Microsoft Security Essentials reappearing and malware threat

General Topics
1

I removed Microsoft Security Essentials that was on my pc via the Add/Remove Programs. I did this about two months ago per the advice that it wasn’t good to have two antivirus systems on a pc—I also have avast free.

But two days ago, I was on the internet via Internet Explorer, and I got a message with a MSE label that these were infecting my pc:

TrojanPSW.Win32.launch
HackToolWin32/WelevateA
AdwareWin32.Fraud

And there was a button to “Clean the Computer.”

It took some doing to overcome the pop ups when I kept trying to X out of the message. But I finally got out and immediately set avast up to do a boot time scan and restarted the computer.

During the avast scan, I got this:

C/Documents and Settings/User1/Local Settings/Temporary Internet Files/Content.IES/23DEOQ45/process[1].aspx is infected by JS: Script IP-inf [Trj

That’s all that I could see on the screen, though it looks incomplete.

I chose to Delete All. After the avast scan, I then did a MalwareBytes scan and a Spybot scan.

So my questions are:

  1. How could Microsoft Security Essentials give me a warning when I had deleted the program from my pc?
  2. Do you think avast has gotten rid of all the offending infections?

Thank you for your help.

2

Did the warning appear when you visited a specific site?
Did you remove MSE using its uninstaller? (http://singularlabs.com/uninstallers/security-software/)

3
But two days ago, I was on the internet via Internet Explorer, and I got a message with a MSE label that these were infecting my pc:
C/Documents and Settings/User1/Local Settings/Temporary Internet Files/Content.IES/23DEOQ45/process[1].aspx is infected by JS: Script IP-inf [Trj
im guessing you found a Fake scan site....and got the fake MSE warning

i recomend you follow Essexboys guide so he can check it for infection

attach (not copy and paste) logs from malwarebytes / OTL / aswMBR
http://forum.avast.com/index.php?topic=53253.0

4

I have not been able to deal with computer issues. Still can’t, really. But I will try to respond to these replies.

To Donovan: I think I was at the site for “mygrocerydeals.com,” trying to log in when the message came up.
I also think I used the MSE uninstaller link you have given. I made notes about the uninstall I did, but they aren’t really clear enough. craigb did give me that link, but someone else gave me a Microsoft link, but I think I used the MSE uninstaller link, . . .

To Pondus: Where is Essexboys guide? Don’t know what you mean?
I also don’t know what you mean by “Attach logs from malwarebytes/OTL/aswMBR.” I’m lost.

5

http://forum.avast.com/index.php?topic=53253.0

There is a fake rogue that replicates MSE

6

I’m afraid I’m not knowledgeable enough to do all that this guide entails, Essexboy. Also, I don’t have time to do so. !!!

Hopefully, I just got a fake MSE message, and avast got rid of the only infection that was looming. (See my first post.)

7
I'm afraid I'm not knowledgeable enough to do all that this guide entails,
if you have downloaded and installed avast, then you shuld be able to download and run aswMBR and OTL.... there is no install, just download and run
8

@Pondus, OP states that they ran MBAM and spybot in the first post

9

Edit :wink: