popups stating trojan viruses

[jdublu]

A friend of mine goes online and every 15 minutes or so a pop up appears saying he has a trojan /spyware virus on his pc. I installed the Lavasoft Adaware program and Spybot Search and Destroy and a popup blocker program. They both found many spyware programs and I delelted them. The problem is he is still having these trojan/spyware popups appearing every once in awhile and when you click on it it goes there and it's a "purchase this program" website. How can we stop these from appearing? Also, sometimes a dialog box appears showing nude women.I thought this was some kind of popup but it still appears sometimes. What program can he download to prevent those from appearing?
Thanks for any help,
Jim

 

[bcastner]

Microsoft Windows Defender

http://www.microsoft.com/athome/security/spyware/software/default.mspx

Download, install, and do an immediate thorough scan.

Ewido/AVG Anti-spyware Trial

http://www.ewido.net/en/

Download, install, update the definition file, and scan.



____________________________
Users Helping Users

 

[bcastner]

Since it is likely you were infected with Zlob, the following note is relevent:

http://www.dslreports.com/forum/remark,17163035

Beware of Fake Codecs -- They are likely Trojans

Beware - Desktop Hijacks on the Rise Again
Security Forums have been deluged with daily cries of help from victims of the "Smitfraud" desktop hijackers that are using fake codec to infect their prey.

Watch out for the Zlob Trojan that poses as a codec needed to view a video, then installs a fake virus and urges its victims to download a rogue anti-spyware program to remove it. Lavasoft has also confirmed that this malware takes advantage of unpatched systems using exploits on web pages. Visit Microsoft Update to ensure that ALL of your critical Windows security pages are updated.

Other victims have been infected by a fake e-card greeting, or even a spoofed e-mail that claims to be Windows Update (Microsoft never sends updates via e-mail). Still more unassuming victims received an e-mail asking them to open a link to see the message (these can be fake e-mails, intended only to infect), or even a link from your 'buddy' in instant messages - but don't trust it if you aren't expecting it. Even your buddy could be infected without his/her knowledge and the virus on their computer is sending you the link with one purpose, and one purpose only - to infect you!

A few of the fake codecs out there include:
Emcodec nvidcodec
emediacodec
imediacodec
media-codec
mediacodec
Newvidscodec
svideocodec
v-codec
vidscodec
zipcodec
intcodec

We urge you to be aware and watch out for fake codecs. This is one of the favorite methods used by the authors of malware to lure you into downloading a file that infects your computer. If you receive a link for a video that says you need a certain codec in order to view it, be careful! Today, it could be a fake codec that is actually a Trojan just waiting to infect your system.

New variants are being released daily, even faster than Security Products companies receive new samples for detection. And because it does take time for due diligence on detection for the newer variants, it is important to remember that prevention is the key!

My thanks to Calamity Jane for the warning.

____________________________
Users Helping Users

 

[linney]

Which ServicePack version of XP is he using? Is he fully updated with all the Security Updates from Windows?

Make sure the Messenger Service in Services is Disabled, it is automatically disabled in the later versions of XP.

Surf as a Limited User, not as an Administrator.

If you use Internet Explorer, download IE 7.

http://www.microsoft.com/windows/ie/downloads/default.mspx

Removing adware & spyware
faq608-4650