unwanted Popup

[Glenvern]

I believe I have an unwanted "Anti Virus" Program trying to force

its way onto my computer through a popup. I know that if I click it

I will not be able to get rid of it until I pay the purchase price

(I have had this before and had to reinstall) does anyone know how

to resolve this problem without going thru the reinstall.

Everytime I click the 'X' it comes straight back up again.

[-pops-]

System Restore to a time before you had this?

Reload your backup or image of your "C" drive?

[pawz7]

also run malwarebytes antimalware - that might pick it up.

[andsome]

I believe I have an unwanted "Anti Virus" Program trying to force

its way onto my computer through a popup. I know that if I click it

I will not be able to get rid of it until I pay the purchase price

(I have had this before and had to reinstall) does anyone know how

to resolve this problem without going thru the reinstall.

Everytime I click the 'X' it comes straight back up again.

If this has occurred before, it makes me wonder exactly what protection you normally use. How about telling us? I VERY RARELY have any such problems at all because I use extremely reliable protection. namely ESET Nod 32 security suite, plus Malware Bytes as suggested by pawz7, and SUPERAntSpyware.B)

[Glenvern]

Thanx for the responses guys -

I use mainly freebies as a defence against nasties.

Microsoft Security Essentials.

Windows Defender.

Microsoft Win 7 Firewall.

They seem to work ok most of the time but I don't recognise this as a virus or adware or malware,

it's more like an email spam.

Someone doing a 'push job' onto my computer with there so called anti virus program..

It has to be hanging on the back of some website that when you open it it gets 'pushed' if that's possible..

(trouble is your so busy trying to stop it you forget to look at which website you were on)

[Irene]

I believe I have an unwanted "Anti Virus" Program trying to force

its way onto my computer through a popup. I know that if I click it

I will not be able to get rid of it until I pay the purchase price

(I have had this before and had to reinstall) does anyone know how

to resolve this problem without going thru the reinstall.

Everytime I click the 'X' it comes straight back up again.

Do you see any name or reference to the 'program' in the pop-up?

[Glenvern]

I believe I have an unwanted "Anti Virus" Program trying to force

its way onto my computer through a popup. I know that if I click it

I will not be able to get rid of it until I pay the purchase price

(I have had this before and had to reinstall) does anyone know how

to resolve this problem without going thru the reinstall.

Everytime I click the 'X' it comes straight back up again.

Do you see any name or reference to the 'program' in the pop-up?

I'm reluctant to open the popup to find out the name of the program,

but I believe it is something like "Secrurity Protection" and it costs $69 to purchase.

It immediately starts a scan and tells you you have Trojans and all sorts of other rubbish

It completely takes over your computer it disables the TaskManager and the Start button.

All it will let you click is the purchase button.

[-pops-]

Have you looked into either of my suggestions?

[pawz7]

malwarebytes antimalware is what you need..

[andsome]

Have you looked into either of my suggestions?

pops, he probably does not have a back up, an awful lot of people don't.

[-pops-]

Well, System Restore should be there unless it's an antique version of Windows.

[Brimston]

run task manager and left-click on the corresponding program in "appication" tab

and then, do as in the picture

"go to process" and "end process" (or process tree if the first one doesn't work)

then you'll be free to erase it with any malware removal tool.

and don't forget to scan your computer with a real anti-virus ;)

Edit: if you can't use the task manager, use the "procexp.exe" from sysinternals (Download link)

[Irene]

also run malwarebytes antimalware - that might pick it up.

Malwarebytes FREE download HERE

Just select one of the downloads, ensure that it has up to date definitions and run the scan - remove all that it finds.

Please post back with results. :)

[Boris]

I suggest booting in Safe Mode and running Malware Bytes (after you have installed/updated it)

[Glenvern]

OK I clicked it to see what it was and it is something to do with "Google Discussions".

So looks like my bug has gone somewhere else to play havoc.

(I shall do another backup while I'm clean)

(my restore point only went back four days and I had the bug then).

Thanx people for the help..

[andsome]

OK I clicked it to see what it was and it is something to do with "Google Discussions".

So looks like my bug has gone somewhere else to play havoc.

(I shall do another backup while I'm clean)

(my restore point only went back four days and I had the bug then).

Thanx people for the help..

You also need a back up on a separate hard drive using ACRONIS or similar.A mirror image.:)

[ɹəuəllıʍ ʇɐb]

Microsoft Security Essentials.

Windows Defender.

Microsoft Win 7 Firewall.

Windows Defender is part of Security Essentials, it should not be installed separately beside MSE.

[andsome]

Microsoft Security Essentials.

Windows Defender.

Microsoft Win 7 Firewall.

Windows Defender is part of Security Essentials, it should not be installed separately beside MSE.

Maybe I'm wrong, but I don't think that Windows defender can be uninstalled, certainly it does not show in the program list in Windows 7. As I understand it, Windows defender is disabled automatically by Security Essentials.:)

[bludgard]

As I understand it, Windows defender is disabled automatically by Security Essentials.:)

It is.;)

@ Glenvern; I believe this "scare-ware" to be web related. I would suggest employing CCleaner to rid your machine of

any and all temporary files (IE as well as system), history, cookies, etc.

