We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Problem with security settings on PC

pollsdolls
pollsdolls Posts: 2,960 Forumite
in Techie Stuff
Can anyone advise me. I think one of the fans has gone on my PC, as the clock is not working properly, but the worst problem is that I am getting this message when I try to log onto certain sites that I know are safe....
There is a problem with this website's security certificate
The security certificate presented by this website has expired or is not valid (etc).

They recommend that I close the webpage and not proceed.

If I do proceed however the toolbar turns pink. But it wont let me perform certain actions. e.g In ebay It won't let me log in/out. I cannot buy anything. The sites involved I uses regularly, ebay, Boots, Avon, Amazon etc. Nothing obscure. I have no problems on MSE so I assume it is only sites that I can buy things on.

I am hoping someone can tell me if...

a)..If I have the fan replaced, will my security setting restore to the usual default, or is this a totally unconnected problem?

b) If not, what are the default setting. (Sorry but they are just something I take for granted and I am not a techie)

c) Am I better off just backing up what I can and buying a new PC?

Hoping someone can advise before this thing closes down altogether. TIA
~ What goes around comes around ~
«13

Comments

  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Its more than likely something nasty on the hard drive
    (I cant see how the fan has anything to do with it im afraid!)
    Download MALWAREBYTES
    http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
    UPDATE and QUICK SCAN

    Post the log here after DELETING anything it finds
    :idea:
  • espresso
    espresso Posts: 16,448 Forumite
    Part of the Furniture 10,000 Posts Combo Breaker
    Why do you think that one of the fans has gone?
    You need a new motherboard battery to sort out your clock and then you other problems will likely disappear!
    :doh: Blue text on this forum usually signifies hyperlinks, so click on them!..:wall:
  • Feanixxx
    Feanixxx Posts: 15 Forumite
    Part of the Furniture Combo Breaker
    Several issues here:

    Firstly the computer losing the date/time is usually because the CMOS battery inside it is no longer able to keeps its charge. It's like a little watch battery that keeps the date/time info when you turn the PC off. Nothing to do with fans, tho.

    The missing certificates is more interesting, possibly due to corruption of your certificate cache. If you are using Internet Explorer try this:
    Go to the Tools Menu then the Internet Options.
    Go to the Content tab and find the Certificates section about halfway down.
    Click on the button that says 'Clear SSL State'.
    Close and restart IE and see if that has solved your problem.

    The two issues are not related as far as I can tell.
    Of all the things I've lost, I miss my marbles the most.
  • pollsdolls
    pollsdolls Posts: 2,960 Forumite
    aliEnRIK wrote: »
    Its more than likely something nasty on the hard drive
    (I cant see how the fan has anything to do with it im afraid!)
    Download MALWAREBYTES
    http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
    UPDATE and QUICK SCAN

    Post the log here after DELETING anything it finds

    Thanks aliEnRIK, I am running the scan now and will post the log when complete.
    espresso wrote: »
    Why do you think that one of the fans has gone?
    You need a new motherboard battery to sort out your clock and then you other problems will likely disappear!
    Hi espresso, the PC usually starts up with a 'chugging' :o sound, now it's virtually silent when starting up. OH has cleaned the fan and he thought it had gone (so I am blaming him) Thanks for the info on the battery btw, will look into that next.
    Feanixxx wrote: »
    Several issues here:

    Firstly the computer losing the date/time is usually because the CMOS battery inside it is no longer able to keeps its charge. It's like a little watch battery that keeps the date/time info when you turn the PC off. Nothing to do with fans, tho.

    The missing certificates is more interesting, possibly due to corruption of your certificate cache. If you are using Internet Explorer try this:
    Go to the Tools Menu then the Internet Options.
    Go to the Content tab and find the Certificates section about halfway down.
    Click on the button that says 'Clear SSL State'.
    Close and restart IE and see if that has solved your problem.

    The two issues are not related as far as I can tell.
    Thank Feanixxx for the battery info you have confirmed what espresso has said. I am presently running the scan suggested by aliEnRIK. I will see what comes from that and will then do what you suggested in the tools menu. Many thanks to you all for your advice.:T :T
    ~ What goes around comes around ~
  • pollsdolls
    pollsdolls Posts: 2,960 Forumite
    aliEnRIK wrote: »
    Its more than likely something nasty on the hard drive
    (I cant see how the fan has anything to do with it im afraid!)
    Download MALWAREBYTES
    http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
    UPDATE and QUICK SCAN

    Post the log here after DELETING anything it finds


    Hi aliEnRIK Here is the log file after deleting 29 items ......



