The computer was infected by a Trojan. I removed one by using Yahoo anti spy, but second is still alive: Trojan.win32.Qhost.df. Other thing happened is that in menu bar of Explorer, from View/ Toolbars tabs become gray and passive. Anyone knows the remedy?
202172
Use norton antivirus with latest virus defenition
19373
do you have a firewall?  if not it is easier to get viruses.  but you should also download a spyware detection program (not the one on yahoos toolbar)that gets rid pf spyware.  a lot of times spyware is the problem.  you could also try.... after you try to turm ot off.... holding CTRL ALT DEL at the same time, and see what pops up in the task widow.  sometimes that can tell you what is not correctly responding!  I wish you lots of luck!\nmissdavis
387789
I think you can do that if you have XP.  "start" "programs" "accessories" "system restore."  Set it to date before this happened.\n\nIf not:\n\nTry these. They work and they are free:\n\nRun the tool and then download the free spyware and virus protection programs:\n\nMalicious virus removal tool:\nhttp://www.microsoft.com/security/malwareremove/default.mspx\n\nAd-Aware Free download:\nhttp://www.lavasoft.de/software/adaware/...\n\nAVG Download free\nhttp://free.grisoft.com/doc/1\n\nYahoo Toolbar has good pop-up blocker:\nhttp://toolbar.yahoo.com/\n\nGood Luck
658134
It's related to Trojan-Clicker.JS.Agent.d, modified of course...
568696
please update your anti virus definitions if using nortons just run live update, they all posted the def for this couple of days ago. now comes the fun , you must turn off the auto system backup or it will save the virus/worm and reinstall it after you reboot. see symantecs site for instructions on this if you need them. then run full system scan to remove the virus. reboot the system and tur save back on if you wish.\nThe following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines.\n\n\nDisable System Restore (Windows Me/XP). \nUpdate the virus definitions. \nRun a full system scan.\n\nFor specific details on each of these steps, read the following instructions.\n\n1. To disable System Restore (Windows Me/XP)\nIf you are running Windows Me or Windows XP, we recommend that you temporarily turn off System Restore. Windows Me/XP uses this feature, which is enabled by default, to restore the files on your computer in case they become damaged. If a virus, worm, or Trojan infects a computer, System Restore may back up the virus, worm, or Trojan on the computer.\n\nWindows prevents outside programs, including antivirus programs, from modifying System Restore. Therefore, antivirus programs or tools cannot remove threats in the System Restore folder. As a result, System Restore has the potential of restoring an infected file on your computer, even after you have cleaned the infected files from all the other locations.\n\nAlso, a virus scan may detect a threat in the System Restore folder even though you have removed the threat.\n\nFor instructions on how to turn off System Restore, read your Windows documentation, or one of the following articles: \nHow to disable or enable Windows Me System Restore \nHow to turn off or turn on Windows XP System Restore\n\nNote: When you are completely finished with the removal procedure and are satisfied that the threat has been removed, reenable System Restore by following the instructions in the aforementioned documents.\n\nFor additional information, and an alternative to disabling Windows Me System Restore, see the Microsoft Knowledge Base article: Antivirus Tools Cannot Clean Infected Files in the _Restore Folder (Article ID: Q263455).\n\n2. To update the virus definitions\nSymantec Security Response fully tests all the virus definitions for quality assurance before they are posted to our servers. There are two ways to obtain the most recent virus definitions: \nRunning LiveUpdate, which is the easiest way to obtain virus definitions: \nIf you use Norton AntiVirus 2006, Symantec AntiVirus Corporate Edition 10.0, or newer products, LiveUpdate definitions are updated daily. These products include newer technology. \nIf you use Norton AntiVirus 2005, Symantec AntiVirus Corporate Edition 9.0, or earlier products, LiveUpdate definitions are updated weekly. The exception is major outbreaks, when definitions are updated more often.\nDownloading the definitions using the Intelligent Updater: The Intelligent Updater virus definitions are posted daily. You should download the definitions from the Symantec Security Response Web site and manually install them. To determine whether definitions for this threat are available by the Intelligent Updater, refer to Virus Definitions (Intelligent Updater).