MSE Trojan Cleanup Prompt

I apologize for the length of this. I just feel it is important to give all the details as they may help with coming up with a solution. I thank anyone in advance for lending me your time in helping me fix this problem.
=============================================================

I've got a bit of a problem with my system in that I am getting a very odd Microsoft Security Essentials message that I am trying to figure out.

To start, today upon start-up and after bit of browsing my computer was fine. After this problem occurred. I retraced my steps and the only things that I've done on my computer today are...

1) Let Adobe Flash update itself
2) Download and email several pictures from my Droid SD card for a college project.

Since I really haven't done anything abnormal today (Install any programs, etc.) I have to believe that one of those two actions caused all this to happen.

I noticed that when I went on YouTube or any other site that required the use of Flash, that I got a 'An Error has Occurred" prompt on the video. I then uninstalled and re-installed all my Adobe Flash programs but I still have the same problem. SEE EDIT#2

Now, here is the real problem....

Upon start up of my computer, I get a Microsoft Security Essentials (MSE) dialog box in the lower right hand corner of my screen saying that there is a "Potential Threat" that's been suspended by MSE.

I've attached photo #1 showing that prompt.

After clicking 'Show Details' I then get the 2nd dialog box that shows the details of the alert.

I've attached photo #2 showing that box.

From there it asks if you'd like to 'Apply Actions' in which it brings you to the 3rd dialog box that asks you to "Download and Run Windows Defender Offline on your PC" to get rid of the thread.


This is where I've stopped as it seems like a classic ploy to have me download something even nastier. I may just be paranoid, but it raised a red flag for me.


If I do choose to ignore the last prompt it takes me to yet another dialog saying that the threat has been removed successfully and that a re-boot is needed. Once I go ahead and do that, I'm right back at square one as it says that the same thread is there once again.

I normally run Norton Antivirus as it has successfully kept away all the smaller bugs thus far but I fear a bigger one may have gotten through this time. SEE EDIT #1


If anyone would happen to be able to lend me some assistance, I would be very grateful.

Best Regards


Edit #1: I forgot to mention that I opened up Norton and did a complete system scan in which no viruses/trojans, etc. were found so that has me a bit stumped as well.

Edit #2: After using a test YouTube link via FaceBook, the video will play properly. I was able to further search via YouTube and other videos did indeed play so thankfully that problem seems to have resolved itself.

From the screen shots you've provided, it appears to be a genuine MSE alert. However, the bad guys have become very skillful in making their alerts look like the real thing.

Windows Defender Offline is a real Microsoft product and it can be obtained directly from the WDO website. This product can (sometimes) find malware that other anti-malware products might miss. (No anti-malware product is 100% effective 100% of the time. If there was such a product we'd all be using it. That's why it's a good idea to have a few other on-demand scanners like Malwarebytes, Superantispyware, Hitman Pro, ESET, WDO, etc to check if the primary product might have missed something.) Microsoft warns that WDO should be downloaded and created on a computer that is not suspected of being infected.

What is Windows Defender Offline?

The fact that you believe the problem is now corrected should not lull you into a false sense of security. Depending on how the malware was written, it might run immediately, or it might run at unexpected times. If it was my computer I'd run as many on-demand scanners as I could just to maximize the probablility that the computer really is clean.

Thank you for the tip marsmimar. I'm gonna boot up my laptop and get the software downloaded here shortly.

At the moment the prompt does not come up for me as I uninstalled and reinstalled MSE and the prompt did not show up after restarting my computer a few times. I'm going to still run that program though to see.

Also on a separate note. It seems as if the Flash problems have come up again as I now get the 'An Error Has Occurred' message when viewing YouTube, etc. I've installed and re-installed Flash a handful of times including going to an older 10.X version (I believe the current one is 11.X) and still nothing.

Could the possible malware be causing that to occur?

Adobe Flash is a popular magnet for malware writers because so many computers have it installed. It's also possible that Flash wasn't fully uninstalled whenever you uninstalled/reinstalled in the past. If any Flash remnants were left on your computer they could prevent a clean reinstall. Adobe has an uninstaller that's supposed to remove all traces of Flash.

Flash Player Help | Uninstall Flash Player | Windows

I'd run it at least a couple of times just to make sure. I wouldn't use an older version of Flash. Older versions are susceptible to all kinds of malware. The latest version (11.3.300.257) can be obtained here. Don't forget to uncheck any unwanted "stuff" like toolbars, browsers, etc.

Adobe - Install Adobe Flash Player

It's very possible that there's still malware on the computer. If you haven't tried Windows Defender Offline I'd recommend it. I've also had good results with Hitman Pro. It uses the data bases of 5 different companies during its scans.

Hitman Pro 3 - SurfRight

Unfortunately, if a computer gets infected, you can never be 100% sure that all of the malware has been removed. Even if you run 8 different scans, and even if they all come back clean, the 9th or 10th scan could reveal malware. But let's take it one step at a time. If Hitman Pro and WDO don't help there are some MSMVP security experts who hang out on this Forum who would be available for additional help.