Simpler Navigation for Servers and Operating Systems - Please Update Your Bookmarks
Completed: a much simpler Servers and Operating Systems section of the Community. We combined many of the older boards, so you won't have to click through so many levels to get at the information you need. Check the consolidated boards here as many sub-forums are now single boards.
If you have bookmarked forums or discussion boards in Servers and Operating Systems, we suggest you check and update them as needed.
Operating System - Microsoft
Showing results for 
Search instead for 
Did you mean: 

Virus posing as security software - can't kill

Occasional Contributor

Virus posing as security software - can't kill

Have had this guy stuck on my MSEI browser for several weeks now. Can't get it to go away. Reported it to McGaffy & US Gov dept of Security - no reponse. HP & MGaffy scans don't find anything wrong...!

Every time I click home key on browser it takes me back to the below listed un-welcome security advertising page. My browser shows Goggle as my assigned home page, but still "defaults" to 'asecureboard' screen page anyway.

Any clues as to how to kill this thing? Seems to come from Rumania...?

This is culprit:


Richard Anderson
Honored Contributor

Re: Virus posing as security software - can't kill

hi Richard,

can you try to verify your registry?

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"=""

kind regards
No person was ever honoured for what he received. Honour has been the reward for what he gave (clavin coolidge)
Peter Godron
Honored Contributor

Re: Virus posing as security software - can't kill

and welcome to the forums !

McAffee has the solution:

And many others returned by web search.

Please also read: on how to reward any useful answers given to your questions.
Ron Kinner
Honored Contributor

Re: Virus posing as security software - can't kill

Smitfraudfix will probably fix the problem but it is NOT a McAfee program. It's from a guy in France who goes by S!R1. I use it all of the time over on the DELL Hijackthis forum.

Bleepingcomputer has a nice writeup on how to use it (as part of a tutorial on how to kill a similar infection).

It usually creates a log file at C:\rapport.txt. Would not hurt to check it to see if complains of any files it can't fix.

When you finish with SmitFraudFix get Hijackthis.exe from

(above is the direct download link. If you want to see the site you are getting it from:

Save it to your desktop with a new name like Richard.exe then run it. Select the top option (Scan and Save Log) then when notepad comes up with the log, copy the text and paste it in your next Reply. Let me check it to make sure you got it all. Lately a lot of the smitfraud style infections are combined with a vundo infection which likes to give you popups and I expect can also invite its friends in. It also hides if it sees a program named Hijackthis running.


Occasional Contributor

Re: Virus posing as security software - can't kill

Holy Bat Goop! It's gone!!!

Thanks fellers!

Only residual damage was Desktop background had to be reset. Downloaded suggested scan tool - found nothing I recognize as suspicious, so left things alone...

Washougal, WA