\n\nThe latest Intelligent Updater virus definitions can be obtained here: Intelligent Updater virus definitions. For detailed instructions read the document: How to update virus definition files using the Intelligent Updater.\n\n3. To run a full system scan \nStart your Symantec antivirus program and make sure that it is configured to scan all the files. \nFor Norton AntiVirus consumer products: Read the document: How to configure Norton AntiVirus to scan all files. \nFor Symantec AntiVirus Enterprise products: Read the document: How to verify that a Symantec Corporate antivirus product is set to scan all files.\nRun a f
241973
Sounds to me like you're a victim of the fraud security program epidemic.  Here's how it works:\n\n1.  You become infected with a trojan that downloads and installs an anstispyware or antivirus program you probably never heard of.\n\n2.  It modifies/hijacks your desktop settings and pops up a message that you are infected with blah blah.  Some warnings will look like they come from XP SP2's Security Center to trick you into believing Winows itself is issuing the warning.\n\n3.  You will be linked to the program that was foisted on you or a web page to download a rogue program.  When you run a scan, you'll be told you have malware that probably isn't even there.\n\n4.  You'll be told if you want to fix what was found, you have to buy the scanner.  Sure the scan is free, removal will cost you.  \n\nIt's all a big fraud.  All they want is the money--cause even if you pay they don't fix anything and meanwhile the trojan is installing all kinds of other malware.\n\nMost antivirus and antispyware won't fix these fraulent programs that are infections themselves.  Or will remove parts of it but if the desktop hijack isn't fixed correctly you may be faced with a black screen or an old style that doesn't look like XP.  Some versions overwrite a system file that is critical for your PC's ability to connect to the internet.\n\nYour best bet is to go to this webpage and find which fraud program has infected you and follow the instructions:\nhttp://www.bleepingcomputer.com/forums/forum55.html\n\nThese guides use specialized tools to do the necessary and intense regitry editing so it is important to follow the instructions exactly.  Even then these fraud infections change rapidly, and often install other more dangerous malware, so whether the guide works or not it is advisable to go thru this procedure:\nhttp://www.bleepingcomputer.com/forums/topic34773.html
626192
Try doing a "System Restore" in safe mode (f8 on restart). That turns off most of the programs that automatically run on startup. This where a lot of virus' hide. Make sure that you go back to a date far enough  to restore system prior to the suspected infection.
476970
Jeff,\n\nThesafetytool.com is a home page hijacker that is installed by a trojan called Zlob which masquerades as media codec. You probably tried to watch some video clip and were directed to download the fake codec, after which the trojan infected your PC. To remove it, download and scan your PC with SpyNoMore, it seems to be the most accurate program in detecting zlob infections.\n\nhttp://www.spynomore.com/thesafetytool.htm\n\nBy the way it is not free, but then again you should really question any so-called free solution. Isn't that how your computer got infected in the first place?!.  The free scan will only check your system and show you the infections. If you choose to remove them, be prepared to pay.
297907
I believe they are in the process of trying out a new format. Their homepage changed on mine browser also at home. Although at work I still have the same browser as before. I don't think a virus could cause something like that to happen.
320943
It worked!! I've spent almost all afternoon/evening trying to get this irritating thing off my laptop! But there still is one tray icon with the tooltip "Virus Alert". And a small popup that says Your Computer is Infected! Critical System. Did any of you face the same problem?
591939
What did you use to get rid of that virus?  I have the same thing and my symantec is not working.  It keeps popping up.
588316
it was fixed, about 2 hours later. so now get one. it was a trojan, no virus, so dont worry. i heard of it. there is still no virues for mac
63502
To remove the trojans and worms, install and clean using Ad-Aware and Spybot. It is better to update your antivirus and scan and clean the viruses also alongwith.
