safeshield problem - please help

audrey22 · Nov 24, 2009

Hi, this is my first time posting, and i'm hoping someone might be able to help me with this problem (before my dad murders me) - i'm completely clueless when it comes to computers so i hope this come out right - the computer that i'm using runs on XP and i use symantec anti-virus and i've been experiencing problems for about a week now.

it started with dozens of pop-ups appearing saying that symantec was blocking emails from being sent out because they contained spam etc, but the people the emails were being sent out to were people that i've never even heard of, and couldn't possibly be on my contact list. every time i'd turn on my internet, these pop-ups would appear.

anyway these disappeared after i while, i don't really know how, but now this red circle when a white 'x' in the middle has appeared on the blue bar thing on the bottom of my screen, where the time and volume etc are displayed and it keeps saying

"Warning! You PC is infected. Click here to download actual antispyware"

the fact that they don't even have proper grammar i.e. "You" instead of "Your" means that obviously this isn't a reliable program but now this sign won't go away, and i don't know how to get rid of it. i think it's called safeshield because i found this program in drive C called safeshield, and it's the only odd looking program in there...so i'm just guessing that this is the program responsible for my problems - i've deleted it, but the red circle with the "x" is still there

also yesterday when i tried to turn the computer on, this huge window popped (black background with white writing) and it had a warning sign on it, followed by lettering in another language - greek or russian and i had no idea what it was saying but below it was a box where you were supposed to type in i'm a guessing a code or something to make this window go away. control alt delete wouldn't work to make it disappear, so i just turned off the computer, and that window hasn't popped up since.

i've run symantec a couple of times, but it won't pick up on any virus or anything, so now i don't know what to do, because running symantec to get rid of problems is as far as my abilities will stretch when it comes to computers.

so, if you've read to the end of this very long post, then you're a real trooper and i hope you have some solution to help - any would be greatly appreciated (sorry i don't know any computer speak, which might have helped shorten this post)

thanks!

Kestrel13! · Nov 26, 2009

Hi there and welcome to the forums

In order to assist you I need to see some logs, I shall list below the programs that need to be run and logs that you need to attach into your next reply from each of them.

SUPERantispyware

Malware Bytes

Combofix -- C:\combofix.txt

MGTools -- C:\Mglogs.zip

All of this is explained in the Read and Run Me First sticky which you should have followed through as much as you can, noting down any errors as you go and moving onto the next step.

I'll link to those procedures below:

Welcome to Major Geeks!

Please read ALL of this message including the notes before doing anything.

Pleases follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide

and attach the requested logs when you finish these instructions.

**** If something does not run, write down the info to explain to us later but keep on going. ****

Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.

After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!

Helpful Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.

If you cannot seem to login to an infected user account, try using a different user account (if you have one) in either normal or safe boot mode and running only SUPERAntiSpyware and Malwarebytes while logged into this other user account. Then reboot and see if you can log into the problem user account. If you can then run SUPERAntiSpyware, Malwarebytes, ComboFix and MGtools on the infected account as requested in the instructions.

To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:

Don't Bump! It Only Hurts You!!!

Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated our system works the oldest threads FIRST.

Log in or Sign up

safeshield problem - please help

audrey22 Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member