[Fake security alert for win32/caphaw - not found by any scanner]

I believe this situation has finally been resolved. Thank you for all your help. One question though, why would no scanner find and kill this thing automatically? This is the first time this has ever happened where I had to go through so many steps to kill something off.

[Fake security alert for win32/caphaw - not found by any scanner]

Final ComboFix log

 

Combofix log file 9-1-14.txt

[Fake security alert for win32/caphaw - not found by any scanner]

It may take another day or so to get back to the computer to run the final scan. Please don't close the thread yet. I'll get it done ASAP.

[Fake security alert for win32/caphaw - not found by any scanner]

Fixlog attached.  So far, I have no pop up window of death! it has been almost an hour and so far so good.  It usually pops up within 3-5 minutes.

 

Fixlog.txt

[Fake security alert for win32/caphaw - not found by any scanner]

I think those were the bad format ones again.  Here are the reformatted ones you can read.  Sorry.

FRST.txt

Addition.txt

[Fake security alert for win32/caphaw - not found by any scanner]

New logs...deleted the old ones and started fresh.

FRST.txt

Addition.txt

[Fake security alert for win32/caphaw - not found by any scanner]

First and second got switched but you get the idea.

[Fake security alert for win32/caphaw - not found by any scanner]

The first is what pops up every 2-3 minutes. Obviously fake. The second is what you get if you hit the search for solutions option. The final is task manager showing the process running.

[Fake security alert for win32/caphaw - not found by any scanner]

I spoke too soon.  After one last reboot, the problem popped right back up.

[Fake security alert for win32/caphaw - not found by any scanner]

Both instructions carried out.  I'll let you know if anything pops back up but so far so good.  Now the whole system seems to be running a bit slow now but I guess that is ok to get rid of the bugs.

 

 

 

Fixlog.txt

AdwCleanerS0.txt

[Fake security alert for win32/caphaw - not found by any scanner]

In the Scheduled Tasks section, I do see a reference to alert.exe as well as something suspicious called AnyProtect.exe

 

Hopefully you see them and this may be a quick and easy fix.  Thanks

[Fake security alert for win32/caphaw - not found by any scanner]

I opened them and let MS Word reformat them... Try these please.

 

FRST.txt

Addition.txt

[Fake security alert for win32/caphaw - not found by any scanner]

Logs are the same on the second time.  what is wrong with them? maybe I can fix?

[Fake security alert for win32/caphaw - not found by any scanner]

Farbar scan complete.

 

Log files attached.

 

 

FRST.txt

Addition.txt

[Fake security alert for win32/caphaw - not found by any scanner]

I have a pop up box that says Security Alert and below it says that Malware:win32/caphaw has been found.  I know that there is no caphaw infection and the popup itself is the malware trying to get me to call the 800 number and give my credit card.  When the popup occurs, there is a process in task manager called alert.exe.  I can end the process and the popup goes away only to come back minutes later.  I have tied scanning with Malwarebytes, TrendMicro Internet Security, Viper, Microsoft Malicious Software remover, rkill and TDSSKiller from Kaspersky. I have done each one in safe mode as well as regular mode.  There is no infection of any kind found by any scanner.  Is there something I am missing or is this malware so new it is not on anyone's definition table yet?  Please Help!