PDA

View Full Version : Red circle with white x in task bar = Malware Defender 2009?



WannaCaPuma
2009-03-16, 19:02
I think my boyfriend went to an online free antivirus scan type of website that actually ended up putting a virus or malware of some sort on his computer (although he won't admit to it).

Here are the symptoms.

1. A red circle with a white x in the center has appeared on the task bar near the clock. Hovering over it with the arrow does not reveal any information. Every few seconds a new one pops up, and they all display the a message saying: "Warning! You have a security problem!!" or "You have a security problem! Do you want to scan your computer for viruses?"

2. Occasionally the Local Disk (C:) folder opens up.

3. Occasionally internet explorer and foxfire open up displaying various websites, including: http://skfjkhcdcsh.com or http://desktoprepairpackage.com

4. Clicking on the warning results in the website: http://easywinscanner17.com/maldef09_2/4/10526 to open along with a gray warning window with a blue question mark that says, "Warning!!! Your computer contains various signs of viruses and malware programs presence. Your system requires immediate anit viruses check! Malware Defender 2009 will perform a quick and free scanning of your PC for viruses and malicious programs. (Sometimes other warnings and/or websites appear).

What I have done so far.

1. I close the programs by using the Windows Task Manager to end process.

2. I ran SpyBot Search and Destroy 1.6.2 (which I have had installed for several months). It found several things, but did not stop these pop ups.

3. I ran avast! Antivirus, which found one virus, but did not stop these pop ups.

5. I used easy cleaner to clear unnecessary folders. It could not clear the following because they are in use. I don't know if they are related to the pop ups or not.
promo.exe
History.IE5\index.dat
Content.IE5\index.dat
netadvisor[1].htm


How do I remove this problem? I'd rather not download any other programs.

tashi
2009-03-16, 19:07
Hello,

Please see the stickied procedure for this forum: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Start a new topic providing the HJT log and a link to this thread which I have closed as helpers look for threads without a response.

Regards. :)