[GeorgeH]

Recently, a really persistent and so far unremovable problem has taken over my desktop. I cannot change my desktop for more than one minute before it is changed to a blue background with a Warning that A spyware threat has been found on my system, and a balloon pops up with a message "your computer is working slowly, this may be caused by spyware" and a link opens the following website on explorer:


winsecurityupdates.com/?aid=444.555

This site is selling a $50 program to help cure exactly what it is doing to my computer. I am running XP Pro, SP 3, and already have AdAware, Spybot, and AVG Antivirus programs running, all fully updated and rerun many many times to attack this problem, but to no avail. The desktop image is an undeletable (reforms after deletion file named "default.html".

I would appreciate any suggestions, as I am sure this is not the last time this will happen to someone.

[SpiritWind]

Hi George :



By your Description it sounds like you have what the malware-fighting "community" calls

a "Rogue" ; the PRIMARY program for combatting this type of program is the "Free" Version

of "Malwarebytes' Anti-Malware" from www.malwarebytes.org/mbam.php . IF this

program does NOT resolve the "problem", let us know .

By the way, your Choice of Security programs is NOT the best; nowadays, Ad-Aware and

Spybot are considered "inferior" when compared to the Malwarebytes program and the

FREE Ver of "SUPERAntiSpyware" from [http://www.superantispyware.com] . And AVG

Antivirus is considered not as good when compared to either Avast or Avira/AntiVir, the

"Other" 2 FREE antivirus programs .

[GeorgeH]

Hi SpiritWind:



Thanks for the hints, but after installing and running both prorgams overnight, the problem persists.

Any further suggestions?



George H

[SpiritWind]

Hi George :



There is reliable Info that the Site you quoted ( "winsecurityupdates") is "linked" to a

"Rogue" program known as "PC Protection Center 2008", which the Malwarebytes

program usually adequately "eliminates" . However, there is also Info that there may be a

"Zlob Trojan" involved, which is not that easily eliminated . Therefore, I recommend you

seek the Assistance of the "Malware Removal Specialists" on the malwarebytes.org

Forums at www.malwarebytes.org/forums/ , SPECIFICALLY their "Malware Removal-

HijackThis Logs" sub-forum .

[GeorgeH]

Hi SpiritWind:



It seems that after running all the programs you suggested a few times, the problem went away. My desktop control returned, I was able to delete the default.html file, and all seems to be fine. Thanks for taking the time to help out. I hope I can pass the favor on in some way to others the same way.



Thanx again,



George