Microsoft Phishing Filter Message

14 years ago

keeps popping up. It showed up the same time that "Antivirus 2009" crapola did (I'm scanning infected computer with SUPERAntiSpyware as I type on the back-up).

How do I know if the Microsoft Phishing Filter Meassage is real? It gives me 3 options (1. Turn on automatic Phishing Filter, 2. Turn off auto etc. and 3. Ask me later), I'm scared to click any.

Thank you.

ML (computer dumb)

Sort by:Oldest

Comments (5)

ravencajun Zone 8b TX
14 years ago
last modified: 7 years ago
how did you clean your pc of the antivirus 2009? that is a serious infection. I would guess you have remnants left of that.

did you use malwarebytes? if not I would do that now.

Malwarebytes' Anti-Malware
please download Malwarebytes' Anti-Malware to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be found here: C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
* Please post contents of that file in your next reply.

do that please
maddielee
Original Author
14 years ago
last modified: 7 years ago
I used the free Superantispyware and right now (knock on wood) it seemed to work. Got rid of the Antivirus 2009 thing and the Microsoft Phishing Filter Message as well.

Thank you!

ML (who would like to hurt those that put viruses etc out there....)
Related Discussions
Hotmail Junk or Phishing Scam?
Q
Comments (4)
I agree with ravencajun about labeling them as junk before deleting from your Inbox: that is helpful. I only need to do this infrequently though, as the Hotmail filters seem to correctly place this stuff in the Junk folder about 99% of the time.
...See More
Problem still exists, Virus or surge damage?
Q
Comments (13)
Hmm, I had not read the whole MS page but basically you only need to follow the first 2 instructions. I have never had to use those other instructions myself. Remember that if you get flustered just click the Cancel button to get out of where you are. There is nothing to be afraid of when using System File Checker. You It simply goes through your computer checking all the operating system files and replaces those which are corrupt or missing. The need for the CD is so it can get the needed files to install for you. The slight downside is that it takes the computer back to when your particular CD was created which means you will be behind on security updates and possibly a service pack. No big deal there either, you simply go to the windows update site and the computer grabs whatever it needs. You are doing nothing wrong. Who knows why those files went missing. Perhaps/probably it was due to the power outage. You can of course extract and install each of those files if you wish to avoid using SFC. Follow the instructions here to do that for each file. You do not have to do them all at one time. Try one, see how it goes then do others as you feel up to the task.
...See More
? Phishing filter
Q
Comments (2)
Leave it as it is. You want phishing filter enabled. You can read a bit about it in microsofts Q&A And if you feel that 'a particular site will not advance ' and feel its a safe site... that Q&A tells you how to not PhishCheck the website... Q. Â Can I customize a list of trusted sites for Phishing Filter in Internet Explorer 7? A. As an Enterprise administrator or an individual user, you can add your own list of trusted sites for your company or yourself and then turn Phishing Filter off for the Trusted Sites zone. From the Internet Explorer Tools menu, click Internet Options. In the Internet Options dialog box, click the Security tab. Click the Trusted sites icon, and then click the Sites button. In the Trusted sites dialog box, enter the Web site URL in the Add this Web site to the zone box, and then click Add. Close the box. Click Custom level... and select Disable under Use Phishing Filter. You may have to scroll through several items. Click OK.
...See More
New phishing scam?
Q
Comments (8)
I just recently got a very realistic scam email. It said it was an eBay purchase for over $400 and was the PayPal confirmation. I knew it was a fraud immediately because that's not how it comes to my email when I purchase from ebay and pay with PayPal. It comes in 2 separate emails one from PayPal and one from ebay never all in one. I sent it on to the spoof department at PayPal. They confirmed it was a scam. Had I clicked on the link in the email it would have likely asked me to confirm my PayPal account information. I did not click on anything. After forwarding it to PayPal it went to spam folder. It would have been very easy for someone to make a mistake. They are hoping you click on the link and sign into your Amazon account then they have it.
...See More
ravencajun Zone 8b TX
14 years ago
last modified: 7 years ago
ML I know it seems much better now but you really do need to run the malwarebytes also the version of antivirus2009 now has parts in it that only malwarebytes is able to remove so go ahead and install it update it and run the FULL scan follow the directions I gave. This is the best free program out right now so having it and using it weekly is a very good idea.
maddielee
Original Author
14 years ago
last modified: 7 years ago
Thank you again raven....I ran Malwarebytes anti-malware here's what it found and removed (I hope). Am I safe?

ML

Malwarebytes' Anti-Malware 1.33
Database version: 1666
Windows 5.1.2600 Service Pack 3

1/19/2009 10:30:33 AM
mbam-log-2009-01-19 (10-30-33).txt

Scan type: Full Scan (C:\:)
Objects scanned: 197451
Time elapsed: 1 hour(s), 56 minute(s), 45 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 15
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 3
Files Infected: 4

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2 (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2.1 (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\"e4e3e0f8-cd30-4380-8ce9-b96904bdefca> (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\"fe8a736f-4124-4d9c-b4b1-3b12381efabe> (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\"4d25f920-b9fe-4682-bf72-8ab8210d6d75> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\"4d25f923-b9fe-4682-bf72-8ab8210d6d75> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\"4d25f921-b9fe-4682-bf72-8ab8210d6d75> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\"4d25f921-b9fe-4682-bf72-8ab8210d6d75> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\"4d25f921-b9fe-4682-bf72-8ab8210d6d75> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\"4d25f924-b9fe-4682-bf72-8ab8210d6d75> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\"4d25f926-b9fe-4682-bf72-8ab8210d6d75> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\"df780f87-ff2b-4df8-92d0-73db16a1543a> (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\"c9c5deaf-0a1f-4660-8279-9edfad6fefe1> (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\"df780f87-ff2b-4df8-92d0-73db16a1543a> (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\MSFox (Trojan.Agent) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\"4d25f926-b9fe-4682-bf72-8ab8210d6d75> (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\Program Files\MyWaySA (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWaySA\SrchAsDe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWaySA\SrchAsDe\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Files Infected:
C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore"202550A8-7A33-4BCA-9586-051D24DDBF8F>\RP1338\A0323718.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\rdno5MqT.exe.a_a (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Catherine\Local Settings\Temp\~tmpb.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
ravencajun Zone 8b TX
14 years ago
last modified: 7 years ago
wow good thing you did run the malwarebytes! you had Trojan agent, and Trojan Fake Alert in there. All ugly ones, but malwarebytes did quarantine and delete that for you. I bet the pc is running much better now.
Keep running it every week in a full scan after you have updated it to make sure none of it comes back.
If you notice anything else happening let me know and we can do more scans.

Microsoft Phishing Filter Message

Comments (5)

ravencajun Zone 8b TX

maddielee
Original Author

Related Discussions

ravencajun Zone 8b TX

maddielee
Original Author

ravencajun Zone 8b TX

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

Microsoft Phishing Filter Message

Comments (5)

ravencajun Zone 8b TX

maddieleeOriginal Author

Related Discussions

ravencajun Zone 8b TX

maddieleeOriginal Author

ravencajun Zone 8b TX

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

maddielee
Original Author

maddielee
Original Author