Cyber Security or Cyber Protection Centre

Hi. One of our PC has been hammered with a thing called Cyber Security. It
pops up Microsoft look-alike screens showing the firewall on but virus off -
keeps asking for registration fees etc - it goes in a cycle of requesting
then shutting the pc down on the pretext of finding an active threat. It's
put two "Shields" in the tray, one that looks like the MS one with red threat
status and the other a blue one. Been looking for ways to remove it - Trying
to run the MalwareBytes thing but it keeps shutting down as soon as it
flashes up - I assume it's the CS thing protecting itself. The first hit on
Google for removing this appears itself to be a fake according to the WhoIs
site (think that's the name).
Anyone have any idea on how to kill it? I would assume MS would be
none-too-happy to have their screens copied.
--
Hoges in WA

From: "Hoges in WA" <thogan2zz@bigpond.net.au>

| Hi. One of our PC has been hammered with a thing called Cyber Security. It
| pops up Microsoft look-alike screens showing the firewall on but virus off -
| keeps asking for registration fees etc - it goes in a cycle of requesting
| then shutting the pc down on the pretext of finding an active threat. It's
| put two "Shields" in the tray, one that looks like the MS one with red threat
| status and the other a blue one. Been looking for ways to remove it - Trying
| to run the MalwareBytes thing but it keeps shutting down as soon as it
| flashes up - I assume it's the CS thing protecting itself. The first hit on
| Google for removing this appears itself to be a fake according to the WhoIs
| site (think that's the name).
| Anyone have any idea on how to kill it? I would assume MS would be
| none-too-happy to have their screens copied.
| --
| Hoges in WA

Perform a scan using Malwarebytes' Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

"Hoges in WA" <thogan2zz@bigpond.net.au> wrote in message news:FFD99C32-7494-4484-BFB1-52CC5C8919FA@microsoft.com...
> Hi. One of our PC has been hammered with a thing called Cyber Security. It
> pops up Microsoft look-alike screens showing the firewall on but virus off -
> keeps asking for registration fees etc - it goes in a cycle of requesting
> then shutting the pc down on the pretext of finding an active threat. It's
> put two "Shields" in the tray, one that looks like the MS one with red threat
> status and the other a blue one. Been looking for ways to remove it - Trying
> to run the MalwareBytes thing but it keeps shutting down as soon as it
> flashes up - I assume it's the CS thing protecting itself. The first hit on
> Google for removing this appears itself to be a fake according to the WhoIs
> site (think that's the name).
> Anyone have any idea on how to kill it? I would assume MS would be
> none-too-happy to have their screens copied.
> --
> Hoges in WA
>

If MBAM is shutting down with this one, then it needs special handling

go to www.thespykiller.co.uk

register & post the following logs on the HJT /malware cleaning forum where we can help


Download to Desktop: DDS by sUBs from one of these locations:

http://download.bleepingcomputer.com/sUBs/dds.com
http://download.bleepingcomputer.com/sUBs/dds.scr
http://www.forospyware.com/sUBs/dds

double click DDS.scr to run

When complete, DDS.txt will open.

Click Yes for Optional Scan.
Save both reports to your desktop.
DDS.txt
Attach.txt

and then

download gmer rootkit detector from http://gmer.net

unzip it & double click the gmer.exe file

it will do a quick scan automatically, when that finishes,

select the rootkit tab & press scan

when it has finished press copy & post back the log it makes