Solved Windows Security Center turning off, Looks like Bidvertiser

Hi. I need help.
My Windows 7 Home Premium 64-bit laptop is infected with some virus/malware.

The Windows Security Center is turned of. If I start it from Services, it gets turned off immediately or after some time.
Clicking on Google search results randomly takes me to advertisement sites after a couple of automatic redirects. This does not happen all the time, but often. The first redirect normally goes to secure.bidvertiser.com/....

This infection is the result of my own unbelievable stupidity. Last Sunday I was looking for a calculator on google and opened some of the results in new tabs. One of these clicks directly downloaded a zip file which had a google_photography_rates.exe file in it. In spite of the knowing the obvious thing to do, I went ahead and installed the file. The installation file immediately disappeared and within minutes Microsoft Security Essentials and Windows Security Center shut down.

Since then I have done the following:
1. In safe mode, run TDSSKiller
2. Run Malware Bytes Anti-Malware as administrator (No infections found)
3. Run Spybot - Search & Destroy as administrator (removed 2 registry entries that disable Windows Security Center. But these registry values reappear automatically after some time even without a reboot.)
4. Run SUPERAntiSpyware Free Edition as administrator (removed a lot of tracking cookies)
5. Run Norton 360 (No infections found)
6. Run Microsoft Malicious Software Removal Tool (No infections found)
7. Run HiJackThis (results attached)
8. Run RKill (results attached)

But the problem still remains. Please help.

I literally had the sam excact virus on a friends computer. After messing with it for almost an entire day, it would seem to go bye bye and then come back and become a devil. Even resulted in bsod that would not allow anything to boot. Our only way out was to backup the files an factory reset:/ i am not sure how to solve the malware and i went through everything. Safe mode, cmd, used all different malware scans, replaced with security center registry keys. It damages the computer to much. Once i got it into system restore we scanned and removed viruses this time the viruses left, but damaged so much. For example the security center ad other things we performed a factory restore. :/ i don't know man maybe someone else can find the solution but i couldn't. Avast found a rootkit over and over and kept blocking it but couldn't delete it. I tried everything. Hitman pro worked the best and removed the malware at , its just the virus leaves the pc too damaged. Best bet is to run a factory reset and or a clean install. If u need instructions be sure to ask.

Backing Up

Skylais said:

I literally had the sam excact virus on a friends computer. After messing with it for almost an entire day, it would seem to go bye bye and then come back and become a devil. Even resulted in bsod that would not allow anything to boot. Our only way out was to backup the files an factory reset:/ i am not sure how to solve the malware and i went through everything. Safe mode, cmd, used all different malware scans, replaced with security center registry keys. It damages the computer to much. Once i got it into system restore we scanned and removed viruses this time the viruses left, but damaged so much. For example the security center ad other things we performed a factory restore. :/ i don't know man maybe someone else can find the solution but i couldn't. Avast found a rootkit over and over and kept blocking it but couldn't delete it. I tried everything. Hitman pro worked the best and removed the malware at , its just the virus leaves the pc too damaged. Best bet is to run a factory reset and or a clean install. If u need instructions be sure to ask.

Click to expand...

Thanks for the warning Skylais. Am backing up all my data right now before any further damage is done.

Download and run OTL

Download http://oldtimer.geekstogo.com/OTL.exe by Old Timer and save it to your Desktop.

• Double click on OTL.exe to run it.
• Under Output, ensure that Minimal Output is selected.
• Under Extra Registry section, select Use SafeList.
• Click the Scan All Users checkbox.
• Click on Run Scan at the top left hand corner.
• When done, two Notepad files will open.
  • OTL.txt <-- Will be opened and the that I need posted back here
  • Extra.txt <-- Will be minimized - save this one on your desktop in case I ask for it later
• Please post the contents of OTL.txt in your next reply.

OTL results

shawn77 said:

Download and run OTL

Download http://oldtimer.geekstogo.com/OTL.exe by Old Timer and save it to your Desktop.

• Double click on OTL.exe to run it.
• Under Output, ensure that Minimal Output is selected.
• Under Extra Registry section, select Use SafeList.
• Click the Scan All Users checkbox.
• Click on Run Scan at the top left hand corner.
• When done, two Notepad files will open.
  • OTL.txt <-- Will be opened and the that I need posted back here
  • Extra.txt <-- Will be minimized - save this one on your desktop in case I ask for it later
• Please post the contents of OTL.txt in your next reply.

Click to expand...

Thanks so much shawn77. The OTL.txt is attached.

Copy and Paste the following code into the textbox.

:OTL
:Files
C:\windows\SysWow64\ir50_qc8.dll
ipconfig /flushdns /c
:Commands
[PURITY]
[emptyjava]
[EMPTYFLASH]

Click to expand...

Then click the Run Fix button at the top.

• Click
  
  .
• OTL may ask to reboot the machine. Please do so if asked.
  On reboot,you should be able to start security center service

shawn77 said:

Copy and Paste the following code into the

textbox.

:OTL
:Files
C:\windows\SysWow64\ir50_qc8.dll
ipconfig /flushdns /c
:Commands
[PURITY]
[emptyjava]
[EMPTYFLASH]

Click to expand...

Then click the Run Fix button at the top.

• Click
  
  .
• OTL may ask to reboot the machine. Please do so if asked.
  On reboot,you should be able to start security center service

Click to expand...

Thank you Shawn77! You are a genius!
Did exactly as told. No reboot was required but restarted the computer anyway and everything seems to be working perfectly. Did some random Google searches and the results are opening as they should without any redirects.
Will keep this thread open for the next 24 hours just to be sure that teh problem does not reappear.
Thanks again.

Ok

Hi Shawn77! The computer seems to be behaving itself - Security Center is On and no search redirects are happening.
However, a windows update that was downloaded is failing it install. At shutdown the installations happen normally but when the machine powers back the configuration fails.
Can you help me resolve/reset this? Thanks.

what was the update?

Lets start with basic fixes

How do I reset Windows Update components?

shawn77 said:

what was the update?

Lets start with basic fixes

How do I reset Windows Update components?

Click to expand...

Hi shawn77. I tried the fix. Also tried another very similar fix suggested by MS in the updates dialogue. But none worked.

Details of updates in attached screenshot.

Install them one by one and post here the result

Also try giving the attached tool a run, it seems to work pretty well.

Missed your last post. But just installing one update at a time worked great. The ones that failed worked after some of the other updates were installed. So i think it was a matter of order of the updates that was creating problems.
So all problems resolved.
Thanks so much shawn77!
I owe you one.

you are more than welcome

Hi shawn77, wondering if you could help me as I'm having similar issues?

Thanks in advance,
Peter

Here you go

Copy and Paste the following code into the textbox.

:OTL
:Files
C:\Windows\SysWow64\mscanduin.dll
ipconfig /flushdns /c
:Commands
[PURITY]
[emptyjava]
[EMPTYFLASH]

Click to expand...

Then click the Run Fix button at the top.

• Click
  
  .
• OTL may ask to reboot the machine. Please do so if asked.
  On reboot,you should be able to start security center service

Thanks shawn77, you're a legend. I have been trying to fix this for days and in the end you made it easy.

Cheers
Peter

You are more than welcome

Hello! I currently have similar problems with Windows Security Centre and I wanted to see if you (shawn77) could help me with it as well.

My OTL text: View attachment OTL.Txt

Any help would be greatly appreciated.