Need PC Help~Vanity

[Niteflyr]

Starting last night my emails are coming with this line~

" Go to Libra ESVA ha rilevato un possibile tentativo di frode proveniente da" (and then the address or link.)

attached to the beginning of links and email addresses in red

[Niteflyr]

Facepalm!

I know I know...but I'm grasping at straws here...

[library user]

Do this and post the report it generates:

Download Malwarebytes' Anti-Malware from here (save it to your desktop).

* Double Click mbam-setup.exe to install the application.
* Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select "Perform Quick Scan", then click Scan.
* The scan may take some time to finish, so please be patient.
* When the scan is complete, click OK, then Show Results to view the results.
* Make sure that everything is checked, and click Remove Selected. <---- THIS IS IMPORTANT
* When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

[Westbrook]

Interesting.

“Bonjour” is French, but it’s a good idea to uninstall a program that you did not install.

Sounds like you caught a worm.

What are you using for virus and spyware protection?

[Niteflyr]

“Bonjour” is French,

Yep ..facepalm alright!

I'm using AVG free edition...

[TomGuy]

I run all my email through Gmail and then view on Mozilla Thunderbird. But I noticed it is appearing on the mail at Gmail before I download it locally.

It probably is an ad Gmail is inserting.

You might try contacting Gmail about it.

I know I would be suspicious, especially with the text being in a foreign language.

[Westbrook]

I’ve stopped using AVG.

Try Microsoft Security Essentials.
It’s free.

http://www.microsoft.com/security_essentials/

[TomGuy]

Per Google search on Bonjour and Firefox, there are other Bonjour things.

An FTP related program

A macro creation program

A DNS service

A print service (searched Bonjour without Firefox)

[Niteflyr]

Funny thing is that if it's a local worm on my pc...this prefix is appearing on emails at Gmail's server before I download it into Thunderbird...?? (I run my email through Gmail for spam control)...makes me wonder if it is happening before it gets to me? Like maybe Gmail is now using this Italian security program ??

[Niteflyr]

I’ve stopped using AVG. Try Microsoft Security Essentials. It’s free.

I just dumped AVG and loaded this and it is scanning now...

[Niteflyr]

I’ve stopped using AVG. Try Microsoft Security Essentials. It’s free.

I took your advice and dumped AVG...installed MSE and it caught a severe threat java script trojan downloader that AVG didn't catch. Don't know if that is the problem but it's a start. I also ran Registry Repair which showed lots of problems and now Crap Cleaner and see what happens after that..thanx for the input..:o)

[Westbrook]

Glad to have been of some help.

PCs are such BEARS at times.

[Mere Survival]

My personal computer is virus free after a reformat and reload WITH resetting my router to factory defaults. Be aware that certain virus’ now get into the router as well and if you don’t kill the virus on your computer AND shut down the router to kill its RAM you will just get the virus again because the router redirects you to a server that reinfects you.

Everyone reading this reset your router’s password from the factory default. That’s how virus’ get into your router — they just plug in the factory default password.

[Niteflyr]

Everyone reading this reset your router’s password from the factory default. That’s how virus’ get into your router — they just plug in the factory default password.

I'm not using a router so that is not it but I'm still getting the prefixed links in my email...my mail runs through my domain hosting mail server and then through G-mail for spam contro and then downloaded in Thunderbirdl...I'm wondering if it isn't something happening at one of those levels...

[Mere Survival]

Try malewarebytes, superantispyware. They didn’t get my particular virus but they are supposed to be good.

[Richard Kimball]

Have you tried using a different web browser and have you tried accessing your email from another computer?

[Yosemitest]

I recommend Malwarebytes' Anti-Malware.
Download the FREE version and run it.

Also checkout CCleaner

and use the options/settings/advanced
and deselect "Only delete files in Windows Temp folder older than 24 hours".
Warning: this choice will delete all saved passwords in your computer.

[Yosemitest]

Microsoft Security Essentials brought me nothing but trouble.
It stays in constant update mode, slows down my computer, and reports everything I did to Microsoft.

I DON'T use it, and I had a hard time getting rid of it.

[Yosemitest]

Also check out online-armor.com for a free version
and if you buy it, I recommend "Online Armor++" .

One more FREE VERSION FIREWALL to look at is Spyware Terminator.
The "Advanced Mode" offers alot of control, but it takes a while to learn how to use.

[Westbrook]

Sorry to hear that.

I’ve had no difficulty.

All anti-virus programs transmit information back to their respective mother ships.

All, including MSE, allow you to opt out.

Hey, I’m a Linux weenie, work with Linux, and I use MSE on my M$ laptops.

No need for virus protection on Linux, though. Not yet, anyway.

[Niteflyr]

Have you tried using a different web browser and have you tried accessing your email from another computer?

Yeah I used Safari on my iPhone and I still get the same when viewing the same email stored at Gmail before it forwards to my home PC....which makes me wonder if it is something going on there or at my original mail server that routes it through Gmail..?