Windows 7 > CA Anti-Spy > Trojan.Win32.StartPage.fw > MfPlay.dll remove to solve?

Hello
I've upgraded to Windows 7 from Vista a couple of days. I have just run CA Anti-Spy (Yahoo toolbar) and he found the following threat: Trojan.Win32.StartPage.fw it has been impossible to remove this threat. I also ran Adaware, Norton IS 2009 and Spyware Doctor (that I bought just to eliminate this threat) and all gave my PC a clean bill of health. I did a bit of research and it seems that this question relates to the mfplay.dll file in Windows 7. Therefore, can I deny the Trojan horse has highlighted by CA Anti-Spy as no risk or should I delete the file mfplay.dll as some people have recommended? I understand that it is used by Microsoft to track users? Any advice on how I can fix this would be appreciated, thanks.

NIS 2010 got a decent review, but I do not put Norton products on my clients machines. If you have been happy with it and want to keep, then OK. For my clients, I offer (commercial) NOD32, Avast or Avira (free versions) and use Windows Firewall. I would definitely uninstall Ad-aware and Spyware Doctor. You already have Windows Defender for protection anti-spyware in real-time. I love Malwarebytes' Anti-Malware ("MBAM", free version) and place it on my clients machines. It should be updated and run manually on a regular basis.

If you keep the NIS, then I would eliminate the rest and use such MBAM as described above. MS - MVP - Elephant Boy computers - don't panic!

Tags: Windows

Similar Questions

  • Remote access: win32 / tightvnc. Hack Tool: win32 / mailpassview; Hacktool:Win32 / passview. Spy Trojan: win32 / Malintent

    How to remove:

    Remote access: win32 / tightvnc.

    Hack Tool: win32 / mailpassview;

    Hacktool:Win32 / passview.

    Spy Trojan: win32 / Malintent

    They have proved byMicrosoft security scanner, but he pointed out that they were only partially removed.

    Hi Russ,
    Try following the steps in this virus/malware removal guide: http://www.selectrealsecurity.com/malware-removal-guide
    It contains instructions which will remove most malware infections. If you have any questions, just ask me. I hope this helps you.
    Brian
  • At ran Windows full scan and found Trojan:Win32 / Alureon.DX, but only partially removed

    Had problems with the netbook from Toshiba and ran Microsoft Security Scanner. The scanner finds six threats, removed, Trojan:Win32 / Alureon.DX all but one, who has been partially removed, but requires manual steps, said.

    How can I manually remove this Trojan horse on my computer?

    Hello

    Try this

    Download update and scan with the free version of malwarebytes anti-malware

    http://www.Malwarebytes.org/MBAM.php

    You should also download and run rkill to stop the process of problem before you download and scan with malwarebytes

    http://www.bleepingcomputer.com/download/anti-virus/rkill

    If it does not remove the problem and or work correctly in normal mode do work above in safe mode with networking

    Windows Vista

    Using the F8 method:

    1. Restart your computer.
    2. When the computer starts, you will see your computer hardware are listed. When you see this information begins to tap theF8 key repeatedly until you are presented with theBoot Options Advanced Windows Vista.
    3. Select the Safe Mode with networking with the arrow keys.
    4. Then press enter on your keyboard to start mode without failure of Vista.
    5. To start Windows, you'll be a typical logon screen. Connect to your computer and Vista goes into safe mode.
    6. Do whatever tasks you need and when you are done, reboot to return to normal mode.
  • Trojan:Win32 / Alureon.da - partially removed!

    I've used software removal tool microsoft windows malware, and it detected and partially removed the malware.

    This is part of the report that I had:
    Trojan:Win32 / Alureon.da partially removed, manual steps required
    Rogue: Win32 / FakeCog removed
    Rogue: Win32 / FakeRean deleted
    Trojan:Win32 / Rimecud.A removed
    Trojan:Win32 / TIBS.it removed
    for Trojan:Win32 / Alureon.DA, it says it is only partially removed, so what steps should I take to remove completely?
    I use windows Vista.
    the Trojan:Win32 encyclopedia entry / Alureon.DA says I need to restore the DNS settings, but I can't find the steps to do this for vista. You can find me the page that lists the following steps for vista.
    Thanks in advance.

    Clear your Temp File/Cache first upward.

    http://winhelp2002.MVPs.org/delcache.htm>

    Claire on your temporary files

    Click Start > all programs > Accessories > System Tools > Disk Cleanup

    Better and easier to use -CCleaner.

