mountaintree16

@ Alan Please see these links about Foxit and see if you still want to continue using them, although I believe they've stopped auto-adding some of the features, I would personally not use them after they pulled this stint. I had been considering switching to them but not after that. Not acceptable in my opinion. http://www.mywot.com/en/forum/3387-foxit-r...fied-as-malware http://hphosts.blogspot.com/2009/05/foxit-...ly-malware.html http://www.vitalsecurity.org/2009/05/why-i...shed-foxit.html Good that you disabled it first Anyway, did you test this with Mbam or another program that you already have that you know is safe? Buying Mbam pro would be a GREAT choice You shouldn't have any conflicts, but if you do, you'll just need to add some exclusions: http://www.malwarebytes.org/forums/index.php?showtopic=10138 And I know you don't use AVG, but, the exclusions should be the same: http://www.malwarebytes.org/forums/index.p...mp;#entry167851 I love Creed Especially the Weathered album, and that song! I was sad when they broke up but I think that Stapp really lost it towards the end. Then he went solo, then they got back together recently, even though Alterbridge was formed after Creed broke up. So confusing. I'll have to read up on it all soon. I love Alterbridge and Creed, and the Goo Goo Dolls. Those are my top three favorite bands

Hello derrahlynn, and welcome to the forums here at Malwarebytes.org Please post your log here: http://www.malwarebytes.org/forums/index.php?showforum=7 And someone will be happy to assist you when someone is available. Thank you

Thanks

If I have any further questions may I ask you later?

Thanks There just seems to be a LOT of options and settings to check/uncheck and it looks a bit overwhelming and I just want to make sure that everything is okay and make sure that there isn't anything that I am missing as far as settings and making them be as good as possible go. I am using Firefox currently, as I am quite used to it and am kinda tired, but I'll keep using Orca when I am on my computer and see how I like it as time goes on I think its so cool that you can disable a variety of things very easily (and un-disable them, er if that's even a word LOL easily as well). Anyway, my brain is slowly starting to not function fully as I am getting rather tired, so its time for sleep soon

Hmm, well, the firewall prompt didn't happen with Yahoo.com this time, but I did see the adblocker in action (I set it to alert me when it blocks, and it's just a small little alert in the bottom right corner, not very invasive at all). I just opened some new tabs and the prompt didn't come up, it just showed the homepage I have set (the OrcaBrowser home). Good to know Should the default settings be sufficient for security, etc? There are some other questions I had for you perhaps, but I'll ask you another day, as I am *hoping* to go to sleep soon

Hey there Angie I'm glad that you've posted in the Malware Removal Forum Alright. Just be sure that his computer at work is clean. That's good that he keeps a close eye on your accounts. As for Facebook, this is what I recommend doing, and it makes for a much safer Facebook experience, although its not foolproof: Disable Adobe Flash Do NOT use applications Do NOT click on links that you do not know without a doubt are SAFE Just be wary of what you click and what you do. You're welcome for the ctrl + alt + delete tip I didn't know that either until I came here, but its very useful information to have. Once you're clean, you should choose another AV solution. If your McAfee is paid, you could finish out until the license is done, although due to the kind of service you've received, if I were you I'd want to switch even if I still had a license that was good. The anti-viruses that are recommended mostly around here are: (for free ones) Avira, MSE, Avast! (paid) Kaspersky And I am probably missing some Once you're all clean your helper can advise you on an AV to choose or you can post over in the PC Help forum and someone can assist you. I'll look out for your posts and I can help you too in giving you links and information on the different choices once you're clean if you haven't already selected something. You'll need to use a removal tool for McAfee in order to install another AV, but that won't take long at all. Just remember that Malwarebytes is NOT an anti-virus solution, but is made to complement your anti-virus. It is good at what an anti-virus is not good at, and picks up and detects/removes things that AV's cannot fully detect/remove or cannot detect/remove to begin with. You are very welcome I'm glad that I was able to help you and get you moving in the right direction! Our post here is finished now though, as you've posted your log in the malware removal forum. Once you're clean, I can give you some tips and some other tools to use if your helper doesn't do so (but they usually do ). Good luck!

I've seen this somewhere before, hehe.

Nice! Thanks Seems as though I get this prompt when opening a new page that Orca hasn't seen yet. I went to www.yahoo.com and got a firewall prompt. This is normal behavior, as far as you know? So to check for updates/hotfixes I just go to Help > Check for new version, correct? And this will check for any updates/hotfixes? Nice And its easily disabled (the flash blocking) if I need it, I see Me too I told you I'd try it - I just had to wait until I had some time to actually play with it... and sometimes it takes a while for me to get some time, hehe.

Hello again Angie, and thank you for posting back Okay, you need to post in the malware removal forum ASAP - I think that your computer needs a deeper look taken at it. Also, looks like you picked up the "facebook" worm - Koobface. Seems as though you clicked on a fake video link or something similar - this is often how Koobface is spread, although it can be spread and contracted in other ways. Please post the log that you posted to me here, and your newest log, and the information that you told me here, along with what operating system you have: http://www.malwarebytes.org/forums/index.php?showforum=7 It can take a while for someone to get back to you though, so please be patient. Please try to include all the information that you can think of in your first post, and do not reply back to your own post unless its been over 48 hours since your original post, and only reply back to request a review. Replying to your own post, even to add more information, can make it appear as though you are getting help already and your post may be overlooked for a while due to that. If you have new information that you feel would be useful to your helper, save that information in a wordpad or a word document and let your helper know that information once you've received a reply. Also, feel free to provide a link back to this post, it would be useful for your helper to see if she or he would like to In the future, if you get a fake virus alert page like the one you described, use ctrl + alt + delete and END the task with Task Manager. Clicking on the X that the fake pop up gives or even closing it out via your browser can further the installation. I don't know how long defogger takes. Do it when you have an uninterrupted block of time to devote to it. Yes, you'll need to be copying and pasting logs from those as well. Also, if you have used this machine for any online banking, financial transactions, etc STOP and do NOT do any more of them, and if you have access to a known CLEAN machine, change any passwords from that computer. You would also be wise to keep a close eye on upcoming bank and credit card statements.

