Fake warning popups

[bloodeagle]

Hey,

I don't know what happened, but now, every minute or so, I get a random warning popup from my taskbar telling me I have a virus, trojon, keylogger...etc. They show the file path as well, but whenever I go to that path, obviously the file doesnt exist.

I ran Norton Antivirus, and Adaware, and it won't get rid of it.

This is what it looks like.... http://individual.utoronto.ca/burg/popup.JPG

And if I do click on the bubble, it opens up to a link... http://antispylab.com/

Thanks for any help.

 

[tdg]

Looks like you're infected with the now infamous Spysheriff or a variant. Looks like a virus/trojan warning, but that IS the trojan, redirects you to a page where you have to buy software.

The best way I've found to get rid of it is to use System Restore to roll back to a point where it wasn't there. I've seen it on several machines, and had mixed luck getting rid of it completely. It hides itself in several folders with randomly generated names (files types that typically aren't scanned) and in the registry, really a bear to get rid of. On many of the infections of that I've seen, it uses the rootkit idea to cloak itself, preventing AV scans and spyware scans from even "seeing" it.

Heres some info on it

 

[djnes]

If you think you have a malware infection, it's best to disable system restore, and leave it that way. System Restore is a great place for malware to hide, in order to re-infect your machine. The OS subforum has some great posts about steps to fight off some of the nastiest malware infections.