Over 1 million tech questions and answers.

Possible Total Security/Total Spyware Trojan

Q: Possible Total Security/Total Spyware Trojan

Hello,I recently encountered what I believe to be a spyware/trojan problem on my laptop which is running Windows XP. The problem started about a week ago when a fake security alert came across my desktop saying "Attention! System has encontered a potentional problem..." I ran Spybot Search and Destroy and Malwarebytes Anti-Maleware (I already had these programs installed). These both removed a number of problems. I also have McAfee anti-virus software running. I also ran a scan with this. As of now the fake desktop alerts are gone, however, when I run a Google search and click on a result, I am redirected to some random website. I also have tried to reboot my computer in safemode but when I do this the screen gets hung up on the follow driver and goes no further:Multi(0)disk(0)rdisk(0)parition(2)WINDOWS\System32\Mup.sysDDS (Ver_09-12-01.01) - NTFSx86 Run by Tiffany at 16:38:16.95 on Sat 01/09/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_13Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.502.141 [GMT -6:00]AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k WudfServiceGroupsvchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\WLTRYSVC.EXEC:\WINDOWS\System32\bcmwltry.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\WINDOWS\System32\svchost.exe -k HTTPFilterC:\Program Files\Java\jre6\bin\jqs.exeC:\PROGRA~1\McAfee\MSC\mcmscsvc.exec:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exec:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exeC:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\Program Files\McAfee\MPF\MPFSrv.exeC:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exeC:\Program Files\Dell\QuickSet\NICCONFIGSVC.exeC:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exeC:\WINDOWS\system32\svchost.exe -k imgsvcc:\PROGRA~1\mcafee.com\agent\mcagent.exeC:\Program Files\Canon\CAL\CALMAIN.exeC:\WINDOWS\system32\igfxpers.exeC:\WINDOWS\system32\WLTRAY.exeC:\WINDOWS\stsystra.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\WINDOWS\system32\igfxsrvc.exeC:\Program Files\Dell\Media Experience\PCMService.exeC:\WINDOWS\system32\dla\tfswctrl.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\DellSupport\DSAgnt.exeC:\Program Files\Windows Media Player\WMPNSCFG.exeC:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exeC:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exeC:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exeC:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Documents and Settings\Tiffany\Desktop\dds.scr============== Pseudo HJT Report ===============uSearch Bar = uDefault_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=usuWindow Title = Windows Internet Explorer provided by ComcastuSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8mSearch Bar = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/sb/sbcydsl/*http://www.yahoo.com/search/ie.htmlmWindow Title = Windows Internet Explorer provided by ComcastuInternet Connection Wizard,ShellNext = hxxp://www.google.com/ig/dell?hl=en&client=dell-usuk&channel=usuSearchAssistant = hxxp://www.google.com/ieuSearchURL,(Default) = hxxp://www.google.com/search?q=%suURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dllBHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dllBHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan\scriptsn.dllBHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dllTB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dlluRun: [ctfmon.exe] c:\windows\system32\ctfmon.exeuRun: [DellSupport] "c:\program files\dellsupport\DSAgnt.exe" /startupuRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /backgrounduRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exemRun: [igfxtray] c:\windows\system32\igfxtray.exemRun: [igfxhkcmd] c:\windows\system32\hkcmd.exemRun: [igfxpers] c:\windows\system32\igfxpers.exemRun: [Broadcom Wireless Manager UI] c:\windows\system32\WLTRAY.exemRun: [SigmatelSysTrayApp] stsystra.exemRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exemRun: [PCMService] "c:\program files\dell\media experience\PCMService.exe"mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -startmRun: [MimBoot] c:\progra~1\musicm~1\musicm~3\mimboot.exemRun: [MSKDetectorExe] c:\program files\mcafee\spamkiller\MSKDetct.exe /uninstallmRun: [dla] c:\windows\system32\dla\tfswctrl.exemRun: [ddoctorv2] "c:\program files\comcast\desktop doctor\bin\sprtcmd.exe" /P ddoctorv2mRun: [mcagent_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkeymRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottimeStartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\servic~1.lnk - c:\program files\microsoft sql server\80\tools\binn\sqlmangr.exeIE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office11\EXCEL.EXE/3000IE: {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.htmlIE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exeIE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exeIE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi1933~1\office11\REFIEBAR.DLLIE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dllIE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dllTrusted Zone: musicmatch.com\onlineDPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cabDPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cabDPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cabDPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1157208136421DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cabDPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cabDPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cabDPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cabDPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cabDPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cabDPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cabDPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cabDPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cabNotify: igfxcui - igfxdev.dllAppInit_DLLs: c:\windows\system32\kbdsock.dllSSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dllHosts: 127.0.0.1 www.spywareinfo.com================= FIREFOX ===================FF - ProfilePath - c:\docume~1\tiffany\applic~1\mozilla\firefox\profiles\gtlyodo9.default\FF - plugin: c:\documents and settings\tiffany\application data\move networks\plugins\npqmp071701000002.dllFF - plugin: c:\program files\canon\zoombrowser ex\program\NPCIG.dllFF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dllFF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}---- FIREFOX POLICIES ----FF - user.js: yahoo.homepage.dontask - true============= SERVICES / DRIVERS ===============R1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2008-11-8 214664]R2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2008-11-8 359952]R2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe [2008-11-8 144704]R3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2008-11-8 606736]R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2008-11-8 79816]R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2008-11-8 35272]R3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2008-11-8 40552]S0 pgadeyw;pgadeyw; [x]S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2008-11-8 34248]S3 ndisdrv;ndisdrv;\??\c:\windows\system32\ndisdrv.sys --> c:\windows\system32\ndisdrv.sys [?]=============== Created Last 30 ================2010-01-03 01:56:29 0 ----a-w- c:\windows\system32\29358.exe2010-01-03 01:36:28 0 ----a-w- c:\windows\system32\11478.exe2010-01-03 01:16:27 0 ----a-w- c:\windows\system32\15724.exe2010-01-03 00:56:23 0 ----a-w- c:\windows\system32\19169.exe2010-01-02 23:30:29 1 ----a-w- C:\s2010-01-02 23:29:57 137216 ----a-w- C:\eujbmv.exe2009-12-16 20:00:36 0 d-----w- c:\program files\Citrix2009-12-16 20:00:14 60744 ----a-w- c:\documents and settings\tiffany\g2mdlhlpx.exe==================== Find3M ====================2009-12-30 20:55:24 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys2009-12-30 20:54:58 19160 ----a-w- c:\windows\system32\drivers\mbam.sys2009-10-28 14:40:47 173056 ------w- c:\windows\system32\dllcache\ie4uinit.exe2009-10-21 05:38:36 75776 ----a-w- c:\windows\system32\strmfilt.dll2009-10-21 05:38:36 75776 ------w- c:\windows\system32\dllcache\strmfilt.dll2009-10-21 05:38:36 25088 ----a-w- c:\windows\system32\httpapi.dll2009-10-21 05:38:36 25088 ------w- c:\windows\system32\dllcache\httpapi.dll2009-10-20 16:20:16 265728 ------w- c:\windows\system32\dllcache\http.sys2009-10-13 10:30:16 270336 ----a-w- c:\windows\system32\oakley.dll2009-10-13 10:30:16 270336 ------w- c:\windows\system32\dllcache\oakley.dll2009-10-12 13:38:19 149504 ----a-w- c:\windows\system32\rastls.dll2009-10-12 13:38:19 149504 ------w- c:\windows\system32\dllcache\rastls.dll2009-10-12 13:38:18 79872 ----a-w- c:\windows\system32\raschap.dll2009-10-12 13:38:18 79872 ------w- c:\windows\system32\dllcache\raschap.dll2009-02-16 20:04:57 88 --sh--r- c:\windows\system32\902906E9A8.sys2009-02-16 20:05:24 3766 --sha-w- c:\windows\system32\KGyGaAvL.sys============= FINISH: 16:41:18.26 ===============Here is my DDS.txt file:

