The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Spyware Protect 2009 alert

    Discussion in 'Security and Anti-Virus Software' started by ICantFeelMyFace, Apr 23, 2009.

  1. ICantFeelMyFace

    ICantFeelMyFace Notebook Evangelist

    Reputations:
    79
    Messages:
    371
    Likes Received:
    0
    Trophy Points:
    30
    Ok well I came home from work and my mom tells me she thinks we have a virus, Im not really sure what to do? This comes up and it is telling me to buy Spyware Protect 2009 but right now I am scanning it with AVG(don't know if it is good) and It is showing no threats at all. Please help

    http://i260.photobucket.com/albums/ii6/TexasBoy_210/Alert.jpg
     
  2. jin07

    jin07 Notebook Deity NBR Reviewer

    Reputations:
    1,194
    Messages:
    1,889
    Likes Received:
    0
    Trophy Points:
    55
    Try running Super Anti Spyware and Malwarebytes Anti Malware. Links to both can be found in the Free Software sticky in this sub-forum.

    Also, get Avira. It's significantly better than AVG.
     
  3. ICantFeelMyFace

    ICantFeelMyFace Notebook Evangelist

    Reputations:
    79
    Messages:
    371
    Likes Received:
    0
    Trophy Points:
    30
    Thanks for the quick response im downloading those right now, it just sucks since these alerts keep popping up.
     
  4. jin07

    jin07 Notebook Deity NBR Reviewer

    Reputations:
    1,194
    Messages:
    1,889
    Likes Received:
    0
    Trophy Points:
    55
    Also, after you install those programs AND update them, run your scans under safe mode. It's probably not necessary, but it's still a good idea.
     
  5. cat mom

    cat mom Notebook Evangelist

    Reputations:
    340
    Messages:
    387
    Likes Received:
    0
    Trophy Points:
    30
    I believe malwarebytes will remove the "spyware protect 2009" bug.
     
  6. HerrKaputt

    HerrKaputt Elite Notebook User

    Reputations:
    444
    Messages:
    2,510
    Likes Received:
    0
    Trophy Points:
    55
    And no-one said this yet because it's reasonably obvious, but: do NOT download Spyware Protect 2009!
     
  7. ATC

    ATC Notebook Deity

    Reputations:
    245
    Messages:
    1,278
    Likes Received:
    0
    Trophy Points:
    55
    As HerrKaputt said, do NOT download, purchase or install Spyware Protect. Unfortunately, it sounds like you have the Conficker worm.
     
  8. crash

    crash NBR Assassin

    Reputations:
    2,221
    Messages:
    5,540
    Likes Received:
    13
    Trophy Points:
    206
    How so? The Conficker worm generally blocks people from downloading anti-virus/spyware software. The OP said that he/she is downloading the software, so it doesn't seem to be the Conficker worm.

    I suggest scanning with Malwarebytes, SuperAntiSpyware, and Avira Antivir to try and get rid of this.
     
  9. ICantFeelMyFace

    ICantFeelMyFace Notebook Evangelist

    Reputations:
    79
    Messages:
    371
    Likes Received:
    0
    Trophy Points:
    30
    Yeah I know, if something pops up saying I have to buy something to get rid of a virus I don't im very paranoid with these things, I like to come here first to see what everyone here has to say, Im just happy my mom didn't fall for it. Well im not getting the pop ups anymore I scanned with malwarebytes which detected 1 threat and Super Anti Spyware that detected 27. Thanks for the help everyone, Like always ya'll know what to do
     
  10. ATC

    ATC Notebook Deity

    Reputations:
    245
    Messages:
    1,278
    Likes Received:
    0
    Trophy Points:
    55
    Spyware Protect 2009 is a fake AS program, and thought to have been promoted through the Conficker worm. A couple of links; First, second.
     
  11. ICantFeelMyFace

    ICantFeelMyFace Notebook Evangelist

    Reputations:
    79
    Messages:
    371
    Likes Received:
    0
    Trophy Points:
    30
    I got it again! does anyone know how people get this? I have no idea how I could have got it.

    edit: My computer is making some kinda loud noises, it sounds like an alarm but goes on off on off real quick
     
  12. ATC

    ATC Notebook Deity

    Reputations:
    245
    Messages:
    1,278
    Likes Received:
    0
    Trophy Points:
    55
    If it was me, this would be a good time now to backup everything off your HD; docs, emails, files, favourites etc... because a clean windows install might be the only solution.

