How about this one for a headache....... "My Security Engine"

[a kennedy]

and you got it....another buy this product and it'll fix what ever ails you computer.....and it really looks like Microsoft Security Essentials. I didn't buy it.....but it's driving me crazy trying to get rid of it..... :grr: :grr: :grr:

[a kennedy]

1. hey, 6 people have looked at this topic......don't ya want to add something???

:hi:

[mockmonkey]

2. Is it My Security Engine or Wall?

The reason I ask is that Malwarebytes mentions My Security Wall.

http://forums.malwarebytes.org/index.php?showtopic=40153

[canetoad]

3. Here are removal instructions

http://www.bleepingcomputer.com/virus-removal/remove-my-security-engine

What this programs does:

My Security Engine is a rogue anti-spyware program from the same family as Security Guard. This rogue is installed and promoted through the use of Trojans and fake online anti-malware scanners. When the program is installed by the Trojans, it will be configured to start automatically when you login into Windows. The installer will also create numerous files that will be detected as malware when My Security Engine scans your computer.

Seems like a nasty one. Hope you can winkle it out.

[Earth Bound Misfit]

4. Try this.

Remove My Security Engine (Uninstall Guide) http://www.bleepingcomputer.com/virus-removal/remove-my-security-engine

What this programs does:

My Security Engine is a rogue anti-spyware program from the same family as Security Guard. This rogue is installed and promoted through the use of Trojans and fake online anti-malware scanners. When the program is installed by the Trojans, it will be configured to start automatically when you login into Windows. The installer will also create numerous files that will be detected as malware when My Security Engine scans your computer.

snip

Some of the alerts that you may see are:

An unauthorized program has been prevented from accessing your PC remotely. #Port:433 from 92.11.127.10
An unauthorized software C:\Program Files\Internet Explorer\Iexplore.exe which is potentially malicious and able to modify system files has been prevented from being installed on your PC.

My Security Engine has detected potentially harmful software in your system. It is strongly recommended that you register My Security Engine to remove all found threats immediately.

Process Mbam.exe attempted to modify the address space.

Potentially harmful programs have been detected in your system and need to be dealt with immediately. Click here to remove them using My Security Engine.

Notepad.exe cannot be executed. The file is infected. Please activate your antivirus software.

Your PC may still be infected with dangerous viruses. My Security Engine protection is needed to prevent data loss and avoid theft of your personal data and credit card details. Click here to activate protection.

Suspicious software which may be malicious has been detected on your PC. Click here to remove this threat immediately using My Security Engine.

malicious applications, which may contain Trojans, were found on your computer and are to be removed immediately. Click here to remove these potentially harmful items using My Security Engine.

Just like the scan results, these fake warnings should be ignored as they are just another attempt by the program to make you think your computer is infected. This infection will also change your web browser's default search engine and set it to findgala.com. Last, but not least, this infection will add entries to your HOSTS file so that when you visit certain sites such as Google or Bing, you will be redirected to a site under the control of the malware developers.

[canetoad]

5. SCUSE ME

Were you peeking over my shoulder? :rofl:

...but that makes me think of some good advice for the OP. I came to my link and quote by just googling My security engine. Hell, only had to copy and paste, including the quote marks.

Always pays to take note of error messages, pop ups etc, as most of the time you can get a name to google.

[Earth Bound Misfit]

6. Heh heh. No, I wasn't peeking....great minds & all that.

Like I said once before...http://www.youtube.com/watch?v=iZtbASCE7ZY

[a kennedy]

7. Thank you all, am still working on it, but with the great info acquired here

I'm sure I'll be able to knock this thing off my computer. Again thank you. :grouphug:

[a kennedy]

8. D*mn, I can't get the trojan, my security engine, off my computer....

I've been downloading everything I need and am stuck trying to get Hostsperm.bat on my desktop....so, am gonna try again tomorrow....I've been on it half the day. Need a rest. D*MN. :cry: I so wish I was more of a computer geek them I am.

[Earth Bound Misfit]

9. Couple of things...

"am stuck trying to get Hostsperm.bat on my desktop"

Does that mean you have been unable to download it, or run it? Have you tried using safe mode with networking? http://www.computerhope.com/issues/chsafe.htm

Do you have a program running that "protect" your Hosts file, such as Spybot S&D, an AV or Firewall? If so, try disabling it/them, then run Hostsperm.bat

If unable, open a topic here: http://www.geekpolice.net/virus-spyware-malware-removal-f11/
They have several very good malware fighters, and their wait time for a response is often minimal--sometimes the same day.

You may need to run ComboFix to clean this up, but I don't advise using it without the guidance of an expert (which I am NOT).

[a kennedy]

10. When I got on the computer today....it seemed to be fine....

no symbol of the "trojan" in the lower right corner, but I will get a professional to clean everything up. Thank you for you help. I'm just not knowledgeable enough to do much on my own. :cry: