Author Topic: Post fake security issues  (Read 207 times)

0 Members and 1 Guest are viewing this topic.

Offline tj4891

  • Newbie
  • *
  • Posts: 2
Post fake security issues
« on: September 20, 2011, 06:11:26 AM »
Hello everyone,

I have had two seperate occurances with different fake security system viruses/malware. I am not sure how I aquired each virus or whether or not they were the same unresolved issue.  I have always been protected with McAfee total protection. 

The first occured months ago and it got to a certain point where as soon as I logged on to my account, the computer would display several errors then shut off before I had a chance to do anything. So I created a second account and researched the infection and downloaded anti-malware bytes.  It seemed to have completely gotten rid of the issue and I did not have any problems untill about a month ago.

The second time I was still able to remain on my account and operate certain functions.  However, within the first day of discovering the infection, all of a sudden my background went to black, my shortcuts were gone, and my documents were gone.  I was later able to place shortcuts on the desktop but I still have not recovered my documents, also when I attempt to change my background it says access denied.  I ended up uninstalling antimalware bytes and installing SUPERantiSpyware.  I did a quick scan which returned the following results:

Memory items scanned      : 661
Memory threats detected   : 1
Registry items scanned    : 30199
Registry threats detected : 2
File items scanned        : 8357
File threats detected     : 13

The complete scan returned:

Memory items scanned      : 696
Memory threats detected   : 0
Registry items scanned    : 37165
Registry threats detected : 1
File items scanned        : 37004
File threats detected     : 70

and also:

System.BrokenFileAssociation
   HKCR\.exe

It quarantined some files and deleted others.  I proceeded to delete all of them except I kept the broken file extension as I was not sure what it was.  Ever since I have had issues while on internet explorer when I click certain things such as videos on youtube, without hesitation it immediately says internet explorer has stopped responding and the program restarts.  Also, ever since I can not locate my recycle bin.

So I was found a site where someone had a similar issue soon after believing they had resolved it (as I thought as well).  Someone left a comment assuring the person that they had not removed the infection and referred them here.  So I thought I would give it a try to restore my PC to normal I appreciate any advice or responses.  Thank you

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 11530
  • "Stronger than the past, united in our goal."
    • Security Garden
Re: Post fake security issues
« Reply #1 on: September 20, 2011, 02:29:29 PM »
Hi, tj4891.  Welcome to LandzDown Forum.

We will do our best to assist you.  However, in order to do so, please follow all instructions provided in the sequence given.  Do not install/re-install any programs or run any fixes or scanners that you have not been instructed to use.  This may cause conflicts with the tools being used in the cleanup process.   

If you have questions regarding any of the instructions or problems running any tools, please let us know.

Please follow the instructions in Log Posting Instructions.  In addition, please provide the log from Malwarebytes Anti-Malware.  Launch MBAM and click the Logs tab in MBAM.  Copy/paste the log from the above results in your reply.

Note:  Due the the number of requested logs, it may take more than one reply.
,  

Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline tj4891

  • Newbie
  • *
  • Posts: 2
Re: Post fake security issues
« Reply #2 on: September 20, 2011, 05:54:39 PM »
I unistalled MBAM a few weeks ago, and the logs are not saved, or at least I can not find them since most of my documents/files were wiped out. However, I can post the logs from SUPERAntiSpyware.  Please let me know if those would be of use.

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 11530
  • "Stronger than the past, united in our goal."
    • Security Garden
Re: Post fake security issues
« Reply #3 on: September 20, 2011, 06:46:44 PM »
Yes, post the last log from SAS and then go ahead with the above-linked log-posting instructions.  Also, do NOT clean temp files or use a temp file cleaner.
,  

Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.