutions/activescan/ Scan Only - no removal

(Be advised that some of these scanners will pickup things in "quarantine" from other anti-virus programs - so review the results carefully)

If you're getting browser redirects, blocked applications, inability to access various sites, browsing is slower than normal, etc you may be infected by a rootkit. Check BC's How to remove Google Redirects or the TDSS, TDL3, or Alureon rootkit using TDSSKiller:
http://www.bleepingcomputer.com/virus-removal/remove-tdss-tdl3-alureon-rootkit-using-tdsskiller
Kaspersky's TDSSKiller d/l link: http://support.kaspersky.com/viruses/solutions?qid=208280684

Hope this helps.

[Paper Roses]

5. Hi, the message I got did not resemble either page.

For today, this is what is going on. I downloaded Spybot S&D which I have used before. Found 2 'threats'. Cookies, I think. In the middle of that scan up pops a big page from AVG saying that I had a Trojan. Quarantined that. Back to waiting for S&D to finish. I then downloaded SuperantiSpyware.
Tried to do it from Major Geeks but I kept getting the message that that site timed out.
Downloaded it from your link.
S/A/Spyware found:Tracking Cookies 16, at end, Total threads deleted 16. Did so.

The computer is still slow. I have no idea where I stand.
Plus, I have no idea id I still have any virus's or trojans.

I can download some of your suggestions but should I delete Spybot and SuperantiSpyware first? I'm using up space on an old computer.
I can go to Bleeping Computer to see what they have to offer but, to tell the truth, unless the instructions are very basic, I'll be lost. I don't even know what a rootkit is.
Believe me, your help is appreciated. I was so proud of myself. No problems for ages. Now this. So much for on-line research.

[Earth Bound Misfit]

6. Uninstall Spybot, IMO.

MVPS.org (Scroll down to "Freeware Antispyware Products") is no longer recommending Spybot S&D due to poor testing results. You can keep or uninstall SUPER, your call. Doesn't hurt having it as it's an on-demand scanner (like MBAM) and doesn't use any resources when not in use. I'd run the ESET online scan http://www.eset.com/us/online-scanner It's much better than AVG IMO (not a fan) & may take a couple hours if you have a badly infected comp and/or slow connection...etc.

I recommend starting a topic @Bleepingcomputer.com here: Am I infected? What do I do? Read the pinned topic Before You Post About A Problem & start a new topic. The volunteers there are user-friendly, courteous, VERY thorough and VERY good. They will give detailed explanations what to do and use ONLY free programs/tools.

Edit to add: Can you post the contents of the AVG quarantine and/or what it's deleted/disinfected/quarantined so far?

[Paper Roses]

7. I am going to take this machine to an expert. I cannot figure out how to fix

what is wrong and I know there is still a problem. I have an old computer in the attic that I will hook up and try to use while this one is in the 'computer garage'

I appreciate everyone's help. Part of the problem is my complete lack of computer terminology. I have run and rerun anti-virus, spyware programs and am still getting messages from AVG about tracking cookies. Plus, I don't know if I got rid of the Trojans and virus's.

The machine is incredibly slow. I am afraid of key-loggers--one of the initial reports indicated key-logging.

All I know is that I am out of my league here.

So much for my doing research for someone. Mind you, I went to no strange places. I was looking up animation art. How harmless is that? That is about the only thing I did--go to places that came up on a Google search.

I hope I can find someone today that will take this off my hands. My temporary replacement is old. has IE and not Firefox. I can't even remember why it is out of commission.
Thanks for all your help.
PR

[Paper Roses]

8. Here's the scoop. Our best, local computer guy left after spending

over an hour going through this old machine. He could find nothing in the way of Trojans or virus's. He did, however recommend that I remove SuperAntispyware and I had him do so. He said that that program was Spyware in itself and was a problem he encounters all the time. I had him add memory to this machine to bring me up to 2 GB. I also had him check out why I cannot scan with my HP PSC f4180. The PSC has been a problem for me since I installed it. He told me when I run our of ink would be a good time to look for a Cannon PSC. He also found there were some problems with the HP software for the PSC. Parts are not there(or something along those lines)

Since I had never seen the type of message I got and don't remember all of what it said, I told him about the message containing the words that I had 2 Trojans and 3 virus's. He could find none.

He also indicated to me that many of his customers are complaining about AVG and suggested I consider switching to Norton. I will wait until I find it on sale. I had Norton on my old computer and it worked just fine.

When you are of an age when learning all this stuff is a chore, having someone explain and do the needed work is a godsend. My computer needs are not great but I do try to keep things updated so I have no problems. This phony message scared me to the point that I went to my bank to make sure my ATM/Checking acct could not be accessed by anyone outside.
I feel better now. The bank told me my data is stored on their system, not mine. I thing I'll spend time tomorrow changing passwords anyway.

I'm too old for this baloney.

Thanks all for your help.
PR

[hobbit709]

9. Norton works like a screen door on a submarine.

Download and install Microsoft Security Essentials-it's free and works with a much smaller footprint than either Norton or AVG.

[Jazzgirl]

11. I agree with woo me with science.

Superantispyware is certainly NOT spyware by any means. As woo said, it is excellent at removing that top layer of malware and allows software like Malwarebytes and other reputable software do their thing. The suggestion to go to Bleeping Computer is excellent. They are very patient and have helped people who are much less computer savvy than you.

http://www.bleepingcomputer.com/forums/forum103.html

[woo me with science]

10. That's very strange advice.

The new Norton has gotten better reviews than previous versions, but in my experience still lets through way too many trojans. It is not recommended first by any computer geeks I know except for some big box professionals whose understanding of the other products and motives I question.

Superantispyware is certainly NOT spyware and, in my experience, has often been the single product that is able either to remove malware or to remove the top layer of malware that allows other reputable malware programs like Malwarebytes to run in badly infected systems. I have never heard it referred to as a problem.

Is your machine working well now? That is what is most important after this guy's visit. You're right...computer problems are a pain in the you-know-where. I hope your system is clean now.

[Paper Roses]

12. Just posted about the AVG warning on Bleeping Computer.

They told me it was a phony warning and suggested I run SuperAntiSpyware to check things out. I have taken their advice before and it has been good. I should have gone there first, would have saved a chunk of $$$$>
Thanks to all of you for suggesting what to do.
I did remove AVG and installed MSE. I have that with Malwarebytes. Think I should still install S/A/S?
Any conflict there?
Thanks,
PR

[Earth Bound Misfit]

13. The person who responded to you @ Bleeping is NOT on their Malware Response Team

I don't know how he/she could make the determination that the warning is fake/genuine without any investigation/scans/questions...etc. I would PM a moderator and politely ask for assistance from an MRT member.

[Berserker]

14. Boot up in safe mode

and run Malwarebytes. That picks up things in safe mode it will not pick up in regular mode.

[Paper Roses]

15. Just did a complete M/B scan in Safe Mode. All clear.

It found nothing. I have done 2 scans today w/ MB and one MSE.
No problems show. I guess it is all clear. If not, I'll know soon enough, I'm sure.
Thanks for your help.
PR