Any Computer Gurus here? Need help....

S

slg888

Sergeant
Full Member
Minuteman
May 5, 2009
398
0
59
Knoxville,TN
#1
Maybe somebody with more computer knowledge can help me?

I keep getting this security pop-up every 20-60 seconds. I have ran my McAfee full scan, still happens. Sometimes even routes me to other sites.

I have windows 7. Copy of pop-up...is this a virus?
It will not let me check the "do not show me box"

internetsecuritywarning_thumb2.png
 
#2
Re: Any Computer Gurus here? Need help....

Sounds like a virus. Especially if it won't let you open a web browser.

Try booting up in Safe Mode. Instructions below from Windows site:

•If your computer has a single operating system installed, press and hold the F8 key as your computer restarts. You need to press F8 before the Windows logo appears. If the Windows logo appears, you'll need to try again by waiting until the Windows logon prompt appears, and then shutting down and restarting your computer.

•If your computer has more than one operating system, use the arrow keys to highlight the operating system you want to start in safe mode, and then press F8.


Afterwards you can try to run the virus scan. May also need to get a malware scanner. I ususally use Malware Bytes.
 
#3
Re: Any Computer Gurus here? Need help....

You can almost bet you're suffering from some kind of malware if your browser keeps redirecting you.

Check to see if you have have "Microsoft Security Essentials" installed. If so, make sure it's updated and run a full scan.
 
#5
Re: Any Computer Gurus here? Need help....

Hogwash, Kreskin and the Amazing Randi combined couldn't tell if it was a virus from what he's posted.

Night poacher, you're in "protected" mode which is notoriously overprotective. If you had clicked the "details" button before taking that screen shot I could tell you more but it's probably just a nuisance message. If it were me, I'd turn off the protected mode. If your AV says the file whose name will appear when you click the "details" button is clean, you can click the "Shut up about this file already" radio button.
 
#6
Re: Any Computer Gurus here? Need help....

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: Fred_C_Dobbs</div><div class="ubbcode-body">If you had clicked the "details" button</div></div> Fred, the detail button reads....irect Authentication Helper\wdComms.Snap.dll
 
#7
Re: Any Computer Gurus here? Need help....

All the other advice is ok. It sounds as if you are already infected, most antiviruses can try to keep viruses off your computer (i.e. like a condom) but once your infected they do very little to completely remove the threat. Computer repair is my side job and helps generate revenue for my hobbies and this is one of my favorite tools I use to remove malware off infected rigs http://www.malwarebytes.org/ . If it’s a smart viruses it won’t let you install anything, if that is the case you just need to boot it up in safe mode and install the software

edit: just saw a post and it could be the protection mode, but run a scan anyways just to be sure! you never can be to safe especially if you do any banking or other online purchasing
 
#9
Re: Any Computer Gurus here? Need help....

Try HouseCall - Free Online Virus Scan - Trend Micro USA
housecall.trendmicro.com

The free scan is greatit will find the problems the norton,mcafee miss. If you can download anything

Don't panic, it may not allow you to download any software to kill it/remove it. If you have another pc that you can use that has viris software on it you could purchase a usb 2.0 to IDE & SATA cable adapter. you then would remove the infected hard drve from the hook it up to the adapter which is hooked up to a clean computer and run the virus scan that way to clean the infected hard drive.
 
#11
Re: Any Computer Gurus here? Need help....

The adapter is the best way to clean it, if you cannot download the software. If you take it to a shop they may wipe the whole drive clean and tell you to start over. they will reload your OS and some software.
 
#12
Re: Any Computer Gurus here? Need help....

Ok, I have downloaded couple different anti-spywares, but the pop-up continues. I can still go anywhere on the net, just have to keep x'ing the box(pic above) clear every once in a while.

You guys sure this is not just a setting on my windows 7?

Man, I'll even post my # 561-389-0444 if anyone can help. I'll mail a un-opened NIB Randy Anderson predator DVD your way for the help.
 
#17
Re: Any Computer Gurus here? Need help....

