Ask Experts Questions for FREE Help !
Ask

Help! Virus on My computer!

Asked Apr 26, 2010, 07:20 PM — 12 Answers
My husband was fiddling around on the internet. He clicked on a website and one of those pop ups came up about "warning malicious stuff on your computer blah blah blah click here to scan blah blah"
I don't know what he did after that but next thing you know we have an icon on our computer called "My Security Engine".
We can still work around the pop up but it's dead center on the screen.
We ran malware bytes (I think that's what it's called) and it dected something and it seemed like it was gone after we quarantined.
Next day, there it is back again.
Also when we google stuff it somehow redirects to fake websites.
So does anyone know how I can get rid of this?
It's called My Security Engine.
I am currently in safe mode right now.
I have no clue what to do, but I can follow directions well.
Oh after it came up the next day, I ran malware bytes antimalware on safe mode and it detected nothing. I also cleaned up everything with cc cleaner.
Please somebody help! Thanks...

12 Answers
missk's Avatar
missk Posts: 476, Reputation: 223
Full Member
 
#11

Apr 27, 2010, 05:33 AM
Andy, I think it did detect My Security Engine, But I am not for positive.
KeepIt SimpleStupid, I can use system restore, and I thought about that, but last time something like this happened it didn't work. I would try it, but......I'm virus free! YaY!
So here is what I did. I don't know why I did this, but it worked.
I went into safe mode and I uninstalled malwarebytes. (I just downloaded the latest version after all this happened, but for some reason it wasn't working)
So-I uninstalled malwarebytes, then I downloaded it again.
I ran malwarebytes.
It detected 70 items! And yes this time one of those was My Security Engine thank goodness!
I hope what I'm saying makes since in case other people read this....
Thanks for your answers...
Helpful
YourSupportAgent's Avatar
YourSupportAgent Posts: 1, Reputation: 10
New Member
 
#12

Apr 27, 2010, 04:00 PM
Hi missk,

You have done right by ignoring these pop ups. Clicking on them will only make things worse.

Visit Windows Live OneCare and run the "FULL SERVICE SCAN". This tool is provided by Microsoft FREE of charge and it will scan and remove any infections. The Full service scan will also give your PC a tune up.

Microsoft also offers free support for removal of infections if the scan fails. You can call toll-free/ free of charge @ 1-866-727-2338

Many customers have been pleased with their service.

If you have any other questions, do not hesitate to ask. )
Helpful
AskME4's Avatar
AskME4 Posts: 16, Reputation: 5
Junior Member
 
#13

Jan 12, 2012, 06:32 AM
Hello,
For Manual removing:

Stop these My Security Engine processes:
MS345d.exe
PE.exe
Disable these My Security Engine DLL files:
pal.dll
PE.dll
gid.dll
exec.dll
energy.dll
ANTIGEN.dll
CLSV.dll
mozcrt19.dll
sqlite3.dll
Remove these My Security Engine Registry Entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run “%CommonAppData%\e4a12b7\MySecurityEngine.exeâ€
HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\MS345d.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" ="http://findgala.com/?&uid=195&q={searchTerms}"
HKEY_CURRENT_USER\Software\Classes\Software\Micros oft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=195&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run "My Security Engine"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=195&q={searchTerms}"
Remove these My Security Engine files:
c:\Documents and Settings\All Users\Application Data\345d567
c:\Documents and Settings\All Users\Application Data\345d567\2322.mof
c:\Documents and Settings\All Users\Application Data\345d567\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\345d567\MS345d.exe
c:\Documents and Settings\All Users\Application Data\345d567\MSE.ico
c:\Documents and Settings\All Users\Application Data\345d567\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\345d567\BackUp\
c:\Documents and Settings\All Users\Application Data\345d567\MSESys\
c:\Documents and Settings\All Users\Application Data\345d567\MSESys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\345d567\Quarantine Items
c:\Documents and Settings\All Users\Application Data\MSHOLE\
c:\Documents and Settings\All Users\Application Data\MSHOLE\MSJKEJCCE.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\My Security Engine.lnk
%UserProfile%\Application Data\My Security Engine\
%UserProfile%\Application Data\My Security Engine\cookies.sqlite
%UserProfile%\Application Data\My Security Engine\Instructions.ini
%UserProfile%\Desktop\My Security Engine.lnk
%UserProfile%\Recent\ANTIGEN.dll
%UserProfile%\Recent\CLSV.dll
%UserProfile%\Recent\eb.sys
%UserProfile%\Recent\energy.dll
%UserProfile%\Recent\exec.dll
%UserProfile%\Recent\exec.drv
%UserProfile%\Recent\exec.tmp
%UserProfile%\Recent\gid.dll
%UserProfile%\Recent\kernel32.sys
%UserProfile%\Recent\kernel32.tmp
%UserProfile%\Recent\pal.dll
%UserProfile%\Recent\PE.dll
%UserProfile%\Recent\PE.exe
%UserProfile%\Recent\ppal.drv
%UserProfile%\Recent\runddlkey.drv
%UserProfile%\Recent\SICKBOY.sys
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\My Security Engine.lnk
%UserProfile%\Start Menu\Programs\My Security Engine.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml
%Documents and Settings%\All Users\Application Data\e4a12b7
%Temp%\del.bat

If you have problems removing it by your self, try anti-spyware software. There are a lot of paid or free anti-spyware applications over internet.. Read more about My Security Engine

Helpful

Not your question? Ask your question View similar questions

 
Thread Tools Search this Thread
Search this Thread:

Advanced Search

Add your answer here.

Remove Text Formatting

Undo
Redo
 
Decrease Size
Increase Size
Bold
Italic
Underline
Align Left
Align Center
Align Right
Ordered List
Unordered List
Decrease Indent
Increase Indent
Insert Email Link
Wrap [QUOTE] tags around selected text
Wrap [CODE] tags around selected text
Wrap [HTML] tags around selected text
Wrap [PHP] tags around selected text
Wrap [YOUTUBE] tags around selected text
Notification Type:



Check out some similar questions!

My Computer Has a Virus [ 2 Answers ]

My laptop has a virus. What is my best course of action to try to remedy the problem?

There's a virus on my computer what do I do! [ 4 Answers ]

Ok a few days ago my little sister started playing some games online and didn't pay attention t her though. When I got on the computer it was freezing. Now its been like this for two weeks there are many pop-ups of advertisements like redCure, shop or stop zilla and etc never seen in that in my...

Virus on computer [ 3 Answers ]

How do I delete viruses on my computer?

I think I have a Computer virus but it won't go away. [ 9 Answers ]

I've just recently gotten a virus (I'll call it a virus because I don't know all of the terms to use). Every time I run a scan with ad-aware (SE personal), I find new cirtical objects. I've tried keeping them in quarentine, and also deleting the quarentine file. Every time I turn my computer back...

Computer Virus [ 4 Answers ]

I have a trojan on my PC called generic.cd it is in the file icc.dll in Windows. I am using McAfee anti virus software. The trojan cannot be cleaned and the file cannot be deleted. I have quarantened the trojan but when I rescan the PC it has returned. I tried the McAfee online help but without...


View more Spyware, Viruses, etc. questions Search