Security Certificate Alerts. [Solved]

Marius,
Here is the ESET scan result: (there were 9 detections)
C:\Documents and Settings\Administrator\Desktop\FindAWF.exe Win32/PrcView application
C:\Program Files\Mozilla Firefox\plugins\NPMySrWB.dll Win32/Toolbar.MyWebSearch application
C:\System Volume Information\_restore{DAC9DB1F-8BEF-451E-AB3B-6A67094EA198}\RP3\A0000454.dll a variant of Win32/Toolbar.CrossRider.G application
C:\System Volume Information\_restore{DAC9DB1F-8BEF-451E-AB3B-6A67094EA198}\RP3\A0000455.exe a variant of Win32/Toolbar.CrossRider.E application
C:\System Volume Information\_restore{DAC9DB1F-8BEF-451E-AB3B-6A67094EA198}\RP3\A0000456.dll a variant of Win32/Toolbar.CrossRider.A application
C:\System Volume Information\_restore{DAC9DB1F-8BEF-451E-AB3B-6A67094EA198}\RP3\A0000457.exe a variant of Win32/Toolbar.CrossRider.E application
C:\System Volume Information\_restore{DAC9DB1F-8BEF-451E-AB3B-6A67094EA198}\RP3\A0000460.exe multiple threats
C:\System Volume Information\_restore{DAC9DB1F-8BEF-451E-AB3B-6A67094EA198}\RP4\A0000471.exe Win32/PrcView application

As for downloading and running Farbar's Service Scanner . Again I receive warnings from my NORTON virue protection
that the download you are recommending is not safe to download
I will insert a screen shot of the warning I receive. Please advise. Thank you.

The file is safe and we need its information - please deactivate Norton temporarily and try again. Reactivate Norton when finished.

Here is the FSS log….Jim Farbar Service Scanner Version: 13-09-2013 Ran by [removed] (administrator) on 13-09-2013 at 09:43:03 Running from "C:\Documents and Settings\Administrator\My Documents\Downloads" Microsoft Windows XP Professional Service Pack 3 (X86) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Google.com is accessible. Yahoo.com is accessible. Windows Firewall: ============= Firewall Disabled Policy: ================== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall"=DWORD:0 System Restore: ============ System Restore Disabled Policy: ======================== Security Center: ============ Windows Update: ============ Windows Autoupdate Disabled Policy: ============================ Other Services: ============== File Check: ======== C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit C:\WINDOWS\system32\netman.dll => MD5 is legit C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit C:\WINDOWS\system32\srsvc.dll => MD5 is legit C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit C:\WINDOWS\system32\wscsvc.dll => MD5 is legit C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit C:\WINDOWS\system32\wuauserv.dll => MD5 is legit C:\WINDOWS\system32\qmgr.dll => MD5 is legit C:\WINDOWS\system32\es.dll => MD5 is legit C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit C:\WINDOWS\system32\svchost.exe => MD5 is legit C:\WINDOWS\system32\rpcss.dll => MD5 is legit C:\WINDOWS\system32\services.exe => MD5 is legit Extra List: ======= Gpc(6) IPSec(4) NetBT(5) PSched(7) SYMTDI(12) Tcpip(3) 0x0D0000000A000000040000000100000002000000030000000C0000000B00000009000000080000 000D000000050000000600000007000000 **** End of log ****

System File Check

For Windows XP:

• Press the Windows- and the R-key simultanously.
• Within the text box that jus opened, write cmd and hit Enter.

For Windows Vista/7:

• Press the Windows key to open the start menu.
• Don´t highlight anything, just write cmd.
• The start menu will offer you an entry named cmd.
• Right click it and select "run as administrator"

Within the opening window, write the following:

sfc /scannow

(See the blank within).

• Hit enter. Your system will be checked for damaged system files.
• Tell me the result of that scan in here (as the tool produces no log).

Hi, I ran " sfc /scannow". It finished without incident or error. Jim

Windows Repair (all-in-one)

Please download Windows Repair (all in one) from here.

Install the program then run it.

Go to step 2 and allow it to run Disk check.

[external image: Posted Image]

Once that is done then go to step 3 and allow it to run SFC by clicking Do it

[external image: Posted Image]


On the Start Repairs tab, click Start.
Within the opening window, hit unselect all.
Check only the following:

• Reset Registry Permissions
• Reset File Permissions
• Register System Files
• Repair Windows Firewall
• Repair Windows Updates

then click on Start

DON'T use the computer while each scan is in progress.

Restart may be needed to finish the repair procedure.

Let me know how that worked out for you.

I hate to tell you, I still have the original security warnings issue, after executing all above. I ran "Windows Repair (all-in-one)" and two times during repair process a NORTON security pop-up advised me that I did not need to turn on Microsoft's firewall because NORTON was already providing Firewall Protection. I elected not to turn on Microsoft F/W on both occasions. I was thinking that change might correct the false security warning, but not so.

If the Norton firewall is running, disable the windows internal one and tell me if that worked for you.

reference: "If the Norton firewall is running, disable the windows internal one and tell me if that worked for you." I "disabled the windows internal one" but it did not change anything, I still get the same security warnings as at the beginning. Maybe I should switch OFF NORTON and turn ON WINDOWS (virus protect & F/W).

Download and run this FixIt! by Microsoft:

http://go.microsoft.com/?linkid=9646978

Tell me if that worked for you.

I downloaded and ran FixIt! by Microsoft: I performed all resets, but it did not fix the security alerts problem.

OK, then be patient, please. I have to seek further advice to help you.

On which search engine are you redirected when clicking an underlined word in google chrome?

Re: "On which search engine are you redirected when clicking an underlined word in google chrome?" It seems that I am not redirected when I use Google to search or if I click on underlined word. It does not matter what search engine I use (windows explorer or Google) I always get similar security alert warnings. I get them when I attempt to browse Bank "A" but not Bank "B". I will also say I have a second Windows XP PC nearby; it is wired to my same router. I do not have any "security alert warnings" when using the second xp PC. One additional symptom I did not mention. Occasionally I get from windows: "Script Error, Do you Want to continue running scripts". I ignore the warning and continue. I looked into it and found it was ok to turn off warnings and turn off warning report which I did. After turning warning off in settings, script warnings still pop up on a few occasions. Thanks, Jim

OK, then we should try something else.


Delete junk with adwCleaner


Please download AdwCleaner to your desktop.

• Run adwcleaner.exe
• Hit Scan and wait for the scan to finish.
• Confirm the message but don´t uncheck anything.
• Hit Delete
• When the run is finished, it will open up a text file
• Please post its contents within your next reply
• You´ll find the log file at C:\AdwCleaner[S1].txt also

SecurityCheck

Please download SecurityCheck: LINK1 LINK2

• Save it to your desktop, start it and follow the instructions in the window.
• After the scan finished the (checkup.txt) will open. Copy its content to your thread.