Microsoft Security Warning...legit? (Antivirus 2009)

[Doctordestiny]

A virus scan just ran on my computer. I didn't ask for it; it just happened when I turned on my computer. It says it's found three threats and says it's strongly recommended that they be removed immediately. It shows a shield logo sort of thing with red, green, blue and yellow quadrants. I hesitate to click to have them removed until I know that this is legit. I use AVG virus software.

[ricosuave]

can you post a screenshot?

generally, if its avg its pretty legit, but I dont know what you mean by a MS security warning. there was a critial update released this week for IE that you should get if you havent already done so.

[Doctordestiny]

How do I post a screenshot? this wasn't an AVG scan but it says Microsoft. It looks legit but I'm hesitant to do anything until I know.

[photon]

Throw your computer out the window, that one is one of the nastiest I've ever had to deal with:

http://www.bleepingcomputer.com/malw...antivirus-2009

NOT legit.

EDIT: Don't just hit cancel or whatever, shut down your browser or end the task in task manager.

Hopefully it's just a popup and you don't actually have it. If you do, God have mercy on your soul.

[Doctordestiny]

So what do I really do with it? Do I run Remove Antivirus 2009 on that site?

[photon]

Does that pop up every time you boot your computer? If it does then you are probably infected, though I can't vouch that that link I provided is a good removal tool or not.

[Doctordestiny]

I haven't rebooted my computer. Should I try that?

[PsYcNeT]

This is a symptom of a security hole in Internet Explorer Microsoft found the other week. They are rushing to get it fixed.

It has NOT been fixed.

What popped up is malware.

The program at http://www.malwarebytes.org/ will remove any malware you can get until Microsoft fixes it. Never press anything on the window that pops up, and if it opens again, close it immediately.

[Doctordestiny]

Thanks. I knew I'd get help here pretty fast.

[PsYcNeT]

Yeah, we have a decent smattering of nerds here

[Dion]

Originally Posted by PsYcNeT

This is a symptom of a security hole in Internet Explorer Microsoft found the other week. They are rushing to get it fixed.

It has NOT been fixed.

It HAS been fixed with a security update. Do your updates

http://www.microsoft.com/technet/sec.../MS08-078.mspx

[T@T]

Originally Posted by photon

Throw your computer out the window, that one is one of the nastiest I've ever had to deal with:

http://www.bleepingcomputer.com/malw...antivirus-2009

NOT legit.

EDIT: Don't just hit cancel or whatever, shut down your browser or end the task in task manager.

Hopefully it's just a popup and you don't actually have it. If you do, God have mercy on your soul.

Yeah, I got that damn thing from facebook of all places, fortunately spywaredocter got rid of it, it cost me major grief for 2 days..good to see MS get the fix out.

[ken0042]

Is that why Facebook was down yesterday?

My g/f got popup as well from Friendster. I wonder if they are targetting social networking sites. I'll also have to take a closer look at the laptop she was using- make sure it isn't infected.

[Engine09]

I had the "Antivirus 2009" garbage popping up on my laptop constantly, even after closing all windows I would still get the prompt asking if you wanted to install the program.

Tried a few of the free spyware removal programs, seems like it was Spybot that finally cleaned things up for me.

[Doctordestiny]

Okay, I shut down the computer (my home computer) last night. I plan to work on fixing this problem tonight. In rereading this thread today I'm thinking that if I do the update and run the malware program that was suggested, this may remedy my problem. First I'll see if the problem comes up again upon reboot. Is that what I should do????

[PsYcNeT]

I would recommend running a malware program, then installing the fix, then running the malware program again.

Just to be safe of course.

[Draug]

Originally Posted by ken0042

Is that why Facebook was down yesterday?

My g/f got popup as well from Friendster. I wonder if they are targetting social networking sites. I'll also have to take a closer look at the laptop she was using- make sure it isn't infected.

My Uncle got it from YouTube on the weekend....

[Hemi-Cuda]

the funny thing was, after the security hole was discovered Microsoft was actually advising people to use FireFox instead while they got it fixed

so the moral of the story is, use Firefox, screw IE and all it's holes

[Dion]

Originally Posted by Hemi-Cuda

the funny thing was, after the security hole was discovered Microsoft was actually advising people to use FireFox instead while they got it fixed

so the moral of the story is, use Firefox, screw IE and all it's holes

I've always used IE and have never had a problem with it

[ken0042]

Originally Posted by Dion

It HAS been fixed with a security update. Do your updates

http://www.microsoft.com/technet/sec.../MS08-078.mspx

Looks like even though we have that update installed, we are still getting the Antivirus 2009 popup coming up. In case this is happening to anybody else, I have a slightly different fix for you.

Add the following sites to your list of restricted sites. (Within IE- Tools; Internet Options; Security; Restricted Sites; Sites)

*.liveclicks.com
*.bestantivirusscan.com
*.webscannertools.com
*.livesecurityinfo.com
*.antivirus-best.com
*.secureclick1.com
*.antivirusonlivescan.com
*.antivirus-premium-scan.com
*.googlescanners-360.com
*.premiumlivescan.com
*.internetquarantinesite.com

The liveclicks.com one is where tonight's install of Antivirus 2009 was coming from, the others I got from looking for ways to get rid of it.

As others have said, either close IE using your task manager, or reboot your computer without closing the window. Do not click on OK or even on cancel.