Avast WEBforum
Other => General Topics => Topic started by: diane blanx on June 15, 2011, 10:06:14 PM
-
somehow microsoft security centre has appeared on my computer it is saying i have viruses and infections am doing full avast scan but it is showing nothing please help
-
Have you tried to scan with MalwareBytes and Super Anti-Spyware?
Here are the links...
http://filehippo.com/download_malwarebytes_anti_malware/
http://filehippo.com/download_superantispyware/
Let SAS scan for cookies and let it handle them (they are harmless).
Please run a scan with both and report back the results.
I tend to trust avast! :)
-
A screenshot of the popup could also be helpful.
-
I wonder where she went? ???
I hope she comes back! :)
-
this is probably some fake security program, like XP Antivirus.
-
sorry i didnt get back was scared to use computer when i did log back in this thing had gone so i am hoping avast sorted it out or should i still try running malware bytes etc
-
Yes at the minimum you should run MBAM and post the contents of the log in your next reply.
-
hi david how do i do that
-
Just copy and paste the contents of the MBAM log, which should be displayed after the scan into your next post.
-
hope this is correct
-
bob can you help because david has gone
-
should i press to remove selected files or quarantine them can someone help please
-
I can't claim to Bob or David - but I would just let mbam deal with them - it's a fake AV.
-
sorry mag i am a novice how do i let it deal with them what do i do
-
should i press to remove selected files or quarantine them can someone help please
Yes please do exactly that. Once Malwarebytes has done it's job, reboot your computer.
Your pop ups should now be gone.
-
remove or quarantine
-
anyone do i remove or do i quarantine
-
The registry entries need to be reset to the correct values I believe - that is what mbam will do if you have them selected - I can't recall exactly what the mbam results screen for registries looks like - but just let it do whatever it is suggesting for them - I think it will say remove selected.
The files can be quarantined if you have that option - you can delete them later.
-
Another idea, use CCleaner and run a registry scan.
http://filehippo.com/download_ccleaner/
Whenever you scan the registry always create a restore point...CCleaner will do this for you. :)
-
Another idea, use CCleaner and run a registry scan.
http://filehippo.com/download_ccleaner/
Whenever you scan the registry always create a restore point...CCleaner will do this for you. :)
A registry scan may be fine for someone who knows a lot about computers.
Cleaning the registry certainly isn't anything for a novice to do. The resulting consequences could be disastrous.
Simply allow MWB to do it's job and quarantine the detected entries.
-
Another idea, use CCleaner and run a registry scan.
http://filehippo.com/download_ccleaner/
Whenever you scan the registry always create a restore point...CCleaner will do this for you. :)
A registry scan may be fine for someone who knows a lot about computers.
Cleaning the registry certainly isn't anything for a novice to do. The resulting consequences could be disastrous.
Simply allow MWB to do it's job and quarantine the detected entries.
Also, I'm no windows registry expert, but I think those entries are supposed to exist - they have just been set to the wrong values by the fake av and need to be reset.
Unless ccleaner is a lot smarter than I think, it isn't going to do that.
-
Another idea, use CCleaner and run a registry scan.
http://filehippo.com/download_ccleaner/
Whenever you scan the registry always create a restore point...CCleaner will do this for you. :)
A registry scan may be fine for someone who knows a lot about computers.
Cleaning the registry certainly isn't anything for a novice to do. The resulting consequences could be disastrous.
Simply allow MWB to do it's job and quarantine the detected entries.
Also, I'm no windows registry expert, but I think those entries are supposed to exist - they have just been set to the wrong values by the fake av and need to be reset.
Unless ccleaner is a lot smarter than I think, it isn't going to do that.
You are probably correct as it will need a deeper scan than CCleaner will provide. For a novice this could create more issues than it will fix.
-
Since CCleaner does not "deep" clean it is probably safe even for a novice. It will clean unused registry items.
-
Possibly - but by now hopefully the OP has hit remove selected in mbam and moved these issues to quarantine, and so doesn't really care.
(I wasn't sure what quarantine might mean for a registry entry value, but on reflection I guess it just means remember original value in case I want to put it back to that).
-
I have just encountered the same virus/trojan
it brings up a window that says something like "xp 2012 unregistered version" and sticks to windows security icons in the task bar and warns that my firewall is off (which it isn't)
my question is why, when I have Avast running and updated, does this get through when hippo can find it?
(if it can I'm running it on my pc right now)
-
Download Malwarebytes http://filehippo.com/download_malwarebytes_anti_malware/ run it and follow the instructions for removing
what it finds. Reboot your computer and see if that solves your problem.
-
Hi bob
yeah I've done that
anti malware said it found infected files and gave me option to remove them, and to reboot computer.
I did that and now my mouse dont work and when i click on an icon (to run avast for example) none of the file extensions are associated with a file program.
on the bright side, i use my pc to store stuff as a server and all my important stuff is on my laptop. I'm still miffed (thats upset in UK) that Avast didnt catch this one, it should have at least been been picked up with by heuristics.
I will check in the morning as I have to go out now. Thank you for taking the time.
Regards
Rich
-
I found a link that repairs the xp registry on the mcafee forum at communit.mcafee.
deletemalware.blogspot.com/2011/06/remove-xp-antispyware-2012-xp-internet .html
I scanned it with avast before copying to my pc and merging with my registry.
it has re associated my file types so that they run, however i have a message from the real windows security program that my auto updates is turned off. When I check in system in control panel they are turned on so thats apain, but i can live with it.
Also avast no longer starts automatically.
Apart from these problems pc is ok (don't know why mouse is suddenly ok - it was working before i applied registry fix)
I have now installed ccleaner from piriform and running a registry scan.
(be careful with ccleaner as the default settings will remove some stuff that you might want to keep)
After running ccleaner registry fix, avast and other startup progs run properly.
Thanks Bob pointing me to malware bytes.