3 Replies Latest reply on Dec 28, 2010 3:52 AM by Peacekeeper

    Safeom.com taken over my PC

      I can't access the internet as my PC tells me that I have a virus and then directs me to buy safeom.com anti-virus package, but I am already running Macfee.  Tried system restore but won't allow me to access says files have been changed, can't access the internet says all sites are unsafe and redirects me to safeom.com.  Tried to run a scan, but does a full scan very quickly and tells me no virus, but there obviously is.  Tried turning on and off but still there.  Can anyone suggest what I can do?  Don't know much about computers, so you would have to write it clearly my options to understand.  Looked to see if any new programs had been added, but doesn't appear to be.  HELP

        • 1. Re: Safeom.com taken over my PC

          I seem to also have this problem... almost down to the letter this is exactly what's happening to me on my othe comp. Have you fixed your comp?if so could you give me some help? if I can't get it fixed I'm going to have to erase my hard drive and start fresh but I'm wodering if I can reuse my key from the box :S

          • 2. Re: Safeom.com taken over my PC

            Not 100% sure I have solved it, but after several hours of trying to restore or get online and getting more and more messages to buy safeom.com software, I saw on my other PC a thread called

            trojan found, but SiteAdvisor says file is ok.  Here there was a link to restoring your PC at start-up by pressing F8, which gives you the opportunity to restore your PC at an earlier date.  Went back and restored to 23.12.10 and all seems well.  However, I am finding that Real Time Protection Scan keeps switching itself off, thus allowing another virus through, if I hit on a wrong internet link in the future.  It doesn't tell me it has switched off, so I have to keep checking.  Now able to scan so did a Macaffe and also downloaded Norton free check to be on the safe side (sorry Macaffe, just want to be safe).  Both said no virus.  Later will try the stinger download and will keep an eye on the trojan found thread.  New laptop running Windows 7, has been working fine up until now.

            • 3. Re: Safeom.com taken over my PC
              Peacekeeper

              Update your dat files and scan your PC with Virusscan in Safe Mode.

               

               

               

              To do this, tap F8 repeatedly while booting up. You'll get a boot screen with choices. Pick Safe Mode. Your PC will boot in a low resolution state as most processes won't be running. Go to "My Computer" (XP) or "Computer" (Vista), right-click the hard drive and select "Scan" from the drop-down menu. You'll see an extra taskbar icon which will show a progress report if you hover over it.

               

               

               

              If you think you have a virus infection on your PC do one or both of the following :

               

              - Run the free Mcafee Stinger program from http://vil.nai.com/vil/stinger/ -

               

              set it to Report Mode (in Preferences) and post the logs of anything it detects.

               

              - Join the McAfee Getsusp group at https://community.mcafee.com/groups/getsusp30-beta-feedback

               

              You will have to ask there for Getsusp, which is a Beta program and not yet on general release.

               

              Before you use Getsusp, you should go to this document

               

              https://community.mcafee.com/docs/DOC-1323

               

              and download the PDF file explaining what Getsusp is and how it works, and this document

               

              https://community.mcafee.com/docs/DOC-1761

               

              which downloads the installation guide PDF document.

               

               

               

              If you want a second opinion, or to be on the safe side, then you can do a scan with the free versions of these tools :

               

              Malwarebytes and SuperAntiSpyware

               

               

               

              If you already have Malwarebytes installed, the virus could be protecting itself against it. In that case, in order to get Malwarebytes running you'll need to rename the executable. Open the C:\Program Files\Malwarebytes Antimalware folder, then rename the "mbam.exe" file and double-click directly on the file to open the program. After updating the program, run a full system scan using Malwarebytes.

               

               

               

              Make sure both programs are updated to the latest versions before running them and let them clean anything they find. If they quarantine a file or fail to remove a file try to get a copy of it and send it to Mcafee using the virus submission path described here :

               

               

               

               

               

              Send the file to mcafee labs at http://vil.nai.com/vil/submit-sample.aspx

               

               

               

              Zip the file and password it with password infected.

               

               

               

              You will probably get an autoreply back saying it is infected; reply asking for it to be manually tested.

               

               

               

              Include in your first submission :-

               

              Submission Information
              Please provide the following information along with your sample. It will help us speed the sample review process:

               

               

               

              · A list of all files contained in the sample submission, including a brief description of where or how you found them

               

              · What symptoms cause you to suspect that the sample is malicious

               

              · Whether any security products find a virus (tell us the security vendor, its product name, the version number, and the virus name assigned to the sample)

               

              · Your McAfee product information (product name, engine, and DAT version

               

              · Any system details that may be relevant (operating system, service packs, etc.)