Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

keep getting fake 'security warning' and 'you won' popups

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: keep getting fake 'security warning' and 'you won' popups

Unread postby walkingwounded » April 26th, 2008, 3:26 am

Note: I ran these in the order you mentioned above but as you can see the file name has changed again. Sorry for posting out of sequence, I will pay more attention now.

otmoveit2 log:

file changed to:
c:\documents and settings\steve\local settings\application data\qbvxkdr.exe
=====================
result of moveit (green area):
File move failed. c:\documents and settings\steve\local settings\application data\qbvxkdr.exe scheduled to be moved on reboot.

OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 04252008_235336
======================
Got a prompt to reboot, so I did.
walkingwounded
Active Member
 
Posts: 11
Joined: April 21st, 2008, 10:29 pm
Advertisement
Register to Remove

Re: keep getting fake 'security warning' and 'you won' popups

Unread postby Bio-Hazard » April 27th, 2008, 2:04 am

Hello!

It is important that you dont reboot until we get this infection killed. It changes file name everytime you reboot.


Run CFScript

Open Notepad and copy/paste the text in the box into the window:

Code: Select all
File::
c:\documents and settings\steve\local settings\application data\qbvxkdr.exe

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"qbvxkdr"=-



Save it to your desktop as CFScript.txt

Refering to the picture above drag CFScript.txt into ComboFix.exe Image This will let ComboFix runagain. Restart if you have to. Save the produced logfile to your desktop.

Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall



Logs/Information to Post in Reply

Please post the following logs/Information in your reply

  • Combofix Log
  • A fresh HijackThis Log ( after all the above has been done)
User avatar
Bio-Hazard
MRU Master Emeritus
 
Posts: 4078
Joined: May 10th, 2007, 8:28 am
Location: Cornwall, UK

Re: keep getting fake 'security warning' and 'you won' popups

Unread postby Bio-Hazard » April 30th, 2008, 12:14 pm

Hello!

It has been few days since my last post.
  • Do you still need help with this?
  • Do you need more time?
  • Are you having problems following my instructions?

Note: If after 48hrs you have not replied to this thread then it will have to be CLOSED!


Bio-Hazard
User avatar
Bio-Hazard
MRU Master Emeritus
 
Posts: 4078
Joined: May 10th, 2007, 8:28 am
Location: Cornwall, UK

Re: keep getting fake 'security warning' and 'you won' popups

Unread postby walkingwounded » April 30th, 2008, 10:32 pm

Sorry for the delay posting back (had a family emergency to deal with).

I followed your instructions in the last post tonight and the problem seems to be gone now (no pop-ups in the last hour). Great job!

Thank you very much. :-)
walkingwounded
Active Member
 
Posts: 11
Joined: April 21st, 2008, 10:29 pm

Re: keep getting fake 'security warning' and 'you won' popups

Unread postby Bio-Hazard » May 1st, 2008, 1:58 pm

walkingwounded wrote:Sorry for the delay posting back (had a family emergency to deal with).

I followed your instructions in the last post tonight and the problem seems to be gone now (no pop-ups in the last hour).


I hope everything is ok now with your family. Could you please post the Combofix Log and new HijackThis Log for me to see so i can make sure that you are clean.

Thank you,

Bio-Hazard
User avatar
Bio-Hazard
MRU Master Emeritus
 
Posts: 4078
Joined: May 10th, 2007, 8:28 am
Location: Cornwall, UK

Re: keep getting fake 'security warning' and 'you won' popups

Unread postby Gary R » May 6th, 2008, 2:16 am

Due to lack of response this topic is now closed.

If you still need help open a new thread in the Malware Removal forum and wait for a new helper.

If you have been helped and wish to donate to help with the costs of this volunteer site, please read Donations For Malware Removal

Gary R
User avatar
Gary R
Administrator
Administrator
 
Posts: 25888
Joined: June 28th, 2005, 11:36 am
Location: Yorkshire
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 272 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware