Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Antivirus Software alert...


  • Please log in to reply
13 replies to this topic

#1 jjinx

jjinx

  • Members
  • 112 posts
  • OFFLINE
  •  
  • Local time:10:30 PM

Posted 30 January 2010 - 08:50 AM

My sons computer is infected. It is XP professional. I can't run AVG or Malwarebytes...I get s Security Warning, application cannot be executed... Theres s box open that says antivirus software alert that keeps coming back. When I click on Internet Explorer it goes to newsoftspot.microsoft.com ... along with pop ups.

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,945 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:30 PM

Posted 30 January 2010 - 10:11 AM

Some types of malware will disable Malwarebytes Anti-Malware and other security tools to keep them from running properly. If that's the case, please refer to the suggestions provided in For those having trouble running Malwarebytes Anti-Malware.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 bigfreeuser

bigfreeuser

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:TX
  • Local time:08:30 PM

Posted 30 January 2010 - 10:37 AM

I have a similar problem.
Worm or virus name is 'AntiVirus Live' Program. Runs even after it has been removed daily at startup. Takes up whole screen so I can't delete or close. Have to shut down computer reboot & start over each time.

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,945 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:30 PM

Posted 30 January 2010 - 10:40 AM

Hello bigfreeuser

If you have an issue or problem you would like to discuss, please start your own topic. Doing that will help to avoid the confusion that often occurs when trying to help two or more members at the same time in the same thread. Even if your problem is similar to the original poster's problem, the solution could be different based on the kind of hardware, software, system requirements, etc. you are using and the presence of other malware. Further, posting for assistance in someone else's topic is not considered proper forum etiquette.

Thanks for your cooperation.
The BC Staff
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 bigfreeuser

bigfreeuser

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:TX
  • Local time:08:30 PM

Posted 30 January 2010 - 10:46 AM

BC staff,
My computer has same operating system, Windows XP. This is why I added to his memo.
This site is too hard & confusing. Everythning I type is wrong ; where do I start a new one??

#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,945 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:30 PM

Posted 30 January 2010 - 10:56 AM

Click on the text highlighted in blue. These are links that will provide more information or explain in detail what to do.

Please start your own topic in the Am I infected? What do I do?, forum not someone else's topic request for help as that causes confusion.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 jjinx

jjinx
  • Topic Starter

  • Members
  • 112 posts
  • OFFLINE
  •  
  • Local time:10:30 PM

Posted 30 January 2010 - 02:16 PM

Thank you :thumbsup: I was able to run Malwarebytes finally after running rkill. It didn't find viruses but as it was running AVG would pop occasionally with Threat Detected so I clicked heal. Now running AVG and so far it's clean. I can't use Internet Explorer though. It acts like it's not connected to internet but AIM works. The pop ups and "warnings" are gone now.

#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,945 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:30 PM

Posted 30 January 2010 - 02:34 PM

I can't use Internet Explorer though. It acts like it's not connected to internet

What exactly is it doing?

Have you tried using an alternate browser like Firefox to see if the same problem occurs?

Please download TFC (Temp File Cleaner) by Old Timer and save it to your desktop.
alternate download link
  • Save any unsaved work. TFC will close ALL open programs including your browser!
  • Double-click on TFC.exe to run it. If you are using Vista, right-click on the file and choose Run As Administrator.
  • Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
  • TFC will clear out all temp folders for all user accounts (temp, IE temp, Java, FF, Opera, Chrome, Safari), including Administrator, All Users, LocalService, NetworkService, and any other accounts in the user folder.
  • Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.
Note: It is normal for the computer to be slow to boot after running TFC cleaner the first time.

Please download and scan with Dr.Web CureIt - alternate download link.
Follow these instructions for performing a scan in "safe mode".
If you cannot boot into safe mode or complete a scan, then try doing it in normal mode. Be aware, this scan could take a long time to complete.
-- Post the log in your next reply. If you can't find the log, try to write down what was detected/removed before exiting Dr.WebCureIt so you can provide that information.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#9 jjinx

jjinx
  • Topic Starter

  • Members
  • 112 posts
  • OFFLINE
  •  
  • Local time:10:30 PM

Posted 30 January 2010 - 02:45 PM

When I click on Internet Explorer I get "Internet Explorer cannot display this webpage". I try to go to different pages and get the same thing. I haven't tried another browser yet.

#10 jjinx

jjinx
  • Topic Starter

  • Members
  • 112 posts
  • OFFLINE
  •  
  • Local time:10:30 PM

Posted 30 January 2010 - 03:15 PM

Firefox does work. I'm running the Dr.Web now

#11 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,945 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:30 PM

Posted 30 January 2010 - 04:30 PM

Error message after you install a IE7 update from Windows Update or from Microsoft Update: "Webpage cannot be displayed"
Error message in Internet Explorer: "Internet Explorer cannot display the webpage"

Try resetting Internet Explorer. Doing this will reset the browser back to the way it was when initially installed.

