Computers The Official Malware/Antivirus Thread - Need help or general advice? Read this first! - Page 9

salame · 04-10-2011, 02:17 AM

****ing malware man

**Bowser** · 04-11-2011, 02:19 PM

Ok, so my avast starts going apeshit with a malware warning. I open it up, delete it, restart, and get to a window where everything looks like it's from 1988, asking if I want to delete the problem. I click yes, and it goes nuts deleting stuff. Now, I am looking at a line that reads thusly -

File C:\windows\help\mui\0409\aclui.CHM>html\066cfb1-0e68-40bb-b889-6268f1308575.htm is infected by HTML:Script-inf
File is in windows folder, are you sure?
1-Yes, 2-Yes all, 3-No, Esc-Exit :

I have no idea where this shit is. I'm assuming I click yes all, but is that right? (And btw, the avast went apeshit on me as soon as I left ChiefsPlanet)

Fish · 04-11-2011, 02:38 PM

Quote:

Originally Posted by Bowser

Ok, so my avast starts going apeshit with a malware warning. I open it up, delete it, restart, and get to a window where everything looks like it's from 1988, asking if I want to delete the problem. I click yes, and it goes nuts deleting stuff. Now, I am looking at a line that reads thusly -

File C:\windows\help\mui\0409\aclui.CHM>html\066cfb1-0e68-40bb-b889-6268f1308575.htm is infected by HTML:Script-inf
File is in windows folder, are you sure?
1-Yes, 2-Yes all, 3-No, Esc-Exit :

I have no idea where this shit is. I'm assuming I click yes all, but is that right? (And btw, the avast went apeshit on me as soon as I left ChiefsPlanet)

Sounds like you have malware that's spoofing Windows system messages, and you just clicked yes to it.

If you don't see anything on the message box that's branding it as from a legit source(Avast, Microsoft, etc.), then I'd cancel out of it and run Malwarebytes first thing.

**Bowser** · 04-11-2011, 02:43 PM

Quote:

Originally Posted by KC Fish

Sounds like you have malware that's spoofing Windows system messages, and you just clicked yes to it.

If you don't see anything on the message box that's branding it as from a legit source(Avast, Microsoft, etc.), then I'd cancel out of it and run Malwarebytes first thing.

Awesome. Here's a line right on the screen that's right over the question -

File C:\users\owner\AppData\Local\Temp\nss778A.tmp\Setup.dll is infected by win32: PUP-gen [PUP]
Deleted

So, I am to escape out of this, dowload Malwarebytes, and run it as soon as possible, yes?

Fish · 04-11-2011, 02:49 PM

Quote:

Originally Posted by Bowser

Awesome. Here's a line right on the screen that's right over the question -

File C:\users\owner\AppData\Local\Temp\nss778A.tmp\Setup.dll is infected by win32: PUP-gen [PUP]
Deleted

So, I am to escape out of this, dowload Malwarebytes, and run it as soon as possible, yes?

Yes.

thecoffeeguy · 04-11-2011, 02:41 PM

Quote:

Originally Posted by Bowser

Ok, so my avast starts going apeshit with a malware warning. I open it up, delete it, restart, and get to a window where everything looks like it's from 1988, asking if I want to delete the problem. I click yes, and it goes nuts deleting stuff. Now, I am looking at a line that reads thusly -

File C:\windows\help\mui\0409\aclui.CHM>html\066cfb1-0e68-40bb-b889-6268f1308575.htm is infected by HTML:Script-inf
File is in windows folder, are you sure?
1-Yes, 2-Yes all, 3-No, Esc-Exit :

I have no idea where this shit is. I'm assuming I click yes all, but is that right? (And btw, the avast went apeshit on me as soon as I left ChiefsPlanet)

Sounds like Fake Anti-virus warning. Shit load of it is going around as a result of Lizamoon

Download Microsoft Security Essentials (Yes Microsoft), update the definitions and run a full scan.

Security essentials is very very good at finding this nasty stuff believe it or not.

**Bowser** · 04-11-2011, 02:45 PM

Quote:

Originally Posted by thecoffeeguy

Sounds like Fake Anti-virus warning. Shit load of it is going around as a result of Lizamoon

Download Microsoft Security Essentials (Yes Microsoft), update the definitions and run a full scan.

Security essentials is very very good at finding this nasty stuff believe it or not.

Cool. I'll get that one, too.

Is it any coincidence that I downloaded IE 9 like two days ago that this shit is happening?

Fish · 04-11-2011, 02:49 PM

Quote:

Originally Posted by Bowser

Cool. I'll get that one, too.

Is it any coincidence that I downloaded IE 9 like two days ago that this shit is happening?

No.