RELEVANCY SCORE 200
Preferred Solution: Possible Total Security/Total Spyware Trojan

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Possible Total Security/Total Spyware Trojan

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Please download OTL from following mirror:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedIn the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. I suggest you do this and select Immediate E-Mail notification and click on Proceed. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine.After 5 days if a topic is not replied to we assume it has been abandoned and it is closed.regards myrti

Read other 4 answers
RELEVANCY SCORE 93.6

Hey on my girlfriends computer whenever she turns it on it automaticallly started running a program called total security which acted like an anti-virus program. It would not let her open any programs because it said they were all at risk. I finally got that program off her computer so that I can work on it now but just want to make sure that there are no more viruses on here.


DDS (Ver_09-09-29.01) - NTFSx86 NETWORK
Run by Administrator at 13:39:59.64 on Tue 09/29/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.666 [GMT -4:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6UZ7N8V8\dds[2].scr

============== Pseudo HJT Report ===============

uStart Page = http://www.google.com/ig/dell?hl=en&...us&ibd=5061206
u... Read more

A:Total Security spyware

Hi,

Please do the following:

Download ComboFix from either of these locations:
Link 1
Link 2


VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:


Click on Yes, to continue scanning for malware.
When fini... Read more

Read other 9 answers
RELEVANCY SCORE 93.6

Help,

My computer is infected with Total security and it has taken over my windows background. I have a giant screen that says "Warning! You're in danger. Your computer is infected with spyware..." I t also won't let me start certain programs when I double-click on them such as hijack this and I get the following popup "Application cannot be executed. The file taskmgr.exe is infected. Please activate your antivirus software". Please help...
 

Read other answers
RELEVANCY SCORE 93.6

I have been infected with a spyware calling itself total security. It pretends to be spyware protection. I had been using Spywareterminator, and AVG Free virus for several years with great success, but it failed to prevent this. I am on a Dell 810 laptop with 2.0 process. and 1 gig of memory.

Are there any steps I can take to remove this easily.

Thank you.
 

A:Total Security Spyware- Please help.

I read some forums and downloaded Malwarebytes in safe mode. It seems to have cleaned my laptop.

Thanks.
 

Read other 1 answers
RELEVANCY SCORE 93.6

Pasting in additional information from another post. ~ OBDesktop screen says: WARNING Your're in danger! your computer is infected with spyware! And yes that is how they have you're spelled (your're).I can't even reinstall windows xp in safe mode. I can get the date/time to open when the computer is first turned on but once everything comes up it wont open.Continuous pop-ups. one common pop-up is Isass.exe-corrupt file. The take over application seems to be Total Protection 4.52.Here are the reports: it wont let me upload them directly so I will try to put them all in note book in safe mode first and try to transfer that way. RootRepeal 1st.:End of added information. ~ OBROOTREPEAL ? AD, 2007-2009==================================================Scan Start Time: 2009/09/02 19:4Program Version: Version 1.3.5.0Windows Version: Windows XP SP1==================================================Drivers-------------------Name: dump_atapi.sysImage Path: C:\WINDOWS\System32\Drivers\dump_atapi.sysAddress: 0xF977B000 Size: 90112 File Visible: No Signed: -Status: -Name: dump_WMILIB.SYSImage Path: C:\WINDOWS\System32\Drivers\dump_WMILIB.SYSAddress: 0xF9F56000 Size: 8192 File Visible: No Signed: -Status: -Name: rootrepeal.sysImage Path: C:\WINDOWS\System32\drivers\rootrepeal.sysAddress: 0xF9C12000 Size: 49152 File Visible: No Signed: -Status: -Hidden/Locked Files-------------------Path: C:\WINDOWS\system32\... Read more

A:total security 4.52/ spyware

Title was: Fixed it. Thanks anyway, Total Security 4.52Went into mnconfig and was able to to disable so I could run the computer to clean it out.

Read other 2 answers
RELEVANCY SCORE 92.8

I have Total Security 2009 and PC_Antispyware 2010 on my computer and I can not remove it. It has stopped all programs including internet explorer and firefox. If I am in safe mode I can get to the internet and download but nothing seems to work to get this off my computer. Everything is disabled in normal mode. Any suggestions?

A:Total Security Spyware Removal

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 91.6

I have a dell dimension 4600 desktop computer running Windows XP. It have become infected with two new programs that I did not download. Total security 2009 and PC_Antispyware 2010. I can not get access to any programs to help remove this program. It has enabled a firewall so that I can not use internet explorer or Firefox. I have the Windows Defender on disk to load but I can not get to safe mode to do this. Does anyone have any suggestions?

A:Total Security Spyware Infection - can't remove it

Hello kayeLee and to BleepingComputer.Since you can't use your web browsers on the infected machine you should use a flash drive or CD to move requested downloads to the infected machine, and to move requested logs back to your clean computer so that you may post them here.Please install RootRepealNote: Vista users ,, right click on desktop icon and select "Run as Administrator."Direct Download (Recommended)Primary MirrorSecondary MirrorSecondary MirrorSecondary MirrorZip Mirrors (Recommended if you have a slower connection or if the Direct Download mirror is down)
Primary MirrorSecondary MirrorSecondary MirrorRar Mirrors - Only if you know what a RAR is and can extract it.
Primary MirrorSecondary MirrorSecondary MirrorDisconnect from the Internet or physically unplug your Internet cable connection.Close all open programs, scheduling/updating tasks and background processes that might activate during the scan including the screensaver. Temporarily disable your anti-virus and real-time anti-spyware protection.After starting the scan, do not use the computer until the scan has completed.When finished, re-enable your anti-virus/anti-malware (or reboot) and then you can reconnect to the Internet.Extract RootRepeal.exe from the zip archive.Open on your desktop.Click the "Drivers" tab, and then click the button.Allow RootRepeal to run a scan of your system. This may take some time.Once the scan completes, push the button. Save the log to your desktop,... Read more

Read other 1 answers
RELEVANCY SCORE 90.8

i tried to follow the instructions you have for uninstalling "total security", but not only can i not use the task manager, but it willnot let me install the mcrosoft program process explorer that you recommend. this spyware lets me download, but not install. it says anything i try to install is infected. i have tried spybot search and destroy, but it will not let me even open the program. it says application cannot be executed the file SpybotSD.exe is infected please activate your antivirus software. Of course the spyware they want me to actiate is theirs. (fraudulent)

A:total security, rogue anti spyware program

Moving to the Am I Infected forum for you.