It completely takes over your computer it disables the TaskManager and the Start button.

One must open TaskManager as soon as the screen reaches Desktop. This will give one access to the malware before it gets a chance to start-up. Once you end the process, you will have the ability to access the rest of your machine and to implement anti-virus/malware programs effectively. Oftentimes this type of nuisance will disable anything tied to .exe associations.

[Glenvern]

As I understand it, Windows defender is disabled automatically by Security Essentials.:)

It is.;)

@ Glenvern; I believe this "scare-ware" to be web related. I would suggest employing CCleaner to rid your machine of

any and all temporary files (IE as well as system), history, cookies, etc.

It completely takes over your computer it disables the TaskManager and the Start button.

One must open TaskManager as soon as the screen reaches Desktop. This will give one access to the malware before it gets a chance to start-up. Once you end the process, you will have the ability to access the rest of your machine and to implement anti-virus/malware programs effectively. Oftentimes this type of nuisance will disable anything tied to .exe associations.

Thanx Bludgard.. I have done what you suggested. Hopefully it wont find its way back.

(Scare-Ware, I like that, not heard of it before)..

[bludgard]

(Scare-Ware, I like that, not heard of it before)..

I thought I had coined this phrase a while back, but obviously others have defined this. Taken from Wikipedia:

Scareware comprises several classes of scam software with malicious payloads, or of limited or no benefit, that are sold to consumers via certain unethical marketing practices. The selling approach uses social engineering to cause shock, anxiety, or the perception of a threat, generally directed at an unsuspecting user. Some forms of spyware and adware also use scareware tactics.

A tactic frequently used by criminals involves convincing users that a virus has infected their computer, then suggesting that they download (and pay for) fake antivirus software to remove it.^[1] Usually the virus is entirely fictional and the software is non-functional or malware itself.^[2] According to the Anti-Phishing Working Group, the number of scareware packages in circulation rose from 2,850 to 9,287 in the second half of 2008.^[3] In the first half of 2009, the APWG identified a 585% increase in scareware programs.

[Glenvern]

(Scare-Ware, I like that, not heard of it before)..

I thought I had coined this phrase a while back, but obviously others have defined this. Taken from Wikipedia:

Scareware comprises several classes of scam software with malicious payloads, or of limited or no benefit, that are sold to consumers via certain unethical marketing practices. The selling approach uses social engineering to cause shock, anxiety, or the perception of a threat, generally directed at an unsuspecting user. Some forms of spyware and adware also use scareware tactics.

A tactic frequently used by criminals involves convincing users that a virus has infected their computer, then suggesting that they download (and pay for) fake antivirus software to remove it.^[1] Usually the virus is entirely fictional and the software is non-functional or malware itself.^[2] According to the Anti-Phishing Working Group, the number of scareware packages in circulation rose from 2,850 to 9,287 in the second half of 2008.^[3] In the first half of 2009, the APWG identified a 585% increase in scareware programs.

It would appear to be exactly what I had.

Not sure if any software would be able to get rid of it as it disables pretty well averything on the computer including clickable buttons, the only thing it allows you to activate is the purchase button.

So if there is an anti Scareware piece of software out there how do you invoke it?

[bludgard]

So if there is an anti Scareware piece of software out there how do you invoke it?

As far as I know, safe browsing and a reliable backup is the only 100% way of avoiding this parasite. That and/or a virtual environment. A virtual machine is handy when walking on the wild side. It is disposable and offers another level of security....Theoretically.

One must open TaskManager as soon as the screen reaches Desktop. This will give one access to the malware before it gets a chance to start-up. Once you end the process, you will have the ability to access the rest of your machine....

The above has worked for me before while dealing wih this babylon. Right click the taskbar as soon as it is visible. Open TaskManager. Find the suspect process(s) and end it/them immediately. If it takes a few times to find the right one or combination, so be it. After gaining control of your machine, run CCleaner and anti-virus/malware(s).

If you care to private message me the link to this boogieman, I'll run it and let you know my findings.

PLEASE do not make the link public.

The game is afoot....

[Glenvern]

So if there is an anti Scareware piece of software out there how do you invoke it?

As far as I know, safe browsing and a reliable backup is the only 100% way of avoiding this parasite. That and/or a virtual environment. A virtual machine is handy when walking on the wild side. It is disposable and offers another level of security....Theoretically.

One must open TaskManager as soon as the screen reaches Desktop. This will give one access to the malware before it gets a chance to start-up. Once you end the process, you will have the ability to access the rest of your machine....

The above has worked for me before while dealing wih this babylon. Right click the taskbar as soon as it is visible. Open TaskManager. Find the suspect process(s) and end it/them immediately. If it takes a few times to find the right one or combination, so be it. After gaining control of your machine, run CCleaner and anti-virus/malware(s).

If you care to private message me the link to this boogieman, I'll run it and let you know my findings.

PLEASE do not make the link public.

The game is afoot....

Can't give you any links as this (Anti Virus) bug has gone now since I reinstalled Windows.

I'm just tryiing to get my ducks in a row incase it comes back,

I think I have enough ammunition now to fight it if it does.

Thanx anyway for the offer and the help..