Vista - Personal antivirus pop up

The kids have been using my computer, and I may have picked up a virus. I
don'tknow if it came through windows mail or one of their facebook deals,
but I'll ask for help here since I'm not a facebook user. There is a
'Personal Antivirus' icon on my desktop as of 8/11/09 at 12:42 EST according
to properties. Also on my bottom toolbar or menu thing. Tried using
'uninstall program' from control panel, but personal antivirus not found.
The icon is a little yellow or gold shield with diagonal bars on it, looking
kind of official, but I don't think so. Also started getting a pop up on
bottom right of screen about a Trojan win32, but I think it's just to scare
me into something. It offers block or ignore, so I ignore, and it's back in
a couple of minutes. Any suggestions, aside from the obvious 'keep the kids
off the computer'? Thanks, Tom

You are seeing the effects of a hijackware infection! cf.
http://www.theregister.co.uk/2009/08...reware_market/

NB: While MBAM may be able to remove this, there's no guarantee that it will
remove all of the "drive by" infections (e.g., Vundo; SDBot-variants) that
came along for the ride!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/...moving_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachi...php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002


Tom Russell wrote:

Not every forum wants you to post a HJT log right off the bat!

DL wrote:
<snip><snip>