You have a security problem pop up!

Solved/Closed
Anonymous - Nov 17, 2008 at 04:36 PM
 tomdragon - Jun 10, 2010 at 05:59 AM
Hello, I really need help.

I have a new dell inspiron laptop with a full AVG package but this pop up keeps coming up, I have tried hundreds of websites and hundreds of downloads and nothing has worked. Even if I dont click on the pop up it automatically interupts anyhing im doing. Usually it just tells me a threat has been detected and the name of the threat which is exploit rogue spyware scanner (but ive noticed a few different threat names too) then when I click ok I get a message saying undefined and when I click ok the same message comes up agian only with a question mark beside it. While all this is happening a scan is automatically started which then tells me I have a hardware error in both drives C and D and a security threat in shared documents although I dont have any shared documents nor can I find a hardware error in either of these drives. A message then appears telling me harmful and malicious software detected, it lists 3 programs that are of high alert level, they are; ipexewin.exe; audiopitusr.exe; exeiptransfer.exe. (These are all meaningless to me) Im given 2 options in this message remove or ignore and it doesnt matter what I click, I get a file download-security warning asking me to run, save or cancel. If I click save it saves something which I have never been able to find again and if I click run I get an internet explorer warning, so far I havent went any further just incase but ive tried everthing else.

Sometimes it will offer me scans from a package which do no good. Ive downloaded everything recomended and nothing will work, im currently running a malwarebytes antivirus scan which has taken over an hour and is still not finished.

Im really not great with computers and I would appreciate it if I could get any help at all but in simple terms and steps as I really dont understand computer jargin, I really need simple as in go there and click that please. Any help would be greatly appreciated
Related:

46 responses

I had the Vista Internet Security trojan. Trying to install malware removers never worked. What did work is hitting the f11 key upon booting and doing a restore point. All is good again. Beware, the trojan came through the Windows Automatic Update window. If you see anything that says Vista Security update, decline.
0
Hi I have a similar thing. I ran malwarebytes and it removed loads of threats and also some on reboot. However, on rebooting all programs have been disabled, system restore has been turned of by group settings (nothing seems to work in turning this back on)

Computer now seems knackered.

Any ideas?

S
0
djbomb Posts 1 Registration date Sunday February 14, 2010 Status Member Last seen February 14, 2010
Feb 14, 2010 at 08:24 AM
I too have a similiar prob. I think it was called pc guardian telling me my protection was out of date etc... I downloaded malwarebytes and went into safe mode. ran the program removed infected files, rebooted. Now all my programs have been disabled, even system restore has been shut off by group policy.

any ideas?

just tired the trojan remover and nothign found.

has the virus deleted my registry?
0
i have the same problem, and I have vista. I also bought mcafee a few months back because I wanted to be safe. when I run mcafee, it says everything is clear and okay, but when this screen pops up telling me I have trojans, I don't know what to do or if I should trust the source. what should I do?
0

Didn't find the answer you are looking for?

Ask a question
I had this thing, that I went on a website to download AVG and this popup came up that said "Your Vista PC is now infected!" I couldn't exit anything, it wouldnt let me, and there was a picture of the Windows Vista sign, and a number counting up how many infections it was adding to my computer. I then realised it was a fake virus, because I hadn't even thought about it before, But my computer is Windows XP.
If you do get a bad virus, I have before, Download super anti spyware. It's a great anti virus and spyware, that I downloaded a while ago and have never had problems sinse. If you download it, windows might say "We didn't find any antivirus." That is wrong, because super anti spyware also works as anti virus.

Wolfie. x
0
i have the same problem as you and what xXchubbycrissXx said, and it really gets frustrating beacuse I can't use my computer because that message keeps on popping up
0
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,162
Apr 3, 2010 at 11:29 AM
Hello Gabrishka6,

Please, let us regain a little bit of our habitual composure...

I think I have a solution for you and it took a long time to type it:

Here is how to get rid of this scam rogue virus designed to get to your credit card account and it is a good thing you did not fall for it.

Please follow the following procedure carefully and to the letter.

Security tool is a rogue virus which is self protective, thus it will prevent any antivirus from fonctionning.

You must kill the processes which the virus is presently running. If you don't it will keep reproducing the files for ever.

To kill the processes:

Download to your desktop and run Rogue Kill:

https://download.bleepingcomputer.com/grinler/rkill.com

5.You should now see a window that shows all of your desktop icons, including the rkill.com program. Now double-click on the rkill.com in order to automatically attempt to stop any processes associated with Security Tool and other Rogue programs. Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next step. If you get a message that rkill is an infection, do not be concerned. This message is just a fake warning given by Security Tool when it terminates programs that may potentially remove it. If you run into these infections warnings that close Rkill, a trick is to leave the warning on the screen and then run Rkill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that rkill can terminate Security Tool . So, please try running Rkill until malware is no longer running.

Please, DO NOT REBOOT your computer or the processes will come back to haunt you!

Download to your desktop Malwarebyte.

https://ccm.net/downloads/security-and-maintenance/4621-malwarebytes-anti-malware/

Once on your desktop, we must still outwit the virus.

Right click on the MBAM icon and click on rename. Rename it Explorer.exe.

Install Malwarebyte and launch it. From the second tab, update it.

