windows security update hijacked

[r0nbo]

Something hijacked my windows security service and zonealarm stopped it and
I killed that service but how do I restore it? The new one tries to go to
some bogus sex site Im sure with an address of
res://ieframe.dll/dnserrordiagoff_webOC.htm#http://www.chinesehotweb.com/urlupdate.aspx?
Theres got to be a way to kill this crap and fix it. McAfee doesnt see it so
its using the same name or something but its different and zonealarm stopped
it when I denied it a way to get out.Spybot doesnt see it either.

 

[r0nbo]

well I have found that there is no such legitimate program. I f you find it
in the your windows dir it has an nonmicrosoft icon and you gotta stop it
startup from mscfg and delete it. theres also a registry under Security. You
can see where it points to that program, so delete it. I forget where I
found it. autoruns or somewhere. anyway just search for it.

 

[William]

well I have found that there is no such legitimate program. I f you
find it in the your windows dir it has an nonmicrosoft icon and you
gotta stop it startup from mscfg and delete it. theres also a registry
under Security. You can see where it points to that program, so delete
it. I forget where I found it. autoruns or somewhere. anyway just
search for it.

Great. Congrats. Since your system was compromised, however, it might
be prudent to run David Lipman's Multi-AV utility to scan for anything
else. Chances are, by the time you noticed your comp. was compromised,
other proggies may had made their way onto your system. Cheers and good
luck.