Reset Internet Explorer Settings in XP or Vista using the automatic Fix it button in the instructions provided by Microsoft on that page. To manually reset the settings do this:
  • Exit all programs, including Internet Explorer (if it is running).
  • Click Posted Image > Run..., and in the Open box, type: inetcpl.cpl
  • Click OK or press Enter.
  • If using Vista, click Start and type inetcpl.cpl in the Start Search box, and then press Enter.
The Internet Options dialog box appears.
  • Click the Advanced tab.
  • Under "Reset Internet Explorer settings", click Reset. Then click Reset again.
  • When Internet Explorer finishes resetting the settings, click Close in the "Reset Internet Explorer Settings" dialog box.
  • Start Internet Explorer again.
  • See here for instructions with screenshots if needed.

Edited by quietman7, 30 January 2010 - 04:30 PM.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#12 jjinx

jjinx
  • Topic Starter

  • Members
  • 112 posts
  • OFFLINE
  •  
  • Local time:10:30 PM

Posted 30 January 2010 - 04:30 PM

Dr.Web found 1 virus Trojan.WMALoader and cured it.

#13 jjinx

jjinx
  • Topic Starter

  • Members
  • 112 posts
  • OFFLINE
  •  
  • Local time:10:30 PM

Posted 30 January 2010 - 04:36 PM

Resetting worked :thumbsup: Thank you so much for your time and help!

#14 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,945 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:30 PM

Posted 30 January 2010 - 04:58 PM

You're welcome.

If there are no more problems or signs of infection, you should Create a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been backed up, renamed and saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

The easiest and safest way to do this is:
  • Go to Start > Programs > Accessories > System Tools and click "System Restore".
  • Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
  • Then use Disk Cleanup to remove all but the most recently created Restore Point.
  • Go to Posted Image > Run... and type: Cleanmgr
  • Click "Ok". Disk Cleanup will scan your files for several minutes, then open.
  • Click the "More Options" tab, then click the "Clean up" button under System Restore.
  • Click Ok. You will be prompted with "Are you sure you want to delete all but the most recent restore point?"
  • Click Yes, then click Ok.
  • Click Yes again when prompted with "Are you sure you want to perform these actions?"
  • Disk Cleanup will remove the files and close automatically.
Vista and Windows 7 users can refer to these links: Create a New Restore Point in Vista or Windows 7 and Disk Cleanup in Vista.


Tips to protect yourself against malware and reduce the potential for re-infection:

Keep Windows and Internet Explorer current with all critical updates from Microsoft which will patch many of the security holes through which attackers can gain access to your computer. If you're not sure how to do this, see Microsoft Update helps keep your computer current.

Avoid gaming sites, porn sites, pirated software, cracking tools, keygens, and peer-to-peer (P2P) file sharing programs (i.e. Limewire, eMule, uTorrent). They are a security risk which can make your computer susceptible to a smörgåsbord of malware infections, remote attacks, exposure of personal information, and identity theft. Malicious worms, backdoor Trojans IRCBots, and rootkits spread across P2P file sharing networks, gaming, porn and underground sites. Users visiting such pages may see innocuous-looking banner ads containing code which can trigger pop-up ads and malicious Flash ads that install viruses, Trojans, and spyware. Ads are a target for hackers because they offer a stealthy way to distribute malware to a wide range of Internet users. Porn sites can lead to the Trojan.Mebroot MBR rootkit and other dangerous malware. The best way to reduce the risk of infection is to avoid these types of web sites and not use any P2P applications.Beware of Rogue Security software as they are one of the most common sources of malware infection. They infect machines by using social engineering and scams to trick a user into spending money to buy a an application which claims to remove malware. For more specific information on how these types of rogue programs and infections install themselves, read:Keeping Autorun enabled on USB (pen, thumb, jump) and other removable drives has become a significant security risk as they are one of the most common infection vectors for malware which can transfer the infection to your computer. To learn more about this risk, please read:Many security experts recommend you disable Autorun asap as a method of prevention. Microsoft recommends doing the same.

...Disabling Autorun functionality can help protect customers from attack vectors that involve the execution of arbitrary code by Autorun when inserting a CD-ROM device, USB device, network shares, or other media containing a file system with an Autorun.inf file...

Microsoft Security Advisory (967940): Update for Windows Autorun
How to Maximize the Malware Protection of Your Removable Drives

Other related reading sources:• Finally, if you need to replace your anti-virus, firewall or need a reliable anti-malware scanner please refer to:
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users