    Download the basic build (Slim) via

    http://www.CCleaner.com/download/builds.aspx>

    The basic build (Slim) does not contain the toolbar disgusted

    DO NOT USE ANY cleaning advanced options. DO NOT TOUCH THE REGISTRY. At least not for now.

    Reset

    Utility anti-rootkit TDSSKiller detects and removes the following malware:

    malware belonging to the family Rootkit.Win32.TDSS (aka Tidserv, TDSServ, Alureon, TDSS, Zeus, TDLV4, etc.); bootkits; Rootkits.

    Try TDSS Killer: http://support.kaspersky.com/faq/?qid=208283363> TDSS Killer is probably a "weapon of choice" against Alureon and many users report success using this program. http://support.Kaspersky.com/viruses/solutions?QID=208280684>

    It is also possible to scan your computer with MalwareBytes' to remove all traces that may still be present.

    MalwareBytes Anti-Malware (MBAM)

    http://www.Malwarebytes.org/products/malwarebytes_free>

    In addition, scan with the free Version of (SAS)

    http://SUPERAntiSpyware.com/superantispywarefreevspro.html >

    FYI

    How can you detect if your computer has been violated and infected with DNS changer?

    http://www.dcwg.org/>

    http://www.dcwg.http :// www.dcwg.org/http :// www.dcwg.org/org/detect/>

    UTC/GMT is 04:21 Friday, may 4, 2012

  • Trojan: Win32 / Sirefef

    I have Windows Vista and have been infected by the Trojan: Win32 / Sirefef how do I remove it? I have Microsoft Essentials, but it cannot remove the Trojan.

    Hi Nigel,
    Follow steps 1 and 2 (under the deletion process) in this malware removal guide: http://www.selectrealsecurity.com/malware-removal-guide
    If you have any questions about the instructions, just ask. Let me know if this helps you.
    Brian
  • What I have to reinstall windows to completely remove Trojan: Win32 / Sirefef: AH

    I ran the Scanner from Microsoft for a complete analysis and he said I have the Trojan: Win32 / Sirefef: OH and it has only been partially deleted.  He said I might have to reinstall windows - which is another option, I can try first?

    Also, I have McAfee Total Protection - it's up-to-date (supposedly) but this is not the first time that the safety of MS Scanner found things - what is happening with this?

    Hello
    If the advice above does not help, try following the steps 1 and 2 in this virus/malware removal guide: http://www.selectrealsecurity.com/malware-removal-guide
    It provides simple instructions on how to remove malware from a computer. If you have any questions, just ask. I hope this helps you.
    Brian
  • How to remove Trojan: Win32 / windows vista Fakesys

    The scanner detects but cannot be deleted. Any advice?  I didn't click on any of the FAKE alerts

    and my dry removes but he LIVES AGAIN and again a TIME etc...

    Hello

    Download update and scan with the free version of malwarebytes anti-malware

    http://www.Malwarebytes.org/MBAM.php

    You should also download and run rkill to stop the process of problem before you download and scan with malwarebytes

    http://www.bleepingcomputer.com/download/anti-virus/rkill

    If it does not remove the problem and or work correctly in normal mode do work above in safe mode with networking

    Windows Vista

    Using the F8 method:

    1. Restart your computer.
    2. When the computer starts, you will see your computer hardware are listed. When you see this information begins to tap theF8 key repeatedly until you are presented with theBoot Options Advanced Windows Vista.
    3. Select the Safe Mode with networking with the arrow keys.
    4. Then press enter on your keyboard to start mode without failure of Vista.
    5. To start Windows, you'll be a typical logon screen. Connect to your computer and Vista goes into safe mode.
    6. Do whatever tasks you need and when you are done, reboot to return to normal mode.
  • How to completely remove the trojan: win32/bamital for my computer, he says: it is partially removed

    How to completely remove the trojan: win32/bamital for my computer, he says: it is partially removed

    Hello
    1. where did you get the message saying that it is partially removed?
    2. what operating system is installed on your computer?
    3. what version of the operating system Windows am I running?
    http://Windows.Microsoft.com/en-us/Windows7/help/which-version-of-the-Windows-operating-system-am-i-running

    You can run Microsoft Safety Scanner from the link below.
    Microsoft safety scanner
    http://www.Microsoft.com/security/scanner/en-GB/default.aspx

    Note: The Microsoft Safety Scanner ends 10 days after being downloaded. To restart a scan with the latest definitions of anti-malware, download and run the Microsoft Safety Scanner again.
     
    You can also ask your question here:

    http://answers.Microsoft.com/en-us/protect/Forum/protect_scanning

  • How to get rid of the horse of Trojan Win32.Downloader.gen XP

    Dear Sir.
    Spybot-Search Destroy & detected this-«Win32.Downloader.gen - Trojan» But it is impossible to remove this infestation even after several attempts. The computer has slowed down considerably. Tried to remove this Trojan in safe mode, as suggested in one of the Internet Forums, but to my horror, found that clicking on F8 had absolutely no effect at all. According to the information available on the Internet this Trojan horse may turn off the computer completely. I have firewall Zonealarm Pro and AVG Anti-Virus Free Edition. Have also installed the latest updates for Windows XP. Please help me get rid of this threat as soon as possible and suggest ways to prevent future infections.
    Thanking you in advance,
    Ramesh Rao

    Hey riri,.

    Thank you for posting your query on our community announcement, we are happy to help you.

    The description of the question, I understand that you want to remove Trojan from the computer Win32.Downloader.gen.

     

    I suggest you go through the article to know how to remove and check. Here is the link for your reference.

    TrojanDownloader:Win32 / Zlob.gen! H

    http://www.Microsoft.com/security/portal/threat/encyclopedia/entry.aspx?name=TrojanDownloader%3aWin32%2fZlob.Gen%21H

    Note: this section, method, or task contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click on the number below to view the article in the Microsoft Knowledge Base:

    322756 (http://support.microsoft.com/kb/322756/ )

    How to back up and restore the registry in Windows

    Note: The data files that are infected must be cleaned only by removing the file completely, which means that there is a risk of data loss.

    You can also run Microsoft Security Monitor and.

    The Microsoft Security Scanner is a downloadable security tool for free which allows analysis at the application and helps remove viruses, spyware and other malware. It works with your current antivirus software.

    http://www.Microsoft.com/security/scanner/en-us/default.aspx

    Note: The Microsoft Safety Scanner ends 10 days after being downloaded. To restart a scan with the latest definitions of anti-malware, download and run the Microsoft Safety Scanner again.

    Note: The data files that are infected must be cleaned only by removing the file completely, which means that there is a risk of data loss.

    Try these steps and let us know the results. We will be happy to help you.

  • How to remove Trojan:Win32 / Rimecud.A in Vista?

    How to remove ' Trojan:Win32 / Rimecud.A?

    Windows Security Essentials during the scan only picks up as problem and delete as well, but only temporarily.  The problem persists.
    Even tried Microsoft (online) scan tool and kaspersky, the two even pick up as a problem.

    Hello

    Download update and scan with the free version of malwarebytes anti-malware

    http://www.Malwarebytes.org/MBAM.php

    You should also download and run rkill to stop the process of problem before you download and scan with malwarebytes

    http://www.bleepingcomputer.com/download/anti-virus/rkill

    If it does not remove the problem and or work correctly in normal mode do work above in safe mode with networking

    Windows Vista

    Using the F8 method:

    1. Restart your computer.
    2. When the computer starts, you will see your computer hardware are listed. When you see this information begins to tap theF8 key repeatedly until you are presented with theBoot Options Advanced Windows Vista.
    3. Select the Safe Mode with networking with the arrow keys.
    4. Then press enter on your keyboard to start mode without failure of Vista.
    5. To start Windows, you'll be a typical logon screen. Connect to your computer and Vista goes into safe mode.
    6. Do whatever tasks you need and when you are done, reboot to return to normal mode.
  • How to: remove trojan: win32 / fakesysdef infection

    Original title: How do you remove trojan: win32 / fakesysdef infection

    It seems that micrsoft essentials allowed the history log and I have now, I can't access any of my documents. Please can someone help to remove this Trojan. I tried scanning with Microsoft defender, malaware and microsoft scan security without change as it is either not detect or be disabled.

