Im having the same problem, but mine says " windows 7 home security firewall alert"...I can't access the internet to download the fix software so I downloaded malwarebytes to another device then copied it to my computer, but when I try to run the setup nothing happens. The program won't work. I have tried a couple different sites to download it from on this thread and no luck. Can the virus be blocking the malware bytes stuff now too?
Please Help! Thanks!
Ok some these are trained to recognise Malwarebytes etc so
1.rename setup file to abc.exe
2. When you install it rename the default malwarebytes folder to abc and the mbam.exe file to Av.exe
This should get you past the issue.
Also download an run FakeAlert stinger
Let us know how you go
The only thing I know of that is left is to mount the drive as a slave on anotehr PC and scan it from it. The abc way worked for me.
have you tried to restore back to before the issue appeared?
Tony, I really appreciate you trying to help. It seems the virus has deleted or disabled system restore. It says rstrui.exe can not be found.
I am not real computer savvy so I'm not sure I know what u mean by mount the drive as a slave on another pc. This is the only pc we have. Is there anything else I can try before I give in and take the computer to the geek squad?
Mounting a disk as a slave means taking it out of your PC and attaching it to another as a read-only extension to that PC. Whatever nasty malware is on the drive doesn't get a chance to become active and defeat the anti-malware program or hide from it, so it's completely exposed and can be found and wiped. I've never tried it myself but it does work, so the experts say.
If you can't run malwarebytes even after it's been renamed that may be part of the infection problem or may be something else - a faulty download, perhaps.
Have you tried downloading McAfee's anti-FakeAV utility, the Stinger? You can get it from HERE. It is now the first thing we recommend, and if by chance something new comes along that it doesn't detect we try to grab an example of the program for analysis. Give the Stinger a try, and let us know how you get on.
It is a problem having no spare PC and also it not allowing access . You can call Mcafee and they will clean your PC for you and I understand no charge if they do not succeed.
I think it might be same charge as geek squad maybe.
Try any of these renaming them as well as see if they help. Getsusp might find something it does not clean it but tells mcafee what was found and Mcafee updates the dats.
Worth a go before u part with your bread.
Oh the hijackthis forums mentionedmight also be worth a go. they are free but some accept donations if they help u.
I am going to close and lock this thread now. If you are visiting this site and have a new infection of 'XP Home Security' please start by using our FakeAlert Stinger. If that doesn't resolve the issue please start a new thread in our Top Threats space and we'll do all we can to help.
None of the anrtivirus applications on the market are any good for these things, you just have to be very careful where you surf and what you click on.
All is not lost and there is no need usually to go to allo the drastic step of formatting and reinstalling Windows.
As described above the steps should work.
I'll lay them out again here plus an additional tool.......
McAfee have a new tool to help fight malware & fake anti-malware pests which usually get past most antivirus applications. It's called GetSusp.
You have to go to the GetSusp Group to get the latest version and apparently they are now having a lot of success especially with all these new and prolific fake anti-malware threats.
Membership is not required. You can also find support for it in that group and provide feedback. The actual download is available HERE.
Please read this McAfee article: Required Reading - Home User Assistance, Malware Troubleshooting
If you can isolate the malware that isn't being detected you can try submitting it to McAfee Laboratories.
****You could also try scanning using the FREE version of THIS tool. Update it before running and let it remove anything it finds and reboot if it asks you to do so.
OK, good luck. If no success let me know and we'll take it a step further. The reason why regular antivirus protection is not much good against these things is that it would have to be geared at such a bhigh detection level that it would more or less stop everything else, even the legitimate stuff, and that would make life difficult to say the least. That's why there are specialist tools for such occasions.
Wow, the statements I highlighted above really concern me. I caught this virus last week while running McAfee Total Security and it prevented me from accessing the internet, even in safe mode, and therefore I was unable to download any of the recommended fixes. I had to go to a second computer and make a boot cd (Hirens) just to be able to get control of things (a tip I found through a friend of a friend on an unrelated message board). I don't know what I would have done if I had not had access to a second computer.
I'm not trying to disparage Ex_Brit in any way, but do you speak for McAfee? Is it McAfee's official position that they do not intend to even attempt to detect and remove this particular virus, and that their customers will just have to scour the internet for help and patches if they become infected? If so, I must seriously question what exactly I am paying McAfee for.
Really, none of the anti-virus apps are good at this? Malwarebytes seems to be. Avast seems to be. Someone needs to very quickly convince me why I should I not switch to them.on 5/17/11 6:50:53 AM CDT
As Moderators for McAfee we have to respect their wishes in what we post. It is a sticking point between us and McAfee, however, as to why so many of this type of malware gets past regular antivirus applications, theirs in particular.
There is always a possibility that you can use the computer with an internet connection by booting into 'Safe Mode with Networking' and whilst some applications don't work in that mode VirusScan will do a 'right-click scan', plus Malwarebytes, which I have mentioned extensively in various threads, not only works fully but can even be updated in that mode.
GetSusp is a tool to identify and hopefully lead to stopping some of these things and we have to recommend it in most cases, McAfee rules I'm afraid, but Malwarebytes is also recommended and is a totally different kind of anti-malware weapon with an extremely high heuristic detection setting, hence it can catch many things that an antivirus misses. Conversely it isn't much good at tackling the millions of viruses that antivirus applications such as VirusScan do detect already.
OK so Avast may catch this one and a few others, but with these fake anti-malware 'applications' it's an extremely hit-and-miss guess as to which brand gets what. Best to Google the name of the infection and if you can find a tool on the BleepingComputer forums all the better, as they are the leading source of cures for this sort of thing.
As this board belongs to McAfee we have to follow their rules. There are plenty of independant anti-malware forums out there who aren't tied to one brand of software or another.
I keep a locked document here on the subject which thus far hasn't been censored: https://community.mcafee.com/docs/DOC-2168
Message was edited by: Ex_Brit on 17/05/11 8:51:51 EDT AM