Hey folks, I have been here before and gotten a lot of needed help so im hoping to get the same this time. I’m just one step above the person that isn’t computer savy so help walking through this would be great. I have a bubble down in the lower right hand corner of my screen that keeps poping up and says that “You have a security problem”. It looks like a bogus McAfee logo. Now, just as I’m writing this message avast pops up and says it found a virus or something was detected. I’ll try to give a screenshot of what’s going on. I did a standard scan with avast, it didn’t find any viruses but there were about a hundred files that it could not scan due to some kind of password protect.
found during thorough scan
not sure of the source file, still scanning while I’m typing this
dont know when it was downloaded or recieved
will check back in a while when i have more info.
Check the avast! Log Viewer (right click the avast ‘a’ icon), Warning section, this contains information on all avast detections. C:\Program Files\Alwil Software\Avast4\ashLogV.exe
Not much you can do about that now, but a visit to this site to ensure some applications, commonly exploited are up to date, http://secunia.com/software_inspector/.
What Operating System are you using ?
What is your firewall ?
When the avast scan is complete, if you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode and report the findings (it should product a log file).
MalwareBytes Anti-Malware, On-Demand only in free version http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe, right click on the link and select Save As or Save File (As depending on your browser), save it to a location where you can find it easily later.
Ok here is what i have. I am running windows XP with windows defender as my firewall. I wasnt able to download SUPERantispyware but did get malwarebytes. Ran that one and will post the log file now. Ill check back in a while to see what you think.
I would suggest a Full MBAM scan now, Quick is fine but you may need to dig deeper especially since infected files were found. The detections in the MBAM log looked good.
You don’t appear to have an active firewall that provides outbound protection, the XP firewall doesn’t provide this. Whilst the windows XP firewall is usually good at keeping your ports stealthed (hidden) it provides no outbound protection and you should consider a third party firewall.
Any malware that manages to get past your defences will have free reign to connect to the internet to either download more of the same, pass your personal data (sensitive or otherwise, user names, passwords, keylogger retrieved data, etc.) or open a backdoor to your computer, so outbound protection is essential.
There are many freeware firewalls such as, Comodo (care required now it is a suite not to install the anti-virus element), PCTools Firewall Plus, Jetico, etc. - Zone Alarm free works fine with avast and has a reasonably friendly user interface, however, the free version is becoming bloated with trial ware and is also crippled as far as outbound protection goes In the Program Control, configuration area, the slider will only goes as far as Medium protection, if you want more you have to buy the Pro version.
Now address the problem of not being able to download SAS ?
There are other download sites that will also have that available, download.com, majorgeeks.com, etc.
OK, that’s fine, leave them.
You should be OK with that, watch out for it asking permission for avast.setup (the auto update process), ashMaiSv.exe (the avast email scanner) and ashWebSv.exe (the avast Web Shield, scans web page content before it gets on your system).
The Scan Results from the Malwarebytes Anti-Malware indicated you “had”
the “Rogue” " Antivirus 360 " ; very good Info about this is at www.bleepingcomputer.com/malware-removal/remove-antivirus-360 . Since
you have already run the Malwarebytes program, as a security precaution I
recommend you run the FREE “VundoFix”, available at http://vundofix.atribune.org ; IF you use this program, follow the “Normal
Usage for Removal” Guidelines .
Your HijackThis Log indicates you have an outdated and malware-prone
Adobe Reader . See the Info at http://forum.avast.com/index.php?topic=38839.0 . Based on this Info, I recommend you uninstall this program
and use either the FREE “Foxit Reader” or “CutePDF” .
P.S. As a fellow chess player, I recommend you not play on the “Zone” ( I have
uninstalled all my “Zone” software ), but consider the competition at www.pogo.com .