Over 1 million tech questions and answers.

Malware? Online Security Center And Live Safety Center?

Q: Malware? Online Security Center And Live Safety Center?

Help me please!I've had this virus for around a week or so.I'm not really sure if this is a virus or a malware.The symptoms of this virus are:-Two strange icons appear, one blue shield and one green shield, having the names of "Online Security Center" and "Live Safety Center" that "refresh" and reinstall themselves even though I have deleted them.-Irregular Pop-Ups that say I have a virus infection on my computer that come and go at least every ten minutes when I really don't.-A flashing caution sign on the toolbar.-Slowing internet.I have the programs, "Spyware Terminator", "SmitfraudFix" and "AVG Anti-Spyware" but I don't know how to use them respectively in this situation.This all started after I deleted Internet Explorer, yet all these InterNet Explorer Pop-Ups kept on coming, all saying that my "computer had a virus, download this program."I can't even DOWNLOAD anything!Please help, and put step-by-step instruction on how to delete them!

RELEVANCY SCORE 200
Preferred Solution: Malware? Online Security Center And Live Safety Center?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Malware? Online Security Center And Live Safety Center?

Sorry for the delay. If you are still having problems please post a brand new HijackThis log as a reply to this topic. Before posting the log, please make sure you follow all the steps found in this topic:Preparation Guide For Use Before Posting A HijackThis LogThanks,Charles

Read other 2 answers
RELEVANCY SCORE 141.2

Hey guys, recently my computer started behaving strangely and I believe I have some sort of a virus. Two icons, with the names of "Live Safety Center" and "Online Security Guide," downloaded themselves onto my desktop. Also I would receive random pop-ups in IE imploring me to "find true love," among other things. Also I would receive a flashing exclamation point on my desktop toolbar stating that I had some sort of a virus and that I should go to a certain site to download software to remove it. There were a few other notifications that would pop up that would say other things, but at the moment I can't remember exactly what they said (although I think it also had to do with a virus on the computer and asking me to click on something to get rid of it). Any ideas on what's happening here? Thank you in advance for taking a look for me.

Here's my hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:37:06 AM, on 11/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system... Read more

A:Malware/Virus Problem ("Live Safety Center/Online Security Guide")

Please do this:

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt in your thread in the HijackThis Log Help Forum.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.

What DSS will do: create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

---------------------------------------------------------------------------------------------

Read other 9 answers
RELEVANCY SCORE 140.8

I have a trojan that has put the Online Security Guide and Live Safety Center on my desktop. It is also popping up error messages saying that I have a virus, or spyware (multiple messages). I need some help!!

A:Online Security Guide and Live Safety Center

I decided to go ahead and run VundoFix, since the Online Security Guide and Live Safety Center are commonly associated with Vundo. It got rid of two DLL's that I had been trying to remove manually (both my AVG and ClamWin detected them as virus-related but didn't remove them). A log wasn't made of the VundoFix.

I then ran ComboFix, just to be sure. THAT removed the links from the desktop. However, I'm not entirely sure that it's COMPLETELY gone. So, here's the ComboFix log.

ComboFix 07-11-01.1 - Sean Gaston 2007-11-04 18:18:07.4 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.94 [GMT -6:00]
Running from: C:\Documents and Settings\Sean Gaston\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Administrator\Desktop\Live Safety Center.lnk
C:\Documents and Settings\Administrator\Desktop\Online Security Guide.lnk
C:\Documents and Settings\Administrator\Favorites\Online Security Guide.lnk
C:\Documents and Settings\All Users\Start Menu\Live Safety Center.lnk
C:\Documents and Settings\All Users\Start Menu\Online Security Guide.lnk
C:\Documents and Settings\Sean Gaston\Desktop\Live Safety Center.lnk
C:\Documents and Settings\Sean Gaston\Desktop\Online Security Guide.lnk
C:\Documents and Settings\Sean Gaston\Favorites\Online Security Guide.lnk
C:\Program Files\SecCenter
C:\Program Files\SecCen... Read more

Read other 1 answers
RELEVANCY SCORE 139.2

i keep getting these above icons poping up on my desktop and system alerts, etc.. telling me i have a virus and need to download their software(official security software). also i have an added security toolbar on my homepage and additional adds that keep poping us including porn sites. i've tried a ad-aware program and the avg anti-spyware programs and can't seem to get rid of it. it actually went away for awhile when i used the avg program(came up with a trojan-Small virus) but now it's back. here's a hijack this log and a smitfraud log:

Logfile of HijackThis v1.99.1
Scan saved at 6:10:34 PM, on 11/13/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
... Read more

A:online security guide/live safety center virus

ad-aware log:
ArchiveData(auto-quarantine- 2007-11-13 19-36-07.bckp)
Referencefile : SE1R202 12.11.2007
======================================================

MRU LIST

obj[0]=MRU FileReference : C:\Documents and Settings\Debra Ritzema\recent\smitfraud.wps.lnk
obj[2]=MRU RegReference : software\microsoft\directdraw\mostrecentapplication name
obj[3]=MRU RegReference : S-1-5-21-105441914-3170374919-175278027-1005\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru\*
obj[4]=MRU RegReference : S-1-5-21-105441914-3170374919-175278027-1005\software\microsoft\windows\currentversion\explorer\recentdocs\.wps
obj[6]=MRU RegReference : S-1-5-21-105441914-3170374919-175278027-1005\software\microsoft\windows media\wmsdk\general computername

WIN32.TROJANDOWNLOADER.ZLOB

obj[6]=Regkey : clsid\{11a69ae4-fbed-4832-a2bf-45af82825583}
obj[7]=Regkey : clsid\{a95b2816-1d7e-4561-a202-68c0de02353a}
obj[8]=Regkey : software\microsoft\windows\currentversion\explorer\browser helper objects\{a95b2816-1d7e-4561-a202-68c0de02353a}
obj[9]=RegValue : S-1-5-21-105441914-3170374919-175278027-1005\software\microsoft\internet explorer\toolbar\webbrowser "{11a69ae4-fbed-4832-a2bf-45af82825583}"
obj[10]=RegValue : software\microsoft\internet explorer\toolbar "{11a69ae4-fbed-4832-a2bf-45af82825583}"
obj[16]=File : c:\docum... Read more

Read other 3 answers
RELEVANCY SCORE 139.2

I have been workng on this based on previous posts but I am still gettingpop-ups and my sytem is very slow. I have pasted HijackThis and DSS below. I have installed AVG, SmitFraudfix, Vundofix,Combofix and Adaware.

Logfile of HijackThis v1.99.1
Scan saved at 10:24:23 PM, on 11/14/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Trend Micro\Client Server Security Agent\ntrtscan.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
c:\Toshiba\IVP\swupdate\swupdtmr.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\Program Files\Trend Micro\Client Server Security Agent\tmlisten.exe
C:\Program Files\Trend Micro\Client Server Security Agent\OfcPfwSvc.exe
C:\WINDOWS\TEMP\SXC521.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Pr... Read more

A:Online Security Guide & Live safety Center and IE popups

Hi, welcome to TSF

Sorry for the delay. if you still need help,

Please click Here to download HijackThis to your desktop.