Read other 1 answers
RELEVANCY SCORE 90.8

We noticed Total Security a couple of days ago. I've run Spybot and it found 3 threats and removed them and it's still there. And now we can't run anything else, After many searches I found a post about malwarebytes. I downloaded on an external drive using a different computer, and changed the name, following the directions in this post spyware forum. I ran the program from the external drive, and it found a e more few and removed them. On the log I saw Total Security, Backdoorbot, Adsense and some others. But now I can't even find the log. It said to reboot, but when it rebooted, it didn't find the external drive, and I don't think it completed the process. After the reboot, Total Security is still there popping up. The other part of the post said to use ComboFix, but I don't want to do that without help. I'm not super techincal, but can find my way around a PC fairly well.I hope someone can help us quickly.Thanks!I found the log:Malwarebytes' Anti-Malware 1.41Database version: 2775Windows 5.1.2600 Service Pack 310/1/2009 12:16:20 PMmbam-log-2009-10-01 (12-16-20).txtScan type: Full Scan (C:\|E:\|)Objects scanned: 216075Time elapsed: 1 hour(s), 4 minute(s), 4 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 1Registry Values Infected: 1Registry Data Items Infected: 0Folders Infected: 5Files Infected: 3Memory Processes Infected:(No malicious items detected)Memory Modules Infect... Read more

A:Total Security trojan

There is no such thing as quickly with this rootkit infectionPlease download Win32kDiag.exe by AD and save it to your desktop.alternate download 1alternate download 2This tool will create a diagnostic report for me to review.Double-click on Win32kDiag.exe to run and let it finish. When it states Finished! Press any key to exit..., press any key on your keyboard to close the program. A file called Win32kDiag.txt should be created on your Desktop.Open that file in Notepad and copy/paste the entire contents (from Starting up... to Finished! Press any key to exit...) in your next reply.

--------------------------------------Go to > Run..., then copy and paste this command into the open box: cmdClick OK.At the command prompt C:\>, copy and paste the following command and press Enter:DIR /a/s %windir%\scecli.dll %windir%\netlogon.dll %windir%\eventlog.dll >Log.txt & START notepad Log.txtA file called log.txt should be created on your Desktop.Open that file and copy/paste the contents in your next reply.

Read other 6 answers
RELEVANCY SCORE 89.6

My clients computer was infected with the Total Vista Security trojan\virus. I was able to remove the virus and all data and apps seem to work except the network. When I run ipconfig I see that the IP is an Apipa address (169.blah.blah.blah). I have tried the standard fixes: reload NIC driver, run the various netsh commands, even some registry hacks, and nothing works. I did run the sfc /scannow and at the end got a responce that some data was corrupted but when I ren the log, it was 6 screens long! I was unable to recognize anything that maight have to do with the NIC or stack. I'm looking for someone that had the same experience with the TVS trojan. I am troubleshooting the unit at work, and putting it on the network (atleast trying to) so Im not using a home router\switch. I have tried letting the machine get an address from DHCP as well as inputting the info manually. Neither works. Its acting as if there were no cat5 connection, but there is, and I have changed\verified the cable connection, including the blinky lights at the back! Little help!?!

A:NO 'Net after Total Vista Security Trojan

Hello,

Since you cannot access the internet, I believe that the virus is not fully removed. Most clever viruses like this have hidden parts that other parts protect and hide. Therefore, please run HiJackThis 2.0.4 generating a log file and upload it here. This is the key to most complex virus removal, as it can remove the parts that hide the other parts, ready for a virus scanner to finish off: HijackThis - Trend Micro USA

Once you have done this, please parse your CBS.log. See the top yellow box here: System Files - SFC Command

Now please upload both the sfcdetails.txt from your Desktop and the HiJackThis log to your next post. Remember that HiJackThis does not make any distinction between good and bad, so do nothing until I tell you to.

Richard

Read other 1 answers
RELEVANCY SCORE 89.6

I had the Total Security screen popup a couple of days ago. I downloaded AVG and it supposedly cleaned up a couple of things but didn't identify Total Security. Since then, I've been getting random popups for no reason that take me to different sites. It will come up as one URL breifly, then it redirects to different sites pretty quickly. My computer has become really slow on the internet and often will not completely load a page. Can someone take a look at my log and help me fix this? Your help is appreciated.C:\Windows\system32\SearchFilterHost.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 -... Read more

A:HijackThis Log - Possible Total Security Trojan + ??

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 89.6

My Windows XP laptop is infected with Trojan Vundo and Total Security. I am able to kill the Total Security process using the downloaded Microsft process tool (renamed to iexplore as I read on this website). The problem is that MWB does not clean the windows/system32/XXXXXX.dll file. I also tried Vundo Remover and cannot start in Safe Mode. Attached is the MWB log that does not identify the trojan vundo after cleaning but Symantec Viruscan does. ALso attached is the HJT log. I look forward to some expert advice.***********Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:50:12 PM, on 9/20/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16876)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exeC:\Program Files\Common Files\Symantec Shared\... Read more

A:Trojan Vundo and Total Security

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I will ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.We need to create an OTL ReportPlease download OTL from hereSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the "Run Scan" button.The scan should take just a few minutes.Copy the log that opens up and paste it back here in your next reply.=============The next log will show us any hidden files that are present.Download RootRepeal from the following location and save it to your desktop.Direct Download (Recommended)Primary MirrorSecondary MirrorSecondary MirrorSecondary MirrorZip Mirrors (Recommended if you have a slower connection or if the Direct Download mirror is down)
Primary MirrorSecondary MirrorSecondary MirrorRar Mirrors - Only if you know what a RAR is and can extract it.
Primary MirrorSecondary MirrorSecondary MirrorExtract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).Open on your desktop.Click the tab.Click the button.Check all seven boxes: Push OkCheck the box for your main system drive (Usually C:), and press Ok.Allow RootRepeal to run a scan of your system. This may take some time.Once the sc... Read more

Read other 16 answers
RELEVANCY SCORE 89.6

The first symptom was on April 20 with popups from "XP Total Security 2011". After attacking with Malwarebytes and SuperAntiSpyware I thought I had eliminated the problem except for some damage it left:Windows update blocked ("IE unable to connect")MS Security Essentials update blockedIE redirects from anything dealing with Microsoft SecurityTDSSKiller unable to install (halts at 80% initialization)These remaining problems have to be fixed to restore security. Then this morning I got more false security popups, so I am really concerned.Note: Because this is a Dell laptop there is a problem running Microsoft Recovery (message "nvrd32.sys not found").Any help is greatly appreciated. I am willing to consider a re-install of XP if that would work.Russ.DDS (Ver_11-03-05.01) - NTFSx86 Run by Russ McGillivray at 13:32:40.07 on 27/04/2011Internet Explorer: 8.0.6001.18702Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3062.2354 [GMT -4:00].AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}.============== Running Processes ===============.C:\WINDOWS\system32\svchost.exe -k DcomLaunchsvchost.exec:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k WudfServiceGroup... Read more

