Directed to anti-virus fast scan site

Viruses and worms
1

While searching for images in Google, I get a pop-up that says I have infected files. When I try to close out of the pop-up, it immediately brings me to hXXp://lista-antivirus.ce.ms/fast-scan/ which performs a fake scan of my computer then won’t let me leave the site. This has happened before and I think it is malware installed on my computer somewhere. The Avast virus scan doesn’t pick it up. One site I found (hxtp://www.fireballtech.com/tag/httpnode-antivirus-ce-msfast-scan/) said that it is ThinkPoint Antivirus hotfix.exe and to find the files associated with it and delete them. I could only find hotfix files which I deleted, but I still have the malware. Have you heard about this one, or have any suggestions?
Thanks,
Jennifer

2

Please ‘modify’ your post change the URL from http to hXXp or www to wXw, to break the link and avoid accidental exposure to suspect sites, thanks.

3

do a scan with malwarebytes.

http://www.filehippo.com/download_malwarebytes_anti_malware/

download install, update and do a quick scan.

sounds like it could be the google redirect virus (malware)

don’t forget to delete what it finds.

if it asks for a system reboot do so.

good luck.

4

detected by MalwareBytes as - Trojan.FakeAlert

VirusTotal - BestAntivirus2011.exe - 4/41
http://www.virustotal.com/file-scan/report.html?id=306d8ce7cf2ecc6fb1089c982bf8d245440eea00f9120a86c1c1c82ffbbdc696-1305052589

5

Hi Pondus,

This maybe a related VT Trojan.FakeAlert malware result: http://www.virustotal.com/file-scan/report.html?id=db27e81e9dc123b5f3699d7fee42439d43d24041c4fbcd428f3110897c4e92b9-1304800584
with another MD5 hash off-course, but definitely an apple from the same tree…
See this: https://www.vicheck.ca/md5query.php?hash=43cb55861b7fcf1dfb6968c9ef110bcc

polonus