Click the Download button. When the Trend Micro HJT install box appears, double click on the HJTInstall.exe. Click on Install.

It will be installed by default here: C:\Program Files\Trend Micro\HijackThis

A shortcut to the application will also be placed on your Desktop.

The program will open automatically after installation.

You can double-click the icon that was placed on the Desktop to run subsequent HijackThis scans or you can use the icon inside the folder. The folder HijackThis is where you will find the HJT logs that you save. When you use the application to remove anything, you will also find the backup copies made by HJT inside this folder.

Click on "Do a system scan and save logfile" When the log pops up in Notepad, copy and paste that file back here.

Read other 1 answers
RELEVANCY SCORE 138

hi

recenltly caught sumthing i think a trojan. I have windows xp and am using mcafee whaich found the problem and i thought it had sorted it out. it had not and now messages saying you have a back door trojan and click here to download the official software keep poping up. need big help please.

i have a hijackthis logfile below

any help realy apriciated

thanks
luke

--------------------------------------------------
hijack this log file
---------------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 19:48:24, on 16/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\... Read more

A:[SOLVED] help geting rid of 'Live safety center' and 'Online security guide'

Hello and welcome to TSF

You have an outdated version of Hijackthis installed,please uninstall that version as then next part will install the latest version

======================================================

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.
What DSS will do: create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

==================... Read more

Read other 3 answers
RELEVANCY SCORE 138

Please help. Have a trojan I cannot fully remove. The symptoms are setting off avast virus detector, 2 icons on the desktop one called Safety Center and one called Online Security Guide. Also constant redirection to an spyware removal website.

Have already run vundofix.exe and combofix.exe, which seems to have temporarily fixed the problem. From the hijack this log can you tell if the problem is completely resolved?

Hijack This log below

Logfile of HijackThis v1.99.1
Scan saved at 14:21:26, on 23/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:... Read more

A:Live Safety Center and Online Security Guide icons Trojan

Hi frenchfry and welcome to TSF

Sorry for the delay getting to you, the forum has been really busy and all our helpers are volunteers.

Please post the logs from vundofix and combofix

------------------
Required Logs

c:\vundofix.txt
c:\combofix.txt

Read other 7 answers
RELEVANCY SCORE 118.4

Ok where do I begin?! I have been dealing with viruses, spyware/malware for the past week. It all started with Norton advising me that I had been infected with Trojan. Vundo and Trojan.Zonebac. After that I started receiving many different pop ups warning me about critical system alerts. I also had an annoying yellow triangle at the bottom of my screen warning me about different trojans and worms. More evil friends included 2 new icons that had made their home on my desktop one named "Live Safety Center" and the other "Online Security Guide", also installed was a new toolbar named "Security Toolbar 7.1". I have scanned my computer with many different programs and have somehow finally managed to get rid of the pop ups and toolbar, although I know I'm probably still infected somewhere. I'm sorry this is so long but, I wanted to explain EVERYTHING! I'm running Windows XP SP2, and have followed all steps to post. I downloaded DSS, but after many attempts to run, it just wouldn't let me. I do have a fresh hijackthis log and my Panda report, I hope this is good enough.
Many thanks in advance to whomever helps me, I am desperate!
Monica

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:58:35 PM, on 11/15/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe... Read more

A:2 evil friends on desktop "Live Safety Center" and "Online Security Guide" Help?

Hi, thanks for trying to perform all the steps.


Quote:




I downloaded DSS, but after many attempts to run, it just wouldn't let me.




At what stage does DSS stop working?

Read other 7 answers
RELEVANCY SCORE 117.6

I don't have a clue where to begin trying to fix this problem. Spybot doesn't seem to fix the problem. I keep getting random icons on my desktop and start menu called "online security guide" and "live saftey center". There are also many fake balloon warnings appearing and a window titled "Critical System Warning!" that wants me to download stuff. What process can I go through to clean my system. Any help would be great...thank you!

A:i need help - "online security guide" & "live safety center" icons!!

Please follow MicroBell's 5 Step process outlined here:

http://www.techsupportforum.com/secu...tml#post342651

After running through all the steps, please post the requested logs.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 117.6

I'm having the same problem that a lot of people are having. These icons have showed up on my desktop and i keep getting pop ups telling me to download them because i have a virus. i would really applicate the help.
thanks!
John

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
91: 2007-11-17 16:39:03 UTC - RP554 - Deckard's System Scanner Restore Point
90: 2007-11-17 15:47:18 UTC - RP553 - System Checkpoint
89: 2007-11-16 15:05:33 UTC - RP552 - System Checkpoint
88: 2007-11-15 01:17:54 UTC - RP551 - Software Distribution Service 3.0
87: 2007-11-13 22:39:57 UTC - RP550 - Removed Banctec Service Agreement


-- First Restore Point --
1: 2007-11-12 23:17:11 UTC - RP464 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.

Percentage of Memory in Use: 81% (more than 75%).
Total Physical Memory: 510 MiB (512 MiB recommended).
System Drive C: has 2.78 GiB (less than 15%) free.


-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2007-11-17 11:42:27
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\SYSTEM32\SMSS.EXE
C:\WINDOWS\SYSTEM32\WINLOGON.EXE
C:\WINDOWS\SYSTEM32\SERVICES.EXE
C:\WINDOWS\SYSTEM32\LSASS.EXE
C:\... Read more

A:"online security guide" and "live safety center" deckard log here

Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

Please download VundoFix.exe to your desktop. We'll use this later.

Download SDFix and save it to your Desktop.

Please download & install - ERUNT (This is a utility that'll replicate a copy of your Registry)
Start ERUNT, confirm the Welcome message.

Next, select the backup options:

System registry
Current User Registry
Other open user registry

Click "OK" and wait until the backup process is complete. (Note that depending on your system configuration this may take some time, and that the first bar is NOT a progress bar, just an indicator that the program is still running.)
# Note: To ensure proper operation of ERUNT, you should be logged in a... Read more

Read other 13 answers
RELEVANCY SCORE 116.4

I don't have a clue where to begin trying to fix this problem. I keep getting random icons on my desktop called "online security guide" and "live safety center". There are also many fake balloon warnings appearing and a window titled "Critical System Warning!" that wants me to download stuff. What process can I go through to clean my system. I didn't have this problem until I upgraded to Norton 2008. I am currently running IP tool antivirus and spyware, I also have ran Smitfraudfix, still getting pop ups like crazy. Also my IP tools is finding Trojan.Virtumonde. I use Quicken and it seems to have attacked it because I am no longer able to use it. Any help would be great...thank you!