    After that but before wiping your machine clean, try Avira 9 (free) as it has one of the highest detection rates of any malware protection software out there and run a full scan.

    Maybe someone can come up with a better solution.
     
  13. ICantFeelMyFace

    ICantFeelMyFace Notebook Evangelist

    Reputations:
    79
    Messages:
    371
    Likes Received:
    0
    Trophy Points:
    30
    I was scanning with Avira and when it got to like %80 it just closed by itself and a bubble came up saying I was not protected so I had to activate Avira again. Maybe I could convince my mom that we need a new computer since i've been wanting a new one.haha.
     
  14. ICantFeelMyFace

    ICantFeelMyFace Notebook Evangelist

    Reputations:
    79
    Messages:
    371
    Likes Received:
    0
    Trophy Points:
    30
    I just realized that the spyware protection 2009 alert had went away, and I have got a blue screen twice.

    edit: Now when im on a site and click a link it opens up a tab to go to the next page instead of it just open the page, or it will open a tab and go to google.
     
  15. Jakamo5

    Jakamo5 Tetra Vaal

    Reputations:
    635
    Messages:
    1,456
    Likes Received:
    105
    Trophy Points:
    81
    someone isn't up to date on his Conficker symptoms!!
     
  16. crash

    crash NBR Assassin

    Reputations:
    2,221
    Messages:
    5,540
    Likes Received:
    13
    Trophy Points:
    206
    Indeed, you're right! :eek:

    To the OP, it sounds like you should re-format your computer. Do you have a Vista re-install (or retail) disk?
     
  17. Full-English

    Full-English Notebook Deity

    Reputations:
    1,227
    Messages:
    1,512
    Likes Received:
    8
    Trophy Points:
    56
    I would go with the re-format, install. Once infected any virus/trojan etc can be a pain to get rid of at the best of times. I've only successfully managed to do it once. It's quicker and easier to reinstall if you can
     
  18. ICantFeelMyFace

    ICantFeelMyFace Notebook Evangelist

    Reputations:
    79
    Messages:
    371
    Likes Received:
    0
    Trophy Points:
    30
    I think i still have the disk, i'll have to look for it. Man this is getting me mad, now whenever i click on something(like click on windows os and software) it opens up a new tab and redirects me to google or some other sites, oh and another question once i scan with malwarebytes and superantispyware do i leave the threats in quarantine or delete them?
     
  19. crash

    crash NBR Assassin

    Reputations:
    2,221
    Messages:
    5,540
    Likes Received:
    13
    Trophy Points:
    206
    I would delete them. And try to find that disk!
     
  20. ICantFeelMyFace

    ICantFeelMyFace Notebook Evangelist

    Reputations:
    79
    Messages:
    371
    Likes Received:
    0
    Trophy Points:
    30
    ok thanks, I wasn't sure if I should leave it in quarantine or delete it. + rep to everyone who helped in this thread.
     
  21. crash

    crash NBR Assassin

    Reputations:
    2,221
    Messages:
    5,540
    Likes Received:
    13
    Trophy Points:
    206
    Post back if/when you manage to find the reinstall disk :)
     
  22. ICantFeelMyFace

    ICantFeelMyFace Notebook Evangelist

    Reputations:
    79
    Messages:
    371
    Likes Received:
    0
    Trophy Points:
    30
    Haven't found the disk yet, but I really haven't been looking very hard for it though. Ok another question should I worry about this? That thing pops up and when I press cancel it just comes right back, and it is scanning my computer behind that pop up.
    http://i260.photobucket.com/albums/ii6/TexasBoy_210/IDK.jpg
     
  23. decaPODA

    decaPODA Notebook Evangelist

    Reputations:
    12
    Messages:
    323
    Likes Received:
    0
    Trophy Points:
    30
    although malwarebytes shall take care of your problem.. it did in my case, had same antivirus2009 running all over my PC,

    try giving a shot to Avira or Avast..anyday better than avg..

    n gudluck if you have to format your comp.. :)
     
  24. ICantFeelMyFace

    ICantFeelMyFace Notebook Evangelist

    Reputations:
    79
    Messages:
    371
    Likes Received:
    0
    Trophy Points:
    30
    I don't even know how to format a computer, so im guess its gonna be a big pain in the ***, thats why im taking my time looking for the disk.

    edit: ok just to make sure is the disk im looking for the windows xp home edition disk? or is it something else? I found my windows xp disk and it is a lot of scratches I hope it will still work.
     
  25. ICantFeelMyFace

    ICantFeelMyFace Notebook Evangelist

    Reputations:
    79
    Messages:
    371
    Likes Received:
    0
    Trophy Points:
    30
    ok I reformated my computer, it took a long time but I think I got it, now I just need to update everything which is gonna take a long time. Jin07 I tried to rep you but I need to spread rep around so when I get a chance I will rep you. Thanks everyone for the help lets hope it doesn't happen again,
     
  26. HerrKaputt

    HerrKaputt Elite Notebook User

    Reputations:
    444
    Messages:
    2,510
    Likes Received:
    0
    Trophy Points:
    55
    You can look into this sub-forum for some information on how to keep your computer secure. And congratulations on managing to format your hard drive! I can recall having a slightly accelerated heart rate when I did it the first time :D
     
  27. ICantFeelMyFace

    ICantFeelMyFace Notebook Evangelist

    Reputations:
    79
    Messages:
    371
    Likes Received:
    0
    Trophy Points:
    30
    haha I was getting frustrated since I tried to reformat it like 3 times but I didn't know how to do it so I would just guess then finally I used the internet on my phone and got it, I did have a problem though when it was installing xp it told me to put in the cd for my video card but I didn't have it so I press x and now its not recognizing it(its not a good card at all but the computer seems a little slower to me) anyone know what to do about that?
     
  28. KLSlim

    KLSlim Notebook Enthusiast

    Reputations:
    0
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    5

    Find the make and model of the video card, go to the manufacturers website and download the latest drivers, install them, reboot and the card should work. Even if you had the disk the drivers on it are probably out dated anyway.
     
  29. marconi

    marconi Notebook Consultant

    Reputations:
    38
    Messages:
    115
    Likes Received:
    0
    Trophy Points:
    30
    Somehow I picked up this virus too yesterday.

    In my case...
    I couldn't update any of my Anti-Virus programs or do a Restore.
    I had to rename MalwareBytes' mbam.exe to mba.com in its folder inside the Programs main folder just to get MalwareBytes to even run.
    This only took care of some of it..but left one rootkit "uacinit.dll" behind.
    Which replicated itself again under many named DLL's.

    Running Hijackthis showed :

    O4 - HKCU\..\Run: [sysguardn] C:\WINDOWS\s

    But deleting this was not enough.

    Just for the HOI, I tried McAfee's Stinger_Coficker.exe
    But no buggies showed up in that program

    Finally in the end I had to run Combofix to get rid of it all.

    I did note that some of the files were DLL's that were named:

    c:\windows\system32\drivers\UACwxnsdppkkdqqfxr.sys
    c:\windows\system32\UACaloyqxoibivmopp.dll
    c:\windows\system32\UACbkrdymrvbpnvvhp.dll
    c:\windows\system32\UACcmsvhlynuyrwkab.dll
    c:\windows\system32\UAChwhdwavvybiwkpd.dat
    c:\windows\system32\uacinit.dll
    c:\windows\system32\UACojjwgdxumjoafsn.dll
    c:\windows\system32\UACqvuihwavogxinye.dll
    c:\windows\system32\UACqxtexvlkqbjtsjw.log
    c:\windows\system32\UACsrltxsapipeodid.log
    c:\windows\system32\UACuwbeetapftfhyfx.log

    Basically its a UAC rootkit and these were hidden from me too.
    Combofix eliminated them nicely.

    Before even thinking about using Combofix, unless you are familiar with using this program, I would do some heavy reading on its use and ask questions as it may not be for you. It did work for me.
    I have rescanned with known good anti-virus programs just to be sure its gone.
    And to be safe, I had pulled the drive from my laptop and ran it as a slave in another clean machine and scanned it again and found no more buggies.

    Just thought I'd toss this in since nobody here has mentioned that they got rid of this problem without reformatting their drive.