Prev: Infection messages?
Next: Hard drive filling up??
From: Man T on 27 Nov 2009 21:35
XP SP2
My daughter'c pc got the malware last week after visiting some 'educational'
website (she is in high school).
Every now and then pops up a security warning asking to fix the infected
file to opening a website to ask you to purchase anti-virus software.
McAfee was installed already but cannot fire that up to scan, even cannot
open Windows Explorer.

I tried to run XP in Safe Mode, run MalwareByte's Anti-Malware to scan it,
detected 3 trojans and deleted. Rescan again in Safe Mode found no more
infection, I thought it is safe now.
But just tried to run XP in normal mode, still get the pop up anti-virus
warning, McAfee cannot be fired up.

Any idea I can fix that?


From: David H. Lipman on 28 Nov 2009 07:38
From: "Man T" <alanpltse_NOSPAM(a)yahoo.com.au>

| XP SP2
| My daughter'c pc got the malware last week after visiting some 'educational'
| website (she is in high school).
| Every now and then pops up a security warning asking to fix the infected
| file to opening a website to ask you to purchase anti-virus software.
| McAfee was installed already but cannot fire that up to scan, even cannot
| open Windows Explorer.

| I tried to run XP in Safe Mode, run MalwareByte's Anti-Malware to scan it,
| detected 3 trojans and deleted. Rescan again in Safe Mode found no more
| infection, I thought it is safe now.
| But just tried to run XP in normal mode, still get the pop up anti-virus
| warning, McAfee cannot be fired up.

| Any idea I can fix that?





Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe

Then post the contents of the HJT log in your post with a full explanation of your problem
and what you have done to date in one of the below expert forums...

{ Please - Do NOT post the HJT Log here ! }

Forums where you can get expert advice for HiJack This! (HJT) Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://www.malwarebytes.org/forums/index.php?showforum=7

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://aumha.net/viewforum.php?f=30
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


From: SJ on 20 Dec 2009 22:36
Hi,
I hope you have already got the issue fixed. But if you have not, then
continue reading.
I have seen the symptom you mentioned with 2 fake antivirus infections.
Security Tool and Antivirus System Pro. Unfortunately the folder location
has changed a few times, so not sure where it would be on your computer.
Just reply to me, and I will give you some possible locations where you can
look for the infection.
The good news is, once you find the files, it is pretty easy.

--
Regards,
SJ
http://www.newsdemon.com/?ref=10130773

"Man T" <alanpltse_NOSPAM(a)yahoo.com.au> wrote in message
news:uNFhMP9bKHA.4688(a)TK2MSFTNGP06.phx.gbl...
> XP SP2
> My daughter'c pc got the malware last week after visiting some
> 'educational' website (she is in high school).
> Every now and then pops up a security warning asking to fix the infected
> file to opening a website to ask you to purchase anti-virus software.
> McAfee was installed already but cannot fire that up to scan, even cannot
> open Windows Explorer.
>
> I tried to run XP in Safe Mode, run MalwareByte's Anti-Malware to scan it,
> detected 3 trojans and deleted. Rescan again in Safe Mode found no more
> infection, I thought it is safe now.
> But just tried to run XP in normal mode, still get the pop up anti-virus
> warning, McAfee cannot be fired up.
>
> Any idea I can fix that?
>
 | 
Pages: 1
Prev: Infection messages?
Next: Hard drive filling up??