Windows Security Center warning



Aldiman
07-09-2005, 11:54 PM
Good afternoon,
I was wondering if anyone here can help me save my sanity.
I am being haressed by a pop-up that will go through everything I am
doing; ...soon it will go trough the second floor window.

This is the bugger:
[image: http://www.geocities.com/eachat/IRRRRRITANT.gif]

I do NOT have a windows firewall enabled and disabled all messenges
from the security center. Still.... this basterd gets through. Clicking
YES or No, won't help, it will be back!

Please help me get rid of this thing before I might considder buying a
Apple!

Windows XP Pro SP2
P4 2.66
1.5 gig ram


--
Aldiman
------------------------------------------------------------------------
Aldiman's Profile: http://www.iamnotageek.com/member.php?userid=13370
View this thread: http://www.iamnotageek.com/showthread.php?t=1819077476

Tom Porterfield
07-09-2005, 11:54 PM
Aldiman wrote:
> Good afternoon,
> I was wondering if anyone here can help me save my sanity.
> I am being haressed by a pop-up that will go through everything I am
> doing; ...soon it will go trough the second floor window.
>
> This is the bugger:
> [image: http://www.geocities.com/eachat/IRRRRRITANT.gif]
>
> I do NOT have a windows firewall enabled and disabled all messenges
> from the security center. Still.... this basterd gets through. Clicking
> YES or No, won't help, it will be back!
>
> Please help me get rid of this thing before I might considder buying a
> Apple!
>
> Windows XP Pro SP2
> P4 2.66
> 1.5 gig ram

You have adware on your machine. Here are some links to technical details
on the Adware.Livechat that you appear to have:

http://securityresponse.symantec.com/avcenter/venc/data/adware.livechat.html

Run a good adware scanner on your PC. See this article for a good set of
steps to follow - http://www.aumha.org/a/quickfix.htm.
--
Tom Porterfield
MS-MVP Windows
http://support.telop.org

Please post all follow-ups to the newsgroup only.

Aldiman
07-09-2005, 11:55 PM
Thank you for your very fast response. I am sad to say your sugestion
did not have the result I was hoping for.. getting rid of the nasty-ass
pop-up.

I have updated and run Norton, I have run almost every known
spyware-sweeper around (Hijack-this, Adaware etc), but it's still
there.

Is there any relation with *'**Search** **Assistant, Shopping Wizard
and Search extender Trojans* which have infested my pc also?
I tried clearing those be deleting them from the registry, but to no
avail.

I guess I might have to go back to a pre- SP2 restore-point to get rid
of this. Would that help?


--
Aldiman
------------------------------------------------------------------------
Aldiman's Profile: http://www.iamnotageek.com/member.php?userid=13370
View this thread: http://www.iamnotageek.com/showthread.php?t=1819077476

guestfromhell
07-09-2005, 11:55 PM
yep, wipe the HDD and reinstall, that will DEFINITELY kill the little
sod.........


--
guestfromhell
------------------------------------------------------------------------
guestfromhell's Profile: http://www.iamnotageek.com/member.php?userid=12490
View this thread: http://www.iamnotageek.com/showthread.php?t=1819077476

Malke
07-09-2005, 11:55 PM
Aldiman wrote:

>
> Thank you for your very fast response. I am sad to say your sugestion
> did not have the result I was hoping for.. getting rid of the
> nasty-ass pop-up.
>
> I have updated and run Norton, I have run almost every known
> spyware-sweeper around (Hijack-this, Adaware etc), but it's still
> there.
>
> Is there any relation with *'**Search** **Assistant, Shopping Wizard
> and Search extender Trojans* which have infested my pc also?
> I tried clearing those be deleting them from the registry, but to no
> avail.
>
> I guess I might have to go back to a pre- SP2 restore-point to get rid
> of this. Would that help?
>
>
Did you run all those antispyware tools in Safe Mode? If not, do so.
Otherwise, do a HijackThis in Safe Mode and post your log to one of the
forums below (*not* here, please):

http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Jim
Eshelman
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42 -
another tutorial
http://aumha.net - forums
http://spywarewarrior.com/viewforum.php?f=5 - Spyware Warrior HijackThis
forum
http://www.wilderssecurity.com/
http://forums.tomcoyote.org/
http://www.spywareinfo.com/forums/

I particularly recommend the AumHa forum, but any of the above are good.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Aldiman
07-09-2005, 11:58 PM
Thank you. I have followed your instructions and ran more scans by
cwshredder, adaware, and MS antispyware.
I have noticed that cwshredder is rather useless because it says my
system is free of the things adaware finds straight away after.

In safemode the latest Adaware will clean my system of Home Search
Assistent and the other junk, but it returns the minute I reboot.

I have posted my hijack-log file on 'http://aumha.net'
(http://aumha.net/) and I hope I will get a reply.

thx


--
Aldiman
------------------------------------------------------------------------
Aldiman's Profile: http://www.iamnotageek.com/member.php?userid=13370
View this thread: http://www.iamnotageek.com/showthread.php?t=1819077476

Aldiman
07-09-2005, 11:59 PM
I gave up.. They've won this time.
I formatted C: and reinstalled windows.

I hope thats the end of it for now.

Thanks again for your help!


--
Aldiman
------------------------------------------------------------------------
Aldiman's Profile: http://www.iamnotageek.com/member.php?userid=13370
View this thread: http://www.iamnotageek.com/showthread.php?t=1819077476


Windows Security Center warning