Help - Virus or Nasty Spyware or something

[Bench Warmer]

Earlier this evening, I was surfing around the internet looking for some old school gaming roms. Can't remember what site I was on but I got a pop up which was asking me to agree to a 'XP AntiVirus 2008' and install. I cancelled out of that - have McAfee already. I then go back to my desktop and there's a window saying I have 2 viruses and to click on an install button at the bottom of the window to get rid of them. I figure out that somehow, this window is a picture that has now become my desktop. I got rid of that, restarted and now have noticed a couple things:

a) PC seemed to be slower on startup but speed is fine now - could have been impatience on my part
b) When I go to google.ca now, when I search for something, any link I click on from the results redirects to some 'jump' (abcjmp) or other page.

Anybody know what it is and how do I get rid of it? I have McAfee scanning my PC right now. I'd try google to figure it out but can't get to any of the results pages without being redirected.

[arsenal]

Here is a google search result on it:
http://www.google.ca/search?q=XP+Ant...ient=firefox-a

hopefully you can find something in there to help you get rid of it.

[Cliche]

This is apparently one of the really aggressive ones where you have to unregister .dll files that aren't really documented anywhere.

If you are comfortable with unregistering dll files, editting the registry, and mucking with your system restore, then I have nothing more to say.

If not, then your best bet is to get a more proficient person to either reload your system, or shell out for some place to do it for you.

A hint for when unregistering the dll, insert an empty text file where the evil dll is. Rename the bad dll something else, and name the empty text file the bad dll file.


http://www.bleepingcomputer.com/malw...ivirus-xp-2008

This link may be blocked by the xp antivirus so I recommend getting a 2nd system that isn't infected to read and print out instructions.

[You Need a Thneed]

I had something similar to that virus on my work computer a couple of months ago. I ended up reinstalling windows.

[rbochan]

Google yourself "smitfraud fix".

[mykalberta]

Hahahaha.

Sorry I had a user install this crap. Its quicker to rebuild your system than to try to fix this. It amazes my what people will do when a pop up is installed.

I watched a user install this, I would have said something but waited until he asked me, then I told him you just installed some of the worst shat known to man. Good luck with that - tell me when you have 30 minutes so I can reimage your machine .

[psicodude]

I have had some luck with this freeware: http://www.malwarebytes.org/mbam.php

But, as others here have said....once these things get themselves installed, they are a royal PITA to try to get rid of.

[Bench Warmer]

Well, after a couple of 'crashing' attempts to get rid of this thing, I went into safe mode, backed up my data, took out my Windows XP disk and re-installed the O/S. Question now - I've re-installed and don't have any sound. Don't know what my sound card is as it came installed with PC - any idea on how I can get my sound working again?

Thanks for all the help.

[Cliche]

Originally Posted by Bench Warmer

Well, after a couple of 'crashing' attempts to get rid of this thing, I went into safe mode, backed up my data, took out my Windows XP disk and re-installed the O/S. Question now - I've re-installed and don't have any sound. Don't know what my sound card is as it came installed with PC - any idea on how I can get my sound working again?

Thanks for all the help.

The dealer that you got your pc from should have included a bunch of driver cd's with it. If not, then if you have any of the major brands, you could go download drivers from the manufacturers website. Not so if you have one of the local brand computers that are customized here. In that case, a bill of sale detailing what parts are in your system and you can guess the manufacturer of said components and obtain drivers that way.