A:"online security guide" and "live safety center"

Hi and welcome to TSF.

Apologies for any delay in replying, but we have been rather busy lately, and, of course, all our helpers are volunteers.

Since it has been a few days since you first posted, please follow these instructions if you still need assistance.

Download Deckard's System Scanner (DSS) to your Desktop . Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - minimised > extra.txt and maximised > main.txt.
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt back in this thread (do not attach it).
Please attach extra.txt to your post.


To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.

I will monitor this thread for your reply.

Thank you for your patience.

Read other 1 answers
RELEVANCY SCORE 116.4

My son uses his computer on the net a lot and of course there is a virus out there waiting to serve its twisted master.

He got the wellknown "Live Safety Center" and "Online Security Guide" and it keeps comming back and hijacks his internet browser to redirect to the same page that promises peace and wellbeing for money ... of course.

Here is the DDS log:
"
Deckard's System Scanner v20071014.68
Run by Emil on 2007-11-10 20:43:53
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- HijackThis (run as Emil.exe) ------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:44:39, on 10-11-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmer\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\F?lles filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\agsdyely.exe
C:\Programmer\F?lles filer\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Progra... Read more

A:Need to get rid of "Live Safety Center" and "Online Security Guide"

I did follow MicroBell's 5 Step process and the Panda scan said that no virus could be found. However, my Avast anti-virus warned me 5-6 times about files while I was running the Panda virus scanning. One of them was named "win.exe" and was in C:\temp\ but has now been deleted. Every time Avast issued a virus alert I chose the option to delete the file in question.

Read other 19 answers
RELEVANCY SCORE 102.4

Does anyone trust this free web-based utility? I've found it from Microsoft. So does anyone know anything about this? Should I delete these two files that it detected as a Trojan? Since it is in the System Restore part I assume that it's safe to delete, but I'm not real sure.
 

A:Windows Live Safety Center

hi, welcome to TSG.

Download hijack this from the link below.Please do this. Click here:

http://www.thespykiller.co.uk/files/hijackthis_sfx.exe

to download HijackThis. Click scan and save a logfile, then post it here so
we can take a look at it for you. Don't click fix on anything in hijack this
as most of the files are legitimate.

what's the name of this web based utility?

what are the names of the files, if they are in system restore they are harmless as they are tapped in there?
 

Read other 1 answers
RELEVANCY SCORE 102.4

I received an email today from Microsoft asking me to try their Windows Live Safety Center. When I got to the website, I found out it is a beta version. Have any of you used it??? Is it ok???? I would like to know everyones opinion of it.
Here is the website: http://safety.live.com/site/en-US/default.htm

Please let me know if it is safe to use and if it would be worth using.

Thanks Grandma
 

A:Windows Live Safety Center

Read other 7 answers
RELEVANCY SCORE 101.2

I am having a similar infection to another recent poster, however I am having a lot of other problems with it. Pop-ups, tray icons.

I'm running Windows XP Pro with SP2. It is fully updated.

My AVG scans have also been turning up goldun.nu for months. Anyway, a big thank you for your help. Here is the HijackThis log. I also have the panda report to if needed.

HijackThis log

Deckard's System Scanner v20071014.68
Run by Colin on 2007-10-25 16:18:03
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 3 Restore Point(s) --
3: 2007-10-25 23:18:12 UTC - RP4 - Deckard's System Scanner Restore Point
2: 2007-10-25 01:56:31 UTC - RP3 - System Checkpoint
1: 2007-10-23 2151 UTC - RP2 - Removed Ad-Aware 2007


Backed up registry hives.
Performed disk cleanup.

System Drive C: has 16.89 GiB (less than 15%) free.


-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2007-10-25 16:20:56
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.5730.13)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS... Read more

A:Live Safety Center and Other infectious baggage

72 hour BUMP.

Read other 4 answers
RELEVANCY SCORE 101.2

If this was posted elsewhere I did not see it.Windows Live Safety Center BetaGet full service for your PCWindows Live Safety Center is a new, free service designed to help ensure the health of your PC. * Check for and remove viruses * Learn about threats * Improve your PC's performance * Get rid of junk on your hard diskUse the full service scan to check everything, or turn to the scanners and information in the service centers to meet your specific needs.safety.live.comMore info at Welcome to Windows Live IdeaThey also created a new blog staffed by Microsoft's Anti-Malware Team.

A:Windows Live Safety Center Beta

Microsoft's Free Web-based Virus Scanner Sends Data Back To Microsoft

Read other 1 answers
RELEVANCY SCORE 99.6

For those who don't know, this program provides you with antivirus, spyware, and a firewall. I have been using it because my subscription to Norton Antivirus had expired. I have just renewed my subscription, and would like to uninstall AOL Safety and Security Center since it seems to slow my computer down. I was wondering if Lavasoft Ad-Aware SE Personal and Windows Firewall were good alternatives for spyware and firewall programs. I was also wondering if you would suggest that I use Windows Firewall, or if I should download a different one like ZoneAlarm?
 

A:AOL Safety and Security Center

Ad-aware is a great program to use. You may also want to download Spybot as well. So is Zone Alarm as your firewall. I wouldn't use Windoze firewall at all. Dang sure wouldn't use anything AOL has to offer.
 

Read other 12 answers
RELEVANCY SCORE 99.6

ok every few days for the past 2 weeks my aol safety and security center firewall turns off. then i hit turn on and the message appears saying aol firewall is on but its still off

then i reinstall and its good for about 2 days but then i restart computer and its bad again.

heres hjt log WHILE ITS MESSED UP
****NOTE****ill post an hjt log when its running fine l8er

Logfile of HijackThis v1.99.1
Scan saved at 12:00:32 PM, on 4/26/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\AOL\1120601684\ee\AOLSoftware.exe
C:\Program Files\Common Files\AOL\1120601684\ee\services\safetyCore\ver210_5_4_1\AOLSP Scheduler.exe
C:\Program Files\mcafee.com\antivirus\mcvsescn.exe
C:\Program Files\mcafee.com\personal firewall\MPfTray.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Common Files\AOL\1120601684\ee\SSCEvtHdlr.exe
C:\Program Files\Common Files\AOL\1120601684\ee\aolsoftware.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\Common Files\AOL\1120601684\ee\services\safetyCore\ver210_5_4_1\aol... Read more

A:AOL safety and security center

here it is when firewall is fine after i reinstalled
Logfile of HijackThis v1.99.1
Scan saved at 12:42:40 PM, on 4/26/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\Common Files\AOL\1120601684\ee\services\safetyCore\ver210_5_4_1\aolavupd.exe
C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
C:\PROGRA~1\mcafee.com\ANTIVI~1\mcshield.exe
C:\Program Files\mcafee.com\personal firewall\MPFService.exe
C:\PROGRA~1\mcafee.com\ANTIVI~1\OasClnt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\AOL\1120601684\ee\SSCEvtHdlr.exe
C:\Program Files\Common Files\AOL\1120601684\ee\AOLSoftware.exe
C:\Program Files\Common Files\AOL\1120601684\ee\services\safetyCore\ver210_5_4_1\AOLSP Scheduler.exe
C:\Program Files\mcafee.com\antivirus\mcvsescn.exe
C:\Program Files\mcafee.com\personal firewall\MPfTray.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Common Files\AOL\1120601684\ee\aolsoftware.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\System32\spcauth.exe
C:\WINDOWS\System3... Read more

Read other 1 answers
RELEVANCY SCORE 99.6

hello,
I am having trouble installing the AOL Safety & Security Center. I use AOL for a lot of things and I want to try their security suite out. Yet whenever I try to install, it goes to about 75% and then disappears. I've done my research and nothing on AOL's help site is working. What is up and what can I do?

