Author Topic: Repeated 'Trojan Horse Blocked' / 'Malicious URL' alerts  (Read 46814 times)

0 Members and 1 Guest are viewing this topic.

jeffce

  • Guest
Re: Repeated 'Trojan Horse Blocked' / 'Malicious URL' alerts
« Reply #90 on: June 14, 2012, 01:54:02 PM »
Please run the MGA Diagnostic Tool and post back the report it creates:
  • Download MGADiag to your desktop.
  • Double-click on MGADiag.exe to launch the program
  • Click "Continue"
  • Ensure that the "Windows" tab is selected (it should be by default).
  • Click the "Copy" button to copy the MGA Diagnostic Report to the Windows clipboard.
  • Attach the MGA Diagnostic Report back here in your next reply.

jesamine

  • Guest
Re: Repeated 'Trojan Horse Blocked' / 'Malicious URL' alerts
« Reply #91 on: June 14, 2012, 02:34:59 PM »
Hi,

I had to download the Microsoft Genuine Advantage Tool in order to obtain Microsoft Updates....my operating system passed as genuine....or is this different?

jeffce

  • Guest
Re: Repeated 'Trojan Horse Blocked' / 'Malicious URL' alerts
« Reply #92 on: June 14, 2012, 02:40:31 PM »
No that is the same one.  We wanted to be sure that you didn't receive another bad copy of Windows when you had it reinstalled. 

How is your system behaving?

jesamine

  • Guest
Re: Repeated 'Trojan Horse Blocked' / 'Malicious URL' alerts
« Reply #93 on: June 14, 2012, 03:43:43 PM »
Good idea given what happened first time around.

I don't want to speak too soon, but it's been okay....rather sluggish at start-up, but right now running quite fast.

The only errors listed in Event Viewer worth noting on the shutdown dates are: ACPI BIOS is attempting to write to an illegal IO port address error**, but my computer was having those regularly in mid May before the BSODs started.

**probably because my computer is not fully compliant with the XP power management settings being that it had Windows ME on it originally

Plus....

Boot problems? This error shouldn't prevent your system from booting, even if it does demand that it be shut down immediately. If you're having boot problems, it's likely there's at least one other issue involved.

All BSODs have been at boot-up apart from the first during the scan.
 
Since I installed the Creative AudioPCI Microsoft Update (which immediately corrected the loss of sound in one speaker) I have not had any further BSODs. Still don't understand why that was only marked as optional. Remember the: Driver IRQL not less or equal blue screen error - well that device is listed under Device Manager Interrupt request (IRQ) and Microsoft Windows Error Reporting stated that the last BSOD was caused by a device driver.

Or maybe Windows just got rattled and it'll settle down now....I hope so.

« Last Edit: June 14, 2012, 03:55:06 PM by jesamine »

jeffce

  • Guest
Re: Repeated 'Trojan Horse Blocked' / 'Malicious URL' alerts
« Reply #94 on: June 14, 2012, 04:04:28 PM »
How about you just let it run for today and see how it behaves.  :)

jesamine

  • Guest
Re: Repeated 'Trojan Horse Blocked' / 'Malicious URL' alerts
« Reply #95 on: June 14, 2012, 04:12:10 PM »
Good idea - let's all have a rest for a few days....Windows allowing.  :)

jeffce

  • Guest
Re: Repeated 'Trojan Horse Blocked' / 'Malicious URL' alerts
« Reply #96 on: June 14, 2012, 08:00:21 PM »
 :)

jesamine

  • Guest
Re: Repeated 'Trojan Horse Blocked' / 'Malicious URL' alerts
« Reply #97 on: June 16, 2012, 01:25:33 PM »
Hi,

An update....unfortunately my computer has had two further BSODs this morning, one at boot-up and one during surfing - Driver IRQL not less or equal cause given again....yesterday it was fine. Does HD Tunes just diagnose or can it rectify too....also, does it look at drivers?

I don't know what more you can do to help me with this and I can see you are about to go on holiday....have a lovely time / good rest.


jesamine

  • Guest
Re: Repeated 'Trojan Horse Blocked' / 'Malicious URL' alerts
« Reply #98 on: June 16, 2012, 01:49:14 PM »
Just found this:

Unsupported Device:

on Microsoft ACPI-Compliant System

No drivers are installed for this device.

If you are having problems with this device, click Troubleshoot to start the troubleshooter.

