Possible Harmful Program

Question

Ok... so today my brother 'accidentally' hit a link one of his buddies gave him and soon found out that it was loaded with spyware and viruses and things like that... I guess he clicked the link too fast because right after his buddy told him not too... ( I guess it posts up the link on its own) so then I went into my computer after doing a Virus/spyware scan and noticed that there were a bunch of programs that were never there before and deleted all of them but one... its called defender22.... when i go to delete it, it says access denied make sure the disk is not full or write protected or being used at this time...how can I remove it I wanna remove it ASAP!?any help is appreciated

KevinD1226 · Answer

Also I see alot of Hijackthis stuff around... what exactly is Hijackthis? also I did a virus scan and spyware scan... is their anyway to check and make sure no programs that could be potentially harmful are installed/just sitting in my computer? Message Edited by KevinD1226 on 05-23-200612:22 AM

ky331 · Answer

Among other things, HiJackThis will give you the following information:

1) a complete list of all programs running at the moment you generate your HJT scan.

2) a complete list of BHO's (Browser "Helper" Objects), that have "attached" themselves to your web browser (Internet Explorer), and

3) a complete list of all programs that are set-up to automatically run themselves every time you turn on your computer.

please be advised that these lists are all-inclusive... that is to say, HJT simply reports these items, without any indicication/implication about whether the programs/BHO's listed are "good" or "bad". For that determination, you should post your log in the HJT forum, for one of the experts there to offer you assistance.

if you wish to try it:

Download a self-extracting copy of the latest version of HJT (HiJackThis) (version 1.99.1) from

http://downloads.malwareremoval.com/hijackthis_sfx.exe

Save it to your Desktop.

Double-click on the file hijackthis_sfx.exe file, and allow it to self-extract [by clicking on UnZip] into the suggested/default folder,

C:\Program Files\HijackThis

Use Windows Explorer to navigate your way into this folder, and then double click on HiJackThis. exe

Click on Do a System Scan and Save a LogFile

This will automatically open NotePad

Copy the entire file from NotePad: EDIT/SelectAll, EDIT/Copy

Then go to the new forum dedicated for HiJack This logs (**NOT** back here), and PASTE the results there:

http://forums.us.dell.com/supportforums/board?board.id=si_hijack

Be sure to include a detailed description of any problems/errors/warnings you are encountering.

Hopefully, one of the HJT experts will get to it as quickly as possible.

WARNING: HiJack This is a VERY POWERFUL tool. While it's completely safe for you to download, generate, and post your log (as described above), you should *NOT* attempt to do anything else (in particular, do NOT use it to delete/fix any entries) until you are advised to do so by a forum expert!! Improper use of this tool can severely damage your system.

EDIT: after preparing/posting this, i discovered that you've already posted your HJT log....

Message Edited by ky331 on 05-23-200609:00 AM

KevinD1226 · Answer

So is there anyway to delete that program or not?

KevinD1226 · Answer

Ok so I restarted my computer after deleting all those programs that were installed in my computer after my brother clicked on the link but once I restarted they all came back.... also im getting pop ups like never before and everytime I go on AIM people just randomly start getting im'ed that are on my buddy list.... can anyone help me with this problem?? im desperate to fix this problem because my comp is only a year old and was running perfectly fine until yesterday...

KevinD1226 · Answer

Anyone?? This is extremely urgent...

ky331 · Answer

unfortunately, you'll just have to be patient, and wait for one of the HJT forum experts to (hopefully) get to your log.... they are overwhelmed there by all the submissions/requests they receive.

if you try making changes on your own, without expert advice, you're taking a risk. while the defender [or defender22] program clearly appears in your HJT log, so do other programs, which might be "related" to it. this is often a "ploy", so that if you remove one of the programs, the "related" one will just restore what you deleted! But I can't assert any of this with absolute certainty, so i am NOT advising you to attempt any changes/fixes based on my "comments".

Virus & Spyware

Possible Harmful Program

Was this post helpful?