    Hello

    do the work in Mode safe mode with networking

    Download update and scan with the free version of malwarebytes anti-malware

    http://www.Malwarebytes.org/MBAM.php

    You should also download and run rkill to stop the process of problem before you download and scan with malwarebytes

    http://www.bleepingcomputer.com/download/anti-virus/rkill

    If it does not remove the problem and or work correctly in normal mode do work above in safe mode with networking

    Windows Vista

    Using the F8 method:

    1. Restart your computer.
    2. When the computer starts, you will see your computer hardware are listed. When you see this information begins to tap theF8 key repeatedly until you are presented with theBoot Options Advanced Windows Vista.
    3. Select the Safe Mode with networking with the arrow keys.
    4. Then press enter on your keyboard to start mode without failure of Vista.
    5. To start Windows, you'll be a typical logon screen. Connect to your computer and Vista goes into safe mode.
    6. Do whatever tasks you need and when you are done, reboot to return to normal mode.
  • Need help with the removal of Trojan.win32.playdun.A

    I have Trojan active on windows 7, MSE captures the Trojan horse, I click to remove all to see when I scan again, he appears once again, he comes up with the name Trojan.win32.playdun.A, serious, he drives me crazy, as it has been picked up 4 times with 4 scans, any help would be appreciated.

    Only a shot wild, I really don't know, but try:

    Update your MSE FRONT a new analysis. When update is complete, Disconnect your internet connection of the computer. After the update, just turn off the power to your router. Scanner not connected to internet...

    When the scanning is finished, analysis still, and if his statements, try Malware Bytes Antimalware, the one free, if you do not already have this, for 0, get it here: https://www.malwarebytes.org/mwb-download/ of course, go on the net again - He - he! :-) During the installation of Anti-Malware, remember to uncheck the "Get free Trial»

    1. Turn off your computer.
    2. Turn on your router - wait that the lamp flashes and lightning as they normally...
    3. When it flashes and lightning normally, turn on your computer...

    If you turn off your computer before you turn on the router, it can be difficult to get it online again.

  • HP Envy 15 Notebook PC TS: How to remove Trojan: Win32/Kovter.C reg for good

    Hello

    For more than a week I get alerts with Windows Defender that my laptop is infected with the Trojan: Win32/Kovter.C reg. Whenever I choose to remove it, but he continues to show the Trojan horse after each successive scan.

    My Internet Explorer seems to be damaged and non-functional (Chrome works great) and whenever I try to listen to music, the speaker transforms itself mute after a few seconds.

    How can I remove this Trojan horse apparently very dangerous for good? Is there a software to remove known spyware free that I can use. Or do I just restore my pc to an earlier date before the problem started?

    Thanks in advance

    ANI

    @anihokis

    Right here, you were able to remove them.

    Personally, I don't like Norton.

    I paid for the Premium version of Malwarebytes '$30' for 3 computers.

    The Premium version in time real protection and works very well.

    REO

  • Anyone who is familiar with "Trojan.Win32.Menti.kwre"?

    He appeared during a scan routing yesterday in the Port of ScanSoft of paper, then again today in Windows system files.  No chance to find a reference to this virus on the Microsoft site or a general search on the internet.  I am running Windows XP and using ZoneAlarm security software.

    Hello

    Liimited information on Google.

    Trojan.Win32.Menti.kwre
    http://www.Google.com/#hl=en&sugexp=pfwl&CP=23&gs_id=1&XHR=t&q=Trojan.Win32.menti.kwre&PF=p&sclient=psy-AB&site=&source=HP&PBX=1&OQ=Trojan.Win32.menti.kwre&AQ=f&AQI=&aql=&gs_sm=&gs_upl=&BAV=on.2,. or.r_gc.r_pw, cf.osb & fp = 79a914ef1cf0f6d4 & biw = 1024 & bih = 713

    If you need search malware here's my recommendations - they will allow you to
    scrutiny and the withdrawal without ending up with a load of spyware programs running
    resident who can cause as many questions as the malware and may be harder to detect as
    the cause.

    No one program cannot be used to detect and remove any malware. Added that often easy
    to detect malicious software often comes with a much harder to detect and remove the payload. Then
    its best to be thorough than paying the high price later now too. Check with them to one
    extreme overkill point and then run the cleaning only when you are sure that the system is clean.

    It can be made repeatedly in Mode safe - F8 tap that you start, however, you must also run
    the regular windows when you can.

    TDSSKiller.exe. - Download the desktop - so go ahead and right-click on it - RUN AS ADMIN
    It will display all the infections in the report after you run - if it will not run changed the name of
    TDSSKiller.exe to tdsskiller.com. If she finds something or not does not mean that you should not
    check with the other methods below.
    http://support.Kaspersky.com/viruses/solutions?QID=208280684

    Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone.
    (If Rootkits run UnHackMe)

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Malwarebytes - free
    http://www.Malwarebytes.org/products/malwarebytes_free

    SuperAntiSpyware Portable Scanner - free
    http://www.SUPERAntiSpyware.com/portablescanner.HTML?tag=SAS_HOMEPAGE

    Run the malware removal tool from Microsoft

    Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.

