C&#92;documents and settings......temp internet file &#92; content . IE 5 &#92; KNZKWPVX &#92; thermite[1].exe\n\n\n\nWhat does this trojan do and how to get rid of it?\nJust delete this file?
206407
it is a temp file so delete it,if you can,t send it to quarantine
11798
It is a spyware.  It may even prevent you from connecting to the internet.  Open the folder and press uninstall.  You'd be very happy for doing that.  If there's no uninstall, download any free spyware removal program like "Lavasoft's Ad-aware" or "Spybot search and destroy" and remove it.
164071
Sounds like the blaster worm. More info and removal tools and instructions here: \nhttp://searchg.symantec.com/search?q=blaster+worm&context=gbh&src=gbh&output=xml_no_dtd&ie=UTF-8&oe=UTF-8&client=symc_en_US&proxystylesheet=symc_en_US&site=symc_en_US\nhttp://www.microsoft.com/security/incident/blast.mspx
248696
That's a readme file. Open it with WinRAR / WinZIP internal viewer or Notepad.\n\nAlso, be careful of warez. You'll likely encounter a virus / Trojan / backdoor you weren't expecting and that isn't easily detected.
46929
It appears to be an automatically generated virus created using random letters.\n\nIt's best to scan with several virus/spyware programs. There's several online ones free that you can use. Avast has an awesome security center and is the newest popular one. I like panda and bitdefender best because they've found the most viruses. Bitdefender is slower but supposedly high rated. Norton causes crashes on startup sometimes and is pretty slow to begin with. AVG is a lemming that tells you where the virus is and doesnt really remove it. Adaware is best for removing spyware.\nhttp://www.jimmyr.com/security.php
588386
these are temperory files, u can delete them. keep removing them periodically to clean up your system.
328446
Hmmm...i had that problem once..and found it was a file i had downloaded recently..when i deleted it..the problem stopped.\n\nRun anti-spyware and anti-virus scans..if that all fails..do a system restore..or a reformat and re-install.
621293
virus. if you open the attachment. otherwise you should be safe. as i opened the email, but not the attachment and my computer seems just fine.
676638
This email is bogus and infected. Do not open the attachment. If you did open it then go here to remove the infection.\n\nhttp://www.microsoft.com/windows/IE/community/columns/bugbusting.mspx
650321
search on your PC right now for a file called MRT.exe. \n\nSTART > SEARCH\n\nThat's the Windows Malicious Software Removal Tool. It sucks but it is a start. When you find it, run it.\n\nReboot in Safe mode after that with networking enabled (hit F8 right after you start booting a couple of times and pick it)\n\nThen try Internet Explorer\n\nGo to www.filehippo.com\n\nGet \n\nAVG\nAdAware\nSpyBot\n\nAll are free\n\nInstall all three, run all three
183434
Try doing a de- fragmentation. Then go and clear all the temporary Internet files out. You may find that you have a spy ware programme on your comp. Do a spy ware check with yahoo Anti spy. It may help. I have a registry cleaner on mine and that takes a lot of disused stuff out as well. McAfee should have stopped any viruses, worms or trojans So I cant see it being that.
545536
This is installed by a Trojan. The only question is what type of Trojan?  Since I don't know I will give you way to remove Smitfrauds and other types. \n\nThese two sites have programs that specialize in removing Smitfrauds. The are both very good.\n\nhttp://www.internetinspiration.co.uk/roguefix.htm\n\nhttp://siri.urz.free.fr/Fix/SmitfraudFix_En.php\n\nThe programs listed below are the best at removing general Trojans and adware. The steps below the programs open your computer for proper removal from all areas of your computer.\n\nDownload and Update Ewido (now called the AVG Antispyware). Do not run:\n\nhttp://www.ewido.net/en/download/...\n\nDownload AdAware SE and update. Do the setup. Do not run:\n\nhttp://www.filehippo.com/download_ad-aware/\n\nAdAware SE Setup:\n\n1. Select "use custom scanning options" then select "customize". Make sure the following options are enabled: "scan within archives," "scan active processes," "scan registry," "deep scan registry," "scan my IE favorites for banned URLs," "scan my Hosts file."\n\n2. Select the "tweak" option. Under "scanning engine," make sure "unload recognized processes and modules during scan" is enabled. Enable "scan registry for all users instead of current users."\n\n3. Under "cleaning engine" turn on "always try to unload modules…," "during removal unload explorer and IE if necessary," "let windows remove files in use at next restart," and "delete quarantined items after restoring."\n\n4. Use the "select drives and folders to scan" option to ensure that your entire hard drive is scanned (if you have more than one hard drive, scan all of them (of course, do not include floppy and CD/DVD).\n\n\nTEMPORARILY SHOW HIDDEN FILES AND FOLDERS.\n\n1. Click Start, and then click Control Panel. \n\n2. Click Appearance and Themes, and then click Folder Options.\n\n3. On the View tab, under Hidden files and folders, click "Show hidden files and folders", and clear(uncheck) the "Hide protected operating system files" check box.\n\nIMPORTANT: Files are hidden by Windows for a very good reason. It is not wise to experiment with these files. Unfortunately, to successfully remove modern spyware we must turn this protection off temporarily. Please turn the protection back on when you have finished cleaning your system.\n\n\nEMPTY INTERNET EXPLORER BROWSER CACHE:\n\n1. On the Internet Explorer Tools menu, click Internet Options. \n\n2. On the General tab, in the Temporary Internet Files section, click the Delete Files button. Select the Delete all offline content check box in the confirmation dialogue box that appears, click OK. Click OK again.\n\nRESTART IN SAFE MODE:\n\nTo do this you need to hold down or repeatedly tap the F8 key while the computer is booting (when the computer is displaying a black screen with white text). When the boot menu appears, use your keyboard arrows to select "Safe Mode."\n\nSafe Mode can look quite ugly. The color may look bad, and all of your desktop icons will be very large. This is normal.\n\n\n\nSTART THE SCAN WITH YOUR ANTI-VIRUS PROGRAM.\n\n\nWhen the scan and removal are completed REBOOT COMPUTER. This will restart you in normal mode. DON'T FORGET TO RESET HIDDEN FILES AND FOLDERS.\n\n\nNEW RESTORE POINT.\n\nThe RESTORE POINTS may be infected with the Malware and cannot be used.\n\nHERE'S HOW:\n\n1. Click Start, and then click Control Panel. \n\n2. Click Performance and Maintenance, click System, and then click on the System Restore tab.\n\n3. Select the Turn Off System Restore check box, click Apply, then restart your computer.\n\n4. Return to the System Restore Tab and turn System Restore back on.\n\n\nTO SET A NEW RESTORE POINT:\n\n1. Click the Start button.\n\n2. Point to Programs, then navigate to Accessories, then System Tools,
434200
This could be a Trojan that's lodged on your system, ma'am.  Unfortunately, the definitions for this specific Trojan are not available.\n\nRemoval of a Trojan is possible manually.\n\nPlease do understand and agree that the advise given here does not in anyway make me liable for any damages due to your omissions and commissions.\n\nRegistry Editing is a job for professionals, not amateurs. Please follow advise carefully.\n\nPlease go to Start and click on it.\n\nGo to Run and click on it.\n\nIn the dialog box that appears, please type in regedit and hit Enter.\n\nIn the Registry Editor Panel that opens, please click on Edit.\n\nMove your cursor down in the drop down menu that appears and click on Find.\n\nIn the dialog box that appears, please type in the name of the program you want to find, like, for example, Readline; and hit Enter.\n\nIn the right hand Panel, select the values that appear with this name and delete them one by one by single left clicking on the value and then single right clicking there and choosing the option Delete and single left clicking on it.\n\nWhen all the values have been deleted, go back to Edit and click on it. This time select the Find next Option and click on it. Type in the same Readline again and hit enter. Again, do what you did earlier by selecting and deleting the values that have the name on the right hand side panel; that appear.\n\nContinue doing Find Next and deleting the values till it shows no more values to delete.\n\nAs the Trojan lodges itself in numerous places, you might have a lot of deleting to do.\n\nWhen you are certain that you've deleted all the traces and values relevant to the Trojan, exit the Registry Editor and reboot.\n\nThis time, I'm sure you'll find the computer is clean and the next time you have a pesky Trojan who cannot be easily removed, you know how to manually remove it.\n\nAll the best.\n\nCheers.\n\nPS,\nThe Registry Area is a dicey palace for amateurs to fiddle around since deleting the wrong file or folder can have disastrous results. Please exercise extreme caution.\n\nPPS,\n\nPlease disable System Restore before doing this so that the virus doesn't get stored inadvertently. After the reboot, once you're sure that you've actually got rid of it,\nenable the System Restore again.
176842
It sounds like one of the following thinkgs:\n   1) Virus(or Trojan)\n   2) Spyware\n\nI will usually recommend that my friends follow these steps to help remove viruses, spyware, etc...:\n  1) Go to this website and run the FREE online virus scanner:  http://housecall.trendmicro.com/\n  2) After it has finished, allow it to remove(delete) or quarantine all infected files\n  3) Once this has completed, download a program called CounterSpy, install it and run it on your machine.  This will remove many different versions of Spyware\n  4) Once it has finished, allow it to remove(delete) or quarantine all infected files\n  5) Then install ZoneAlarm(FREE Version) to help limit the incoming attacks on your PC.  You will need to spend a little time working with ZoneAlarm to get it setup correctly.  ZoneAlarm will popup any time a program on your machine tries to access the Internet.  You will be able to APPROVE or DISAPPROVE of any access.\n  6) Once this has been completed, download a program called CCLEANER(or Crap Cleaner).  This will scan your PC for many different junk files and remove them.\n\nHope this helps!  It has helped many of my friends.\n\nMark
471672
"ibm00001 - ibm00001.exe - Process Information\n\nProcess File: ibm00001 or ibm00001.exe\nProcess Name: Trojan.W32.Torpig\n\nClick Here to Run a Free Scan for ibm00001.exe Related Errors\n \nDescription:\nibm00001.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.\nFor More Detailed Information About ibm00001.exe - Get WinTasks 5 Pro Now!\n\nRecommendation for ibm00001.exe:\nDISABLE AND REMOVE IMMEDIATELY. This process is most likely a virus or trojan. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet settings.\n\nAuthor:\nPart Of: Trojan.W32.Torpig"
584089
Ignore it. It is probably another spyware. Try Ad-Aware and Spybot. If these do not remove it go to Webroot.com and try their free audit. This if you need it is the best spyware removal program out there and is only 29.95 for 2 years.
392283
McShield.exe is a part of the McAfee Internet Security suite that scans for viruses.  However, some viruses or spyware use legitimate names to disguise themselves.  If you attempt to remove the wrong file, you could damage your system.  Therefore, I suggest you contact McAfee and let them assist you. There's a "contact us" link on the upper right of the screen:\n\nhttp://www.mcafee.com/us/\n\nplrr