Example, when I google Mcmillan stocks and click on the link, it takes me too a site that markets stock investments.

Or try google Euro Optics, it takes me too a eye-glass web-site?

If I make a 2nd attempt, it usually works fine and directs me where I want to be.
 
#19
Re: Any Computer Gurus here? Need help....

I'm running Windows 7 with IE8 in protected mode. I do not get that pop-up warning and I'm not getting redirected to any other sites. Have you tried installing Firefox? I use that browser as well. Have you tried using the Windows Defender that comes with Windows 7? It's anti-spyware only, not anti virus.
 
#20
Re: Any Computer Gurus here? Need help....

I just purchased malwarebytes for $24.95 and tried the quick scan, but did not stop the pop-up. I am doing a full scan now...hopefully after it's finished it will stop it.
 
#22
Re: Any Computer Gurus here? Need help....

Try installing Firefox just to see if you can browse with out issues. Do you have multiple anti-virus and anti-spyware programs running at once? If so, don't. They tend to interfere with one another. Either you're infected with something or there's something funky going on with either your IE settings or possibly your user control account settings.
 
#23
Re: Any Computer Gurus here? Need help....

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: Night poacher</div><div class="ubbcode-body">Did not work...wasted $24.95. Pop-up shown above continues.

Next option is Computer tech service call Tuesday.</div></div>

You can get MWB for free, so you kind of did waste $25 bucks......on the other hand, you have the pro version of one of the best Malware killing programs out there. Go through setup, schedule that bitch to run every couple days or so, and be happy that everything is right in the world. Also, MWB working alongside Microsoft Security Essentials (also free) will keep you free from computer-std's, even if you visit russian or chinese hardcore porn sites on a regular basis! lol

Edit: Someone mentioned Safe Mode....I would boot into "Safe Mode with Networking" open up MWB, update it and let it do a full scan.
 
#24
Re: Any Computer Gurus here? Need help....

NightP, I had the same problem on one of my 'puters and for months I ran every damn anti-virus could find until one day I figured it out.

I had some kind of a "TDDS rootkit" virus that would re-direct all my web traffic to various annoying pages.

I found and ran this:

http://support.kaspersky.com/faq/?qid=208280684


Running that killed the part of the virus that was hiding it from the anti-malware programs and then http://www.superantispyware.com/ (<-- free too) found it and finished it off.

Haven't had the problem since.
 
#26
Re: Any Computer Gurus here? Need help....

I tried in safe mode. The full scan took 70 minutes and did not work.

I do not get that pop-up when Im on a site like SH. Only when I go to google the pop-up arrives. Then when I google a site, it re-directs me to some other site.

Another example, I went to google home page the pop-up arrives, I click it away, then google Euro optics and it re-directs me to an eye-glass center. Lol

Not a bad virus, but annoying and I'd like to get rid of it.
 
#27
Re: Any Computer Gurus here? Need help....

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: Night poacher</div><div class="ubbcode-body">
Another example, I went to google home page the pop-up arrives, I click it away, then google E

</div></div>

Yep that's exactly what I had, follow my direction above. Some people called it the "Google redirect virus"
 
#30
Re: Any Computer Gurus here? Need help....

Does it happen when you use another browser, i.e. Mozilla Firefox, Google Chrome, etc?

Another edit: Just know if you have installed a crap load of spyware/malware/super-spy shit on there to combat this problem, you will need to uninstall it when you are done with it. You should be completely safe with your pro version of Malwarebyte's and Microsoft Security Essentials. Schedule them to update daily and run on a regular basis. If you need help setting them up, shoot me a message. I can walk you through getting them set up and happy.

Kelly
 
#32
Re: Any Computer Gurus here? Need help....

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: Kbrady</div><div class="ubbcode-body">Does it happen when you use another browser, i.e. Mozilla Firefox, Google Chrome, etc?

