Arrgh! Another Fake Microsoft Alert!

[The Lady Eve]

This is like that XP virus last summer. You get the pop-up from a real-looking Microsoft "Security Alert Center" that says:

Do you want to block this suspicious software? Win32Aafi.B Risk level high Zafi.B is a worm trojan program that records keystrokes and takes screen shots of the computer, stealing personal financial information. Windows Firewall has detected unauthorized activity but unfortunately it cannot help you to remove viruse, keyloggers and other spyware threats that steal your personal information from your computer. Click to download and activate protection.

Yeah, right. Spyware Doctor stopped it and tells me "ActiveX section has been immunized. No items were processed" but the pop-up still won't go away. Have tried everything. Suggestions? Please.

 

[RobertVA]

Since you're seeking suggestions, you apparently don't really think you've tried everything. Please add further information about your full OS and browser versions. Do you believe that pop-up is being generated by malicious software or by the security software you are running? Is it possible you are using free security software that is designed to sell a revenue generating version from the same vendor/publisher? Describe the contents of the pop-up's title bar (including the icon) and if there are any font changes or graphics in the main application pane of the pop-up. Try scans with some other adware/spyware scanners, virus scanners and/or on-line virus scans.

 

[Robert Maxwell]

The best way to handle things like this is to run HijackThis and post a log file. You can also PM it to me, if you prefer. I can usually spot the nasties pretty easily, having dealt with so many over the years.

 

[The Lady Eve]

Thanks for the suggestions. I got the damn pop-up when I was Googling, btw. Robert M, I think HijackThis is beyond my computer skillz. I've talked to a real human at PC Tools that markets Spyware Doctor - told me to run another scan in safe mode. No joy.

What's annoying is faithfully keeping all your anti-spyware, virus, etc. programs up to date and the assholes who create these trojans and malware always find a way around them.

I'm going to buy another spyware program and start over. Anybody have an opinion about XoftSpySE?

 

[Robert Maxwell]

All you have to do with HijackThis is install it, run it, and pick "Run a system scan and save a log file." The reason it is more useful in some situations is because it doesn't look for specific spyware, it lists everything your computer runs so you can pick out the exploits--if you know what to look for.

 

[Johnny Rico]

This is like that XP virus last summer.

Yeah, I got that...ended up getting a new computer over it. Not that I was disappointed as my computer was 5 years old and severely out-dated.