Live update - suspicious

fernandosor · Jul 12, 2009

Hi

You folks have been a great help in the past. Hopefully you can help me now.

I am getting a very suspicious message that indicates that I need to do a Lve Update. The screen looks similar to Norton Antivirus but not exactly. I clicked partially through(but not all the way to install), and there were a number of requests to install a number of "whitekey" components. Particulary suspicious as I have this antivirus program and this message does not appear on any others - typically all computers send update message at same time.

Only other suspicious behavior is that "my yahoo" page doesn't stick and I need to re-enter name and password each time.

Ran all the scans right I hope. Attached...

chaslang · Jul 16, 2009

You did not attach the SUPERAntiSpyware and RootRepeal logs that were requested. We don't need to copies of the ComboFix log. We only needed the c:\combofix.txt as requested. However this all being said we probably don't need them since you are not having malware problems.

Your Live Update messages are from Norton. Norton use LiveUpdate to update all of their software not just the antivirus. You also have Norton Utilities installed.

And the issue with your Yahoo page is most likely due to you either blocking cookies or deleting them.

Now you do need to do the below as requested in step 1 of the READ & RUN ME.

Uninstall the below old Sun Java versions:
J2SE Runtime Environment 5.0 Update 10
Java(TM) 6 Update 2

Now reboot!

After reboot, now install the current version of Sun Java from: Sun Java Runtime Environment

Log in or Sign up

Live update - suspicious

fernandosor Private E-2

Attached Files:

log.txt

mbam-log-2009-07-12 (18-58-44).txt

MGlogs.zip

ComboFix.txt

chaslang MajorGeeks Admin - Master Malware Expert Staff Member