Another edit: Just know if you have installed a crap load of spyware/malware/super-spy shit on there to combat this problem, you will need to uninstall it when you are done with it. You should be completely safe with your pro version of Malwarebyte's and Microsoft Security Essentials. Schedule them to update daily and run on a regular basis. If you need help setting them up, shoot me a message. I can walk you through getting them set up and happy.

Kelly </div></div> No I have not downloaded Firefox. Like to fix the problem without running from it?

Yes I have uninstalled every free spyware that Ive tried. Only one I kept is Malwarebytes because the $24.95 I paid earlier. I do have McAfee because it was purchased 4 months ago when the laptop was new.
 
#33
Re: Any Computer Gurus here? Need help....

I was wondering if we could isolate the problem to Internet Explorer by using another browser. And I realize you want to use the anti-virus that came with the laptop, but Microsoft Security Essentials is a really good (free) program that doesn't bug the shit out of you and takes care of business. Something to think about.
 
#35
Re: Any Computer Gurus here? Need help....

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: Night poacher</div><div class="ubbcode-body">http://support.kaspersky.com/faq/?qid=208280684

www.Superantispyware

I ran both of these earlier. Did not help. I can deal with the pop-up, but the google re-direct is kinda annoying 'cause I have to do it twice to get where I want to be.

Anymore suggestions...keep'em coming, not going hunting until this Saturday. Lol </div></div>

Drop into safe mode and do it again. I bet money you have the same thing I did these two progs are the only thing that worked. Try it again.
 
#36
Re: Any Computer Gurus here? Need help....

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: Badshot308</div><div class="ubbcode-body">If you go to your task manager and look under processes, how many thing are running? </div></div> I had to google 'Task Mgr to see where it was.
smile.gif
In the lower left corner it reads 'Processes 88

Also reads CPU usage 3% and physical memory 46%
 
#37
Re: Any Computer Gurus here? Need help....

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: High Binder</div><div class="ubbcode-body">Drop into safe mode and do it again. I bet money you have the same thing I did these two progs are the only thing that worked. Try it again. </div></div> Ok, just ran the Spyware is safe mode, but still getting the pop-up pic from above.
 
#38
Re: Any Computer Gurus here? Need help....

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: Night poacher</div><div class="ubbcode-body"><div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: High Binder</div><div class="ubbcode-body">Drop into safe mode and do it again. I bet money you have the same thing I did these two progs are the only thing that worked. Try it again. </div></div> Ok, just ran the Spyware is safe mode, but still getting the pop-up pic from above. </div></div>

The kasperov program is the one that unlocks the whole thing, the Spyware one just cleans it up after wards.
 
#39
Re: Any Computer Gurus here? Need help....

88 processes is a lot. If you Google each one of those processes, especially the ones with your user name, you just find something there that doesn't belong. I cleaned up a co-workers computer a few years ago that was packed with malware. I ended up using an old version of Hijackthis to finally remove a piece of malware that was very resistant to all the anti-spyware scanners of the time. At this point, your best bet is to take it somewhere and have it cleaned up.
 
#42
Re: Any Computer Gurus here? Need help....

Ok people, here is a post from 24hrCampfire that has seemed to work. I followed his unstructions and so far..so good.


<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: kwg020</div><div class="ubbcode-body">Here is another option. go tothe RUN box at the bottom of the START screen. Type in MSCONFIG. This gives you five locations to look into. Look under the Services and Start up for some unusual looking programs.

My guess is you will find the offending hijacker program. </div></div> Winner! kwg, I found RUNDII32 under startup and un-checked the box to disable. So far the ^box has not appeared....so far.

Thanks kwg and everyone for the help. Good luck hunting this fall.
 
#43
Re: Any Computer Gurus here? Need help....

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: Night poacher</div><div class="ubbcode-body">Ok people, here is a post from 24hrCampfire that has seemed to work. I followed his unstructions and so far..so good.


<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: kwg020</div><div class="ubbcode-body">Here is another option. go tothe RUN box at the bottom of the START screen. Type in MSCONFIG. This gives you five locations to look into. Look under the Services and Start up for some unusual looking programs.

