Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

AVG Identity Protection keeps popping up


  • Please log in to reply
11 replies to this topic

#1 KnowledgeHB

KnowledgeHB

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:07:20 AM

Posted 14 May 2011 - 08:11 PM

I have a Windows Vista Home Premium Inspiron 1420 that I got from a friend.
Since this morning an AVG Identity Protection pop up keeps appearing.
I keep pressing Move to Vault and the same threats keep coming back.

I ran Rkill and it found nothing.
I ran MBAM and it found nothing.
I ran AVG and it found nothing.
I even ran the free version of Reimage and it found nothing.

So I have no idea whats going on.

The AVG Identity Protection pop up says the file names:

C:/USERS/(FRIENDSNAME)/APPDATA/LOCAL/TEMP/RARSFX11/WINLOGON.EXE
C:/USERS/(FRIENDSNAME)/APPDATA/LOCAL/TEMP/RARSFX15/NIRD/IEXPLORE.EXE
C:USERS/(FRIENDSNAME)/APPDATA/LOCAL/TEMP/RARSFX15/NIRD/IEXPLORE.EXE

I googled IEXPLORE and from what I've read it's a virus.
And I'm getting mixed signals about WINLOGON, that it's a virus and that it isn't.

I'm feeling extremely technologically challenged at the moment.
(Probably because I am >.<)
But if someone's willing to teach me and bear with me on figuring out whatever is wrong
that would be extremely welcome and awesome!!

Thanks =]

And hopefully I posted this right -___-'

Edited by hamluis, 14 May 2011 - 09:21 PM.
Moved from Vista to Am I Infected.


BC AdBot (Login to Remove)

 


#2 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:12:20 PM

Posted 14 May 2011 - 08:29 PM

Can you post the logs from Rkill and Mbam?

#3 KnowledgeHB

KnowledgeHB
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:07:20 AM

Posted 14 May 2011 - 08:34 PM

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6579

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18999

5/14/2011 4:28:51 PM
mbam-log-2011-05-14 (16-28-51).txt

Scan type: Quick scan
Objects scanned: 179306
Time elapsed: 40 minute(s), 4 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Did I post the MBAM log right and how do I find the Rkill log?

#4 KnowledgeHB

KnowledgeHB
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:07:20 AM

Posted 14 May 2011 - 08:35 PM

You know what I just noticed it was on quick scan -__-'
I'm going to run a full scan on MBAM and post that one is that okay?

#5 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:12:20 PM

Posted 14 May 2011 - 08:39 PM

You actually read my mind.

#6 KnowledgeHB

KnowledgeHB
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:07:20 AM

Posted 14 May 2011 - 10:57 PM

I ran MBAM and it's been running for well over 2 hours.
Normally it only runs for about and hour and 30 minutes -__-'
Any ideas?

#7 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:12:20 PM

Posted 14 May 2011 - 11:13 PM

Let it continue to run.

#8 KnowledgeHB

KnowledgeHB
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:07:20 AM

Posted 15 May 2011 - 03:00 AM

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6579

Windows 6.0.6002 Service Pack 2 (Safe Mode)
Internet Explorer 8.0.6001.18999

5/15/2011 12:47:28 AM
mbam-log-2011-05-15 (00-47-28).txt

Scan type: Full scan (C:\|D:\|E:\|)
Objects scanned: 424269
Time elapsed: 3 hour(s), 25 minute(s), 58 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


I apologize I left it running and forgot about it.

#9 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:12:20 PM

Posted 15 May 2011 - 07:57 AM

Please run all scans in regular mode.

#10 KnowledgeHB

KnowledgeHB
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:07:20 AM

Posted 15 May 2011 - 07:59 PM

I've had MBAM running and it's currently at 5 hours and 29 minutes.

#11 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:12:20 PM

Posted 15 May 2011 - 08:14 PM

It should not be taking that long.

I am going to refer to the experts for a deeper look.

Please follow the instructions in ==>This Guide<==.

Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include the link to this topic in your new topic and a description of your computer issues and what you have done to resolve them.

If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.

Once you have created the new topic, please reply back here with a link to the new topic.

#12 KnowledgeHB

KnowledgeHB
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:07:20 AM

Posted 15 May 2011 - 09:35 PM

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6582

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18999

5/15/2011 6:25:16 PM
mbam-log-2011-05-15 (18-25-16).txt

Scan type: Full scan (C:\|D:\|E:\|)
Objects scanned: 426316
Time elapsed: 5 hour(s), 56 minute(s), 40 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


It ended but I'm still going to do what you sent previously.
Thanks for all the patience.
I'm in serious need of it >.<




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users