A:XP Total Security 2011 Trojan

Hello and welcome to Bleeping Computer.My name is km2357 and I will be helping you to remove any infection(s) that you may have.I will be giving you a series of instructions that need to be followed in the order in which I give them to you.If for any reason you do not understand an instruction or are just unsure then please do not guess, simply post back with your questions/concerns and we will go through it again.Please do not start another thread or topic, I will assist you at this thread until we solve your problems.Lastly the fix may take several attempts and my replies may take some time but I will stick with it if you do the same.Sorry for the delay in replying, the forum is very busy. If you still need help, please do the following:Step # 1 Download and run DDSDownload DDS and save it to your desktop from here or here or hereDisable any script blocker, and then double click dds.scr to run the tool. When done, DDS will open two (2) logs: DDS.txt Attach.txtSave both reports to your desktop. Post them back to your topic.Step # 2: Download and Run GmerPlease download gmer.zip from Gmer and save it to your desktop.***Please close any open programs ***Double-click gmer.exe. The program will begin to run.**Caution**These types of scans can produce false positives. Do NOT take any action on any "<--- ROOTKIT" entries unless advised by a trained Security AnalystIf possible rootkit activity is found, you will be asked if you would like to perform a full scan. Cli... Read more

Read other 3 answers
RELEVANCY SCORE 88.8

Question sys detected potential hazard trojan spm/lx
I have what I presume is a fake windows security message that tells me to download a probable fake anti-spyware program on my sons computer.

He was watching tv on computer and trying to log on to facebook the sound stopped he got a warning which closed before he could read it. The browser worked, fb worked he minimized the browser and the desktop was blue there was a warning that said he had spyware and had to run a scan and he clicked on the red circle x's thinking that was McAfee and it didn't do anything so he disabled his internet so nothing further would happen.
last thing he downloaded was the movie a night or two before and it ran that night fine. When I checked frostwire was running and I turned it off

He's running Windows Xp and there are two red circular icons with a white X on the taskbar and task manager is greyed out when I right click the taskbar and if I ctrl alt del it's greyed out as well.

This is what pops up:

Attention! System detected a potential hazard (TrojanSPM/LX) on your computer|that may infect executable files. Your private information and PC safety is at risk.|To get rid of unwanted spyware and keep your computer safe you need to update your current security software.
* Windows XP
* McAfee Security Center
I googled the virus and came across a page from this website that said to run malware bytes so I did that and saved the log and did as instructed and it seemed to go away bu... Read more

A:HTML/FakeAV Trojan, Total Security Virus, hazard trojan spm/lx

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Please download OTL from following mirror:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedIn the upper right hand corner ... Read more

Read other 2 answers
RELEVANCY SCORE 88.8

I have what seems to be a trojan that i can;t get rid of - in that it looks like a program - "Total Security", but i can't uninstall it, and it keeps popping up...The below description (not mine - from malwarebytes forum) is exactly the same thing that happens to me..."If I let the computer sit idle for about 10 minutes a blue screen appears that says a problem was detected and windows has been shut down to prevent damage. a process or thread crucial to system operation has unexpectedly exited or been terminated. blah blah remove any hardware or software, disable BIOS memory options such as caching or shadowing. use safe modeTechnical information ---------------stop --0x000000f4 (0x000000003, 0x851cada0, 0x851caf14, 0x805d297c)beginning dump of physical memory, physical memory dump complete, contact administrator(this is an abbreviated version) "Please help! DDS (Ver_09-09-24.01) - FAT32x86 Run by Kathryn Garrad at 3:41:11.17 on Fri 25/09/2009Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1014.567 [GMT -7:00]AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}FW: ZoneAlarm Firewall *disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchSVCHOST.EXEC:\WINDO... Read more

A:Infected with Total Security trojan / popup

I ran Combofix while i was waiting... Here's the log... I ave attached it as well, just in case... Hope someone can help! ComboFix 09-09-23.02 - Kathryn Garrad 25/09/2009 3:09.1.1 - FAT32x86Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1014.675 [GMT -7:00]Running from: c:\documents and settings\Kathryn Garrad\Desktop\ComboFix.exeAV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}FW: ZoneAlarm Firewall *disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).c:\documents and settings\Kathryn Garrad\Local Settings\Application Data\Bron.tok-16-1c:\documents and settings\Kathryn Garrad\Local Settings\Application Data\Bron.tok-16-10c:\documents and settings\Kathryn Garrad\Local Settings\Application Data\Bron.tok-16-11c:\documents and settings\Kathryn Garrad\Local Settings\Application Data\Bron.tok-16-12c:\documents and settings\Kathryn Garrad\Local Settings\Application Data\Bron.tok-16-13c:\documents and settings\Kathryn Garrad\Local Settings\Application Data\Bron.tok-16-14c:\documents and settings\Kathryn Garrad\Local Settings\Application Data\Bron.tok-16-15c:\documents and settings\Kathryn Garrad\Local... Read more

Read other 3 answers
RELEVANCY SCORE 86.8

The first indication of a problem was a Total Security 2009 issue. With a lot of research I seemed to have gotten rid of that one. 3 days later Microsoft Police Pro popped up. When I start up I am getting a dll error saying that the image is not valid. Based on research I have done I think this may have gotten too much for me. Please help, here is my DDS log.
DDS (Ver_09-07-30.01) - NTFSx86
Run by HP_Administrator at 14:59:39.34 on Sun 09/20/2009
Internet Explorer: 7.0.5730.11
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1982.1207 [GMT -7:00]

AV: Spyware Doctor with AntiVirus *On-access scanning enabled* (Updated) {D3C23B96-C9DC-477F-8EF1-69AF17A6EFF6}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\vVX3000.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Fi... Read more

A:Various trojan infections including Police Pro and Total Security 2009

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I will ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.We need to create an OTL ReportPlease download OTL from hereSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the "Run Scan" button.The scan should take just a few minutes.Copy the log that opens up and paste it back here in your next reply.=============The next log will show us any hidden files that are present.Download RootRepeal from the following location and save it to your desktop.Direct Download (Recommended)Primary MirrorSecondary MirrorSecondary MirrorSecondary MirrorZip Mirrors (Recommended if you have a slower connection or if the Direct Download mirror is down)
Primary MirrorSecondary MirrorSecondary MirrorRar Mirrors - Only if you know what a RAR is and can extract it.
Primary MirrorSecondary MirrorSecondary MirrorExtract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).Open on your desktop.Click the tab.Click the button.Check all seven boxes: Push OkCheck the box for your main system drive (Usually C:), and press Ok.Allow RootRepeal to run a scan of your system. This may take some time.Once the sc... Read more