**QuikSsurfer** · 04-11-2011, 02:21 PM

run hijackthis and post your log here please

http://www.trendmicro.com/ftp/produc...HijackThis.exe

**Bowser** · 04-11-2011, 02:28 PM

Quote:

Originally Posted by QuikSsurfer

run hijackthis and post your log here please

http://www.trendmicro.com/ftp/produc...HijackThis.exe

Me? I will as soon as I answer the question it asked me about a file being in a windows folder, which I'm not sure if it is. That was what I was asking in the post - do I click yes, yes all, no, or just escape out of it? (And apologies for my lack of 'puter knowledge. It's kinda like trying to teach a kindergartner trigonometry sometimes with me)

**QuikSsurfer** · 04-11-2011, 02:55 PM

Quote:

Originally Posted by Bowser

Me? I will as soon as I answer the question it asked me about a file being in a windows folder, which I'm not sure if it is. That was what I was asking in the post - do I click yes, yes all, no, or just escape out of it? (And apologies for my lack of 'puter knowledge. It's kinda like trying to teach a kindergartner trigonometry sometimes with me)

It's a rogue (fake av). And you'd be better off running a updated ver of malwarebytes in safe mode.

Fish · 04-11-2011, 03:03 PM

I would like to reiterate what a great investment it is to purchase the full version of Malwarebytes Anti-Malware.

It's only $25, and that gives you a version of Malwarebytes that is always running, and scans each file you access in real-time exactly like your virus scanner does. This catches spyware and malware before it has a chance to infect anything. This program has completely eliminated monthly visits to fix my grandmother's computer. And I can't tell you how much of an accomplishment and endorsement for the product that is.

https://store.malwarebytes.org/342/p...am_page_button

**Bowser** · 04-11-2011, 03:14 PM

This is interesting. Everytime I go to try and get to MS's website, avast pops up with a malware warning....

Sure-Oz · 04-11-2011, 04:17 PM

Quote:

Originally Posted by Bowser

This is interesting. Everytime I go to try and get to MS's website, avast pops up with a malware warning....

Is yours still doing that?

Galileo Humpkins · 04-11-2011, 05:24 PM

For anyone still experiencing issues with Avast, I would recommend reading this blog update:

https://blog.avast.com/2011/04/11/fa...defs-110411-1/

Had the same issue with another computer I oversee earlier today. If you do a manual update of Avast, the pop-up error should disappear.

04-10-2011, 02:17 AM	#1
salame Under the Sofa Join Date: Apr 2009 Casino cash: $10010607	****ing malware man
Posts: 4,907

04-11-2011, 02:19 PM	#2
Bowser sorta mod-ish Join Date: Jan 2004 Location: KC North Casino cash: $3331616	Ok, so my avast starts going apeshit with a malware warning. I open it up, delete it, restart, and get to a window where everything looks like it's from 1988, asking if I want to delete the problem. I click yes, and it goes nuts deleting stuff. Now, I am looking at a line that reads thusly - File C:\windows\help\mui\0409\aclui.CHM>html\066cfb1-0e68-40bb-b889-6268f1308575.htm is infected by HTML:Script-inf File is in windows folder, are you sure? 1-Yes, 2-Yes all, 3-No, Esc-Exit : I have no idea where this shit is. I'm assuming I click yes all, but is that right? (And btw, the avast went apeshit on me as soon as I left ChiefsPlanet)
Posts: 100,866

04-11-2011, 02:21 PM	#9
QuikSsurfer Got swag? Join Date: Aug 2003 Location: Madison, MS Casino cash: $10008287	run hijackthis and post your log here please http://www.trendmicro.com/ftp/produc...HijackThis.exe __________________
Posts: 11,847

04-11-2011, 03:03 PM	#12
Fish Ain't no relax! Join Date: Sep 2005 Casino cash: $2148919	I would like to reiterate what a great investment it is to purchase the full version of Malwarebytes Anti-Malware. It's only $25, and that gives you a version of Malwarebytes that is always running, and scans each file you access in real-time exactly like your virus scanner does. This catches spyware and malware before it has a chance to infect anything. This program has completely eliminated monthly visits to fix my grandmother's computer. And I can't tell you how much of an accomplishment and endorsement for the product that is. https://store.malwarebytes.org/342/p...am_page_button __________________
Posts: 47,581

04-11-2011, 03:14 PM	#13
Bowser sorta mod-ish Join Date: Jan 2004 Location: KC North Casino cash: $3331616	This is interesting. Everytime I go to try and get to MS's website, avast pops up with a malware warning....
Posts: 100,866

04-11-2011, 05:24 PM	#15
Galileo Humpkins For Luck, you monster. Join Date: Sep 2009 Casino cash: $10004900	For anyone still experiencing issues with Avast, I would recommend reading this blog update: https://blog.avast.com/2011/04/11/fa...defs-110411-1/ Had the same issue with another computer I oversee earlier today. If you do a manual update of Avast, the pop-up error should disappear.
Posts: 449