    Malwarebytes' Anti-Malware 1.30
    Database version: 1382
    Windows 5.1.2600 Service Pack 3

    03/01/2002 00:27:51
    mbam-log-2002-01-03 (00-27-51).txt

    Scan type: Quick Scan
    Objects scanned: 156713
    Time elapsed: 50 minute(s), 35 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 24
    Registry Values Infected: 4
    Registry Data Items Infected: 0
    Folders Infected: 8
    Files Infected: 14

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    HKEY_CLASSES_ROOT\cpbrkpie.coupon6ctrl.1 (Adware.Coupons) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\!!9522b3fb-7a2b-4646-8af6-36e7f593073c} (Adware.Coupons) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\!!9522b3fb-7a2b-4646-8af6-36e7f593073c} (Adware.Coupons) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\!!87255c51-cd7d-4506-b9ad-97606daf53f3} (Adware.Coupons) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\!!6e780f0b-bcd6-40cb-b2db-7af47ab4d4a4} (Adware.Coupons) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{a138be8b-f051-4802-9a3f-a750a6d862d4} (Adware.Coupons) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.htmlmenu (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.2 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\!!3e1656ed-f60e-4597-b6aa-b6a58e171495} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\!!63d0ed2b-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\!!63d0ed2d-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{a85a5e6a-de2c-4f4e-99dc-f469df5a0eec} (Adware.Coupons) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\!!7819bded-4ab8-4b4b-83da-f2823b146ddd} (Adware.Coupons) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\!!38be0c64-3fd2-44b2-a94b-ba16bf860e01} (Adware.Coupons) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{b2c002ef-dba8-4b96-ac9d-7d231aa2fb56} (Adware.Coupons) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\!!3b5e9b23-7537-4601-a9e8-fa0d956dea16} (Adware.Coupons) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\!!147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\!!2d2bee6e-3c9a-4d58-b9ec-458edb28d0f6} (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\!!1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

    Registry Values Infected:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\!!07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser\!!07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\CouponPrinter.ocx (Adware.Coupons) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    C:\Program Files\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Installr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Installr\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Installr\Cache (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Installr\setups (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Shared (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Shared\Cache (Adware.MyWebSearch) -> Quarantined and deleted successfully.

    Files Infected:
    C:\WINDOWS\CouponPrinter.ocx (Adware.Coupons) -> Quarantined and deleted successfully.
    C:\WINDOWS\csauie1.ocx (Adware.Coupons) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Installr\Cache\02B66B5C (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Installr\Cache\02B671F4 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Installr\Cache\02B67928 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Installr\Cache\02B6800D (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Installr\Cache\02B68C13 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Installr\Cache\files.ini (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Shared\Cache\MailStampBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Shared\Cache\MySignatureInsertBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Shared\Cache\MySignaturePreviewBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Shared\Cache\MyStationeryBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    ~ What goes around comes around ~
  • espresso
    espresso Posts: 16,448 Forumite
    Part of the Furniture 10,000 Posts Combo Breaker
    So has this made any difference to your original problem?
    :doh: Blue text on this forum usually signifies hyperlinks, so click on them!..:wall:
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    MYWEBSEARCH is the main culprit there. Thats normally by somone trying to watch 'videos' they shouldnt (If you get my meaning ;)) on the internet

    Next we need to look at your current security

    What anti virus and firewall do you use?
    :idea:
  • Browntoa
    Browntoa Posts: 49,612 Forumite
    Part of the Furniture 10,000 Posts Name Dropper Photogenic
    you can update you root certificates by going to

    www.windowsupdates.com

    choose custom , and then look for the root certificate update and download it, only a small file so only takes a minute to do
    Ex forum ambassador

    Long term forum member
  • pollsdolls
    pollsdolls Posts: 2,960 Forumite
    aliEnRIK wrote: »
    MYWEBSEARCH is the main culprit there. Thats normally by somone trying to watch 'videos' they shouldnt (If you get my meaning ;)) on the internet

    Next we need to look at your current security

    What anti virus and firewall do you use?

    It hasn't made any difference, I am still getting the security certificate message.

    As for MYWEBSEARCH My son was staying over the weekend when the problem started (I will kill him) does this indicate he started the problem?? What nasty little thing has it put on my PC and can you suggest anything I can do to solve this

    As for security. I am with virgin, and and use their security and firewall (PC guard). When I tried to run it, it said I was running too many PCs and wouldn't operate. :confused: (I am only running one) So I uninstalled it and tried to download it again , but just got this message..... The application encountered an error while contacting the server. Please enusre your computer is connected to the internet

    (I am on Broadband) I intend to ring them up to see why it wont download again.
    ~ What goes around comes around ~
  • espresso
    espresso Posts: 16,448 Forumite
    Part of the Furniture 10,000 Posts Combo Breaker
    Is the clock on your PC displaying the correct date and time?
    :doh: Blue text on this forum usually signifies hyperlinks, so click on them!..:wall:
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 352.1K Banking & Borrowing
  • 253.6K Reduce Debt & Boost Income
  • 454.3K Spending & Discounts
  • 245.2K Work, Benefits & Business
  • 600.9K Mortgages, Homes & Bills
  • 177.5K Life & Family
  • 259K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16K Discuss & Feedback
  • 37.7K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.
Update Your Picture