Read other 9 answers
RELEVANCY SCORE 86.8

Hello, I've been affected by Total Security 2009. Basically; I restarted my computer and then it suddenly popped up on my computer; with the wallpaper of my desktop changed to a "Warning Message" and constant pop-ups telling me to purchase their software. Likewise, I suddenly had problems opening any programs at all including Task Manager, as the malware started to restrict all access to other applications, citing them as "infections." I've renamed the "taskmgr" to "iexplore" for the timebeing, but I fear that the computer will suddenly restart. Any help is appreciated!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 5:59:38 PM, on 19/09/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\ctfmon.exeC:\Documents and Settings\User\Application Data\Microsoft\winlogon.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Fil... Read more

A:Total Security 2009 Malware? Trojan? Infected Computer

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I'll ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.Please download ComboFix from one of these locations:Link 1Link 2Link 3Important!You should NOT use Combofix unless you have been instructed to do so by a Malware Removal Expert. It is intended by its creator to be used under the guidance and supervision of an Malware Removal Expert, not for private use.Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again. Make sure that you save ComboFix.exe to your DesktopDisable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools

Double click on ComboFix.exe & follow the prompts.

As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

Follow ... Read more

Read other 2 answers
RELEVANCY SCORE 83.2

[B]READ THIS FOR A FIX TO HP TOTAL CARE ADVISOR WINDOWS VISTA

First: Goto system restore and click on the advance tab and at the bottom of the screen click on create system retore point, Name the point "____"and then you may begin when the point is finished being created.

* STEP ONE: UNINSTALL HP TOTAL CARE ADVISOR
* STEP TWO: GOTO http://www.mediafire.com/?ddvjyk5gzne
DOWNLOAD AND SAVE FILE hp_total_care_advisor.rar (11.41MB) TO DESKTOP

* STEP THREE: GOTO http://h30155.www3.hp.com/helpandsupport/
DOWNLOAD FILE AND SAVE TO DESKTOP

THEN RUN FILE sp36082.exe(5.61 MB)

SELECT YES TO OVERWRITE ALL FILES (THIS IS THE LIBRARY FILES NOT THE PROGRAM FILES)

* STEP FOUR: GOTO http://www.filehippo.com
in the searchbar @ filehippo.com [type] winrar

download and save WinRAR 3.70
RARLab - 1.15MB (Shareware) to desktop

* Step Five:go to explore and Program Files folder, and open folder Hewlet-Packard, and delete the subfolder HP ADVISOR
* Step Six: run WinRAR 3.70 RARLab - 1.15MB (Shareware) and extract the rar file hp_total_care_advisor.rar you saved on your desktop
* Step Seven: your HP TOTAL CARE ADVISOR should be installed and have created a new subfolder HP Advisor in the HEWLETT-PACKARD Program Files folder,
* Step Eight: Go to the application HP Advisor file in the newly created HP Advisor Subfolder create a shortcut to desktop for the application and then run the application.
Everything should be fine from there on out and it is your option to ... Read more

A:Solved: Hp Total Care Advisor Fix Failures Easy & Fast No Total Recovey Fix Stops

Read other 16 answers
RELEVANCY SCORE 82

I unstalled Comodo Time Machine after I realized I had made a mistake in setting it up, and then when I tried to re-install it (there was no option to go back and rectify my mistake), it told me the software was "already installed on my computer" and would not re-install.
I used Revo Uninstaller to remove the program, then CCcleaner to tidy up, and also went thorough my registry with CCleaner and manually checking for breadcrumbs and stuff CCleaner tends to miss.

BTW, specs:
I am running XP Professional Edition, service pack 3.
I use Rising Anti-Virus (never had a problem).
I've also tried Glary Utilities (desperate) to no avail.
CTM still thinks it is installed on my computer. I am sure there are little lurking elements somewhere where I can't find them with my limited skills. When I startup, there is a CTM splash screen detailing how it is "creating a restore point," although no other related files to this can be found, as far as my digging has shown me. Additionally, I have tried re-downloading the program and reinstalling, to no avail. Still tells me the program is already installed.

I would like to get rid of the splash screen, and remove all remaining parts of the program. This make be as simply as deleting the logo file from my system, but since I like to run a clean machine I want to make sure to scrub the rest of the traces, if there are any. Does anyone have any suggestions? Thanks!

A:Comodo Time Machine total uninstall not total at all

http://www.comodo.com/support/user-guides/Comodo_Time_Machine_User_Guide.pdf

http://help.comodo.com/topic-82-1-157-1282-Uninstalling-Comodo-Time-Machine.html

Louis

Read other 2 answers
RELEVANCY SCORE 79.2

My computer is infected with this "Total Security" spyware or adware. I am unable to start firefox or Internet Explorer as a window comes up saying "Firefox is infected" and this has also stopped me from running Hijack This so I can't give a report. My background has alos been replaced with a fake background saying "WARNING YOUR INFECTED blah blah..."
I'm currently on my lap top.

I've tried restarting my computer in Safe Mode but just before the system can boot up it restarts itself! And I'm presented with the option to start normally or in safe mode and then BAM it restarts itself, so on so forth.

I need guidance please. Any help is greatly appreciated.
 

A:"Total Security" Spyware... help!

BUMP? Still unable to find a way around this.
 

Read other 3 answers
RELEVANCY SCORE 76.4

I have a very simple data base 3 tables

Product table with 2 fields productid and productdescription

Sale1 is the basic information of a sale invoice number and who items are sold to

Sale2 is the details and shows qty , item, price, and GST charged if any (some people or organizations are tax exempt so it becomes zero.

I've got my form and subform to run correctly

I've got my report to print all items correctly but I can't total the value

the line value for each item is a textbox

=Sum([QTY] * [Saleprice])*([GST])+([QTY] * [Saleprice])

This does return the correct value for that line item.

HOW can I correctly total the sum of all items into the reporrt footer???

HELP please the sale is tomorrow through Sunday.
 

A:Solved: Total in Report Footer ACCESS 2010 Report - Total NOT working

Add a duplicate of your current calculating field and set it's "Running Sum" (under data tab) to yes overall.
Then in the footer use the new field as the totals Control Source.
 

Read other 2 answers
RELEVANCY SCORE 76
A:Bitdefender Total Security vs Emsisoft Anti-Malware vs ESET Smart Security

Emsisoft.
 

Read other 1 answers
RELEVANCY SCORE 76

Which antivirus is better Bitdefender Total Security 2016 or Eset Smart Security?
 

A:Which antivirus is better Bitdefender Total Security 2016 or Eset Smart Security?

Computer resources wise it's Eset... But, if you don't mind that, go with BD, there are a lot of giveaways from them.
 

