Posted 21 May 2011 - 08:05 AM
Hi, I found this site while trying to find solutions to a nasty malware problem. So far it has been very helpful but I am still struggling to remove what looks like a windows security virus as I am not very computer literate. The infection started with what looked like a legitimate windows AV program that kept alerting to a threat. I could not open anything in normal mode so went into safe mode and ran various AV programs that I have used in the past (SAS, Spybot S&D and MBAM) until there were no further threat alerts, but when I logged into the computer in normal mode, I got a pop-up in the right hand corner (little red shield) that tells me my "computer might be at risk; automatic updates is turned off. Click this balloon to fix this problem". Before I ran the AV programs, this was a multi-colored shield and would open to list various threats, but since running the AV programs it now asks me to choose what program to open it with so I am not sure if this is still part of the virus or something else? Other programs also won't open in normal mode - they just lead to an error message - application not found. Following advice posted in this forum in response to what looked like similar issues experienced by others, I have subsequently run TDSSkiller and Esset but Esset now pops up with an error message saying that it "cannot get update. Is proxy configured?". I also ran ccleaner and rkill after following instructions on here, but could only run them in safe mode with networking because I can't open them in normal mode without a pop-up asking me what program to use to open them. I am at a loss to know what else to do and the advice posted in other replies is starting to get more technical and beyond my level of understanding so I am afraid I am going to mess up! I am running windows XP SP3. Any help to resolve this issue would be much appreciated!