BleepingComputer.com: SCAREWAREVam infected FAKE Spyware Protection

thank you again!

i wonder if if I should do another kaspersky with the AUTO DISINFECT?



it seems to have happened while searching websites
is it a coincidence that I am just landing on malicious websites?
so time will tell?

*not sure if I noted this I just looked in Windows Defender
and back on Dec 30
"RogueWin32/FakeRean" was removed



I am geting something new that has been happening:
a pop up on restart:
"Windows blocked some Startup Programs"


the LightScribe is the recent
and the Microsoft Media Center Tray Applet was last week

so it is blocking different things from Startup each time?


File Name: LightScribeControlPanel.exe -hidden
Startup Value: C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
File Path: C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
Startup Type: Registry: Current User
Location: Software\Microsoft\Windows\CurrentVersion\Run
Classification: Not yet classified
SpyNet Voting: In Progress




File Name: ehTray.exe
Display Name: Microsoft Media Center Tray Applet
Description: Media Center Tray Applet
Publisher: Microsoft Corporation
Digitally Signed By: Microsoft Windows Verification PCA
File Type: Application
Startup Value: C:\Windows\ehome\ehTray.exe
File Path: C:\Windows\ehome\ehTray.exe
File Size: 125952
File Version: 6.0.6001.18000 (longhorn_rtm.080118-1840)
Date Installed: 20/01/2008 9:25:11 PM
Startup Type: Registry: Current User
Location: Software\Microsoft\Windows\CurrentVersion\Run
Classification: Permitted
Ships with Operating System: Yes
SpyNet Voting: Not applicable

Some infections are difficult to remove completely because of their morphing characteristics which allows the malware to regenerate itself or infect critical system files which cannot be cleaned. Sometimes there is an undetected hidden piece of malware such as a rootkit which protects malicious files and registry keys so they cannot be permanently deleted. Disinfection will probably require the use of more powerful tools than we recommend in this forum. Before that can be done you will need you to create and post a DDS log for further investigation.

Please read the pinned topic titled "Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help".

• If you cannot complete a step, then skip it and continue with the next.
  
• In Step 7 there are instructions for downloading and running DDS which will create a Pseudo HJT Report as part of its log.

When you have done that, post your log in the Virus, Trojan, Spyware, and Malware Removal Logs forum, NOT here, for assistance by the Malware Response Team Experts. A member of the Team will walk you through, step by step, on how to clean your computer. If you post your log back in this thread, the response from the Malware Response Team will be delayed because your post will have to be moved. This means it will fall in line behind any others posted that same day.

Start a new topic, give it a relevant title and post your log along with a brief description of your problem, a summary of any anti-malware tools you have used and a summary of any steps that you have performed on your own. An expert will analyze your log and reply with instructions advising you what to fix. After doing this, we would appreciate if you post a link to your log back here so we know that your getting help from the Malware Response Team.

Please be patient. It may take a while to get a response because the Malware Response Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have posted your log and are waiting, please DO NOT "bump" your post or make another reply until it has been responded to by a member of the Malware Response Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another Malware Response Team member is already assisting you and not open the thread to respond.

I just got a new anti v program
AVAST Free and then upgraded to Avast Internet Security paid

the new upgrade Internet Security is not working - the Firewall
will not work

I am in Safe Mode right now
in Normal mode the Firefox and IE would not work

I also UnInstalled the old Avira antivirus

the Free AVAST was working fine
but after upgrading - and inserting license
would not work

I am just going to put in a ticket to AVAST support now
I would not do your new instruction until the AVAST Internet Security version is cleared up

wondering - when I right click on Firefox it has options to run in the AVAST Sandbox and virtual - so I need lessons on how to use this new software

is there another Forum to get advice on the AVAST Internet Security software?

Quote

That is what I would have recommended.

Quote

avast! support forums

Bless your heart

going over to Avast forum

thank you

You're welcome.

Hello,

Now that you have posted a log here: http://www.bleepingcomputer.com/forums/topic372373.html you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a MRT Team member, nor should you ask for help elsewhere. Doing so can result in system changes which may not show in the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the MRT Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the MRT Team members are EXTREMELY busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the MRT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRT Team member is already assisting you and not open the thread to respond.

Please be patient. It may take several days to get a response but your log will be reviewed and answered as soon as possible. I advise checking your topic once a day for responses as the e-mail notification system is unreliable.

To avoid confusion, I am closing this topic. Good luck with your log.

Orange Blossom