Problem with fake Antivir pop-ups

[Donkey178]

Hi

I hope I'm in the right forum

In the last two days I have had 4 instances of what appears to be a fake attempt to get me to load a virus.

I get a pop-up that says "Your Operating System is harmed. Do you wish to be secured?"

There seems to be no way out of this, as when I click close up comes : Attention! This computer might be vulnerable to spyware and virus. This PC should be scnned for threats. Antivir Scan shall do an online test for your computer.

Then a pop-up comes with no exit options. I have just been going to task manager and shutting down IE (I'm on Vista, by the way).

Anyway, I ran malwarebytes after I downloaded it and it found adware.mywebsearch . The log is below. I also have AVG 9.0 and it picks up nothing. Anyway, malwarebytes picked this up when I first ran it, and all subsequent scans by malwarebytes show nothing.

Any idea why I'm still getting the fake prompts, and what can I do to stop them? Thanks in advance. I have limited computer knowledge.

Malwarebytes' Anti-Malware 1.42

Database version: 3303

Windows 6.0.6002 Service Pack 2

Internet Explorer 7.0.6002.18005

05/12/2009 11:59:30 PM

mbam-log-2009-12-05 (23-59-30).txt

Scan type: Quick Scan

Objects scanned: 122759

Time elapsed: 3 minute(s), 51 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 1

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

[mountaintree16]

Hello Donkey178, and welcome to the forums here at Malwarebytes.org

Taskmanager is the correct way to kill the pop up, yes Do not close it via your browser or clicking on any red x's or cancel buttons that the fake alert provides, as this can further the installation.

You may have something else lurking though since this has happened more than once, and should get your computer checked to make sure that you're clean.

Please read the following:

We don't work on Malware removal in the general forums.

Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

Also, as a side note, when replying, please use the "Add reply" button at the bottom of the page or erase what the person that you are replying to wrote, as this makes the forum easier to read.

Thank you

[kimsland]

Nope you are not in the right forum

Have a read of the Sticky right up the top of this forum you just posted into: http://www.malwarebytes.org/forums/index.php?showforum=41

[Donkey178]

Hello Donkey178, and welcome to the forums here at Malwarebytes.org

Taskmanager is the correct way to kill the pop up, yes Do not close it via your browser or clicking on any red x's or cancel buttons that the fake alert provides, as this can further the installation.

You may have something else lurking though since this has happened more than once, and should get your computer checked to make sure that you're clean.

Please read the following:

We don't work on Malware removal in the general forums.

Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

Also, as a side note, when replying, please use the "Add reply" button at the bottom of the page or erase what the person that you are replying to wrote, as this makes the forum easier to read.

Thank you

[Donkey178]

thanks mountaintree.

I'll follow those instructions. sorry about posting in the wrong forum.

[mountaintree16]

You are very welcome, Donkey178

It's alright, it happens sometimes, and now you know where you do need to post your logs

Good luck!