232348
As a security consultant by trade, I've seen your situation countless times.  Your computer is infested with some sort of malware (virus, trojan, spyware, etc...).  Here's what I'd suggest you do, this works almost every time:\n\n1.  Uninstall any antivirus software on your computer.  Reason:  the malware may have damaged it.  If you have a favorite antivirus program you can always reinstall it later.\n\n2.  Go to http://www.grisoft.com.  Download the FREE version of AVG antivirus, install it, update it, and scan your entire computer.\n\n3.  Go to http://www.safer-networking.org.  Download, install, update, and run Spybot32.\n\n4.  Go to http://www.lavasoftusa.com.  Download, install, update, and run the free version of Ad-Aware.\n\n5.  Re-scan using the above three tools until your system is clean.\n\nGood luck, and hope this helps!
511956
You habe a browser hijacker. Use these to get rid of it.\nSpybot - Search & Destroy detects and removes spyware, a relatively new kind of threat not yet covered by common anti-virus applications. Spyware silently tracks your surfing behaviour to create a marketing profile for you that is transmitted without your knowledge to the compilers and sold to advertising companies. If you see new toolbars in your Internet Explorer that you haven't intentionally installed, if your browser crashes inexplicably, or if your home page has been "hijacked" (or changed without your knowledge), your computer is most probably infected with spyware. Even if you don't see the symptoms, your computer may be infected, because more and more spyware is emerging. Spybot-S&D is free, so there's no harm giving it a try to see if something has invaded your computer.\nhttp://www.safer-networking.org/\n\nhttp://superantispyware.com/\nSUPERAntiSpyware is the most thorough scanner on the market. Our Multi-Dimensional Scanning and Process Interrogation Technology will detect spyware that other products miss! SUPERAntiSpyware will remove ALL the Spyware, NOT just the easy ones!\nEasily remove over 100,000 pests such as SmitFraud, Vundo, WinFixer, SpyAxe, SpyFalcon, WinAntiVirus, AntiVermins and thousands more!\nMake sure after you download any of these, that you update them.\n\n *Be sure to come back to Yahoo Q&A and vote for one of the answers as best answer!
527870
probably just get a virus again... try scanning it with antivirus software first... x
352240
Try using  these.\n\nAll of these are ones that I personally use and all are free.\n\nI-Worm/Stration · BackDoor.Generic3.GBB and .GBC · Worm/Generic.FX · Exploit.WMF\nhttp://free.grisoft.com/doc/5390/lng/us/tpl/v5\n\nSpybot - Search & Destroy detects and removes spyware, a relatively new kind of threat not yet covered by common anti-virus applications. Spyware silently tracks your surfing behaviour to create a marketing profile for you that is transmitted without your knowledge to the compilers and sold to advertising companies. If you see new toolbars in your Internet Explorer that you haven't intentionally installed, if your browser crashes inexplicably, or if your home page has been "hijacked" (or changed without your knowledge), your computer is most probably infected with spyware. Even if you don't see the symptoms, your computer may be infected, because more and more spyware is emerging. Spybot-S&D is free, so there's no harm giving it a try to see if something has invaded your computer.\nhttp://www.safer-networking.org/\n\nhttp://superantispyware.com/\nSUPERAntiSpyware is the most thorough scanner on the market. Our Multi-Dimensional Scanning and Process Interrogation Technology will detect spyware that other products miss! SUPERAntiSpyware will remove ALL the Spyware, NOT just the easy ones!\nEasily remove over 100,000 pests such as SmitFraud, Vundo, WinFixer, SpyAxe, SpyFalcon, WinAntiVirus, AntiVermins and thousands more!\nMake sure after you download any of these, that you update them.\n\nIt may have to be removed in safe mode.\nFor Windows XP\n\nIf the computer is running it is best to shut down Windows and then turn off the power.\n\nBegin by first clicking on the Start Button and then click on Turn Off Computer.\n\nNow click on the Turn Off red colored icon to shut down your computer system.\n\nIt is best to wait between 15 to 30 seconds before you turn your system back on.\n\nTurn on your computer and start tapping the F8 key on your keyboard.\n\nSome Computers may display a keyboard error message if you begin tapping F8 too quickly.\n\nRestart your computer again and begin tapping the F8 key a brief second or two later.\n\nWhen the Windows Advanced Options Menu appears, Choose the Safe Mode option and hit Enter.\n\nWindows will now boot your computer up in Safe Mode.