Malware Removal Forums

Malware "Windows Home Protector"

reallyfreespirit · 2012-07-24T17:48:39+00:00

Encountered "Windows Home Protector" on 7/18. It appears to be Malware, displaying message boxes indicating computer at risk, asking for $$ to fix, shutting down access to IE, Task Manager, etc. There is some information on the I'net for this malware, if you Google the topic. Some of the documents related to this malware are somewhat suspicious in origin, so I didn't download anything that wasn't shown as "trusted" by McAfee. I'm on a Dell Studio 1737 Notebook, Windows Vista Home Premium (SP2) 64b, with McAfee Security Center provided by my ISP. both McAfee and Vista are up to date. Initiated discussion and received guidance from Home User Assistance (Ex Brit, who moved thread to Malware Discussion for better attention. Actions: Tried System Restore first on 7/18 (back to 7/14). It seemed to solve the problem, but then malware returned 7/19. I then tried to restore back to 7/1. Malware returned again on 7/20. May indicate that a copy of the malware was transferred to the restore file.

25 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

diver79 Retired Graduate

August 11, 2012, 2:28 PM UTC

Hi reallyfreespirit,

My apologies I hadn't realised that Windows Vista uses a different method than Windows 7 to clean up system files. Updated instructions below.

Now remove old, infected System Restore points:

Click Start >> in the Search Programs and Files search box type cleanmgr and press OK
- If you are prompted to select which files to cleanup select Files from all users on this computer.
Select the C: drive and click OK.
Ensure the following boxes are checked;
- Recycle Bin
- Temporary Files
- Temporary Internet Files
Windows 7 users only - select the Clean Up System Files button.
- Select the C: drive again and select OK.
Select the More Options tab and under System Restore and Shadow Copies click the Clean up button.
Select Delete, Press OK and Delete Files to confirm

Let me know if these instructions worked for you.

diver79.

reallyfreespirit

August 12, 2012, 3:17 AM UTC

It didn't happen quite as the sequence you provided. I think it did complete, as the Recycle Bin is empty and the Clean Up box disappeared after the OK in instruction #6. What else should I look at to confirm?

Another question:
Some time back an MBR.dat file and an aswMBR application file and text file was created and remains in my Downloads directory. Should these be saved or deleted? If I recall, I saved the files on a USB drive, but want to confirm that they might be of future use.

diver79 Retired Graduate

August 12, 2012, 7:29 PM UTC

Hi reallyfreespirit,

You can view your system restore points using the instructions below. You should only have restore points from after you ran the cleanup.

Click the Start Button > All Programs > Accessories > System Tools > System Restore
Click Next at the Restore System Files and settings window.
You should now be able to view your current restore points. Note: Do not continue with the restore process. Click cancel once you have verified your available restore points.

Re: MBR.dat
This file is a backup of your master boot record. Some infections target this area of the computer as it loads before the Operating System loads. Having a backup is a good idea. You can delete the file from the desktop if you already have it stored on USB.

I will leave the topic open for another day to allow you respond with any questions you may have.

diver79

reallyfreespirit

August 12, 2012, 8:12 PM UTC

Restore points appear only as 8/11 and 8/12, which are correct and the only ones that should be there.
Yes, I have saved the MBR.dat file on a USB drive.

Many thanks for your great assistance in resolving my malware issues.
I will install malware protection and continue with completing a backup process.

Hopefully, I will be smart enough to avoid any future issue such as this.

diver79 Retired Graduate

August 12, 2012, 8:18 PM UTC

"reallyfreespirit" wrote:Restore points appear only as 8/11 and 8/12, which are correct and the only ones that should be there.
Yes, I have saved the MBR.dat file on a USB drive.

Good.

"reallyfreespirit" wrote:Many thanks for your great assistance in resolving my malware issues.
I will install malware protection and continue with completing a backup process.

You're most welcome.

"reallyfreespirit" wrote:Hopefully, I will be smart enough to avoid any future issue such as this.

Yes, hopefully. I linked to this earlier but you may not have read it. It should help Computer Security - a short guide to staying safer online

NonSuch Administrator

August 13, 2012, 2:40 AM UTC

As this issue appears to be resolved,

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.