Re: Privacyremover virus infected (783 Views)
Reply
Advisor
Tomaz_2
Posts: 18
Registered: ‎05-10-2006
Message 1 of 12 (1,147 Views)

Privacyremover virus infected

My vl400/win2k pro computer is infected with a virus that changes the desktop, displays the message “WARNING! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer.
Warning! Win32/Adware.Virtumonde
Warning! Win32/privacyremover.M64
Moreover, every few seconds a popup window says "WinMgnt.exe" has generated errors and will be closed. You will neto restart the program."
The virus bypassed my Norman Virus Control on-access scanner. Any suggestion on how to remove it?
Honored Contributor
Rich S
Posts: 11,869
Registered: ‎07-03-2005
Message 2 of 12 (1,147 Views)

Re: Privacyremover virus infected

For one it is a spyware and not a virus although it sure acts like one.

These are the rinky dink little guys that are trying to force you to buy their spyware removal tool.

Before trying to remove the spyware get teh business name and report it to the Federal Trade Commission (FTC).

Here is a complaint form...

https://www.ftccomplaintassistant.gov/



Then try and download this freebee spybot search and destroy...


http://www.download.com/Spybot-Search-Destroy/3000-8022_4-10122137.html




Just get that name before you do try and remove it.... theere is no way you can remove it manually. If all else fails, you will have to load a new copy of the OS.


I set up a dual boot and loaded 2 copies of my OS on my PC just for an emergency like this one. By law you can load as many copies of the OS on the same PC. I keep a backupcopy goig just for this kind of problem.


Here i show...

Dual boot (vista already loaded):

http://tinyurl.com/3akmpw

or
http://apcmag.com/5485/dualbooting_vista_and_xp



Rich



say thanks with HP POINTS



Honored Contributor
Rich S
Posts: 11,869
Registered: ‎07-03-2005
Message 3 of 12 (1,147 Views)

Re: Privacyremover virus infected



BTW, if you want to send your SPAM to the FTC they hae an email address for that too.


its :

spam@uce.gov



If everyone would send the FTC their SPAM and spyware emails, maybe it will slow down a bit.



Rich
Advisor
Tomaz_2
Posts: 18
Registered: ‎05-10-2006
Message 4 of 12 (1,147 Views)

Re: Privacyremover virus infected

Ran Spybot twice, found and removed Virtumode, twice, and the problem persists unchanged.
Honored Contributor
Ron Silver_1
Posts: 8,237
Registered: ‎10-25-2004
Message 5 of 12 (1,147 Views)

Re: Privacyremover virus infected

Try Adaware by Lavasoft they have a free version there site is www.lavasoft.com. The Spybot search and distroy I have found to be next to worthless when when I have run it. I have run it both before and after the lavasoft product and it doesn't seem to find anything.
Honored Contributor
John Y
Posts: 8,773
Registered: ‎04-06-2003
Message 6 of 12 (1,147 Views)

Re: Privacyremover virus infected

Spybot should of found it, did you update it first, then hit the imunize tab before scanning? I've had very good luck with in the past.
Honored Contributor
Rich S
Posts: 11,869
Registered: ‎07-03-2005
Message 7 of 12 (1,147 Views)

Re: Privacyremover virus infected

There are certain newer spyware that is not found by the newer dectors too.


your best bet then would be to research the spyware and see if someone else has found a solution.

example

http://www.geekstogo.com/forum/help-remove-privacy-danger-t181264.html


or

http://www.bleepingcomputer.com/forums/topic163812.html#entry915010


Just keep in mind that if someone is SELLING a solution, chances are they created it to begin with.


Rich

Honored Contributor
Rich S
Posts: 11,869
Registered: ‎07-03-2005
Message 8 of 12 (1,147 Views)

Re: Privacyremover virus infected

You can search for PrivacyRemover uses the OS search feature to see if there are files.

Once found you can fix them too.


http://www.xp-vista.com/other/how-to-unregister-dll-files



Rich
Advisor
Tomaz_2
Posts: 18
Registered: ‎05-10-2006
Message 9 of 12 (1,147 Views)

Re: Privacyremover virus infected

Rich, your first sentence ('Your search for ...) not clear; moreover, I have win2k, not xp/vista. I sent the offending file to spam@uce.gov; thanks.
Advisor
Tomaz_2
Posts: 18
Registered: ‎05-10-2006
Message 10 of 12 (1,147 Views)

Re: Privacyremover virus infected

At geekstogo.com forum I found the suggestion to try Malwarebyte's Anti-Malware 1.25 (filename: mbam-setup.exe), and indeed
it removed Privacyremover.M64/Adware.Virtumonde. Thanks to Rich.

Now one piece of debris remains: at startup two pop-ups appear, "HP Tray Icon Bad namespace" followed by "Program error: HPTrayicon.exe has generated errors and will be closed by Windows...". How is this corrected?
Occasional Visitor
Camber Adeben
Posts: 1
Registered: ‎05-10-2010
Message 11 of 12 (783 Views)

Re: Privacyremover virus infected

I know that virus that changes the desktop, displays the message â WARNING! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer, goto http://www.trustdownload.com download a free antivirus and full scan your computer.
Honored Contributor
Ron Silver_1
Posts: 8,237
Registered: ‎10-25-2004
Message 12 of 12 (783 Views)

Re: Privacyremover virus infected

Try the Lavasoft product and if that dosen't work you may have to reload the operating system. If you do have to reload you want to wipe the Hard drive before you try to reload the OS. I use a product called Darrick's Boot and Nuke it is free. Get any data files off of the machine and onto other media and then after you reinstall the OS and programs scan the data files for virus's/spyware
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.