Anti Virus 2008

This application dropped in on my computer while my son (age 15) was on
line.
It offered a FREE a/virus scan which he accepted.
However when it came to the remove part he found that this would cost money
so he declined.
Now I am desperately trying to rid myself of this curse. I cannot open any
downloads or anything else without this warning me that I must remove
viruses with this prog before any further progress can be made.
I cannot be removed with my ununstallers, nor with its own. Equally I cannot
get system restore to do its tricks,
This is a really bad one. Can anyone offer any advice please?

Brendan Tierney wrote:
> This application dropped in on my computer while my son (age 15) was on
> line.
> It offered a FREE a/virus scan which he accepted.
> However when it came to the remove part he found that this would cost
> money so he declined.
> Now I am desperately trying to rid myself of this curse. I cannot open
> any downloads or anything else without this warning me that I must
> remove viruses with this prog before any further progress can be made.
> I cannot be removed with my ununstallers, nor with its own. Equally I
> cannot get system restore to do its tricks,
> This is a really bad one. Can anyone offer any advice please?

http://www.sophos.com/security/analy...virus2008.html

Good luck.

Alias

You need to visit a "Hijack This" forum and do everything they tell you to
do.

Ramone

"Brendan Tierney" <> wrote in message
news:eAQ%...
> This application dropped in on my computer while my son (age 15) was on
> line.
> It offered a FREE a/virus scan which he accepted.
> However when it came to the remove part he found that this would cost
> money so he declined.
> Now I am desperately trying to rid myself of this curse. I cannot open any
> downloads or anything else without this warning me that I must remove
> viruses with this prog before any further progress can be made.
> I cannot be removed with my ununstallers, nor with its own. Equally I
> cannot get system restore to do its tricks,
> This is a really bad one. Can anyone offer any advice please?

From: "Brendan Tierney" <>

| This application dropped in on my computer while my son (age 15) was on
| line.
| It offered a FREE a/virus scan which he accepted.
| However when it came to the remove part he found that this would cost money
| so he declined.
| Now I am desperately trying to rid myself of this curse. I cannot open any
| downloads or anything else without this warning me that I must remove
| viruses with this prog before any further progress can be made.
| I cannot be removed with my ununstallers, nor with its own. Equally I cannot
| get system restore to do its tricks,
| This is a really bad one. Can anyone offer any advice please?

You are infected with a fake anti malware utility.



1. Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en...HJTInstall.exe

2. Disable Notepad's word wrap:
In Notepad.exe; Format --> uncheck; "Word wrap"

3. Download/run Deckard's System Scanner:
http://www.techsupportforum.com/sect...eckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post in one of the below
expert forums...


{ Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }

Forums where you can get expert advice for HiJack This! (HJT) and Deckard's System Scanner
Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.malwarebytes.org/forums/i...hp?showforum=7

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/...splay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malwa..._Here-f37.html
http://gladiator-antivirus.com/forum...?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/...p?showforum=18
http://aumha.net/viewforum.php?f=30
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13



--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

have you tryed booting in safemode and then uninstalling it?
scrooge


--
scrooge

Brendan Tierney wrote:
> This application dropped in on my computer while my son (age 15) was
> on line.
> It offered a FREE a/virus scan which he accepted.
> However when it came to the remove part he found that this would cost
> money so he declined.
> Now I am desperately trying to rid myself of this curse. I cannot
> open any downloads or anything else without this warning me that I
> must remove viruses with this prog before any further progress can be
> made. I cannot be removed with my ununstallers, nor with its own. Equally I
> cannot get system restore to do its tricks,
> This is a really bad one. Can anyone offer any advice please?

Here's some manual removal notes:
http://www.wiki-security.com/wiki/Pa.../Antivirus2008

..

Your screwed. Most apps that act like this such as WinAntivirus ar
almost imposible to "completly" remove even when using help such a
provided by Hijack this. You may get temporary relief but somewhere dow
the road something will set it off again

The only real way to remove them entirely is to reformat and reinstal
your system

Speaking from a vast bottom less pit of experience

--
joel406

On Mon, 26 May 2008 07:59:59 -0400, "Ramone" <> wrote:
>> This application dropped in on my computer while my son (age 15) was on
>> line.
>> It offered a FREE a/virus scan which he accepted.
>> However when it came to the remove part he found that this would cost
>> money so he declined.
>> Now I am desperately trying to rid myself of this curse. I cannot openany
>> downloads or anything else without this warning me that I must remove
>> viruses with this prog before any further progress can be made.
>> I cannot be removed with my ununstallers, nor with its own. Equally I
>> cannot get system restore to do its tricks,
>> This is a really bad one. Can anyone offer any advice please?

If I haven't already added my $0.02.
Go to Trend micro anti virus.
Download any of the 3 home demos.
download spybot S&D [freeware util] also at Trend
run the demo. I'd recommend the medium version vs stripped or pro.
Let trend clean up the mess.
Then run spybot S&D.
poof all gone.

Then take and try the demo for a month and see if things don't run a whole lot
smoother.
Oh yeah a different browser than IE, such as firefox, might be a good move also
in the future.

To avoid getting infections, you have to be less of a target.
Apple, Firefox, anything other than M$ is less of a target.

Or you get a GOOD firewall, and anti virus program.

Oh and in the future assuming you follow the out with the bath water formula of
virus solutions [format everything] instead of prevention. Make your nextpost
clearer, such as identifying what ever it was you're infected with.

I'm guessing it's winspy something. It's out in the wild right now infecting
everything it touches.

You can't lay blame on anyone for this infection. It seeks you out.
--
more pix @ http://members.toast.net/cbminfo/index.html

lid wrote:
>
> [ drivel snipped]

> Make your next post clearer, such as identifying what ever it was
> you're infected with.
>
> I'm guessing it's winspy something. It's out in the wild right now
> infecting everything it touches.
>
> You can't lay blame on anyone for this infection. It seeks you out.

Can't you read ? The op's son installed it.
Quote:
"This application dropped in on my computer while my son (age 15) was on
line.
It offered a FREE a/virus scan which he accepted."

He dosen't need to make his next post clearer - the header says what it is.
Try reading the post before replying with total crap.
,

Dave wrote:
> lid wrote:
>> [ drivel snipped]
>
>> Make your next post clearer, such as identifying what ever it was
>> you're infected with.
>>
>> I'm guessing it's winspy something. It's out in the wild right now
>> infecting everything it touches.
>>
>> You can't lay blame on anyone for this infection. It seeks you out.
>
> Can't you read ? The op's son installed it.
> Quote:
> "This application dropped in on my computer while my son (age 15) was on
> line.
> It offered a FREE a/virus scan which he accepted."
>
> He dosen't need to make his next post clearer - the header says what it is.
> Try reading the post before replying with total crap.
> ,
>
>
>
>
>
>
These people can help http://free.grisoft.com/