Security Popups!

I just started getting popups again. Some are just ads and several have been Security Popups. Last time this was happening to me I had that torjan outbreak… what should I do?
Thanks Sasy

To start with update your SAS and boot into safe mode, Set SAS like this

Under Configuration and Preferences, click the Preferences button.
Then click the Scanning Control tab.

Under Scanner Options make sure the following are checked

  • CHECK ALL BOXES

Return to the main page by clicking close on that screen. On the main screen, under Scan for Harmful Software click Scan your computer. On the left check C:\Fixed Drive.(and other fixed drives)
Under Complete Scan, choose Perform Complete Scan.
· Click Next to start the scan.

When the scan is done, quarentine everything found . Reboot if asked.

OK did that and sent all to quarantine and was not asked to reboot but I had to anyway since i was in safe mode. This is no excuse but Ive been really down and under the weather this week with a terrible fle bug… and in my haze one day I may seem to remember being asked to do a windows update i think it was… actually if my memory serves me (which im not sure it does) I may Have been told in my booting up that i needed to do the update… I was in a fog so unfortunately I really cn’t gibe you more details than that… so when the popups started coming its gotten me a bit concerned…Sorry
Thanks
Susie

Im getting 2 different ones at ths moment… one from www.ringtones.net and one fro, www.spyware-secure.com

Okay let’s see what else is in there.

Download ComboFix from Here or Here to your Desktop.

Double click combofix.exe and follow the prompts.

When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply
Note: Do not mouseclick combofix’s window while its running. That may cause it to stall.

Click here to download HJTsetup.exe

[*]Save HJTsetup.exe to your desktop.
[*]Doubleclick on the HJTsetup.exe icon on your desktop.
[*]By default it will install to C:\Program Files\Hijack This.
[*]Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
[*]Put a check by Create a desktop icon then click Next again.
[*]Continue to follow the rest of the prompts from there.
[*]At the final dialogue box click Finish and it will launch Hijack This.
[*]Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
[*]Click on “Edit > Select All” then click on “Edit > Copy” to copy the entire contents of the log.
[*]Come back here to this thread and Paste the log in your next reply.
[*]DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

Thank you for helping me again… ive been trying to stay out of trouble!
Sasy

We must stop meeting like this, people will start to talk. ::slight_smile:

Looks like just one file to take of, no need for a log, just let me know if everthing is all right or not and if combofix removed the file. :slight_smile:

Open a new Notepad session (Do not use a Word Processor or WordPad). Click “Format” and be certain that Word Wrap is not enabled.

Copy and paste all the text in the quote box below into Notepad.

Click File, Save as…, and set the location to your Desktop, and enter (including quotation marks) as the filename: “CFscript.txt” . Using your mouse left button, drag the new file CFscript.txt and drop it on the ComboFix.exe icon as shown at the bottom of this post.

File:: C:\WINDOWS\system32\guard32.dll.vir

This will start ComboFix again.Close all browser/windows first. After reboot, (in case it asks to reboot), just post back and let me know if everything is alright.

So far so good… No more popups so far. and…I really do try to stay clean honest I do…I think Im my own worst enemy! I figured it was good to come back for help before I got to where I was before… sooo I guess let them talk! :wink:
Thank you for your help once again…Ill let you know if it is all ok still tomorrow
Hugs and tc
Sassy

No problem. You should give it a run with cleanup and redoyour restore points.
We can take care of the tools tommorrow.

Create a new restore point

You must be logged on to an administrator account
Go to Start - All Programs - Accessories - System Tools - System Restore.
Click Create a restore point, and then click Next.
In the text box labeled Restore Point Description, type a name for this restore point , click create

Remove old restore points

  • Go to Start - All Programs - Accessories - system tools. Launch the Disk Cleanup tool and let it run. When it finishes a box with tabs will appear, select the more options tab. On this tab you will find a section for System Restore. If you press the Clean Up button for that section, Windows will delete all restore points except for the most recent one.

I did the cleanup and new restore point lat night… Im to Oldman3 for names of retore points! lol Ive not been home much today but while ive been here and been online ive not had one pop up !!! Yippie!!
I know you metioned we needed to still take care of the tools too. So whatever I need to do next just let me know!
Thanks again
Susie

Good to see it went well.

Click start button, click run, copy and paste the following line into the box and click ok

combofix /u

Open HTJ, click misc tools btton, slide the slider down and click uninstall.

And you are done. ;D

Looks like Im good to go again!! Ill try to stay out of trouble this time… if that is possible!
Thank you for the rescure once again…this one was a piece of cake… well with your help that is :wink:
Take care and ty!
Sassy

You’re welcome, behave yourself. :wink: