Windows Security Center won't open and Browser Redirect

[kuttus]

Do you have any other computer?

 

[darrens]

Yes, I've got a mac as well.

 

[kuttus]

is that one also connected to the same Router? Are you facing any such redirection on that one?

 

[darrens]

The mac uses the same router and is having no redirect problems.

 

[kuttus]

Upload a File to Virustotal
Please visit Virustotal.com

• Click the Browse... button
• Navigate to the file C:\Windows\SysWOW64\diskcopyk.dll
  
• Click the Open button
• Click the Send button
• Copy and paste the results back here please.

Then, upload another file:

• Click the Browse... button
• Navigate to the file c:\windows\system32\diskcopyk.dll
  
• Click the Open button
• Click the Send button
• Copy and paste the results back here please.

 

[darrens]

Here are the results for the first file:

SHA256: 2398362153a349473f03e8709921ce8aa9dee8170e8b682972a80107f97ff98b
SHA1: 0c8708dde32e1f8fcaabc7fbe7a295c2adb9521f
MD5: a60b101ed732be90499eb7002b60a243
File size: 1.4 MB ( 1502720 bytes )
File name: DISKCOPY.EXE
File type: Win32 DLL
Tags: signed pedll
Detection ratio: 0 / 45
Analysis date: 2013-02-07 12:05:34 UTC ( 1 month, 1 week ago )

These are the results for the second file (the virus total site said it was the same file for some reason):

SHA256: 2398362153a349473f03e8709921ce8aa9dee8170e8b682972a80107f97ff98b
SHA1: 0c8708dde32e1f8fcaabc7fbe7a295c2adb9521f
MD5: a60b101ed732be90499eb7002b60a243
File size: 1.4 MB ( 1502720 bytes )
File name: DISKCOPY.EXE
File type: Win32 DLL
Tags: signed pedll
Detection ratio: 0 / 45
Analysis date: 2013-02-07 12:05:34 UTC ( 1 month, 1 week ago )

 

[kuttus]

It is a Wrong File...... We have to upload diskcopyk.dll not .EXE

Please do one more change to see diskcopyk.dll...

Please select the Tools menu and click Folder Options.
After the new window appears select the View tab.
Put a checkmark in the checkbox labeled Display the contents of system folders.
Under the Hidden files and folders section select the radio button labeled Show hidden files and folders.
Remove the checkmark from the checkbox labeled Hide file extensions for known file types.
Remove the checkmark from the checkbox labeled Hide protected operating system files.
After this please press the Apply button and then the OK

 

[darrens]

Thanks. Didn't realize it was a hidden system file.

Here are the results for the first one:
SHA256: d31d02e3c6227b144de726801f67079184ef3b4b7fb073f58b38af89bbc1239d
SHA1: f451ffb3448292781031ba1b8d241f814437e2e2
MD5: a0c1ab64dca88ce6a2db0f5f3d39c3f8
File size: 96.0 KB ( 98304 bytes )
File name: diskcopyk.dll
File type: Win32 DLL
Tags: armadillo pedll
Detection ratio: 2 / 43
Analysis date: 2013-03-21 17:59:41 UTC ( 4 minutes ago )

The two detections were:
AVG: Agent4.AKAK
ESET-NOD32: a variant of Win32/Ponmocup.GE

Here are the result for the second file (system32\diskcopyk.dll):
SHA256: d31d02e3c6227b144de726801f67079184ef3b4b7fb073f58b38af89bbc1239d
SHA1: f451ffb3448292781031ba1b8d241f814437e2e2
MD5: a0c1ab64dca88ce6a2db0f5f3d39c3f8
File size: 96.0 KB ( 98304 bytes )
File name: diskcopyk.dll
File type: Win32 DLL
Detection ratio: 2 / 45
Analysis date: 2013-03-21 18:06:41 UTC ( 0 minutes ago )

The two detections were the same:
AVG: Agent4.AKAK
ESET-NOD32: a variant of Win32/Ponmocup.GE

 

[kuttus]

Okay. That is the one....

