unwanted virus warning and icon

I've had a major virus invasion, advertised on the desktop by a company in
Latvia, : http://www.virusheat.com/?aff=1012.
I chose to use Windows Defender to fix the problem, but these nice people on
the Baltic sea saw fit to place a flashing warning icon on my task bar, an
icon I can't remove, and on opening the web, a baloon starts with a warning
that a serious virus has invaded and needs to be removed by VirusHeat, on
paying the prescribed fee of $ 49.95 ! I can not remove the unwanted icon and
ask for help.

Frustrated Australian

"Alfred" wrote:

> I've had a major virus invasion, advertised on the desktop by a company in
> Latvia, : xxx://www.virusheat.com/?aff=1012.
> I chose to use Windows Defender to fix the problem, but these nice people on
> the Baltic sea saw fit to place a flashing warning icon on my task bar, an
> icon I can't remove, and on opening the web, a baloon starts with a warning
> that a serious virus has invaded and needs to be removed by VirusHeat, on
> paying the prescribed fee of $ 49.95 ! I can not remove the unwanted icon and
> ask for help.
>
> Frustrated Australian

Hi Al,
Please read the info here on these links then proceed with the instruction
of the removal of the Virus/App:
How To Remove Virusheat (removal Instructions)
http://www.bleepingcomputer.com/forums/topic130080.html
http://www.symantec.com/security_res...926-99&tabid=3
http://www.spywareremove.com/removeVirusHeat.html
http://ca.com/us/securityadvisor/pes...x?id=453124583

For more cleaning steps Try this:
Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/supe...freevspro.html
RootkitRevealer v1.71
By Bryce Cogswell and Mark Russinovich
http://www.microsoft.com/technet/sys...tRevealer.mspx

Run a scan from here on-line:
http://security.symantec.com/sscv6/d...d=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (off-line scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

Lots of tools to download and disinfect your machine (off-line scanner):
http://www.bitdefender.co.uk/site/Do...eeRemovalTool/

After the scan run disk clean-up on your drive
Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en...hijackthis.php) is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to:
http://www.spywareinfo.com/~merijn/downloads.html
http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7
http://www.bleepingcomputer.com/tuto...utorial42.html
http://www.bleepingcomputer.com/forums/
Or other appropriate
forums for expert analysis, not here.
Let us know your progress.
nass
----
http://www.nasstec.co.uk

From: "Alfred" <alfred@discussions.microsoft.com>

| I've had a major virus invasion, advertised on the desktop by a company in
| Latvia, : http://www.virusheat.com/?aff=1012.
| I chose to use Windows Defender to fix the problem, but these nice people on
| the Baltic sea saw fit to place a flashing warning icon on my task bar, an
| icon I can't remove, and on opening the web, a baloon starts with a warning
| that a serious virus has invaded and needs to be removed by VirusHeat, on
| paying the prescribed fee of $ 49.95 ! I can not remove the unwanted icon and
| ask for help.
|
| Frustrated Australian

You'll be glad to know this is NOT a virus.



Two part reply..

Perform Part 1 then perform Part 2.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.



Part 1
-----------

Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool -- SmitRem.exe
http://noahdfear.geekstogo.com/click...click.php?id=1

http://www.bleepingcomputer.com/forums/topic43659.html


Part 2
-----------

S!ri's SmitfraudFix
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Thanks for the tips.
I did try some, but in the end I got onto SpyHunter3, full version, and
bought this on line for $ 29.95. It worked like a dream, found 129
infections, some viruses, but to my surprise it also detected the parasites,
one of which was the VirusHeat icon.
The best $ 29.95 I've spent in a long time!
--
Australian


"nass" wrote:

>
>
> "Alfred" wrote:
>
> > I've had a major virus invasion, advertised on the desktop by a company in
> > Latvia, : xxx://www.virusheat.com/?aff=1012.
> > I chose to use Windows Defender to fix the problem, but these nice people on
> > the Baltic sea saw fit to place a flashing warning icon on my task bar, an
> > icon I can't remove, and on opening the web, a baloon starts with a warning
> > that a serious virus has invaded and needs to be removed by VirusHeat, on
> > paying the prescribed fee of $ 49.95 ! I can not remove the unwanted icon and
> > ask for help.
> >
> > Frustrated Australian
>
> Hi Al,
> Please read the info here on these links then proceed with the instruction
> of the removal of the Virus/App:
> How To Remove Virusheat (removal Instructions)
> http://www.bleepingcomputer.com/forums/topic130080.html
> http://www.symantec.com/security_res...926-99&tabid=3
> http://www.spywareremove.com/removeVirusHeat.html
> http://ca.com/us/securityadvisor/pes...x?id=453124583
>
> For more cleaning steps Try this:
> Go through these Cleaning steps:
> 1... Click start >> Control Panel >> Double Click Network and Internet
> Connections >> Double click Internet Options, on the IE Properties window
> you will see these Options:
> General | Security | Privacy | Content | Connections | Programs
> | Advanced .
>
> Click on General Tab (1st Tab on the left) and you will see a Button called
> [ Clear History ..] click on it to clear your History caches, then click on
> [Delete Files..] to delete Internet Files created over the time, click on [
> Delete Cookies...] to delete your cookies left by visiting websites.
>
> Then click on Advanced tab and scroll down to under the Browsing Option:
> [&] Browsing
> [ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
> = Then try to Disable the Add-Ons on your Browser somehow installed on your
> browser, On how to disable the Add-ons follow this:
> Click on Programs Tab and then click the Manage Add-Ons Button there Disable
> the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
> later and see which is the culprit .
> How to manage Add-Ons:
> http://support.microsoft.com/kb/883256
> Scan for malware from here:
> SuperAntispyware - Free
> http://www.superantispyware.com/supe...freevspro.html
> RootkitRevealer v1.71
> By Bryce Cogswell and Mark Russinovich
> http://www.microsoft.com/technet/sys...tRevealer.mspx
>
> Run a scan from here on-line:
> http://security.symantec.com/sscv6/d...d=ie&venid=sym
> http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
> Download Avast Cleaner (off-line scanner) from here:
> http://www.avast.com/eng/avast-virus-cleaner.html
>
> Lots of tools to download and disinfect your machine (off-line scanner):
> http://www.bitdefender.co.uk/site/Do...eeRemovalTool/
>
> After the scan run disk clean-up on your drive
> Download the Hijackthis and send the report to one of
> many
> forums for analysis and troubleshooting:
> When all else fails, HijackThis v2.0.2
> (http://www.trendsecure.com/portal/en...hijackthis.php) is
> the preferred tool to use.
> It will help you to both identify and remove any hijackware/spyware. Post
> your log to:
> http://www.spywareinfo.com/~merijn/downloads.html
> http://aumha.net/viewforum.php?f=30,
> http://castlecops.com/forum67.html,
> http://forums.subratam.org/index.php?showforum=7
> http://www.bleepingcomputer.com/tuto...utorial42.html
> http://www.bleepingcomputer.com/forums/
> Or other appropriate
> forums for expert analysis, not here.
> Let us know your progress.
> nass
> ----
> http://www.nasstec.co.uk

Glad to help Alfred and thanks for letting us know what worked for you.
Good luck.
nass
----
http://www.nasstec.co.uk

"Alfred" wrote:

> Thanks for the tips.
> I did try some, but in the end I got onto SpyHunter3, full version, and
> bought this on line for $ 29.95. It worked like a dream, found 129
> infections, some viruses, but to my surprise it also detected the parasites,
> one of which was the VirusHeat icon.
> The best $ 29.95 I've spent in a long time!
> --
> Australian
>
>
> "nass" wrote:
>
> >
> >
> > "Alfred" wrote:
> >
> > > I've had a major virus invasion, advertised on the desktop by a company in
> > > Latvia, : xxx://www.virusheat.com/?aff=1012.
> > > I chose to use Windows Defender to fix the problem, but these nice people on
> > > the Baltic sea saw fit to place a flashing warning icon on my task bar, an
> > > icon I can't remove, and on opening the web, a baloon starts with a warning
> > > that a serious virus has invaded and needs to be removed by VirusHeat, on
> > > paying the prescribed fee of $ 49.95 ! I can not remove the unwanted icon and
> > > ask for help.
> > >
> > > Frustrated Australian
> >
> > Hi Al,
> > Please read the info here on these links then proceed with the instruction
> > of the removal of the Virus/App:
> > How To Remove Virusheat (removal Instructions)
> > http://www.bleepingcomputer.com/forums/topic130080.html
> > http://www.symantec.com/security_res...926-99&tabid=3
> > http://www.spywareremove.com/removeVirusHeat.html
> > http://ca.com/us/securityadvisor/pes...x?id=453124583
> >
> > For more cleaning steps Try this:
> > Go through these Cleaning steps:
> > 1... Click start >> Control Panel >> Double Click Network and Internet
> > Connections >> Double click Internet Options, on the IE Properties window
> > you will see these Options:
> > General | Security | Privacy | Content | Connections | Programs
> > | Advanced .
> >
> > Click on General Tab (1st Tab on the left) and you will see a Button called
> > [ Clear History ..] click on it to clear your History caches, then click on
> > [Delete Files..] to delete Internet Files created over the time, click on [
> > Delete Cookies...] to delete your cookies left by visiting websites.
> >
> > Then click on Advanced tab and scroll down to under the Browsing Option:
> > [&] Browsing
> > [ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
> > = Then try to Disable the Add-Ons on your Browser somehow installed on your
> > browser, On how to disable the Add-ons follow this:
> > Click on Programs Tab and then click the Manage Add-Ons Button there Disable
> > the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
> > later and see which is the culprit .
> > How to manage Add-Ons:
> > http://support.microsoft.com/kb/883256
> > Scan for malware from here:
> > SuperAntispyware - Free
> > http://www.superantispyware.com/supe...freevspro.html
> > RootkitRevealer v1.71
> > By Bryce Cogswell and Mark Russinovich
> > http://www.microsoft.com/technet/sys...tRevealer.mspx
> >
> > Run a scan from here on-line:
> > http://security.symantec.com/sscv6/d...d=ie&venid=sym
> > http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
> > Download Avast Cleaner (off-line scanner) from here:
> > http://www.avast.com/eng/avast-virus-cleaner.html
> >
> > Lots of tools to download and disinfect your machine (off-line scanner):
> > http://www.bitdefender.co.uk/site/Do...eeRemovalTool/
> >
> > After the scan run disk clean-up on your drive
> > Download the Hijackthis and send the report to one of
> > many
> > forums for analysis and troubleshooting:
> > When all else fails, HijackThis v2.0.2
> > (http://www.trendsecure.com/portal/en...hijackthis.php) is
> > the preferred tool to use.
> > It will help you to both identify and remove any hijackware/spyware. Post
> > your log to:
> > http://www.spywareinfo.com/~merijn/downloads.html
> > http://aumha.net/viewforum.php?f=30,
> > http://castlecops.com/forum67.html,
> > http://forums.subratam.org/index.php?showforum=7
> > http://www.bleepingcomputer.com/tuto...utorial42.html
> > http://www.bleepingcomputer.com/forums/
> > Or other appropriate
> > forums for expert analysis, not here.
> > Let us know your progress.
> > nass
> > ----
> > http://www.nasstec.co.uk