Expert: Brian Benosky - 11/14/2009

Question
QUESTION: When utilizing the internet on our desktop, it is an HP Pavilion a1700n, it looks as if another web page is trying to open.  There is a box which flashes up and disappears, it is very quick so I can't even see what is trying to open.  Any ideas??

Also, this is the computer the kids use and our virus protection is about to expire.  We usually go with Norton but we seem to still encounter problems, is there anything better?  Cheaper?

Thanks
Pam

ANSWER: Hi Pam

Let's check first to see if there is an infection and remove that before we take on the Norton problem.  Please download Malwarebytes' Anti-Malware to your desktop from here:

http://www.besttechie.net/tools/mbam-setup.exe

Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to
o Update Malwarebytes' Anti-Malware
* then click Finish.
* If an update is found, it will download and install the latest version.
* Click to run a Full Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.  Post me that log and a HijackThis scan log (see below) in your follow-up.

Download HijackThis to your desktop from here:
http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
Make sure you close EVERY open window and ALL browser windows. The only thing that should be open is the HijackThis program.
Double-click on the file you just downloaded.
Click on the "Install" button.
Upon install, HijackThis should open for you.
Should it not open, go to C:\Program Files\Trend Micro\HijackThis and double click on HijackThis.exe
Choose 'Do a system scan and save a log file'.
Copy the text file which opens in Notepad and paste it into your follow-up with the Malwarebytes' scan log.

Brian

---------- FOLLOW-UP ----------

QUESTION: Brian,

I have already sent you the HJT scan but had trouble with the Malwarebytes scan, all that info is in a previous email though.  I think I figured out what keeps trying to open when we use the internet, I am fairly certain its the taskmgr.

I don't know if this will help to solve the problem but thought I should let you know.  Thanks for the help.


Pam

Answer
Hi Pam

I'm sorry that this is the first opportunity I've had all week to answer questions.  It's been a very hectic week, and the Holidays are coming up too quickly!  Anyway, I've had a look at the HJT log, and I see a few entries that should be addressed.  Do you have Parental Controls enabled on this computer?  Also, is the account you are working in a Standard User or an Administrator?  This could be the reason Malwarebytes' did not run properly.  The HJT scan was done in Safe Mode, but I'd like for you to save a scan normally and post me that.  I'm not sure why Task Manager would be opening by itself.  Can you still access it using Ctrl-Alt-Del?

Brian