hey Guys

I got a problem with my pc. A red (crossed) security bubble keeps appearing in the bottom right hand corner saying i got a security problem. It keeps diverting me to some Anti-virus site and asks to run a scan and download software. I already have Symantec Anti-virus software but its not removing this problem. Can someone help me get rid of it?

Hello, my name is fenzodahl512 and welcome to Geekstogo..

Please have a read at this topic and do all the preliminary steps given.

If you are using Windows Vista, or if you are using XP and already have Service Pack 1a or later, please ignore Step Three: Windows Updates and continue with Step Four: Reboot - Test

It should handle about 70% of your malware problem.. Should the problem still exist, please post a fresh HijackThis log here as shown in the Step Five: Posting a Hijack This Log.. Thank you

Regards
fenzodahl512

Thanks alot for the reply.

Im doing the preparation stage however i am not able to download the ATF cleaner. It says my current security settings do not allow the file to be downloaded. Is there something i have to do?

Let me know

Thanks

Just proceed with the next step please

Okay i proceeded, yet i cant download any of the programs shown. Im up to step one now,and its not letting me download Malwarebytes' Anti-Malware. Do i skip this step?

thanks

Ok... Do you use Internet Explorer or FireFox?.. Can you give me the screenshot of the "Security Setting do not allow download" error?

I use Internet Explorer 8 beta.....unfortunately i cant attach the screenshot........i cant seem to find a link to do it.....Its basically an small box that pops titled 'Security Alert' then in the main box it states 'Your current security settings do not allow this file to be downloaded' and there is only a Ok option to accept that this error has occured.
Hope that helps

This post has been edited by layzie769: Oct 1 2008, 07:08 PM

I'm not familiar with Internet Explorer 8 beta.. I only know Internet Explorer 7 and Firefox.. Beta program is always unstable..


Open IE8 >> Go to Tools >> Internet Options >> Under Security tab, choose Internet zone, then hit on Default level >> Click Apply then Ok

Then go to Privacy tab >> hit Default button >> Click Apply, then Ok


Then try to download Malwarebytes' again and do as the preliminary instructions..

--Edit--

double posted..

Have massive internet connection problem now..

This post has been edited by fenzodahl512: Oct 1 2008, 07:22 PM

Awww sorri to hear that.....hope it all goes well.......i completed step 1....do i need to post the log? and do i go on to step 2?

Well actually everything seems fine......There is no security alert no more and there is not random pop up diverting me to any anti-virus site.......so im guessing the problem is fixed.....thanks alot for ur help.....il post again later on to confirm again everything i said.....

--edited---





Good to hear that.. Just run your computer for a couple of days and then tell me about it.. If all went well, just tell me so we can close this topic

This post has been edited by fenzodahl512: Oct 1 2008, 08:01 PM

This is the post Malware log......i rebooted the system....everything seems to be fine.....i cleared the quarintined items aswell.......hopefully everything seems right

Malwarebytes' Anti-Malware 1.28
Database version: 1226
Windows 5.1.2600 Service Pack 3

2/10/2008 11:36:52 AM
mbam-log-2008-10-02 (11-36-52).txt

Scan type: Quick Scan
Objects scanned: 43295
Time elapsed: 5 minute(s), 45 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 3
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 3

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\xml.xml (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\xml.xml.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{9233c3c0-1472-4091-a505-5580a23bb4ac} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\antivirus (Rogue.SystemAntivirus) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\antivirus (Rogue.SystemAntivirus) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MSFox (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\SAV.cpl (Rogue.SystemAntivirus) -> Quarantined and deleted successfully.
C:\Documents and Settings\Satish\Local Settings\Temp\video1140.cfg.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Satish\Local Settings\Temp\video1140.cfg (Trojan.FakeAlert) -> Quarantined and deleted successfully.


Let me know if i have to do anything further.....Thanks again for your help....appreciate it

Yeh il let you know for sure in the next couple of days......Thanks heaps

Ok