Sincerely,
Jesse

A:Aol Safety & Security Center

Maybe a different download manager than the one you have? I use download accelerator plus, and it works great. You can find it at:http://www.speedbit.com/Hope it works for you (and that you can download it). Good luck.

Read other 1 answers
RELEVANCY SCORE 99.2

I am having trouble with a PC that has the following symptoms, and would really appreciate your assistance: 1. Explorer.exe often doesn't run on startup/login; this differs a bit among user profiles, but generally it won't run. 2. Internet Explorer often gets hijacked and sent to Netster.com Hornymatches.com Leading4.com Levelclick.com 3. Two icons appeared on the desktop Live Safety Center Online Security Guide Ad-Aware, Spybot S&D, and SAV CE 10.2 scans/repairs have NOT resolved the problem. Do you have any ideas or helpful hints? The HijackThis log is included below. Thanks you, in advance, for any assistance you can provide. Please let me know if you need any additional details. -Tiger226 HijackThis log file------------------------------- Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:08:35 PM, on 11/20/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\Explorer.EXEC:\Program Files\Microsoft IntelliPoint\point32.exeC:\Program Files\Microsoft IntelliType Pro\type32.exeC:\Program Files\DIGStream\digstream.exeC:\Program Files\ESPNRunTime\DIGServices.exeC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\system32\igfxpers.exeC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\PROGRA~1\SYMANT~1\VPTray.exeC:\Program File... Read more

A:Kukkakreck / Live Safety Center / Netster Infection-hijack

Hi,

The forums are really busy, that explains why logs get behind. If you still need some help, please start with posting a new hijackthislog in this thread. Don't start with a new thread.
Then I'll take a look.

Also, The current formatting of your log makes it difficult to read, so in notepad:
On top, click Format >uncheck Word Wrap

Read other 2 answers
RELEVANCY SCORE 98.8

Since i downloaded AOL's safety & security center my comp. slowed down considerably. I want to uninstall it but it is not listed in my programs to uninstall. I have windows xp.
 

A:How do i uninstall AOL Safety & Security Center

Open HijackThis and click on the "Open the Misc Tools Section" button. Click on the "Open Uninstall Manager" button. Click the "Save List" botton. Copy and paste that list here please.
 

Read other 1 answers
RELEVANCY SCORE 98.8

I made the mistake of downloading the peice of crap security suite. it's really a dumbed down suite of mcafee software there were several problems that prompted me to uninstall it and that is causing more more problems.

first of all, the suite has no way to manually update it, so you must wait for it to update it self. even when it does, for some reason the gui says you have 0 (zero) virus definitions. the front page maintains that spyware detection, virus protection, and firewall are turned off, but when you go to the respective tabs you see that spyware and virus protection are turned on and the firewall is missing so there is no way to turn it on or off. but here's the thing, windows security detects the firewall and aol's sign on screen shows that all the components are active. the suite also was enough of a resource hog to noticably slow my system down, but thats to be expected as my comp is running a pentium III 1ghz with only 384 mb ram.

well with all that, I decided it was best to uninstall the safety & security center and buy my own security. but here is where the next problem is. windows security is still detecting the aol firewall and I have no way of disabling it. I don't even know why it's still being detected. after uninsatlling I deleted all mcafee folders and anything that I could find related to the aol safety & security center.

so what do I have to do to get rid of this? what other info is needed in order to solve my prob... Read more

A:aol safety & security center woes

Read other 8 answers
RELEVANCY SCORE 97.6

I have spent the last 6 hours messing around with different software to figure out if there's spyware on my computer (Windows XP and always updated).

My computer had been acting very slow lately and I had reason to suspect possible spy software. Sometimes the CPU usage would go to 100% and it wouldn't stop until I would go into the task manager and end the task or process for that software. Other problems with memory and programs running in the background without me recognizing them also occurs. I had AOL safety and security center installed and run constantly... but it doesn't show that I have any problems.

However I tried "SpyWareDoctor" and "HijackThis" and "SpyonThis" today and each gave a different outcome.

"SpyWareDoctor" gave a list of some 290 files. but only 30 or 40 of them were dangerous. the ones that were dangerous had like KLHM or something of that sort. I looked it up online and that wasn't too helpful.

"SpyonThis": I downloaded this software and ran it but it wasn't working I would get an error message every time I would try to open it (even after reinstalling it). the error message would read "This program has been damaged, possibly by a bad sector of the hard drive or a virus. Please reinstall it."

"HijackThis" gave a smaller list but more complicated to read. I have attached the outcome from that log at the end.

So i turned more confused. and thought I wou... Read more

A:Difference between HijackThis and AOL Safety and Security Center

Read other 9 answers
RELEVANCY SCORE 96.4

I have a new Gateway PC running Windows XP that I just got in December 2006. The McAfee software it came with expired after 3 months, so I installed the AOL Safety & Security Center. I can't get the status better than "Fair" on this computer. It shows a message that it needs to update the Spyware definitions, but when I try it says no updates are available (should state that either it is up-to-date or that new definitions need to be downloaded). If I try running a Spyware check it stops after a few seconds stating that the operation was cancelled by the user, which I did not do. I tried uninstalling the software, rebooting as instructed & then reinstalled the software from a fresh download, but still keep getting the same exact problem. I don't think it is completely uninstalling the software & that some file that is bad remains with the typical uninstall, but don't know what to do at this point. AOL does not offer technical support for non-paying AOL members. I recently changed from being a paid AOL member to their free service. Please help!
 

A:AOL Safety & Security Center won't update Spyware definitions

Read other 7 answers
RELEVANCY SCORE 93.6

I'm running Windows XP. I recently noticed some new icons on my desktop: Online Security Guide, Live Safety Center, My Games. I have security related pop-ups all over the place. My McAfee shows that I have wvuutro.dll. There are probably others, but that's what I remember right now.