Read other 26 answers
RELEVANCY SCORE 76

Hi

...now totally confused about which to use, or which ist the best deal for the money?
Right now i am using the trial version from Zone Alarm Internet Security,i like it - but it really slows my system down. I was also thinking about Bitdefender total security...since they offer a 30 day free trial version, or Internet Security Software 08.
I do like the idea of having a Security Suite, its kind of all in one , and i don"t have to hassle with x amount of programs ( still somewhat of a beginner).
I have read many ratings and reviews... just to confuse me more...seems as though depending on what webside you are looking (c/net, or pc world, or computer world...) each has its own favorite.

Can anyone help out?

Thanks in advance.
 

A:Zone Alarm Security Suite versus Bitdefender Total Security

Howdy AstridG James,
I have been using Zone Alarm Security Suite for a couple of years now and find it very good. I also have SpywareBlaster,Ad-Aware 2007 Pro, Spybot Search n Destroy 1.5 and WinPatrol.All the programmes seem to be needed to find different things and although Zone Alarm seems to stop most and is a gr8 AV....never had any problems with it at all...the other programmes still find different things and all work well together.
Regards Paula
 

Read other 1 answers
RELEVANCY SCORE 75.6

Direct Download links for offline installation



Bitdefender Antivirus Plus 2015 ( 32 bit)

http://download.bitdefender.com/windows/desktop/av_plus/2015/en-us/bitdefender_av_18_32b.exe
Bitdefender Antivirus Plus 2015 ( 64 bit)

http://download.bitdefender.com/windows/desktop/av_plus/2015/en-us/bitdefender_av_18_64b.exe
Bitdefender Internet Security 2015 (32 bit)

http://download.bitdefender.com/windows/desktop/i_security/2015/en-us/bitdefender_is_18_32b.exe
Bitdefender Internet Security 2015 (64 bit)

http://download.bitdefender.com/windows/desktop/i_security/2015/en-us/bitdefender_is_18_64b.exe
Bitdefender Total Security 2015 (32 bit)

http://download.bitdefender.com/windows/desktop/t_security/2015/en-us/bitdefender_ts_18_32b.exe
Bitdefender Total Security 2015 (64 bit)

http://download.bitdefender.com/windows/desktop/t_security/2015/en-us/bitdefender_ts_18_64b.exe



​BitDefender Antivirus Plus 2015 User Guide
http://download.bitdefender.com/res...tivirusPlus/Bitdefender_2015_AV_UserGuide.pdf

BitDefender Internet Security 2015 User Guide
http://download.bitdefender.com/res...netSecurity/Bitdefender_2015_IS_UserGuide.pdf

BitDefender Total Security 2015 User Guide
http://download.bitdefender.com/win...15/en-us/Bitdefender_TS_2015_UserGuide_en.pdf
Bitdefender Internet Security 2015 Screenshots

http://postimg.org/gallery/9ch1u0ty/

​OLD VERSIONS

​Bitdefender Antivirus Plus 2014 ( 32 bit)

http://download.bitdefender.... Read more

A:Bitdefender Antivirus/Internet security/Total security 2015 direct download link

480MB
 

Read other 18 answers
RELEVANCY SCORE 75.6

I recently inadvertently let in a virus that called itself XP Total Security. I am using Windows XP and was using Microsoft Security Essentials for Protection.OOPS!
After using another computer to search Bleeping Computer Forums, I managed to download RKill and Malwarebytes. I have ran both several times. Malwarebytes seems to remove the virus but when I re-boot it is back but with a different name. Now it is Windows Security Alerts. It has also hijacked by browser and will not let me do normal searches in my browser(Firefox) without re-directing to various other sites. I'm not sure what else to try. Now whatever the virus is - it is affecting non-web usage. While working on documents in Word or Excel, my computer will freeze and the only way I can move is to power down and then power back up.

A:Virus started as XP Total Security now Windows Security Alerts

I have also now tried Spybot and AVG. Even though they say they find trojans to remove - I am still having massive problems. Most of the time I can not log onto the internet and when I try to use System Restore - it either doesn't open or I get a pop up box that says System Recovery will not help me and then it exits. Please can anyone help?

Read other 2 answers
RELEVANCY SCORE 75.6

Hi, yesterday I wanted to download 360 total security essential from the official site.
I've installed ublock origin that blocked the connection because the link to download the software was blacklisted by Malware Domains.
Do you know why?
 

A:Why 360 total security Internet Security in Malware domains list?

Probably a false positive from the list
 

Read other 21 answers
RELEVANCY SCORE 75.2

OS Vista Ultimate 64-bit
Installed security: K7 Total Security 2009 (real-time prot.), Malwarebytes Anti-Malware (on-demand only) & SuperAntiSpyware (on-demand only).
K7 package includes AV, AS & FW; has real-time mode.

So far:
Pro: Only product I have found that detects and can block ActiveX "Webbugs" from loading. I positively despise "Webbugs" and many programs claim to block them but I have not found their claims to be valid.

Con: Auto-update stops working after a few days & program has to be reinstalled. Don't know if problem is related to my particular system & software or is a common problem shared by many users. Also Spyware list is not set properly.

Anyone else tested this program?

Read other answers
RELEVANCY SCORE 75.2

Has anybody heard of 360 Total Security

A:360 total security

Originally Posted by smmeyers


Has anybody heard of 360 Total Security



Hi yes follow the link plenty about it there
https://www.google.co.uk/search?sour...total+security

Read other 1 answers
RELEVANCY SCORE 75.2

Hi there,

Yesterday, Firefox crashed and the Total Security 2009 window popped up and my computer became incredibly slow. I rebooted in Safe Mode and found and deleted both _ex-08 and _ex-68 from my temp files. I've since run a scan with Ad-Aware and found nothing but I wanted to make sure that nothing crazy is going on that I don't know about. For the record, my computer seems to be running normally now and the Total Security thing is gone. This is more for peace of mind and verification.

Thank you so much in advance for your help. DDS log follows.
DDS (Ver_09-07-30.01) - NTFSx86
Run by Owner at 9:28:22.96 on 30/08/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_07
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1023.552 [GMT -7:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\InterVideo... Read more

A:_ex-08 and _ex-68 (Total Security 4.52)

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 75.2

I'm unable to run anything except iexplore.exe and when I try and boot into safe mode I get a blue screen. It says to run chkdsk /f in the repair console and when I do it tells me it's an invalid paramater. I've run chkdsk and then chkdsk /r because it said it found errors with no luck. The blue screen has a stop number which is, 0x0000007B (0xF789E528, 0xC0000034, 0x00000000, 0x00000000). I've tried to download Process Explorer at live.sysinternals.com/procexp.exe and can save it to the desktop, but even renaming it iexplore.exe it opens and then immediately closes. Is there anything I can do? Thank you in advance.

-Mike

A:"Total Security" won't let me run anything

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.

Read other 2 answers
RELEVANCY SCORE 75.2

I went thru the prep guide but could not complete it all.

The gmer.zip would not install.

I did get the logs.

