Expert: Lorry - 4/11/2008

Question
Hi there,

I am having a virus problem with my computer.  I have Windows XP installed on my PC.  The issue is that my computer encountered some kind a virus/bug/trojan where I see a samll incon at the bottom of my status bar next to the speakphone icon.  Whenever I restart my computer this virus also come up on the windows screen and have the following details.....
I see two windows show up one on the top of the other.  The title for the first window is "AntiSpywareShield EVALUATION VERSION WARNING".  It gives me three options (i)Purchase license (ii)Continue Evaluating (iii)Activate Anitspywareshiled Now.

The title for the second window is "AntiSpywareShield 201".  It has various options like "start scan", Current progress etc.

The issue is the first window i.e. AntiSpywareShield EVALUATION VERSION WARNING forced me to choose one of the three options as mentioned above.  When I clik on any of the option the next window starts scanning and shows me "Malware threats found...." with multiple virus with names as ....Trojan VX Downloader.  Then it gives me the message "Your system is infected!scan found 6 threats. Run threat removal now." with "YES" or "NO" options.  When I clik either of the option it takes me back to the first window with three options i.e. purchase license, continue evaluating and activate spywareshield.  I encounter this everytime I turn my computer on.  

I also tried to find by right clicking on its icon at the bottom of my status bar.  But it does not give me any properties from where I can locate where exactly this file is sitting so I can remove it.

Further, I have also checked this within my "Add/Remove programs".  However, I don't this this program installed in that "Add/Remove program" window.

Would you be able to help?

Thanks in advance.

Answer
Hi Irfan,

Using Internet Explorer, go to:

http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Click the GO button, then under Virus Detection, click Start. You might be told that you need to download and install ActiveX Controls for the scan to work, answer Yes.

Write down exactly anything it finds, then go to: http://www.symantec.com/search/  and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually. Make sure that you follow the instructions for removal, step by step, especially the part regarding disabling System Restore.

I would also suggest downloading Spybot - Search & Destroy 1.5.2 from:

http://www.download.com/Spybot-Search-Destroy/3000-8022_4-10122137.html

Check for updates before running a scan.

Hope this helps!
Lorry