HijackThis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:45:10 PM, on 11/15/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\... Read more

A:New Icons: Online Security, Live Safety; CPU running slow

Read other 9 answers
RELEVANCY SCORE 87.6

I Windows 7 Home Premium. My windows is getting the updates but when it says configuring windows it doesn't do it and says it failure to config and is reverting back.

I also cannot turn on Windows Security Center.

I appears something happened 8/15. I tried microsoft's fixes and system restore which hasn't fixed the problems.

Help please!

Thanks! Karen - odat92388
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz, Intel64 Family 6 Model 42 Stepping 7
Processor Count: 8
RAM: 8173 Mb
Graphics Card: NVIDIA GeForce GT 540M, 1024 Mb
Hard Drives: C: Total - 702685 MB, Free - 583295 MB;
Motherboard: Sony Corporation, VAIO
Antivirus: PC Cleaners, Updated: Yes, On-Demand Scanner: Disabled
 

A:Solved: security center disabled and cannot start and windows security center cannot

Read other 15 answers
RELEVANCY SCORE 87.6

Hello everyone Im very new to the world of computers.....so please bear with me.I have THE most annoying pop-up which seems to appear after every second or third webpage i open. I have run so many virus and spyware scans.....but i still have this damn pop-up appearing and i dont know how to remove it.Is anyone familiar with this one?? http://online-security-center.com/spy_detect/I have attached a copy of my hijackthis log file below. Im really hoping someone out there can help me. This pop-up is driving me absolutely crazy!!Hope to hear from someone soon,Cheers,BradLogfile of HijackThis v1.99.1Scan saved at 1:33:35 PM, on 9/02/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0011)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exeC:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exeC:\PRO... Read more

A:Pop-up.....http://online-security-center.com/spy_detect/

Welcome to Bleeping Computer fuzzyplanet First of all you've got two antivirus programs installed and active,eTrust Antivirus and AVG Free.This can lead to conflicts between the two,thus causing possible system slowdowns,false virus alerts,you should uninstall one of them.=========================Download SmitfraudFix (by S!Ri)Extract the content (a folder named SmitfraudFix) to your Desktop.Reboot your computer into SAFE MODE" using the F8 method. To do this,restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys on your keyboard to navigate and select the option to run Windows in "Safe Mode".Open the SmitfraudFix folder and double-click smitfraudfix.cmdSelect #2 and hit Enter to delete the infected files.You will be prompted: 'Do you want to clean the registry?' answer Y (yes) and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection.The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found): 'Replace infected file ?' answer Y (yes) and hit Enter to restore a clean file.A reboot may be needed to finish the cleaning process. The report can be found at the root of the system drive, usually at C:\rapport.txt Post the smitfraudfix report into your next reply==========================Please make sure all... Read more

Read other 6 answers
RELEVANCY SCORE 87.2

Hi,I am using Windows Vista Ultimate 6.0.6002 Service Pack 2 Build 6002 and have recently been infected by the Live Security Platinum virus (PUM.Disabled.SecurityCenter) and have cleaned it using the method from here.Everything's been going ok actually, except for the fact that now the whole of my Windows Security Center is unusable. I suspect it is due to the system files that were removed or modified during the removal process.Now Windows Update is not even present in the Services list and Windows Defender gives a "failed to initialize" error.It would be great if you could shed some light to me for this problem.Thank you.

A:Windows Vista Security Center problem after successful removal of Live Security Platinum virus

DownloadFSS Checkmark all the boxesClick on "Scan".Please copy and paste the log to your reply.

Read other 31 answers
RELEVANCY SCORE 86.4

Hey Guys.

I'm new here, and this topic has properly already been answered somewhere in here, but i can't seem to find it.
So my question is:

I had the security live platinum virus on my computer and succesfully removed it, at least I think so. My computer is working fine, there is just this one problem; the whole windows security center isn't working. Essentials, the firewall, the defender, and even windows update won't work. I can't access them, and my computer just says it is some kind of an unkown error thats the cause.

How do you deal with the problem?

Thanks on advance.

A:Security center not working after security live platinum

Lets make sure system is clean before fixing themDownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results hereDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

Read other 1 answers
RELEVANCY SCORE 84.8

i have these crazy notications on my computer, i already scanned out alot of viruses, and spyware with AVG,AntiVir, Spybot,Ad-Aware, AVG antispyware, Xoftspy and delected all my cookies..
ive also used the popular method with smitfraud and these popups arent going away! these adds still popup in safe mode!

well here is my hijack this report.. please help me! thanks in advance!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:17:35 PM, on 11/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\G... Read more

Read other answers
RELEVANCY SCORE 83.6

Hi and thanks in advance for any assistance reply,I'm running Windows 7 Home basic SP 1 64bit os. Just a while ago I open www.mahagenco.in and a zip file containing total_run_mahagenco.exe 612kb and click_me_installer_mahagenco.exe 616kb automatically downloaded When I run it, nothing happened and it suddenly disappeared from my desktop. After assuming it was a virus, I run Windows Security Essentials and began a quick scan. Just in the middle of the scan, Windows security essentials shuted down, and the flag of messages in my task bar appeared, saying that Windows Security Center was turned off. I tried to turn it on, but a message saying "The Windows Security Center service can't be started" appeared. I restarted my computer but everything was the same, no MSE and no Windows Defender.I also open service.msc and restarted security centre but it was disabled after sometime.Also in internet explorer9 and google chrome i was automatically redirected to another sites.Then i run combofix whose log report is as follows - ComboFix 13-01-05.01 - PRANALI t 05-01-13 23:44:24.3.4 - x64Microsoft Windows 7 Home Basic SP1 [GMT 5.5:30]Running from: c:\users\PRANALI\Downloads\Programs\ComboFix.exeAV: Microsoft Security Essentials *Enabled/Outdated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}SP: Microsoft Security Essentials *Enabled/Outdated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132... Read more

A:Virus/malware disabled Windows Security Center and microsoft security essential

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your malware problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top o... Read more

Read other 20 answers
RELEVANCY SCORE 83.2

Logfile of HijackThis v1.99.1Scan saved at 9:42:57 AM, on 5/23/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exec:\windows\temp\AClient.exeC:\Program Files\Altiris\Altiris Agent\AeXNSAgent.exeC:\Program Files\Network Associates\Common Framework\FrameworkService.exeC:\Program Files\Network Associates\VirusScan\Mcshield.exeC:\Program Files\Network Associates\VirusScan\VsTskMgr.exeC:\WINDOWS\System32\snmp.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\WINDOWS\System32\MsPMSPSv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Analog Devices\SoundMAX\SMTray.exeC:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exeC:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exeC:\Program Files\Network Associates\VirusScan\SHSTAT.EXEC:\Program Files\Network Associates\Common Framework\UpdaterUI.... Read more

A:Security Center Malware

Hello,This is a nasty log, so it is really important you follow all my steps in the right order.I also recommend you print out next instructions, because you have to work in safe mode as well and this page won't be available then.I also see that your Altiris is not properly installed. It is installed in a Temp folder. Never install anything in a temp folder, because it will get deleted. That's why I want you to reinstall Altiris properly first before we start with cleanup, because we have to empty your tempfolder here to get rid of malware also present in it and emptying your temp folder will also delete parts of Altiris installed.* Download Dr.Web CureIt to the desktop:ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exeDo not use it yet..* Start HijackThis, close all open windows leaving only HijackThis running. Place a check against each of the following:R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://within.applied.com/O4 - HKLM\..\Run: [AClntUsr] c:\windows\temp\AClntUsr.EXEO4 - HKLM\..\Run: [0mcamcap] C:\WINDOWS\system32\0mcamcap.exeO4 - HKLM\..\Run: [DCOM Server] C:\WINDOWS\system32\dxvwoofo.exeO4 - HKLM\..\RunServices: [0mcamcap] C:\WINDOWS\system32\0mcamcap.exeO4 - HKCU\..\Run: [Windows update loader] C:\Windows\xpupdate.exeO4 - HKCU\..\Run: [0mcamcap] C:\WINDOWS\system32\0mcamca... Read more

Read other 2 answers
RELEVANCY SCORE 83.2

I continue to get "Security Center Pop ups from EM-Pc-Internet *. and EN-Pc- etc. Ihave run several programs that are supposed to get rid of this problem and intially made it worse with more pop ups. After getting rid of some of these programs, I am left with the intitial one. It pops up what looks like MS security center and tells me it will stop my internet if I don't run a scan and by default I guess, buy their program. I ignore it but it is a pain in the butt. Cannnot get rid of it. Have run HiJackThis and kept logs but seems as though this program is NOT part of my start services and Ihave been unable to locate it in my registry.

Help Please.... I know this program must have infected many pc's. I use a host of anti malware programs but this one got through somehow.

Help....Help.... Help
Thanks.
Bob Mels

A:Security Center Malware

What OS (Win XP/2000, etc) are you using? What type of anti-virus are you using? Have you performed any anti-spyware scans? Have you tried doing your scans in "SAFE MODE"? Are you doing scans while logged into the "Administrator Account" or an "account with administrator privileges"? You need to start there first. You also said the bogus program looks like MS security center. Is there a name associated with it or what they want you to download?

Read other 1 answers
RELEVANCY SCORE 83.2

A few days ago, I got the XP Security Center Malware on my desktop. I have run Malware AntiBytes, SuperAntiSpyware, ESetScan Online to clean up as much as possible. When I run the SuperAntiSpyware program, it is detecting System.BrokenFileAssociation, HKCR\.exe. It detects this immediately at the start of the scan. This is not cleaned up at the end of the scan. Not sure if my machine has been completely cleaned.

Below is the DDS log and I have attached the gmer log and the attach.txt log from the DDS program.

------------------------------------------

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Stuart at 21:35:11.89 on Mon 04/25/2011
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_21
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3070.2236 [GMT -4:00]
.
AV: Defender Pro Antivirus *Disabled/Updated* {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
FW: Defender Pro Firewall *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Common Files\Defender Pro\Defender Pro Update Service\livesrv.exe
C:\Program Files\Defender Pro\Defender Pro\vsserv.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Cobian Backup 10\cbVSCService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:&#... Read more

A:XP Security Center Malware

Hello and welcome to Bleeping Computer We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far. Upon completing the steps below another staff member will review your topic an do their best to resolve your issues. If you have already posted a DDS log, please do so again, as your situation may have changed. Use the 'Add Reply' and add the new log to this thread. Thanks and again sorry for the delay. We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scr DDS.pifDouble click on the DDS icon, allow it to run. A small box will open, with an explaination about the tool. No input is needed, the scan is running. Notepad will open with the results. Follow the instructions that... Read more

Read other 25 answers
RELEVANCY SCORE 82.4

I have the fake XP Security Center malware. I'm constantly prompted that I have a security risk/threat/virus that needs immediate fixing and/or registration for a free scan in order to save my computer. I've run Malwarebytes about 4 times. Each time it finds some things and removes them, my computer seems clean after restart, but by the next day or so the alerts and pop-ups are back. Here is my Hijack This log and thank you very much for taking the time to help me.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:18:56 AM, on 4/13/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\ehome\ehtray.exeC:\WINDOWS\system32\Rundll32.exeC:\Program Files\CyberLink\PowerDVD\DVDLauncher.exeC:\Program Files\Real\RealPlayer\RealPlay.exeC:\WINDOWS\system32\dla\tfswctrl.exeC:\Program Files\Common Files\InstallShield\UpdateService\issch.exe... Read more

A:Fake XP Security Center/XP Smart Security Malware

Hello Kyle26 Welcome to the BC HijackThis Log and Analysis forum. I will be assisting you in cleaning up your system.I ask that you refrain from running tools other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond the your topic and facilitate the cleaning of your machine.Please keep in mind that we have a large backlog of users just like yourself waiting to be helped so try to be as timely as possible in your replies. Since we do this on a part-time voluntary basis we are limited on how many logs we can respond to and keep open due to time restraints. If you have to be away or can't answer for some other reason just let me know. Thank you for your understanding.After 5 days if a topic is not replied to we assume it has been abandoned and it is closed.In order to better assist you I will need the following:Download DDS and save it to your desktop from here or here.Disable any script blocker, and then double click dds.scr to run the tool. When done, DDS will open two (2) logs: DDS.txt Attach.txtSave both reports to your de... Read more

Read other 14 answers
RELEVANCY SCORE 82.4

Good afternoon,

The night before this occurred I installed SP3 for XP from the microsoft update server. But I don't think this is related.

A few days ago IE7 indicated a "program not responding error" while my wife was surfing. When she accepted to close the window the prompt said thank you and installed XP Security Center. This program immediately scanned the hard disk for malware, reported 34 infected files and then asked to register which was cancelled. Several persistent pop-ups during web browsing and then starte redirecting web pages. At this point my wife shut the computer down.

My research through Goolge etc indicates that it is indeed malware. So
1) I booted from CDROM repair disks and deleted all files associated with the XP Security Center install I could find.
2) Ran Stinger 3.9.9 V1000 (Virus defs 22 Apr 08) Clean.
3) Ran Adware 1.06r (Virus defs SE1R210 27 Dec 07) Clean.
4) Ran Windows Defender Windows Defender Version: 1.1.1593.0 Engine Version: 1.1.3604.0
Definition Version: 1.35.563.0) which found TEIntFile, XPSecurity Centre and Renos infections that it successfully removed.
5) Using Defender SW Explorer found instance of XP Security centre running in startup. Deleted it.
6) Ran Symantec Antivirsus 9.0.2.1000 (Virus defs 20 Jen 08 rev3). Clean.
7) Used Cleanmgr in both profiles to cleanse temp, internet files etc.
8) Ran Deckard's system scan. Logs enclosed.
9) Ran Kaspersky scan three times. Always aborted. Error screen enclosed.