STEP 1: Run the below OTL fix
<ol><li>Start <>OTL.exe</></li>
<li>Copy/paste the following text written <>inside of the code box</> into the <>Custom Scans/Fixes</> box located at the bottom of OTL

:Files
C:\Windows\SysWOW64\diskcopyk.dll
c:\windows\system32\diskcopyk.dll


:Commands
[EmptyTemp]
[EmptyFlash]
[EmptyJava]
[Reboot]

<>NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system</></li>
<li>Then click the <>Run Fix</> button at the top</li>
<li>Let the program run unhindered, reboot when it is done</li>
<li>Attach the new log produced by OTL (C:\_OTL)</li>
</ol>

<hr />

 

[darrens]

Just wanted to let you know that I reformatted my drives and reinstalled Windows. I had to start using my computer regularly again and it wasn't worth it to keep trying new fixes and possibly not clear everything. So it's gone now, along with everything else on my computer, but all the important stuff was backed up online or on an external hard drive.

I just wanted to thank you immensely for all your help. I truly appreciate all the time and effort you put into helping me. Thanks Kuttus!

 

[kuttus]

Okay..

Now that your PC is clean, I recommend you to create a new System Restore point then purge the old ones after.

For XP
How to create a Restore Point in XP
Delete all restore points except the most recent one

For Vista
Create a restore point
Delete all but the most recent restore point

For Windows 7
Create a restore point
Delete all but the most recent restore point - Click the Delete all but the most recent restore point link

---

Keep your system updated

• Keeping your programs (especially Adobe and Java products) updated is essential. Update Checker will notify you if any of your programs require an update.
• Microsoft releases patches for Windows and Office products regularly to patch up Windows and Office product bugs and vulnerabilities.
• Please ensure you update your system regularly and have automatic updates on. You can learn how to turn Automatic Updates on here

---

I also recommend you to switch your antivirus program to a better one. Here are some suggestions:

• avast! 7 Home Edition - Don't use it with Online Armor
• Avira AntiVir Personal
• Microsoft Security Essentials

In addition to your antivirus, you need additional protection such as a firewall and behavioural blocker.

• Online Armor
• Comodo Firewall - If you are an advance user

Here are only a few suggestions that will improve your system security. Should you wish to allow us to make full recommendations and set your PC up with maximum security, please start a thread here. Our community of PC enthusiasts and experts will give you feedback and help you secure your system from future malware infections.

---

Internet Explorer may be the most popular browser but it's definitely not the most secure browser. Consider using other browsers with addition add-ons to safeguard your system while browsing the internet.

Firefox is a more secure, faster browser than Internet Explorer. Firefox contains less vulnerabilities, reducing the risk of drive-by downloads. In addition, you can add the following add-ons to increase security.

• KeyScramber - Encrypts your keystrokes to protect you against keyloggers that steals personal & banking information
• AdBlock - Disable/blocks advertisements on websites so you won't accidentally click on a malicious ad.
• NoScript - Disables Flash & Java contents to avoid exploits or drive-by attacks
• Web of Trust - Shows the website rating by other users and blocks dangerous and poor-rated sites

Google Chrome is another good browser that is faster and more secure than Internet Explorer by having a sandbox feature. Additionally, you can add the following add-on to Chrome to heighten security.

• AdBlock

---

Lastly, it is important to perform system maintenance on a regular basis. Here are a few tools and on-demand scanners that you should keep & use every 1-2 weeks to keep your system healthy.

• CCleaner
• Malwarebytes Anti-Malware
• Temp File Cleaner by OldTimer

Other than that, stay safe out there! If you have any other questions or concerns, feel free to ask

<hr />
What's next?

1. Bulild up your malware defenses by starting a new thread in Security Configuration Wizard forum.
2. Learn how to avoid malware by reading this article <a href="http://malwaretips.com/blogs/how-to-easily-avoid-pc-infections/">How to easily avoid malware</a>
3. Be an active member in the MalwareTips community!

My virus removal help is always free. Should you wish to show your appreciation via a donation, it will be much appreciated.​

 

[kuttus]

This thread is now closed.​

Reason:&nbsp;<span style="color: #ff0000;">Issue Resolved</span>​

<span style="color: #ff0000;"><>The procedures contained in this thread are for this user and this user only.&nbsp;&nbsp;Attempting to use the instructions in this thread on your system could result in damaging the Operating System beyond repair.&nbsp;&nbsp;</></span>

<span style="color: #ff0000;"><>DO NOT use any of the tools mentioned in this thread without the supervision of a Malware Removal Specialist.</></span>

All members requesting Malware Removal Assistance are required to follow all procedures in the thread

My virus removal help is always free. Should you wish to show your appreciation via a donation, it will be much appreciated.​