PDA

View Full Version : Need help with Security Central



sirburleybee
2010-01-13, 04:23
Not 100% sure how I picked this one up but it's absolutely crippled my computer. I cannot open any program, nor can I access windows explorer or even the task manager. Internet Explorer is the only program that appears to be functioning. The program that's taken over is called Security Central and constantly flashes popups or bubbles in the bottom right corner telling me about non-existent threats and problems. I've checked around several sites and all have suggested running Malwarebytes to fix the problem. I managed to do so in safe mode (along with Windows Defender) but both programs were unable to detect any problems. Could someone please help me out?


http://forums.spybot.info/showthread.php?t=54460

Blade81
2010-01-18, 18:45
Hi,

I gave you earlier instructions but topic was closed due to inactivity. Hopefully same thing won't happen with this one ;)


Please download exeHelper (http://www.raktor.net/exeHelper/exeHelper.com) to your desktop.
Double-click on exeHelper.com to run the fix.
A black window should pop up, press any key to close once the fix is completed.
Post the contents of log.txt (Will be created in the directory where you ran exeHelper.com)
Note: If the window shows a message that says Error deleting file, please re-run the program before posting a log - and post the two logs together (they will both be in the one file).

---

Download DDS and save it to your desktop from here (http://www.techsupportforum.com/sectools/sUBs/dds) or here (http://download.bleepingcomputer.com/sUBs/dds.scr) or here (http://www.forospyware.com/sUBs/dds).
Disable any script blocker, and then double click dds.scr to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt

Save both reports to your desktop. Post them back to your topic.

sirburleybee
2010-01-22, 21:23
Those programs appeared to work, but I cannot post the logs as notepad will not open for me.

Blade81
2010-01-23, 00:57
Could you open the logs with some other text editor?

sirburleybee
2010-01-25, 18:22
No. Internet Explorer is virtually the only program this POS will allow me.

Blade81
2010-01-25, 18:28
In that case please attach those log files to your post as file attachments (use Manage Attachments -button)

sirburleybee
2010-01-27, 01:30
Here, I think I did this right.

Blade81
2010-01-27, 17:30
IMPORTANT I notice there are signs of one or more P2P (Peer to Peer) File Sharing Programs on your computer.

µTorrent


I'd like you to read this thread (http://forums.spybot.info/showthread.php?t=282).

Please go to Control Panel > Add/Remove Programs and uninstall the programs listed above (in red).



After that:


You seem to use Firefox as your browser. Please do following to ensure you'll be prompted for download location:
In Firefox click Tools-menu->Options->Main-tab->select Always ask me where to save files.

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

Download Combofix*from any of the links below. You must rename it (i.e. sirburleybee.exe) before saving it. Save it to your desktop.

Link 1 (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)
Link 2 (http://www.forospyware.com/sUBs/ComboFix.exe)

http://i266.photobucket.com/albums/ii277/sUBs_/combofix/CF_download_FF.gif


http://i266.photobucket.com/albums/ii277/sUBs_/combofix/CF_download_rename.gif
--------------------------------------------------------------------

Double click on sirburleybee & follow the prompts.
When finished, it will produce a report for you.
Please post the C:\ComboFix.txt.

Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall

sirburleybee
2010-01-29, 02:42
My computer will not let me uninstall utorrent, as it cannot open utorrent to begin the process.

Combofix popped up for a split second when I opened it, but Security Central shut that down, too.

Blade81
2010-01-29, 17:34
Hi,

Try to run ComboFix in safe mode. If that doesn't work then try the following.

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

Download Combofix*from any of the links below. You must*rename it (use name iEXPlore.exe before saving it. Save it to your desktop.

Link 1 (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)
Link 2 (http://www.forospyware.com/sUBs/ComboFix.exe)

http://i266.photobucket.com/albums/ii277/sUBs_/combofix/CF_download_FF.gif


http://i266.photobucket.com/albums/ii277/sUBs_/combofix/CF_download_rename.gif
--------------------------------------------------------------------

Double click on iEXPlore.exe & follow the prompts.
When finished, it will produce a report for you.
Please post the C:\ComboFix.txt.

Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall

sirburleybee
2010-02-01, 04:19
Finally, something.

Blade81
2010-02-01, 16:36
Good. Could you try to run ComboFix in normal mode now? Post back fresh dds log and ComboFix log (if normal mode run was successful).

Blade81
2010-02-08, 16:46
Hi,

Do you still need help?

sirburleybee
2010-02-08, 18:30
Combofix log is too long to post and too big to attach. How do I get it up?

Blade81
2010-02-08, 19:40
Archive the log into a zip file and attach that to your post.

sirburleybee
2010-02-09, 18:57
Here we go.

Blade81
2010-02-09, 22:47
Hi,

It seems your ESET Nod32 is not legit one. That means you have to uninstall it. You may install one of the free alternatives if you can't afford commercial one.

Good free antivirus programs are:
Antivir (http://free-av.com/en/download/1/download_avira_antivir_personal__free_antivirus.html) and
Avast! (http://www.avast.com/eng/download-avast-home.html)

Post fresh dds.txt and attach.txt logs back when change has been made, please.

sirburleybee
2010-02-10, 00:55
Hi,

ESET isn't appearing in my add/remove programs list, nor does anything appear to be present in my program files folder. I found the original folders for the program (containing installers and such) and deleted those. Will this be sufficient?

Blade81
2010-02-10, 17:01
Hi,

Run Revo uninstaller (http://www.revouninstaller.com/) and let it uninstall ESET if it's detected. When done, post a fresh dds log.

sirburleybee
2010-02-17, 03:27
Sorry, it didn't detect ESET either.

Blade81
2010-02-17, 17:22
Ok. Post a fresh dds log after having alternative antivirus protection installed.

sirburleybee
2010-02-24, 06:14
Logs attached.

Blade81
2010-02-24, 15:56
Hi,

You were earlier told about our policy against P2P programs. Now there's some installed again. If you want me to continue working on your case you have to uninstall all P2P filesharing programs and keep them uninstalled. Then post fresh logs.

sirburleybee
2010-02-24, 22:17
Okay, utorrent should be off. As far as I know, that's the only firesharing software I've got on my system.

Blade81
2010-02-25, 16:52
Hi,

Run ComboFix and let it update itself. Please post back the report it creates.

Blade81
2010-03-04, 12:45
Due to inactivity, this thread will now be closed.

Note:If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.

If it has been less than four days since your last response and you need the thread re-opened, please send me or MOD a private message (pm). A valid, working link to the closed topic is required.