blip Posted July 7, 2011 Report Share Posted July 7, 2011 When in my browser I type in "Zits" and then click on the Arcamax comics link on the search results page, I see the Zits comic strip. A second later my screen is hijacked, and I am taken to a gaudily-colored screen that says it is Windows. Windows' prototype blue box with icon appears in the middle saying it has found sytem errors.It says you have 97 Trojans, a certain number of hijacks and viruses galore. There are many misspellings and grammar errors here, so much so I didn't trust this ad and clicked off. Sometimes it takes me back to the blue launch/sleep page and I have to go back to find out what is happening.The screen fills with torrid red colored "virus scans" and reports that my Shared Files file is infected-I don't share files with anyone. Many scans are visible and it wants me to click to download a product called Antispyware.exe. I have gone to Malwarebytes and nobody knows how to stop them, for it happens so many times at the Arcamax strip site I complained to the Editor, there was no place to click to contact the Webmaster. So is this a good product or fake antispyware, as Malwarebytes people report? Can I get it off Arcamax, or where does it come from?It wants me to also install something, and I did not.It is made by Uniblue Systweak, isn't it? I have Uniblue Registry booster, but these attacks happened before I'd put that on. What do you think about my questions, there are three of them. Quote Link to comment Share on other sites More sharing options...
Boris Posted July 7, 2011 Report Share Posted July 7, 2011 It is not part of Windows 7 !It is rogue anti-spyware that when scanning your computer displays exaggerated scan results and contains false positives. It then wants you to purchase the software in order to supposedly fix the fake entries it finds. File Location: C:\Program Files\AntiSpywareApp\AntiSpyware.exe This startup entry is started automatically from a Run, RunOnce, RunServices, or RunServicesOnce entry in the registry. It is likely you got it from that web site you mentioned.Do NOT install anything it asks you to !!To remove it follow these instructions :-Malwarebytes Anti-Malware =========================Download, install, run and update this, from :-/>http://www.malwarebytes.org/products/malwarebytes_freeUpdate Instructions: 1.Click on the "Update" tab. 2.Click "Check for Updates". Reboot into Safe Mode (press F8 when booting)Select "Safe Mode With Networking"Run Malware BytesScan Settings: --------------1.Select "Perform Full scan". 2.Click "Scan" to begin scanning. 3.When the scanning is complete a message box will appear informing you that the scan process has successfully completed. Click "OK". 4.Click "Show Results". 5.Ensure all entries are checked, then click "Remove Selected". If you are prompted to reboot, do so.Hopefully that should remove it :) Quote Link to comment Share on other sites More sharing options...
blip Posted July 8, 2011 Author Report Share Posted July 8, 2011 Thank you, and you want me to do this even though I didn't click on anything? Have you read my other entry in Malwarebytes? I was pshaw. Quote Link to comment Share on other sites More sharing options...
bludgard Posted July 9, 2011 Report Share Posted July 9, 2011 If this malware resurrects upon restart, your machine is infected and no more clicking is necessary. Running Malwarebytes cannot do any damage. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.