Malware - "Congratulations visitor..." popup, malwarebytes s

I ran Kaspersky virus scan again. Here's the log. Autoscan: completed 1 day ago (events: 3, objects: 580590, time: 1 day 02:13:50) 3/27/2011 3:11:25 PM Processing error C:\Documents and Settings\solitario\My Documents\MSV Backup\MSV Admin\Weekly Status Report\Weekly Status Report\Corporate Development Status 20080418R1.doc Read error 3/26/2011 9:21:23 PM Processing error C:\Documents and Settings\solitario\My Documents\MSV Backup\MSV Admin\Weekly Status Report\Weekly Status Report\Corporate Development Status 20080418R1.doc Read error 3/26/2011 5:03:17 PM Task started Autoscan: stopped 23 hours ago (events: 2, objects: 3, time: 00:00:43) 3/28/2011 9:26:06 AM Task stopped 3/28/2011 9:25:22 AM Task started Autoscan: completed 8 hours ago (events: 5, objects: 281503, time: 06:09:27) 3/28/2011 5:48:11 PM Task started 3/28/2011 7:09:23 PM Processing error C:\Documents and Settings\solitario\My Documents\MSV Backup\MSV Admin\Weekly Status Report\Weekly Status Report\Corporate Development Status 20080418R1.doc Read error 3/28/2011 9:32:10 PM Processing error c:\documents and settings\solitario\Application Data\Mozilla\Firefox\Profiles\w97afgrq.default\places.sqlite-shm Read error 3/28/2011 9:55:09 PM Processing error C:\Documents and Settings\solitario\My Documents\MSV Backup\MSV Admin\Weekly Status Report\Weekly Status Report\Corporate Development Status 20080418R1.doc Read error 3/28/2011 11:57:39 PM Task completed

Hi solo58,

I see no malware in your logs. I'm not suggesting you aren't experiencing any problems though.

Let's see if your install of MSE is possibly corrupted as you did have some problems with it early in the cleaning process.

Download a new set of installation files from HERE. Do not install it yet.

Disconnect from the internet completely (uplug the modem it you need to)

You may be able to uninstall MSE from from the Start menu

• Click your start button
• highlight All programs
• locate Microsoft Security Essentials and highlight it
• If you now see Uninstall Microsoft Security Essentials, click on it and folow the prompts

If you do not have the option to uninstall it as above you can goo to add/remove programs and uninstall it there.

Before you reinstall it just open some programs and see if the computer is any better. Do not connect to the internet at this time.

Reinstall MSE then reconnect to the internet.

Any better?

I reinstalled MSE. It took forever to update, ran a scan. No errors detected. The machine is still running slow. I recently did a clean re-install of windows and all my applications.

Hi solo58, How was the computer with MSE uninstalled? When you reinstalled windows what kind of disk did you use? Was it a retail version of XP or an OEM version?

The disk was from Dell. But the computer ran well …until the viruses…

Hi solo58, If it was from Dell it may also have come with a trial version of an antivirus program. Do you know if this was the case? Did you try the computer after uninstalling MSE?

Hi Oldman, Yes, I think the machine came with a trial version of McAfee. I uninstalled it with Revo Uninstaller. I played around with the machine after I removed MSE. It wasn't any faster. I also noted that the boot up time is very slow also.

Hi solo58, How was the computer after you reinstalled windows? Revo is usually a pretty good uninstaller did you have any problems prior to the infection and when did you first notice the problems you are now having?

Hi Old man, I had no problems before the infection. Now, though it looks like we've cleaned it, it runs like a slug, sound is crackly…even at startup…. I'm wondering if I shouldn't simply rebuild again. This has taken quite a while to fix.

Hi solo58, Reinstalling may be the way to go. The infection may have corrupted some system files. Let me know how you want to proceed. I can link you some very good instructions and tips for reinstalling if you wish.

ok, let's do that.

Hi solo58,

The first thing you want to do is backup anything important that you want to keep. Any programs that are free and easily downloaded from a reliable source do not need to be backed up.

Here is a step by step guide you can follow.

How to Reformat and Reinstall your Operating System

Here are some additional steps you can do after the Windows reinstall. You can download these and save them to a CD or other suitable storage media. Note: the service pack if it's required should be installed after removing the McAfee that came with the computer and before installing your new antivirus program.

Programs you willl need

If your Windows disk is less than XP Service Pack 3 you can get a copy from here. This page will say that this installation package is intended for IT professionals and developers. However, you can safely download this file. Install this if you need to before you install your security programs.

You can get the Mcafee removal tool and instructions from HERE Run this tool after you uninstall the program.

Basic security consists of 1 antivirus program, 1 resident antispyware program, 1 on demand antispyware program and a firewall.

* If you are behind a router Windows firewall should be fine. Otherwise a 3rd party firewall with outbound monitoring is recommended.

Click FIREWALL for tips, reviews and links to good, free and paid for firewalls. (Note: Zone Alarm is becoming bloatware,IMO)

For a free antivirus program you can download and install one of these

Avast
Help and support can be found here Avast Forum
AVG
Help and support can be found here AVG Forum
Antivir PersonalEditionClassic
Help and support can be found here Avira Personal Support Forum
MicroSoft Security Essentials
Help and Support

Resident antispyware (there are others)

Windows Defender OR Winpatrol

On demand antimalware (this one is very good)

Malwarebytes Anti-Malware

Finally reinstall any programs that you backed up.

-More tips and programs can be found HERE

Install the Service Pack and your security programs before connecting to the internet.

Post back if you have any questions or problems.

Good luck.

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.