.
DDS (Ver_11-03-05.01) - NTFSx86 NETWORK
Run by Mike P at 20:01:03.92 on Thu 04/07/2011
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_05
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1014.514 [GMT -8:00]
.
FW: ZoneAlarm Firewall *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Mike P\Local Settings\Application Data\fus.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
C:\Documents and Settings\Mike P\My Documents\Downloads\dds.scr
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=4070207
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uDefault_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=4070207
mSearch Bar = hxxp://www.google.com/ie
uInternet Settings,ProxyOverride = <local>... Read more

A:xp total security

to BC.When posting logs, please ensure Wordwrap is turned off in Notepad (to check, open Notepad in the menubar click on Format and make sure that Word Wrap is unchecked)Download OTL to your DesktopDouble click on OTL to run it. Make sure all other windows are closed and to let it run uninterrupted.When the window appears, tick the box beside Scan All Users at the top.Underneath Output at the top set it to Standard Output.Underneath the option Extra Registry set it to Use SafeList.Underneath the option File Scans tick the boxes beside Use Company Name WhiteList, Skip Microsoft Files, LOP Check, Purity Check.Click the Run Scan button. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your reply.Instead of GMER use thisDownload aswMBR.exe ( 511KB ) to your desktop.Double click the aswMBR.exe to run itClick the "Scan" button to start scanOn completion of the scan click save log, save it to your desktop and post in your next reply

Read other 2 answers
RELEVANCY SCORE 75.2

Hello all,I've been directed here after setting up my Firefox account to ask for help with removing the very annoying TotalSecurity malware. I've tried every other option and can't get rid of it. Any help / advice is greatly appreciated.Many Thanks.Edit: Moved topic from XP to the more appropriate forum. ~ Animal

A:total security

Hi .Guide at http://www.bleepingcomputer.com/virus-remo...-total-security.Louis

Read other 3 answers
RELEVANCY SCORE 75.2

Hello,
I've been reading through these posts to find a possible solution. I can login as a guest to my computer and the virus does not launch, but that doesn't help anything. Any other suggestions? I cannot open "my computer" properties. I cannot launch the 'iexplorer' fix. I've managed to launch a browser by launching it through a link in a word doc. Help! Thanks -Noah

Read other answers
RELEVANCY SCORE 75.2

For sometime I've been running the 360 Total Security (actually I learned about it here after a long haul of Exploit on my computer that the Bleeping Computer guys finally worked it out).
Anyway, it's not a bad AV, I think, and got more popular and aggressive when calling the customer service line (for sure). So, recently within past 2 weeks, I thought I'd go ahead and did the upgrading to the latest running freeware 360 Total Security or Essentials, is what I thought and it was too controlling as to the right away take off on showing computer's missing security or needed same of updates, etc....that that part I can kind of do without as far as just prefer an AV!
So, I went back or from having the lower version before as I mentioned I wanted to upgrade in case I might be missing out on newer and greater protect or whatever, so to this end today I put on a lower version 1020 that I found from a website that offered same, because I didn't find that around at the 360's (manufacturer's site, let alone ask for anything of the sort). So, at this time, my question's as to the memory usage that it seems to go up and up like at right now-21,296K, well a little earlier or all of about 10 mins. ago, it was more 21,336K.
I just think that seems like it's a bit high for being a low maintenance or easier on resources (AV). Anyone have any info. or idea to suggest that's practical or opinion as such, please feel free to r... Read more

A:Using 360 Total Security

My advise would be to not use an older version of the software. There have been many bug fixes since 1020 and memory usage may be one of them. If you want 360 Total Security without all the bells and whistles then uninstall 1020 and install 360 Total Security Essentials. Did you install Essentials as the latest version is 8.8.0.1020
 
https://www.360totalsecurity.com/en/version/360-total-security-essential/
 
The 1020 version of Total Security was 6.6.1.1020 dated May 2015.
 
https://www.360totalsecurity.com/en/version/360-total-security/

Read other 16 answers
RELEVANCY SCORE 75.2

I attempted to fix the XP Total Security malware on my computer using the directions found on this site. I ran the FixExe.reg successfully. When I attempted to run the MBAM install, even after renaming the file on the flash drive, the file wouldn't open. I read the "Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help". I've attached all required files. I appreciate your help.

DDS.txt:

.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 6.0.2900.5512
Run by Amy at 17:15:25 on 2011-07-23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3067.2394 [GMT -4:00]
.
AV: Trend Micro Internet Security *Disabled/Updated* {7D2296BC-32CC-4519-917E-52E652474AF5}
FW: Trend Micro Personal Firewall *Disabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Dell\DellDock\DockLogin.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
c:\drivers\audio\r214424\STacSV.exe
svchost.exe
C:\Program Files\Trend Micro\BM\TMBMSRV.exe
C:\Program Files\Absolute Software\Absolute Notifier\AbsoluteNotifierService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin&#... Read more

Read other answers
RELEVANCY SCORE 75.2

I am infected with a program called total security. I am unable to remove it from the conventional means (add/remove programs) I am also prevented from going to web pages as the pop ups take over constantly. I want to remove this malware safely and completely. Can anyone help me/

A:total security

Hello, I am going to move this from XP to the Am I Infected forum. You will need to access another PC.If you cannot use the Internet,you will need access to another computer that has a connection.From there save mbam-setup.exe to a flash,usb,jump drive or CD. Now transfer it to the infected machine, then install and run the program. If you cannot transfer to or install on the infected machine, try running the setup (installation) file directly from the flash drive or CD by double-clicking on mbam-setup.exe so it will install on the hard drive.***Manually Downloading Updates: Manually download them from HERE and just double-click on mbam-rules.exe to install. Alternatively, you can update through MBAM's interface from a clean computer, copy the definitions (rules.ref) located in C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware from that system to a usb stick or CD and then copy it to the infected machine.Next run MBAM (MalwareBytes):NOTE: Before saving MBAM please rename it to zztoy.exe....now save it to your desktop.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mba... Read more

Read other 1 answers
RELEVANCY SCORE 75.2

Below are some of the logs that are requested via the preparation guide. Here is the information that I know/have researched. It is apart of the XP Total Security rogue malware. I have run Antibytes Malware multiple times. Last night was the latest run of it. It found 13 infected files. Quarantined/Removed. Loaded in normal mode, and now I am facing issues with system32 I believe with rundll..DDS (Ver_11-03-05.01) - NTFSx86 NETWORK Run by Administrator at 22:55:33.12 on Mon 05/02/2011Internet Explorer: 8.0.6001.18702Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.1408 [GMT -4:00].AV: Smart Engine *Enabled/Updated* {BDE3D870-12A2-41C2-B0CD-AD4E71C53B87}AV: AVG Anti-Virus Free Edition 2011 *Disabled/Outdated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}FW: Smart Engine *Enabled* .============== Running Processes ===============.C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Internet Explorer\iexplore.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Malwarebytes' Anti-Malware\mbam.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Documents and Settings\Administ... Read more