Two su... Read more

A:Malware Infection: Xp Security Center

Hello Ogriels,Apologize for the delay in response we get overwhelmed at times but we are trying our best to keep up.If you have since resolved the original problem you were having would appreciate you letting us know If not please perform the following below so I can have a look at the current condition of your machine.Thanks and again sorry for the delay.Please remove dss.exe from your desktop if you have downloaded it before and still have it on your desktop.Download Deckard's System Scanner (DSS) and save to your Desktop.alternate download siteDSS will do the following:Create a new System Restore point in Windows XP and Vista.Clean your Temporary Files, Downloaded Program Files, Internet Cache Files, and empty the Recycle Bin on all drives.Check some important areas of your system and produce a report for an analyst to review.Automatically run HijackThis. It will also install and place a shortcut to HijackThis on your desktop if you do not already have it installed. So if HijackThis is not installed and DSS prompts you to download it, please answer yes.You must be logged onto an account with administrator privileges when using.Close all applications and windows.Double-click on dss.exe to run it and follow the prompts.If your anti-virus or firewall complains, please allow this script to run as it is not
malicious.When the scan is complete, two text files will open in Notepad:main.txt <- this one will be maximizedextra.txt <- this one will be minimizedIf not, they both... Read more

Read other 33 answers
RELEVANCY SCORE 82.4

Hello,

I picked up the virus/malware that puts a Security Center icon in the tray. I cannot run any malware tools nor am I able to access the internet.

I have the recovery console option when I first boot up my computer. Will using this be able to help me restore my computer or will I have to go through the steps I see others are taking to clean the malware from my PC?

If using the recovery console will work, how do I get into the recovery area to fix the issue?

Thanks for the help.

Brian

A:Security Center virus/malware

Hi,

Download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds.scr to run the tool.When done, DDS will open two (2) logs: DDS.txt
Attach.txt

Save both reports to your desktop. Post them back to your topic.

---


Download GMER here by clicking download exe -button and then saving it your desktop:Double-click .exe that you downloaded
Click rootkit-tab, uncheck files option and then click scan.
Don't check
Show All
box while scanning in progress!
When scanning is ready, click Copy.
This copies log to clipboard
Post log (if the log is long, archive it into a zip file and attach instead of posting) in your reply.

Read other 7 answers
RELEVANCY SCORE 82.4

Hi and thanks for the help!  Vista premium sp2 64bit here.
Well this laptop had a "internet security 2013" virus/trojan and i was able to get it off with mbam.. Everything is running fine now except that i cant start the security center "the security center service can't be started" is the error message. When i go to services.msc it is not listed. I see there is a registry fix for windows 7 for this problem but wasnt sure if this would work for vista. Here is a link to it.. http://answers.microsoft.com/en-us/windows/forum/windows_7-security/windows-security-center-service-has-been-removed/47b55525-f0be-4434-95c3-265fbba64807?page=1
 
 
Also i ran sfc /scannow and it went 63% of verfication phase then stopped and said "windows resource protection could not perform the requested operation"
 
Thanks for any help and just let me know what you need.

A:malware removed "security center" reg key i think..

Hey all.. I was informed to start a thread in the malware removal section and provide a link to my new post with my dds & attach texts..
 
http://www.bleepingcomputer.com/forums/t/495172/internet-security-fake-av-removed-but/

Read other 2 answers
RELEVANCY SCORE 82.4

The malware I believe is still on my computer is that of the picture below, found on one of the removal helps. I'm not sure what is going on, I've done everything I usually do and the virus seems to remain present. I've ran Malware Bytes, and Combofix, still it seems to be present. I've even tried running it in safe-mode when I used the removal tools. Though it has clean the bulk of the virus it still seems to be there. I still get the "Windows is unprotected" balloon, even when I have the actual security center set to let me monitor my own virus protection. When searching the web I am still directed to virus/malware sites when trying to access these boards or any other virus removal help sites. Combofix says the same exact same thing each time I run it, and Malware Bytes finds the same viruses. How exactly is these top notch virus removal tools not removing the actual malware?

A:Windows XP Security Center Malware

Hello,Please follow the instructions in ==>This Guide<== starting at step 6.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Since you have run ComboFix, please include the ComboFix log in the new topic. Please be sure to include a description of your computer issues and what you have done to try to resolve them.If you cannot produce any of the other logs, then please create the new topic anyway, include the information that you were unable to produce the other logs and why and include the ComboFix log along with a description of your computer issues.Orange Blossom

Read other 1 answers
RELEVANCY SCORE 81.6

Whats going on Tech Support Guys. It's been a while since I been here but I need your help again. The Safety Center virus creeped up on my computer when I wasn't looking. Every time I tried to boot in safe mode to run malwarebytes, I received the BSOD. When I booted up in normal mode, I couldn't run Malbytes, I couldn't unhide folders to stop malbytes from quiting scanning after 5 seconds. The virus kept trying to install Roxio Media manager or something like that on my computer. eventually I couldn't stop it and it installed. After numerous time shutting down and restarting my computer, I finnaly hit rock bottom. I can't go to safe mode AND NOW in normal mode, I have no icons or anything just a blue empty screen and nothing happens when I press the keyboard buttons. What do you guys think? Thanks for reading!
 

Read other answers
RELEVANCY SCORE 81.6

Help! I got a virus called Safety Center. It pop-ups alerts such as "Warning Database update failed" and sometimes a Splash screen of a Gay Porn.

Here's my hijack log after I use my ATF Cleaner:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:02:34 AM, on 9/9/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20935)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files\USB Disk Security\USBGuard.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.ex... Read more

A:Safety Center Virus

bump
 

Read other 1 answers
RELEVANCY SCORE 81.6

Over the holidays, my neighbor's computer got infected with one of those fake AV programs. They had an expired version of Norton's, so I was able to download and Microsoft Security Essentials. It would not complete the security essentials definitions update until I found the task preventing it from running. Once it was killed, the update finally finished and detected several infections. Going through the Security Essentials recommended actions of removing all the infections, I thought everything was fixed.

After rebooting, it started loading vista, it gave me a BSOD indicating consvr was missing. I loaded the Vista setup disk, and performed an automatic startup fix to no avail. I then tried to do a system restore. Once again, no results.

Error Message:
STOP: C0000135 {Unable to Locate Component}
This application has failed to start because consrv was not found. Re-installing the application may fix this problem.


I don't want to reinstall, but it appears I'm running out of options. Does someone know how to get past the BSOD? I feel it's a residual registry entry that didn't get cleaned.

A:Vista64 2012 Security Center Malware

Hello, and sorry for the delay.

Do you have a vista DVD or do you see the Repair Windows option when you tap F8 on boot up?

