Popup from MSE

[huffman]

This just started yesterday and is very irritating. I am running Windows 7 Home 64 bit and Microsoft Security Essentials as my antivirus.

I keep getting the following popup about every 10 seconds.



Eventually the popup does stop but probably not for at least 30 minutes.

I have run full scans with MSE and it found a few viruses. These were in programs I had had downloaded but NOT installed over 6 months ago and why a virus would show up now beats the heck out of me. At any rate I deleted these files completely since none of them were installed.

After that I am still getting the popup as shown above.

Does anyone have a clue how to stop this. I am not even sure reinstalling Windows would help.

 

[huffman]

Crap now I get this when I tried to run a full scan with MSE.



The popup comes up after about 10 minutes into the full scan. I am not sure what it means since MSE seems to still be scanning.

I can see this is going to be a PITA.

 

[Victek]

I have run full scans with MSE and it found a few viruses.

After that I am still getting the popup as shown above.

Time for a second opinion. Try MalwareBytes AntiMalware or HitmanPro.

 

[UsernameIssues]

You might also try Process Explorer with the VirusTotal option turned on.

See this post: http://www.sevenforums.com/system-security/320426-process-explorer-16-a.html

 

[huffman]

After running MSE full mode several times a few days ago and deleting everything it found, I thought I had it fixed, but this morning both were back.

I then ran Malwarebytes and it found 84 items and I deleted those completely from my PC.

Again I thought it was fix, but after a few reboots they are back again.

I have done some research on this and it seems to have become a problem for a lot of people after the last Windows 7 update. NO ONE seems to know which update caused the problem and I am not sure which updates were the last ones installed. I guess I could find out but I would hope Microsoft would fix this quickly.

If anyone has more suggestion I am willing to try most anything.

 

[Victek]

After running MSE full mode several times a few days ago and deleting everything it found, I thought I had it fixed, but this morning both were back.

I then ran Malwarebytes and it found 84 items and I deleted those completely from my PC.

Again I thought it was fix, but after a few reboots they are back again.

When you say "they were back again" can you be more specific? What items are MBAM and MSE finding? Can you post screenshots of scan results?

 

[Borg 386]

Probably wouldn't hurt to run TDSSKiller to make sure you don't have a rootkit. That is one of the reasons some malware keeps coming back.

TDSSKiller Download

NOTE: When running TDSSKiller, launch the program, click on the blue text "Change Parameters" & check the box marked "Detect TDLFS File system." Click OK & then run the scan.

Another program you can run in AdwCleaner.

AdwCleaner Download

 

[huffman]

When I run Malwarebytes, it detects "server.exe" which I consider a hazard. I deleted it and then I ran "tdsskiller.exe" and followed your instructions. It also detected server.exe but does NOT consider it as a hazard. At least it does NOT let me deleted it.

What is really weird is I ran tdsskiller.exe after using Malwarebytes to delete server.exe and it still detected it.

 

[Victek]

When I run Malwarebytes, it detects "server.exe" which I consider a hazard. I deleted it and then I ran "tdsskiller.exe" and followed your instructions. It also detected server.exe but does NOT consider it as a hazard. At least it does NOT let me deleted it.

What is really weird is I ran tdsskiller.exe after using Malwarebytes to delete server.exe and it still detected it.

Try running MBAM and TDSSkiller in SAFE mode.

 

[Borg 386]

Some information on this file. It looks like it could be a trojan. Googling it brings up multiple instances of this possibility.

server.exe Windows process - What is it?

SuperAntiSpyware claims it can remove it, so you may want to give that a try. You can also opt to d/l the portable version, which will run from a USB drive.

SERVER.EXE - Trojan.Agent/Gen-Injector | SUPERAntiSpyware

SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

Note for portable version:

Please note : The scanner is saved under a random filename so that malware infections won't block its execution.