Hi everyone, Whenever I open up a folder (like C:\ drive), I get an annoying fake popup message that says Code: Attention, Sam! Some dangerous trojan horses detected in your system. Windows Vista (TM) Home Premium files corrupted. This may lead to the destruction of important files in C:\Windows. Download protection software now!. Click OK to download the antispyware. (Recommended) If i click OK on the popup it leads me to a page where I can download IE antivirus (and I know that is a fake). I need a way to remove these damn popups. Thankyou for helping!
Download (hijackthis) http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html and do a scan and copy your log here. I would say your account is set as Sam and the trojan/spyware is accessing this info. or you could download nod32 and counterspy and scan your pc youself taking advantage of the 30day free trial. Also download CCleaner to clean windows installation.
OK thank you for your help, but just today when I ran a scan with avast! anti-virus. It FINALLY picked it up. (I had ran previous scans and it had found nothing). So thank you for helping, and I hope if I have anymore problems I can for help here! Thanks.
Oh yes also the file was called xmlsys.dll So if an the future anyone has this problem, tell them to find and delete that file.
Try this Sam and see if you're still infected. 10. Next you can do a quick Spyware Audit which won’t actually install any program but just check the system for infection to see where we are in the fight against Spyware/Viruses a. Go here and follow the prompts. If you have no internet, skip this step. http://www.webroot.com/services/entaudit/auditbegin.php b. Click on the link and save the file to your “Desktop” c. Run the file and wait for all 5 steps to finish d. View the displayed results. If your system only shows cookies then you’re OK. If your system has any other one of three groups then more work needs to be done.
