We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

XP Defender Pro - actually spyware? help!

I've suddenly got windows popping up from 'XP Defender Pro' which tries to make itself look like a legitimate anti-spyware product, but from what I have read it is malicious.

I am getting the following:

1. 'Privacy alerts' every few mins

2. Apparently i have keylogging virus

3. Can't type properly - delays in typing words into boxes on browsers

4. Certain buttons won't work properly

5. Anti-virus doesn't run (adaware anti-spyware etc).

I can't get rid of it and the sites which claim to get rid of it seem as dodgy as the problem itself. - don't want to make it worse.

Any tips - it's really annoying me!
"To be ignorant of one's ignorance is the malady of the ignorant." Amos Bronson Alcott
«1

Comments

  • I've suddenly got windows popping up from 'XP Defender Pro' which tries to make itself look like a legitimate anti-spyware product, but from what I have read it is malicious.

    I am getting the following:

    1. 'Privacy alerts' every few mins

    2. Apparently i have keylogging virus

    3. Can't type properly - delays in typing words into boxes on browsers

    4. Certain buttons won't work properly

    5. Anti-virus doesn't run (adaware anti-spyware etc).

    I can't get rid of it and the sites which claim to get rid of it seem as dodgy as the problem itself. - don't want to make it worse.

    Any tips - it's really annoying me!


    I had the same thing a couple of weeks ago but after xp defender pop ups started i couldn't open .exe files and had all the problems you described above.
    I was advised to system restore to an earlier date and that seems to have done the trick (so far :D)
    p.s if you have the "cant open .exe files" problem like i did boot in safe mode (hold F8 when booting ;)) and take it from there

    as for a long term solution i don't really know i'm afraid..... linux?
  • dogmaryxx
    dogmaryxx Posts: 2,446 Forumite
    Part of the Furniture 1,000 Posts Name Dropper
    Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
    http://www.filehippo.com/download_ma..._anti_malware/
    Open malwarebytes and go to UPDATE and click 'check for updates'. After its updated go to SCANNER and click PERFORM FULL SCAN then click SCAN
    Post the COMPLETE log here AFTER you have deleted everything it finds


    reboot

    Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
    http://www.filehippo.com/download_hijackthis/
    Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
    (do NOT do anything else with Hijack but scan and post the FULL log)
  • Linbox
    Linbox Posts: 383 Forumite
    edited 26 March 2010 at 5:45PM
    Its a virus /trojan please see here http://www.bleepingcomputer.com/virus-removal/remove-antivirus-vista-2010 for details on how to remove.

    Remove the virus then make sure your av prog is running full time and is up to date. Cleaned my sons PC last week and found that he clicked on a link without thinking and his av was't set up properly.
    also it might be a good idea to down load and run
    http://www.filehippo.com/download_spybot_search_destroy/
    http://www.filehippo.com/download_ccleaner/
    after removing the virus.
  • londonman81
    londonman81 Posts: 1,130 Forumite
    Part of the Furniture 500 Posts Name Dropper Combo Breaker
    Linbox wrote: »
    Its a virus /trojan please see here http://www.bleepingcomputer.com/virus-removal/remove-antivirus-vista-2010 for details on how to remove.

    Remove the virus then make sure your av prog is running full time and is up to date. Cleaned my sons PC last week and found that he clicked on a link without thinking and his av was't set up properly.
    also it might be a good idea to down load and run
    http://www.filehippo.com/download_spybot_search_destroy/
    http://www.filehippo.com/download_ccleaner/
    after removing the virus.


    When I try to install Malwarebytes, it doesn't run.....lietrally does nothing after I click on the 'Run' option after double-clicking the downloaded file.

    Doesn't sound healthy...any clues?
    "To be ignorant of one's ignorance is the malady of the ignorant." Amos Bronson Alcott
  • Browntoa
    Browntoa Posts: 49,612 Forumite
    Part of the Furniture 10,000 Posts Name Dropper Photogenic
    rename the installer to something else , so mabam-setup-exe to cleanmypc.exe

    you may need to do the same with the main mbam.exe , rename to qwerty.exe
    Ex forum ambassador

    Long term forum member
  • Browntoa
    Browntoa Posts: 49,612 Forumite
    Part of the Furniture 10,000 Posts Name Dropper Photogenic
    if still no joy then look at this thread

    http://forums.moneysavingexpert.com/showthread.html?t=2351993&highlight=malware+stick

    and follow the advice about putting superantispyware on a usb drive
    Ex forum ambassador

    Long term forum member
  • debitcardmayhem
    debitcardmayhem Posts: 13,100 Forumite
    Part of the Furniture 10,000 Posts Name Dropper Photogenic
    Browntoa wrote: »
    if still no joy then look at this thread

    http://forums.moneysavingexpert.com/showthread.html?t=2351993&highlight=malware+stick

    and follow the advice about putting superantispyware on a usb drive

    Just a word about this, I posted in this thread, but our guru friend Browntoa posted another idea which is better than mine so follow the advice given from his post and the subsequent post about SAS, it's more current than mine
    4.8kWp 12x400W Longhi 9.6 kWh battery Giv-hy 5.0 Inverter, WSW facing Essex . Aint no sunshine ☀️ Octopus gas fixed dec 24 @ 5.74 tracker again+ Octopus Intelligent Flux leccy
  • londonman81
    londonman81 Posts: 1,130 Forumite
    Part of the Furniture 500 Posts Name Dropper Combo Breaker
    Browntoa wrote: »
    rename the installer to something else , so mabam-setup-exe to cleanmypc.exe

    you may need to do the same with the main mbam.exe , rename to qwerty.exe


    Still no joy from this - and why would the USB stick method work as I still have to install it onto the machine....
    "To be ignorant of one's ignorance is the malady of the ignorant." Amos Bronson Alcott
  • When I try to install Malwarebytes, it doesn't run.....lietrally does nothing after I click on the 'Run' option after double-clicking the downloaded file.

    Doesn't sound healthy...any clues?

    did you try system restore to an earlier date? thats what i had to do to get any program to open so i could install malwarebytes
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Reboot and keep pressing F8 to get into SAFE MODE WITH NETWORKING and retry malwarebytes from there

    If still no joy then try hijack this (really needs to be run in NORMAL mode though)
    :idea:
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 352.1K Banking & Borrowing
  • 253.5K Reduce Debt & Boost Income
  • 454.2K Spending & Discounts
  • 245.1K Work, Benefits & Business
  • 600.7K Mortgages, Homes & Bills
  • 177.4K Life & Family
  • 258.9K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.2K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.