General discussion
-
Topic
-
Fake message Spybot has blocked download
LockedOne of my users has a virus or worm that I’m having difficulty cleaning. Using Windows 2000, Symantec Anivirus Corp 9.1, Spybot S&D, Adaware. First I emptied all of the Temporary Internet files and cookies and all TEMP files, and emptied the Recycle Bin. Ran Adaware and Spybot till it was clean, then ran Symantic with the latest definition files (had to reinstall since it had been disabled by a virus. Detected download.trojan, quarantined and deleted. I searched through the registry for names of some processes that looked suspicious and found in HK_USERS\Software\Microsoft\Internet Explorer\Explorer bars\filesNamedMRU whose right panel included about 20 entries of obvious spyware entries. I deleted the entire entry. I ran Symantec (clean). When I then started IE, I got the message “Spybot has blocked the download of “avenue A, Inc”! At first I said “OK”. When I then checked the Temporary Internet File folders, it was full of a bunch of porn images. I then deleted the folders, got out of IE and ran it again. When I got the same message “spybot has blocked …”, I exited and checked the Temporary Internet folders … no porn. Question: Which virus exactly am I dealing with and how can I clean it? A couple of days ago when I first worked on this PC, I had gone through the spyware and virus cleaning in SAFE MODE so something is still not being caught here. Any ideas? Thanks in advance.