PDA

View Full Version : MSA: a false security program



swede69
2008-09-03, 09:37
Hi, I have a problem with a false security program, giving me warnings of a slow system and that I am unprotected (I use Norton 360). I have located the problem to be something called MSA, looks like a Microsoft product, but its obviously not. On c:\program it comes up a folder named MSA and one named PChealthcenter, even if I erase it and run Spybot. Spybot finds something called virtumonde, delets it but it comes back. When this happens, the MSA places a icon in the bottom right corner and also sybols for warning (X) and explanation marks. Someone that can help me?

md usa spybot fan
2008-09-03, 10:26
swede69:

Please go into Spybot > Help > About. Make sure you are running the most resent version of Spybot with the latest detection updates:
Spybot - Search & Destroy 1.6.0.30 or 1.6.0.31
Latest detection update 8/27/2008
If not, download and install the Search & Destroy 1.6.0 from here (http://www.spybot.info/en/mirrors/index.html) or update as appropriate and try running Spybot again.

Try running Spybot in Safe Mode (http://www.laplink.com/support/kb/article.asp?ID=102) and see if that helps with the removal of the problem.

If Spybot still fails to correct the problem consider posting in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum and having someone take a look at your system.

If you decide to have an experienced malware removal specialist assist you, please follow the procedure in this link to run scans and produce a HijackThis log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) ( http://forums.spybot.info/showthread.php?t=288).
After you have completed the required scans and produced the requested logs, start your own thread in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum, making sure to post the HijackThis log produced from the above instructions.