Expert: James Filmer - 1/4/2011

Question
QUESTION: Hello there,

I have this problem which I don't know where to start.  I have a laptop, window.   I was on the internet, and all the sudden the 'spyware protection' popped up all these messages at the bottom right corner of the screen.  The message were like a malicious program has been installed on your computer, google search toolbar has been infected.  Then the 'spyware protection' program did a viral scan and came up with about 96 files that I should delete from my computer, but I have to register and pay, but I'm not too sure if I should trust it.  I tried to use avg to do the scanning and deleting the file, it would just pop up on the screen for 1 sec then disappeared, I try to open up the internet (through mobile broadband) and the same thing happened.  what should I do? what other information do you need in order to assist me?  Any suggestion would be greatly appreciated and thanks so much in advance for your assistance.

cheers

ANSWER: The easiest solution would be for one of the following to detect and remove the fake anti spyware program using one or more of the following.

Download and install, update, scan, remove malware and reboot -  Malwarebytes, but SuperAntispyware, LavaSoft Adware, or Windows Defender is OK too.

I'd suggest the free or free trial version. And, in Settings, Tools or Preferences (depending on which one you use), disable automatic starting with your computer -  run them manually. This might work without further attention, but if not, you now have additional power security tool that should be updated and used often.

The links are on the Enrgy21.com home page.

If you can find the name and version of the fake program, please let me know. That would allow me to determine exactly how to remove it.

There's also http://siri.geekstogo.com/SmitfraudFix.php  -  a free tool that removes rouge programs. It does require some computer skills, but the instructions may help enough to use it successfully. The following tools may be a little easier for you.

Either one of these free tools will allow you to give me log of what's running on your computer. If you can provide the log, I'd be able to tell what it is.
http://free.antivirus.com/hijackthis/
or
http://www.runscanner.net/

---------- FOLLOW-UP ----------

QUESTION: Hello energy21,

Thanks so much for your prompt answer.  I tried to go on the net to download the files as you suggested, but the infected computer wouldn't let me, it said that it has been infected with w32blaster.worm and that Filesetup.exe has also been infected and I wouldn't let me start any program or open any file...what should I do?  Sorry to keep bothering you, I hope you don't mind, man thanks in advance and I would appreciate any suggestions that you might have.

cheers,

Answer
Can you access the following link? Read the instructions on how to install and use the removal tool.

http://bit.ly/xv0RM   (symantec.com ...)

Go to - How to download, install and follow all instructions.

Download and install tool. http://www.symantec.com......./FixBlast.exe

If you need help with specific steps, remember links on Enrgy21.com, Search Engine (this site, Yahoo, Google, others). Or ask me here. Even if there's something else, must get that removed. This way might be best for you, though more for experienced users (if you're not).