Pretty please, request a FULL system scan which should take more than hour. Once the scan is finish, delete all of item that were found.

Once your computer is clean and working normally just to be on the safe side
*Turn off system restore and wait 30 seconds,
*Turn it back on and create a new restore point.

This way it gets rid of anything bad that might have gotten saved in a restore point and you have a clean restore point to use in the near future if needed.
Do not turn it off until your computer is clean and working normally because you might need to use it if something goes wrong during the clean-up process.
It is better to go back to an infected restore point if something goes wrong then to not be able to undo changes that were damaging.

Once all this is completed, I always suggest to delete Malwarebyte as some people have reported that it may interfere with other antivirus applications.

Please let us know about the results which I am sure will be positive.

Regards
0
how can remove personal security form my computer and how can remove all virus from my compuer , personal computer showing some virus was affected in your system "system is danger" how can recover my dafault desktop.....
0
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,162
Apr 5, 2010 at 05:45 AM
Your answer is right here:

You must kill the processes which the virus is presently running. If you don't it will keep reproducing the files for ever.

To kill the processes:

Download to your desktop and run Rogue Kill:

https://download.bleepingcomputer.com/grinler/rkill.com

You should now see a window that shows all of your desktop icons, including the rkill.com program. Now double-click on the rkill.com in order to automatically attempt to stop any processes associated with Security Tool and other Rogue programs. Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next step. If you get a message that rkill is an infection, do not be concerned. This message is just a fake warning given by Security Tool when it terminates programs that may potentially remove it. If you run into these infections warnings that close Rkill, a trick is to leave the warning on the screen and then run Rkill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that rkill can terminate Security Tool . So, please try running Rkill until malware is no longer running.

Please, DO NOT REBOOT your computer or the processes will come back to haunt you!

Download to your desktop Malwarebyte.

https://ccm.net/downloads/security-and-maintenance/4621-malwarebytes-anti-malware/

Once on your desktop, we must still outwit the virus.

Right click on the MBAM icon and click on rename. Rename it Explorer.exe.

Install Malwarebyte and launch it. From the second tab, update it.

Please, request a FULL system scan which should take more than hour. Once the scan is finish, delete all of item that were found.

Once your computer is clean and working normally just to be on the safe side
*Turn off system restore and wait 30 seconds,
*Turn it back on and create a new restore point.

This way it gets rid of anything bad that might have gotten saved in a restore point and you have a clean restore point to use in the near future if needed.
Do not turn it off until your computer is clean and working normally because you might need to use it if something goes wrong during the clean-up process.
0
this solution worked perfectly. thanks!
0
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,162
Apr 20, 2010 at 04:06 PM
Thank you for your feedback.
0
Ditch AVG get a decent Antivirus suite that blocks this rogue antivirus program Nod 32 of Windows security essentials free does the job
0
I've just tried this and it has picked up 5 bad things not to sure what the point of the 1st program is and couldnt figure out how to turn off system restore. Will reply if it hasnt worked...
0
ITS BACK
0
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,162
Apr 14, 2010 at 09:59 AM
Hi LG!

Who is back? Please be more specific on your visitor.
0
Thank you so much, I could not use my computer and now it is functioning again!!
0
John

Ambucias, used your solution for the Trojan virus that gives you the "total security" white out and freezes "rundll32" and it works brilliantly. Windows followed up with advice to use their Malicious Software Security Tool to remove the virus from the disk completely and that appears to have done the trick.

Thank you and keep up the good work.

John L
0
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,162
Apr 19, 2010 at 04:55 AM
John

Thank you for your feedback

Good luck
0
Ambucias

I was having the same problem but before finding a solution, my access to the internet stopped working.

I have now found your advice, but my laptop will not start up ie I cannot get to my desktop. Any suggestions?

Shizz
0
I had a major problem with "SECURITY TOOL" which took over my computer. Would let me on certain websites and kept changing my settings. I could not delet/uninstall or get rid of it until I rebooted computer and pressed F8. Then scrolled down to safe mode with networking and selected. Opened FILE LOCATION of SECURITY TOOL and then DELETED and it worked. It still flashed up as still working cannot shut down TRY AGAIN but this time it did CLOSE and DELETE. Then deleted shortcuts and emptied RECYCLE BIN DONE AND DUSTED NO FURTHER PROBLEMS and no need to buy expensive software to get rid of this.
0
I am dealing with exploit scanner type 1056.

Anymore help that I get will be greatly appreciated.

Thanks

Lady C

I tryed the Rogue Kill but it did not work. This is what appeared>

This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.
Ran as MsLady C on 04/20/2010 at 18:57:36.


Processes terminated by Rkill or while it was running:


C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\MsLady C\Desktop\rkill.com


Rkill completed on 04/20/2010 at 18:57:48.

I never received a black screen after it said it was checking for malware. What do I do next.
0
please I want detected harmful virus from my computer free
0
You have to close the page immediatly before the program installs. I run Yahoo spyware removal tool every other day and know I don't have spyware, I also actively run a full virus scan about twice a week. The mentioned program itself acts as a virus & the popups won't allow you to do anything except hand over your credit card information. Microsoft needs to do something to resolve this, I had to reformat my computer to fix this problem before I got wise to the fact that its just a scam. But if you don't know about it, you will end up loosing all the data on your computer
0