    You should get this tool and its updates via Windows updates - if necessary, you can
    Download it here.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
    (Then run MRT as shown above.)

    Microsoft Malicious - 32-bit removal tool
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

    Microsoft Malicious removal tool - 64 bit
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495e-94E7-6349F4EFFC74&displaylang=en

    also install Prevx to be sure that it is all gone.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Prevx - Home - free - small, fast, exceptional CLOUD protection, working with others
    security programs. It is a single scanner, VERY EFFICIENT, if it finds something to come back
    here or use Google to see how to remove.
    http://www.prevx.com/   <-->
    http://info.prevx.com/downloadcsi.asp?prevx=Y  <-->

    Choice of PCmag editor - Prevx-
    http://www.PCMag.com/Article2/0, 2817,2346862,00.asp

    Try the demo version of Hitman Pro:

    Hitman Pro is a second scanner reviews, designed to save your computer from malicious software
    (viruses, Trojans, rootkits, etc.). who infected your computer despite safe
    what you have done (such as antivirus, firewall, etc.).
    http://www.SurfRight.nl/en/hitmanpro

    --------------------------------------------------------

    If necessary here are some free online scanners to help the

    http://www.eset.com/onlinescan/

    -----------------------------------

    Original version is now replaced by the Microsoft Safety Scanner
    http://OneCare.live.com/site/en-us/default.htm

    Microsoft safety scanner
    http://www.Microsoft.com/security/scanner/en-us/default.aspx

    ----------------------------------

    http://www.Kaspersky.com/virusscanner

    Other tests free online
    http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1

    --------------------------------------------------------

    After the removal of malicious programs:

    Also follow these steps for the General corruption of cleaning and repair/replace damaged/missing
    system files.

    Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup

    RUN - type in the box-

    sfc/scannow

    Then run checkdisk (chkdsk).

    RUN - type in the box-

    Chkdsk /f /r

    -----------------------------------------------------------------------

    If we find Rootkits use this thread and other suggestions. (Run UnHackMe)

    http://social.answers.Microsoft.com/forums/en-us/InternetExplorer/thread/a8f665f0-C793-441A-a5b9-54b7e1e7a5a4/

    ================================

    For extreme cases:

    Norton Power Eraser - eliminates deeply embedded and difficult to remove crimeware
    This traditional antivirus analysis does not always detect. Because the Norton Power Eraser
    uses aggressive methods to detect these threats, there is a risk that it can select some
    legitimate programs for removal. You should use this tool very carefully and only after
    you have exhausted other options.
    http://us.Norton.com/support/DIY/index.jsp

    ================================

    If you are in North America, you can call 866-727-2338 for virus and spyware help
    infections. See http://www.microsoft.com/protect/support/default.mspx for more details. For
    international information, see your subsidiary local Support site.

    Microsoft support - Virus and Security Solution Center
    http://support.Microsoft.com/contactus/cu_sc_virsec_master?ws=support#TAB0

    I hope this helps.

    Rob Brown - Microsoft MVP<- profile="" -="" windows="" expert="" -="" consumer="" :="" bicycle="" -="" mark="" twain="" said="" it="">

  • Remove Trojan:Win32 / Alureon.gen! U__

    I have Windows Xp and Microsoft Security Essentials.  He detected but cannot remove Trojan:Win32 / Alureon.gen! U
    He said that it is a serious threat.  I several times by the Security Essentials either cleaned or applied instruction and then restarted my computer, but it continues to appear with the same alert about this Trojan horse.  How can I get rid of him?

    At this point, you should get interactive help from one of the specialty forums listed below:

    PLEASE DO NOT DISTRIBUTE NEWSPAPERS IN MS FORUMS

    http://aumha.net/viewtopic.php?t=4075 - display FAQ
    http://aumha.NET/viewforum.php?f=30
    http://www.bleepingcomputer.com/forums/forum22.html
    http://www.dslreports.com/Forum/cleanup
    http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
    http://www.GeeksToGo.com/Forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
    http://www.Malwarebytes.org/forums/index.php?ShowForum=7 MS - MVP - Elephant Boy computers - don't panic!

Maybe you are looking for