Read other 6 answers
RELEVANCY SCORE 81.6

Ok here goes, it started with the windows security center 2011 fake pop-ups, they stopped me getting online or using anything without purchasing their product.
I used system restore to get back online and search google for help to get rid of it and found a few tips, deleted a few 3 digit keys in the registry and the pop-ups dont happen anymore, trouble is after all of this my pics still dissapeared in my folder, my desktop background dissapeared, and my sound works fine offline but not online all due to the malware thats still somewhere onboard.
I was getting help in another forum, if you need the forum name and a link to the post/info of what steps ive already followed but were unhelpful please say and i will post them.
I cant download any program whatsoever to help get rid of it ie; malwarebytes, combofix, tdskiller, (i think the aswMBR program worked). It just blocks them all.
I have exhausted every method there is on a number of sites to work my way round the malware blocking me using them for example, changing the name of the program before download, turning on file extensions and changing that to .com etc all to no avail, i had a computer analyst helping me and he ran out of ideas, im hoping theres something he missed and you guys can help me get rid of this horrible virus.

Last cry for help before i consider doing a full re-install which i really dont want to have to do.
Thanks very much in advance for any reply or help,

greatfully Kwaverz.

A:Windows Security center 2011 malware

Hello, and to the Malware Removal forum! My online alias is Blade Zephon, or Blade for short, and I will be assisting you with your malware issues!If you have since resolved the original problem you were having, we would appreciate you letting us know.In the upper right hand corner of the topic you will see a button called Watch Topic. By clicking this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.Before we begin cleaning your machine, I'd like to lay out some guidelines for us to follow while we are working together.I will be assisting you with your malware issues. This may or may not resolve other problems you are having with your computer. If you are still having problems after your machine has been determined clean, I will be glad to direct you to the proper forum for assistance.Even if things appear better, that does not mean we are finished. Please continue to follow my instructions until I give you the all clean. Absence of symptoms does not mean that all the malware has been removed. If a piece of the infection is left, it can regenerate and reinfect your machine. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.I ask that you please refrain fro... Read more

Read other 3 answers
RELEVANCY SCORE 81.6

Help! Sometime between July 27 and July 29 I got infected with the fake Windows Security Center malware and I cannot get it off my computer. I had it a couple of months ago, but was able to remove it (I think) by running iExplore to stop the process, then running Malware Bytes to remove the program. But this time I have not been able to get rid of this insidious program. I have tried suggestions from numerous forums over the past couple of days but nothing has worked. And the worst thing is that it has disabled Microsoft Essentials so I have no virus protection running.
Running various registry cleaners hasn?t affected it. Running iExplore in Safe Mode followed by Malware Bytes didn?t work. Running exeHelper in Safe followed by Malware Bytes didn?t work. Running xp_antivirus_fix.reg in Safe followed by Malware Bytes didn?t work.
Does anyone else have any other ideas short of reinstalling windows???? I am running Windows XP Home SP3.
Thanks.

A:Fake Windows Security Center Malware

Welcome aboard Running exeHelper in Safe followed by Malware Bytes didn?t work. Running xp_antivirus_fix.reg in Safe followed by Malware Bytes didn?t work.By didn't work do you mean MBAM didn't run, or it didn't remove the infection?

Read other 17 answers
RELEVANCY SCORE 81.6

Yesterday, one of my kids downloaded a rouge file that has caused some problems. Malware Bytes, CA Anti Spam and CA Security Center will not load. When I click on them, nothing appears to happen. Additionally, when I try to switch users, it takes longer than usual when loading personal settings, and once the user is logged on, I just get a background with no icons, system tray, toolbars, etc. I am able to open task manager and work from there. When I go back to the original user I logged onto from boot-up, I still have all the icons, etc.

I ran CA Antivirus and it has found nothing. I have also downloaded and ran SuperAntiSpyware which found some things, but the problem persists. I have full network ability, and have not gotten any error messages. The same issues above happen in Safe Mode as well.

Can anyone help with this?

A:CA Security Center and Malware Bytes Not Loading

Try running RKill, first ,then MBAm quickly thereafter.Please download Rkill by Grinler and save it to your desktop.Link 2Link 3Link 4Double-click on the Rkill desktop icon to run the tool.If using Vista, right-click on it and Run As Administrator.A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.If not, delete the file, then download and use the one provided in Link 2.If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.If the tool does not run from any of the links provided, please let me know.You will need to run the application again if rebooting the computer occurs along the way.Post the scan log please.The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.

Read other 11 answers
RELEVANCY SCORE 81.6

Hello and HELP!!
Am running an Acer Aspire laptop with Vist Home Premium / Intel Core2 CPU T5500 / 1.66GHz, 2.0 GB ram / Mobile Intel 945GM Express Chipset Family
I was googling and visiting sites trying to find information about why my Sim City 4 game keeps crashing. Suddenly...

? java icon in system tray popped up with a message that it stopped working

- my spybot search and destroy program alerted me to settdebugx.exe trying to run. I denied it

? window security alert appeared in tray saying security center is turned off; found I can't turn it back on. Attempting to start windows defender from left hand column causes blue screen [flashes too fast to read] and computer reboot.

- Spybot can no longer run

- AVG [8.5 free] says it has no active components; but quarantined in virus vault is: Infection: Trojan horse Generic 16.BVN in C:\users\topaze\AppData\Local\Temp\Installer.exe

? Occasional pop up saying ?google installer has stopped working and was closed?

? occasional pop up informing me of a potential internet redirect ? I've been denying it.

? occasionally hearing audio ads, even when no internet browser is open.

? There is no longer a restore point for my C drive [other drives created their normal restore points] Also can't create restore points for C drive. Trying to use system restore results in the message ?no restore points have been created on your computer's system disk. Open system protection.... Read more

A:malware infection / security center disabled

Rescan again with Malwarebytes Anti-Malware (Full Scan) in normal mode and check all items found for removal. Don't forgot to check for database definition updates through the program's interface (preferable method) before scanning and to reboot afterwards. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. When done, click the Logs tab and copy/paste the contents of the new report in your next reply.Please download TFC (Temp File Cleaner) by Old Timer and save it to your desktop.alternate download linkSave any unsaved work. TFC will close ALL open programs including your browser!Double-click on TFC.exe to run it. If you are using Vista, right-click on the file and choose Run As Administrator. Click the Start button to begin the cleaning process and let it run uninterrupted to completion.TFC will clear out all temp folders for all user accounts (temp, IE temp, Java, FF, Opera, Chrome, Safari), including Administrator, All Users, LocalService, NetworkService, and any other accounts in the user folder.Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.Note: It is normal for the computer to be slow to boot after running TFC cleaner the first time.Please download and scan with SUPERAntiSpyware FreeDouble-click SUPERAntiSypware.exe and use the default settings for installation.An icon will be created on your desktop. Double-cl... Read more

Read other 15 answers