Will get back to you....

Opened Help and Support Center (which you may recall I have problems with) / Generic Hardware Device Troubleshooter / I'm having a problem with my hardware device....but then I can't get any further, a message comes up:

An ActiveX Control on this page is not safe. Your current security settings prohibit running unsafe controls on this page. As a result, this page may not display as intended.

Well, that's not right, but shall I alter my security settings for this? 
« Last Edit: June 16, 2012, 02:02:54 PM by jesamine »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Repeated 'Trojan Horse Blocked' / 'Malicious URL' alerts
« Reply #99 on: June 16, 2012, 07:25:28 PM »
Hi I will be looking after you whilst Jeff is away

A few quick questions if I may... Is this a HP machine ?

Also has Jeff asked for a clean boot

jesamine

  • Guest
Re: Repeated 'Trojan Horse Blocked' / 'Malicious URL' alerts
« Reply #100 on: June 16, 2012, 07:49:03 PM »
Hi essexboy,

Thanks for stepping in to help. No, it's a Dell desktop. I'm getting really afraid to do anything now in case it doesn't start up again - it just turned itself off with a normal Windows shutdown earlier without any prompting from me.

I was about to downlaod Windows Debugger....

Just to let you know that I can't use Safe Mode (keyboard doesn't function at start-up) or System Restore.

No, Jeff hasn't asked for a clean boot.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Repeated 'Trojan Horse Blocked' / 'Malicious URL' alerts
« Reply #101 on: June 16, 2012, 07:52:41 PM »
OK what we can do then is disable all startup elements on the computer apart from the ones needed to run it, that way we may be able to determine if you have a driver conflict somewhere

Have a read of the destructions and let me know how you feel about it

Step 1:

Start the System Configuration Utility
Click Start, click Run, type msconfig, and then click OK.
The System Configuration Utility dialog box is displayed.

Step 2:

Configure selective startup options
In the System Configuration Utility dialog box, click the General tab, and then click Selective Startup.
Click to clear the Process SYSTEM.INI File check box.
Click to clear the Process WIN.INI File check box.
Click to clear the Load Startup Items check box. Verify that Load System Services and Use Original BOOT.INI are checked.
Click the Services tab.
Click to select the Hide All Microsoft Services check box.
Click Disable All, and then click OK.
When you are prompted, click Restart to restart the computer.

Step 3: Log on to Windows

If you are prompted, log on to Windows.
When you receive the following message, click to select the Don't show this message or launch the System Configuration Utility when Windows start check box, and then click OK.

Quote
You have used the System Configuration Utility to make changes to the way Windows starts.
The System Configuration Utility is currently in Diagnostic or Selective Startup mode, causing this message to be displayed and the utility to run every time Windows starts.
Choose the Normal Startup mode on the General tab to start Windows normally and undo the changes you made using the System Configuration Utility.

Now we get to the tedious part,:

If windows behaves itself then do the following

Restart MSConfig and select half of the disabled services and reboot

Is the problem still present ?

If Yes then deselect half of the services that you resumed and reboot

If no then select half of the remaining services and reboot

The intention here is to isolate the one service/driver that is causing the problem

jesamine

  • Guest
Re: Repeated 'Trojan Horse Blocked' / 'Malicious URL' alerts
« Reply #102 on: June 16, 2012, 08:58:25 PM »
!!

"Have a read of the destructions"

Sounds like a good idea, but I'm quite nervous about altering start-up because of not having arrows / enter keyboard function.

I've been working at this all day....I'll have a break and come back to you....if I can!

 :)


jesamine

  • Guest
Re: Repeated 'Trojan Horse Blocked' / 'Malicious URL' alerts
« Reply #103 on: June 16, 2012, 11:18:31 PM »
Hi,

May I ask:

For clean boot will I definitely not have to select options with my keyboard to boot Windows (because I can't)?

Will I be able to surf the internet in clean boot?

My computer can run quite normally for several days with no BSODs, does this mean that I will have to stay in clean boot for several days to see if the problem recurs?

I may use Microsoft's Guided Help to automatically do this for me if I go ahead.


jesamine

  • Guest
Re: Repeated 'Trojan Horse Blocked' / 'Malicious URL' alerts
« Reply #104 on: June 17, 2012, 01:09:35 AM »
Unfortunately I've just found out that I do need a keyboard to use the Advanced Boot Options menu for clean boot.