My guess is you will find the offending hijacker program. </div></div> Winner! kwg, I found RUNDII32 under startup and un-checked the box to disable. So far the ^box has not appeared....so far.

Thanks kwg and everyone for the help. Good luck hunting this fall. </div></div>

That just turned it off, it didn't remove it...
 
#44
Re: Any Computer Gurus here? Need help....

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: High Binder</div><div class="ubbcode-body">That just turned it off, it didn't remove it... </div></div> Maybe so, but It's not annoying me no more. If you have any other idea's to remove it, I'll continue to try them. Thanks
 
#45
Re: Any Computer Gurus here? Need help....

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: Night poacher</div><div class="ubbcode-body"><div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: High Binder</div><div class="ubbcode-body">That just turned it off, it didn't remove it... </div></div> Maybe so, but It's not annoying me no more. If you have any other idea's to remove it, I'll continue to try them. Thanks </div></div>
Open MSCONFIG again and look at the details to find out the file it was running. In safe mode delete/rename the file. Most likely you had multiple rundll32's in there as that's not the problem program.
 
#46
Re: Any Computer Gurus here? Need help....

First off dump Mcafee - worthless SH*T Bloatware.

Then go to www.malwarebytes.org and grab a copy of that -

Next go to Microsoft.com download center and grab PROCESS EXPLORER - extract and run - minimize "Services" as most virii cannot create as a service.

now examine what is running. Something funky with an xyz or abc type letter combo - kill the parent process to it.

Next go to Microsoft.com download cetner and grab AUTORUNS - this will tell you everything that starts when your computer starts - find that process you just killed off and delete it from starting.

Now run a full AV scan on your computer.
 
#48
Re: Any Computer Gurus here? Need help....

http://www.howtogeek.com/howto/windows-vista/what-is-rundll32exe-and-why-is-it-running/

The Rundll32.exe is a nonthreatening background program that assists Windows to open and run other programs. I posted this link as education for you Np.
After a small amount of research, I found that each site I looked at said the same thing. The correct thing to do for THAT particular window is:

Click DETAILS

CLICK the Do Not Show... box so it is CHECKED

Click ALLOW


The first giveaway that this is a Windows program is the Publisher. The second giveaway can be found in DETAILS. What you are experiencing in that window is very common in both iE as well as WIndows Security. It is also an integral function of KAspersky software for teh initial use of iE when a new computer is brought online(true in my case on this laptop...thank you all for your generous donations to teh US Tax accounts so the VA can support my school needs with such hardware, although I would have preferred to purchase it myself. I could have gotten a much faster comp, with teh same software and Norton instead for $200 less than the VA's $730)
 
#49
Re: Any Computer Gurus here? Need help....

So... Where are we on this?

Has anyone said, "Boot to safe mode. Then do a system restore to a happier time."?

TDSS Killer.
Then run a full scan with Malwarebytes.

???????????????

I've been swatting resident geese and sweating.
 
#50
Re: Any Computer Gurus here? Need help....

Malicious programmers now use the "Rundll32" hook to hide evil-doing these days. A quick google search will bring up links telling you that there is exactly 1 rundll32 file you need running, and from a very specific location. Others running will be in the wrong location and can be safely deleted.
 
You must log in or register to reply here.

Similar threads

B
Auto Help needed near Williams, AZ
Replies
58
Views
2K
Bantam1
B
LuckyDuck
Has anyone here quit or "quit" tobacco?
Replies
108
Views
2K
Rocketvapor
Rocketvapor
pmclaine
Suppressors Any industry reps willing to discuss helping a state get access to suppressors?
Replies
19
Views
790
Old Man with Gun
Old Man with Gun
6brshooter
Garmin xero is acting wonky
Replies
43
Views
1K
Tugboater
Tugboater
Edsel
GET YOUR NUCLEAR STIFFY RIGHT HERE!
Replies
36
Views
3K
Edsel
Edsel
Top Bottom
Back
Home
Forums
Merch
Alerts