skip to main content

Pop-Up Leftover From Virus/Trojan

country_bumpkin_al

13 years ago

A fake anti-virus decided to take a ride on my computer TWICE yesterday. Between AVG and SuperAntiSpyware, I think I managed to get rid of it..but now everytime I start my computer, I get this pop-up! Is there a way to get rid of it and can it be explained in baby talk? lol

{{gwi:1484849}}

I have a DELL Inspiron 1545 with Vista.

Sort by:Oldest

Comments (2)

azinoh
13 years ago
I would make a guess that the virus modified or installed a registry key which is calling for the virus during boot and kicks out the error message when it can't start the virus program. You could spend a lot of time trying to find the right key to delete it, or you could try a registry cleaner. If you want to try the latter, I'd suggest running the cleanup and registry functions in CCleaner. Just be sure to backup before cleaning the registry.

Here is a link that might be useful: CCleaner
grandms
13 years ago
I would run an updated version of Malwarebytes. After it has finished and removed anything it finds, be sure to reboot. Did you reboot after running Superantispyware? If not, it may not have removed all the Trojan, and that is what is popping up now.

Always reboot as part of the clean-up process.
Related Discussions
Trojan Virus - Causing Major Problems
Q
Comments (2)
After following owbist advice, you will need to go a Malware removal forum below are 2 we recommend it would be in you best interest to follow up on this ASAP. Post a hijackthis log at one of the chosen forums an seek expert advice. http://www.help2go.com/forum/spyware-help/ http://www.landzdown.com/index.php
...See More
Trojan horse Rootkit CW uh oh
Q
Comments (35)
This is the second Malwarebytes scan after I removed everything I could from the first scan results. Malwarebytes' Anti-Malware 1.35 Database version: 1939 Windows 5.1.2600 Service Pack 3 04/03/2009 11:04:36 PM mbam-log-2009-04-03 (23-04-36).txt Scan type: Full Scan (C:\:) Objects scanned: 119355 Time elapsed: 47 minute(s), 4 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 15 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 8 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\acpi32 (Rootkit.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\acpi32 (Rootkit.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\amd64si (Rootkit.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\amd64si (Rootkit.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\amd64si (Rootkit.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\netsik (Rootkit.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netsik (Rootkit.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\nicsk32 (Rootkit.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nicsk32 (Rootkit.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\i386si (Rootkit.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i386si (Rootkit.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ati64si (Rootkit.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\ati64si (Rootkit.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ati64si (Rootkit.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fips32cup (Rootkit.Agent) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\System Volume Information\_restore"415790D9-BB81-41AF-9469-EEC2DB43FA43>\RP997\A0179839.sys (Rootkit.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\drivers\acpi32.sys (Rootkit.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\drivers\amd64si.sys (Rootkit.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\drivers\netsik.sys (Rootkit.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\drivers\nicsk32.sys (Rootkit.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\drivers\fips32cup.sys (Rootkit.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\drivers\i386si.sys (Rootkit.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\drivers\ati64si.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
...See More
Getting pop-ups and web pages when closing out from IE.
Q
Comments (6)
Good suggestions on the updates as well as the anti virus. I'd also recommend doing a registry scan/clean. That is how alot of the little bot programs hide themselves..can scan for free too like the antivirus Andie Here is a link that might be useful: registryeasy.com
...See More
re: pop up message
Q
Comments (5)
AVG detects a false positive in Security 360 beta 2.0 during 360 scheduled scan: Resident Shield detection "Infection;""Object"";""Result"";""Detection time"";""Object Type"";""Process""" "Trojan horse BackDoor.Ircbot.JAO;""C:\WINDOWS\SYSTEM32\igfxzoom .exe"";""Infected"";""7/12/2009, 10:37:10 PM"";""file"";""C:\Program Files\IObit\IObit Security 360\IObit Security 360.exe"""
...See More

Related Stories

ARCHITECTURE Superb Family Homes Pop Up in Forgotten Urban Spaces

By Lunchbox Architect

Take a look at how these innovative houses take advantage of underused spaces and improve their cities in the process

BUDGET DECORATING Pop Culture Watch: Get a Good Rap With Thrift Store Scores

By Becky Harris

Eight rooms that rock secondhand finds, in an ideabook inspired by rappers taking YouTube by storm

FURNITURE 10 Highlights from High Point 2011

By Becky Harris

Catching our eye at fall's must-see furniture show: live-edge wood, peacocks, wild lights and shine

HOUZZ TOURS Houzz Tour: From Shocker to Stunner in Houston

By Mitchell Parker

Once moldy and decrepit, this 1920s bungalow is now a neighborhood gem

KITCHEN DESIGN 16 Practical Ideas to Borrow From Professional Kitchens

Restaurant kitchens are designed to function efficiently and safely. Why not adopt some of their tricks in your own home?

KITCHEN DESIGN 20 Kitchen Must-Haves From Houzz Readers

By Jennifer Ott Design

We asked you to tell us your top kitchen amenities. See what popular kitchen features made the list

BATHROOM DESIGN Personal Style: 50 Bath Designs From Creative Owners and Renters

By Annie Thornton

Ideas abound in bathroom styles ranging from upcycled vintage to sleekly modern

HOUZZ TOURS My Houzz: Brooklynites Take Up a Rural 1940s Farmhouse

By Rikki Snyder

A city-dwelling family plants new roots in upstate New York, remodeling their digs with cheerful, colorful touches

KITCHEN DESIGN Kitchen of the Week: Turquoise Cabinets Snazz Up a Space-Savvy Eat-In

By Vanessa Brunner

Color gives a row house kitchen panache, while a clever fold-up table offers flexibility

KITCHEN DESIGN Kitchen of the Week: A Dark Kitchen Brightens Up

By Mary Jo Bowling

A cooking space honors the past while embracing the present

Sponsored

RTS Home Solutions

3 Reviews

BIA of Central Ohio Award Winning Contractor

More Discussions

Can I stop my modem from gathering and sharing our data?

12

UPS needed - which ones?

9

sound missing on Dell

3

Problems with Outlook 2013

0

Any suggestions for a very secure non-web-based email?

3