Author Topic: Microsoft Security Essentials reappearing and malware threat  (Read 7144 times)

0 Members and 1 Guest are viewing this topic.

Offline safetynut

  • Jr. Member
  • **
  • Posts: 78
I removed Microsoft Security Essentials that was on my pc via the Add/Remove Programs. I did this about two months ago per the advice that it wasn’t good to have two antivirus systems on a pc—I also have avast free.

But two days ago, I was on the internet via Internet Explorer, and I got a message with a MSE label that these were infecting my pc:

TrojanPSW.Win32.launch
HackToolWin32/WelevateA
AdwareWin32.Fraud

And there was a button to “Clean the Computer.”

It took some doing to overcome the pop ups when I kept trying to X out of the message. But I finally got out and immediately set avast up to do a boot time scan and restarted the computer.

During the avast scan, I got this:

C/Documents and Settings/User1/Local Settings/Temporary Internet Files/Content.IES/23DEOQ45/process[1].aspx is infected by JS: Script IP-inf [Trj

That’s all that I could see on the screen, though it looks incomplete.

I chose to Delete All. After the avast scan, I then did a MalwareBytes scan and a Spybot scan.

So my questions are:
1.   How could Microsoft Security Essentials give me a warning when I had deleted the program from my pc?
2.   Do you think avast has gotten rid of all the offending infections?

Thank you for your help.

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2220
    • The WAR Against Malware
Re: Microsoft Security Essentials reappearing and malware threat
« Reply #1 on: July 13, 2012, 06:52:35 PM »
Did the warning appear when you visited a specific site?
Did you remove MSE using its uninstaller? (http://singularlabs.com/uninstallers/security-software/)
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."

Offline Pondus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 35944
Re: Microsoft Security Essentials reappearing and malware threat
« Reply #2 on: July 14, 2012, 12:47:23 AM »
Quote
But two days ago, I was on the internet via Internet Explorer, and I got a message with a MSE label that these were infecting my pc:
Quote
C/Documents and Settings/User1/Local Settings/Temporary Internet Files/Content.IES/23DEOQ45/process[1].aspx is infected by JS: Script IP-inf [Trj
im guessing you found a Fake scan site....and got the fake MSE warning

i recomend you follow Essexboys guide so he can check it for infection

attach (not copy and paste) logs from malwarebytes / OTL / aswMBR
http://forum.avast.com/index.php?topic=53253.0
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline safetynut

  • Jr. Member
  • **
  • Posts: 78
Re: Microsoft Security Essentials reappearing and malware threat
« Reply #3 on: July 28, 2012, 11:29:23 PM »
I have not been able to deal with computer issues. Still can't, really. But I will try to respond to these replies.

To Donovan: I think I was at the site for "mygrocerydeals.com," trying to log in when the message came up.
I also think I used the MSE uninstaller link you have given. I made notes about the uninstall I did, but they aren't really clear enough. craigb did give me that link, but someone else gave me a Microsoft link, but I think I used the MSE uninstaller link, . . .

To Pondus: Where is Essexboys guide? Don't know what you mean?
I also don't know what you mean by "Attach logs from malwarebytes/OTL/aswMBR." I'm lost.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40632
  • Dragons by Sasha
    • Malware fixes
Re: Microsoft Security Essentials reappearing and malware threat
« Reply #4 on: July 28, 2012, 11:32:51 PM »
http://forum.avast.com/index.php?topic=53253.0

There is a fake rogue that replicates MSE

Offline safetynut

  • Jr. Member
  • **
  • Posts: 78
Re: Microsoft Security Essentials reappearing and malware threat
« Reply #5 on: July 28, 2012, 11:42:38 PM »
I'm afraid I'm not knowledgeable enough to do all that this guide entails, Essexboy. Also, I don't have time to do so. !!!

Hopefully, I just got a fake MSE message, and avast got rid of the only infection that was looming. (See my first post.)

Offline Pondus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 35944
Re: Microsoft Security Essentials reappearing and malware threat
« Reply #6 on: July 30, 2012, 08:53:24 PM »
Quote
I'm afraid I'm not knowledgeable enough to do all that this guide entails,
if you have downloaded and installed avast, then you shuld be able to download and run aswMBR and OTL.... there is no install, just download and run
« Last Edit: July 30, 2012, 09:27:43 PM by Pondus »
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline Marc57

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1943
  • KISS Rules The World!!!
    • KISS Army
Re: Microsoft Security Essentials reappearing and malware threat
« Reply #7 on: July 30, 2012, 09:10:23 PM »
Quote
I'm afraid I'm not knowledgeable enough to do all that this guide entails,
if you have downloaded and installed avast, then you shuld be able to download....install and run Malwarebytes  ;)

@Pondus, OP states that they ran MBAM and spybot in the first post
You Wanted the Best You Got the Best the Hottest Band in the World KISS!!!

Offline Pondus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 35944
Re: Microsoft Security Essentials reappearing and malware threat
« Reply #8 on: July 30, 2012, 09:28:21 PM »
Edit   ;)
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.