Okay, thanks I see that you are an Avant Admin there Ah, okay. I am pretty good about manually checking for updates, although I do have auto-update checker enabled in Firefox, and I never get a firewall prompt from that. It happened when I was enlarging a screen shot from GT500 and also when opening it at first and a couple times when viewing the congratulations page. Then its happened when I clicked on the wiki page link that was given in the forum or on the support page, I can't remember exactly which. And now it happened when I went to a new tab and opened Google. I think I'll disable auto-update checker then if that is the reason for the firewall prompts, as it is kinda annoying Edit: Do I uncheck "automatically install hotfixes"? I can't figure how how to disable the auto-update, unless that is it. It's also the first browser that I've seen that shows in the taskbar, but I've already figured out how to disable that if I want to With the Flash blocker, does that just block Flash ads, not actual Flash content on websites? I guess the only way to find out is to check, hehe, but I thought it would be worth it to ask. I've enabled the adblocker, although I am currently using a HOSTS file that blocks many ads already This browser is very different from IE and Firefox (and similar to them in other ways, mostly to Firefox ) but I will get used to it I am sure. I'll still use Firefox for some things, but I think it'll be about 50/50 between Firefox and Orca. All in all, very cool browser!

Okay so I am writing to you from Orca right now, and I like it so far. My firewall prompts to let me allow it though when opening and then a couple times after its open. Which was kinda weird. Then I couldn't find file, bookmarks, etc.. but now I've found them Then I accidentally full screened it and couldn't get it back to normal, but it seems fine now. And it seems to have imported the few favorites I had on IE. I'm going to continue playing around with it, and I assume I should go here with any questions: www.orcabrowser.com/support.php I'm not sure what online storage is though, and I guess an ordinary site (unlocked padlock) means that it is not a https site?

I'll report back here and let you know what I think I also love the animal Orca, so that's a plus in using this too, hehe

Thank you much MysteryFCM Bookmarking your site there and downloading Orca now

Thanks Exile I wish there was a way for the browser to prompt you to open the PDF. Ah well, just gotta be careful of what's being clicky-d

Check your installed programs by going to Control panel > add/remove software and see if any of those programs or similarly named ones (bittorrent etc...) are listed there. If you aren't using P2P software (and if you are, I strongly urge you to uninstall it), then I would recommend getting your system checked: We don't work on Malware removal in the general forums. Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here. One of the expert helpers there will give you one-on-one assistance when one becomes available.

Alan, I have noticed that PDF's open/(download)? automatically in Firefox. I am not sure about IE; I should test one in there. If you want to actually save it to your computer, you go to the PDF file that opened up in your browser and click File, Save as... Try Exile's test on a file other than a PDF file. How about testing it with MBAM 1.42?

Ah, I see. Thanks for the clarification I don't use any of those currently, but I have been considering using one.

js9600, Is the green check on the left from Finjan? The red in the right is from WOT, correct?

Angie, I forgot one important thing here, which would also help speed up scanning time! Please download ATF Cleaner from here. (It is a temporary file cleaner). If you are running Vista, you'll need to right-click and choose "Run as Administrator". Make sure that there is nothing in your recycle bin that you want. Check off all the options. Click "empty selected" Then, if you use Firefox or Opera for a web browser, click on their names up at the top of ATF Cleaner. Check all. If you have saved passwords that you want to keep, click NO at the prompt. Click "empty selected". Then do a QUICK scan with Malwarebytes

Hi Angie Yes, you copy and paste. So, open up Malwarebytes. Click on the "logs" tab. There you'll see the logs of past scans. Pick the one that was when you removed the 16 found items, and open it. copy and paste it into your next reply. I'll take a look, and then you need to post that log and whatever else you are able to do from the directions I gave you here in the malware removal forum: http://www.malwarebytes.org/forums/index.php?showforum=7 No, no, no one actually gets into your computer Yes, just giving steps on how to correct issues. The logs just show whats going on so the experts can help you disinfect and clean your system It is posted what you are to do if you are infected, but no worries, lots of people post here first, and then we direct them to the correct spot You are very welcome!! No worries! Most things are fixable, and the experts here will be able to help you Edit: Make sure that you are using the quick scan still

Hi jbk. Alright then, we've ruled out visiting a malicious IP on a website as the cause of the IP block. Hmm. Do you have any P2P (peer to peer) software installed, such as Limewire, Vuze, uTorrent, etc...?

Hi Angie Nope, manual removal is required to rid your system of infections when using Malwarebytes. Did you do this? It sounds as though you did. When the results are found, you click "show results", check off everything that is found, and then "remove all". Then restart if prompted (doesn't hurt to restart even if not asked). Then you rescan to make sure that everything is gone. No reason to be suspicious of Malwarebytes. It's an amazing program made and maintained by amazing people and I can guarantee you its not a bad program at all. Could you post the log here so we can see what was found? (I'm just curious what the results were. I am not a staff member or qualified to help with malware removal, but I just want to see what might be going on here). You are probably still infected and you'll need to go to the malware removal forum. Yes, you need to run the defogger. Just do as much as you are able to do with the directions that I gave you.