Virus malicious software alerts- bit of help

Bask in the widely read glory that is GM before being quarantined to the techy section.

My main PC has just glitched telling me its under attack. Its an XP machine BTW.
Something called a security centre tells me I have multiple threats and was trying to deal with them, I wasn't sure what this was so unplugged it from the internet and I'm using a laptop in the meantime.
Whats making me suspicious about it is it wont let me access my usual anti virus (AVG) to do a proper scan nor will it let me access the add/remove programs telling me all of those are infected- I wanted to check add/remove as though it purports to be part of windows security system something doesn't feel right about it, that has never been active and I've always used a seperate anti virus.
Windows Firewall is on
It wont let me do anything other than activate security shield for which it wants internet access and I cant deactivate it.

Any ideas?

Sounds like a known drive-by hijack from an infected webpage. Naughty Monstyr

Fake Windows Security Center Removal (How to remove Fake Windows Security Center) | Malware Help. Org

On the plus side it does look like there are removal tools available, that can be plugged in from a stick memory.

Thanks Tomcat, that looks to be the culprit, no idea where it may have come from though, I've only looked at a few of the usual sites like this one, certainly nothing dodgy that I'm aware of.

I'll try and put the kaspersky thing onto the other computer and try it from there.
It seems all browsers and options have been disabled and I'll need to try a safe mode start.

Might be worth checking AVG's pages to see if they recognise it and how come it got past them. Comments on that forum go back to 2009 so it's not exactly new. Possible new development of an old bug, dunno.

Deal with these fuckers daily, Monstyr.
So shout if you require any further assistance.

Try booting into safe mode, disable System Restore (the threats generally leave a copy to reinstall itself once removed) and check the file locations mentioned in TC's link manually.
Also check the System Config Util, to make sure it hasn't stuck a startup entry in (Start > Run > 'msconfig' ('without quotes') > Startup tab), if an item looks suspicious, check the command to see where the executable is. (Unlikely, but always worth a 2 second check).
I'd recommend a SAS scan after that.
If you remove (or amend) a registry entry, make sure you take a backup first (within the editor - File > Export).
Then scan with your usual AV software.

Originally Posted by Monstyr

Thanks Tomcat, that looks to be the culprit, no idea where it may have come from though, I've only looked at a few of the usual sites like this one, certainly nothing dodgy that I'm aware of.

I'll try and put the kaspersky thing onto the other computer and try it from there.
It seems all browsers and options have been disabled and I'll need to try a safe mode start.

Have you clicked any links in your email or even private messages in Facebook?

Originally Posted by B..

I'd recommend a SAS scan after that.

After reading this i downloaded it to try. After running Ccleaner i ran this and it found lots more crap in the computer.

All back, up and running smoothly. That SAS stuff seemed to do the trick.
I also did a full scan with AVG and spybot too.
No idea where the problem came from, I dont do facebook so its either a link from something or a website that caused it, there was nothing unusual about anything else beforehand,no dodgy sites or anything but then I suppose thats how these things get spread in the first place.

Glad all's well.

That SAS is a good bit of kit, but like everything, something'll get thru regardless, there'll always be something, somewhere.
Use reputable names & keep up to date. Happy days.

its called ScareWare

bleh

just goes to hammer home the tenent that you should never start clicking on pop ups until you are SURE what they are..