Help I have a virus and I can't get it off

[Speirs]

When I get on the internet instead of going to my homepage, it automatically redirects me to a website called www.syssecuritysite.com. This site is Bull ****. It says that I have a virus and that to download these anti-virus stuff. Those anti-virus programs are BS like one is Pest Trap and that (I researched) is a program that actually downloads spyware on to your computer. A alert box that keeps popping up in the bottome right corner is bs saying that my system has a trojan and to download some anti-virus stuff( More BS fake programs). There is an extra toolbar next to my address bar. Pop-ups come up reguraly with Poker ads, Pornographic images saying find sex in Knoxville(where I live),
and on saying find adult friends now at adultfriendfinder.com. My performance has been awfully low too, and my Internet has been alot slower than normal .I have McAfee Firewall and Virus Scan(Not helping, Spybot Search and Destroy(Not helping), and Ad-aware SE personal Edition (Not Helping).


Anyone have any suggestions?

Is this a virus? Or is it spyware or adware or malware or a trojan?

Note: I had this same virus about a week ago and McAfee Virus Scan got rid of it no problem. Now it isn't helping. Spybot S&D finds the virus and it is called Naguche.a@MM and it says it deletes it but it doesn't help.

 

[Hyperion2010]

http://www.lavasoftusa.com/software/adaware/

DL that, install and run and see what it turns up.

 

[Spade]

http://www.linux.org/

Or do usual Windows stuff: reformat and reinstall.

 

[[CoFR]BooBoo]

Do a search for the virus at www.symantec.com and you should find removal instructions. If you do, follow them EXACTLY or mayhem may ensue.

 

[Speirs]

i have adaware

 

[SnotRocket]

Just quit with the linux elitist crap and try to help the guy out, ok?

Like hyperion said, download ad-aware and run it. If that finds nothing, then download, install, and run spybot S&D. http://www.download.com/3000-2144-10122137.html

If neither of those find anything, then you need to run an anti-virus program. I recommend either Avast! Home Edition http://www.filehippo.com/download_avast_antivirus/ or AntiVir Personal http://www.filehippo.com/download_antivir/.

If none of that yields any results, either consult someone with more knowledge, or do a reformat.

 

[Err]

http://housecall.trendmicro.com/

This is a free online scan. If you are going to pay for any antivirus software, I'd recommend Trend Micro.

By the way, Turn System Restore OFF. I've encounted may virus/malware that puts itself into XP's system restore so that everytime you remove it, it restores itself when you restart. After you get the thing removed, turn it back on.

If trend micro's online scan doesn't get rid of it, go here and follow the procedures for manually removing the thing: http://forums.majorgeeks.com/showthread.php?t=90478

 

[Hyperion2010]

Hehe, thats what I get for speed reading.


You use everything I do. Look at your process list and see if there is anything there that looks unfarmiliar.

When I get something like this (usually once every few years) I just reformat becuase they are so ****ing annoying.

 

[[5.SS]Strother]

Stop looking at strange porno sites and you won't have this problem.

 

[SiFi]

I'm in the nuke(format) your system drive camp. Of course, I've got my games and media on other drives so I have a lesser risk of losing them

Also, I've found that AVG free works well.

 

[Jamer]

get a program like xoftspy or crap cleaner, some offer a free trial others you'll have to pay , it will depend on how much your willing to protect your investment.

 

[Speirs]

Strother I don't look at porn. How do I turn off system restore? I scanned my computer and it found stuff but it wont delete it it says make sure it isnt write protected or i use. Know what to do

 

[Pavel]

Do a non-destructive system restore. It is like cleaning house. Computer will run faster and all virus are gone.

 

[Murphy]

Programs that change your default browser page against your will are called Hijacks. They can do other nasty stuff too, and if you have too much of them on your computer it might run slower than it should.

Download HijackThis, let it scan your computer and save the log file.
Don

 

[belfastbood]

same thing happened to me a while back i had to reformatt my pc my freind was sorting my pc out he said it was happenning with yahoo browser

 

[foxracer693]

reformat thats the last resort.

 

[SnotRocket]

Like Murphy said, try HijackThis and post the log in a forum for people who know what they're doing to look at. It tends to work when nothing else will.

 

[MkH^]

Reformat. Reformat again. Re-install Windows, install Firefox and never use IE again to prevent stuff like this from happening.

 

[Err]

Strother I don't look at porn. How do I turn off system restore? I scanned my computer and it found stuff but it wont delete it it says make sure it isnt write protected or i use. Know what to do

Go to Sysytem Properties: Right Click "My Computer" Select "Properites"

Click "System Restore Tab"

Check the box for "Turn Off System Restore"

Click OK

Repeat to turn it back on.


Here's another removal procedure. Remember, Turn off System Restore and Restart in safe mode (Hit F8 during bootup to get the option for Safe Mode)

SysSecuritySite Removal Instructions


SysSecuritySite General Description:

SysSecuritySite is a computer hijacker that redirects a user's web browser to www.syssecuritysite.com, pops up warning messages and a warning bubble from the taskbar announcing the computer is infected with spyware and that the user should download a spyware remover. SysSecuritySite only promotes fake anti-spyware products such as SpywareStrike, SpyGuard, PestWiper, SpyAxe, Malware Wipe, and Adware Punisher.


Remove "SysSecuritySite" Automatically:
Download SysSecuritySite removal software.


How can I get rid of "SysSecuritySite"?

Your best defense to remove SysSecuritySite, or any other spyware, is to quickly detect and delete SysSecuritySite processes, registry keys, DLL files, and other hazardous SysSecuritySite files from your computer. Click here to manually uninstall SysSecuritySite using "Add/Remove Programs" in your PC.

Remove SysSecuritySite Manually

Note: This manual removal process is difficult and you run the risk of destroying your computer. We recommend that you use the automatic removal process.

Remove SysSecuritySite processes:
dcomcfg.exe
atmclk.exe


Remove SysSecuritySite registry values:
5f4c3d09-b3b9-4f88-aa82-31332fee1c08
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browserhelper



Detect and Delete these SysSecuritySite files:
dcomcfg.exe
atmclk.exe
hp100.tmp
simpole.tlb
stdole3.tlb

 

[K.Johansen]

ewido anti-malware is good