A:XP Total Security

I'm sure I should be just waiting for assistance, but I am too anxious. (plus I like to learn new things) I have been reading various forums with the same symptoms as mine, and I went ahead and installed HijackThis(seen Gringo request someone to run it). I also had received this warning/pop up from HijackThis(word for work text) :for some reason your system denied write access to the hosts file. if any hijacked domains are in this file, hijackThis may NOT be able to fix this.If this happens, you need to edit the file yourself. To do this, click start, Run, and type : notepad c:\WINDOWS\System32\drivers\etc\hosts and press enter. Find the line(s) Hijack this reports and delete them. Save the file as 'hosts.'(with quotes), and reboot.LOG for HijackThis :Logfile of Trend Micro HijackThis v2.0.4Scan saved at 7:03:54 PM, on 5/4/2011Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: Safe mode with network supportRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\ctfmon.exeC:\WINDOWS\explorer.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC... Read more

Read other 31 answers
RELEVANCY SCORE 75.2

Please help me out of this malware.
I've tried the steps mentioned at http://www.2-viruses.com/remove-total-xp-security(except the Remove these Total XP Security files: as i couldn't find those) and then scanned system through Malwarebyte's anti malware but no use. this av.exe runs out of no where.

please seethe log taken thorugh Hijeck this as follows and helpppppppppppppppp its very urgent and imp.:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:35:17 AM, on 3/20/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common File... Read more

A:Total xp security

Read other 16 answers
RELEVANCY SCORE 75.2

hey, i have a win7 home edition. i wanted to know wich is the best combination of softwares(like anti virus..anti-spyware. anti malware. and whatever else i required. i jus wanted to know..paid or unpaid.. how do i totally protect my pc.
i also need help in creating a proper. virus free backup..are there any specific softwares which ensure the protection of ur data.??
please help.

A:total security.??

Probably no such thing as TOTAL security.

There are a lot of threads on this subject. One common combination is Windows Firewall, Microsoft Security Essentials, Malwarebytes, and some common sense about browsing/email habits.

As far as backup goes, you have to decide on these issues:

What to backup: just data? just Windows? both?

Method of backup: an imaging program like Acronis or Macrium or a file by file backup program like Synctoy, Cobian, or Second Copy. A file by file backup program will not backup Windows. An imaging program can backup both data and Windows, but I'd recommend you use a file by file program for your data.

Read other 7 answers
RELEVANCY SCORE 75.2

Hi, I hope someone can help me.I tried following the "How to remove Total Security" guide, but it doesn't seem to be working for me.I do not find a "tsc.exe" or anything with a shield or padlock. I do see "RapportService.exe", a recent download, among many others. I could list them all if that would help.Can you please advise me.Also, I am not very technical, so please KISS.Thanks.Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.Then post your DDS and GMER logs as a reply to this topic. Once you have done that I will remove my reply and consolidate the posts so that you retain your correct place in the queue.If you can produce at least some of the logs, then please explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Thank you very much for getting back to me so quickly. I started working on it as soon as I saw your message, but it is slow going. Is it normal for the GMER scan to go on for hours?In that case I would just skip the GMER scan..DDS (Ver_11-03-05.01) - NTFSx86 Run by Janis at 17:08:53.12 on Fri 04/22/2011Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_22Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2047.1059 [GM... Read more

A:XP Total Security

I think I have removed XP Total Security, but I still have Automatic Updates virus (the red shield and pop up in the lower right hand corner). I ran a full scan with Malwarebytes and it found zero infected files. Any idea what I should do now? Also, noted that the red shield shows on some of my login accounts, but not all.

Read other 29 answers
RELEVANCY SCORE 75.2

Hi, Total XP Security.....

This lovely little gem keeps attacking my system with constant messages of security issues. I know Total XP security is fake, but can't get rid of it. Please help!!! It also blocked my internet access for a bit unitl Spybot managed to relieve the pain!!

Dell optiplex 280
XP
1gig Ram
2.53 Htz Celeron Processor

and here is my HJT log.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:07:12, on 21/04/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\AVG\AVG9\avgfws9.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Documents and Settings\LocalService\Local Settings\Application Data\ave.exe
C:\WINDOWS\system32\Pen_Tablet.exe
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\s... Read more

A:Total XP Security

Read other 14 answers
RELEVANCY SCORE 75.2

I purchased Malwarebytes premium today and now I am seeing 360 Total Security. I did not download this but I have a teenager that could have done it playing games.  He has something called Blue stacks downloaded.  I have also a paid viper anti virus.  I'm not noticing any computer issues but would like this 360 gone if it is malicious or can infect the computer.  Please advise thanks for you help.  Sorry if this is posted in the wrong place.

A:Help 360 Total Security

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.===Wait for further instructions.

Read other 7 answers
RELEVANCY SCORE 75.2

There is this program on my computer that I did not download. It is called Total Security and it blocks everything I try to do on the net. When I try to uninstall it, instead of the uninstall wizard, an activation screen comes up to register and pay for the service. Is this some kind of malware or spyware? How do I remove it from my system. I have Vista basic. Thank you

A:What is Total Security

I suggest that you proceed to to our Security Center, Virus/Trojan/Spyware Help Forum, to have your system reviewed by a Security Analyst. Please be sure to follow THESE STEPS carefully before posting your logs in the Security Forum.

Please be patient as the Security Analysts are very busy and one will get to you as soon as possible.

Regards. . .

jcgriff2

.

Read other 1 answers
RELEVANCY SCORE 75.2

Hello, I heard good things about this website. As the title states, I have a virus on another computer named Total Security. I already checked the other topics about this and checked other websites but still can't fix this. My Malwarebytes Anti-Malware will not work and I don't have any other security agaisnt viruses. My internet on that computer stopped working so I can't download anything. I tried searching for the tsc.exe and other stuff, but they didn't show up. Regedit and task manager are 'infected' and can not help me right now. Any ideas on what I should do? At this point I think I might need to hire a expert or program or buy another computer.

A:Total Security

After infected with Total SecurityI have the same problem and it was impossible to run Task Manager or any other application. In safe mode I find a strange string in the registry[\\\Registry\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] pointing to a .exe file with just a number before. (something like 4439876.exe). The String included the path so I could delete the files and the String in Regisrty. Restart and the Total Security was gone. Now I could run a AnitMalware application but still it is impossible to install NIC drive. All the drive for Network card is yellow in the Device manager.I think is still something wrong in the Registry.Please help anybody.PS. I am new user here so I don't now if I should send a Hijack log? DS./RickardWin XP Pro SP3 Swedish

Read other 3 answers
RELEVANCY SCORE 75.2

The version of total security in my friends laptop defies removal. The registry files, the programme files etc are all different from those described online. Maybe Malwarebytes removal tool got rid of most of them, and the laptop works better as a result, but browsers are still prevented from going t any antiviris site and I can't install new anti-virus software and the thing is still running when I look at processes.
How to get rid of this thing, has any6one had any success and knows how to identify its associsted processes?
Fustrated

A:Total Security

FWIW: http://www.google.com/search?hl=en&sou...ity&aqi=g10Louis

Read other 2 answers