Jump to content

Windows Security Center malware


Recommended Posts

Figure I would give back to the forum since I read many solutions and got ideas here. I had the Windows Security Center pop up malware today. I've had this before and previously simply installed Malwarebytes and easily got rid of it. I don't know if it evolved or if I had a multiple entity infection, but Malwarebytes would not run. I tried to perform a unin/reinstall and the software would not complete the process, it hung every time. I would click the icon and the hourglass would stay for 10 secs or so and then disappear. I tried the run devmgmt.msc fix looking for hidden devices in the Non-Plug and Play Drivers, none of the listed drivers were found. I tried booting in safe mode, no help.

First off, my symptoms were the standard Windows Security Center pop ups, and also three porntube icons on my desktop. Three of them would appear randomly despite my deleting them. I did not visit this site, but honestly I was doing "online research". I immediately tried malwarebytes and also Superspy. They would not run when selected. I jumped into changing naming conventions and still no solution. I'd like to point out that most of the posts out there on the file structure and registry entries are outdated. I found not a single entry under the suggested titles.

Anyways, my final fix was to completely remove and then reinstall malwarebytes. I would delte all I could in reg mode and then boot in safe mode and run the uninstall. I was still getting application freeze when running windows add/remove programs in reg mode. I had to delete the registry entries in reg mode and run the uninstall in safe mode. I had several versions since I had performed multiple install attempts under different naming conventions. I don't remember an exact order, but keep at it. Eventually I had all the versions removed. I then performed a fresh install and PRIOR to running!!! Renamed the executable file from mbam.exe to something else. I also saved the program file under a different name and gave the software installation a different name. I also did not add a desktop icon or quick launch icon. I don't know what matters, but somehow the malware obviously recognizes the software and disables it. Anyways, there is hope. Just attempt to remove all aspects of previous malwarebytes installs, including regedit files and perform a new install inconspicuously (naming convention). Goodluck, and I hope this post can help atleast one aggrevated soul.

Chris

Chris

Link to post
Share on other sites

Welcome to Malwarebytes! Well, I would like it if you follow these instructions please! The HiJack Forum is where you have to go. They will get you fixed up! Instructions as follows:

follow these instructions & post it in the HiJackLog Forum please

Scan and post logs - read note at bottom in green

If you're having Malware related issues with your computer that you're unable to resolve.

  1. Please read and follow the instructions provided here: I'm infected - What do I do now?
  2. If needed please post your logs in a NEW topic here: Malware Removal - HijackThis Logs
  3. When posting logs please do not use any Quote, Code, or other tags. Please copy/paste directly into your post and do not attach files unless requested.

  • Please do not post any logs in the General forum. We do not work on any logs posted in the General forum.
  • Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you.
  • Using these other tools often makes the cleanup task more difficult and time consuming.
  • If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved.
  • Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback.
  • There are often many others that require asistance as well, so please be patient. If no one has responded within 48 hours then please go ahead and post a request for review

NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.