antivirus2008 problem

I've just installed this on Vista home basic and now Windows Explorer is
closing and opening all the time (when I click on control panel).
Help!

popout wrote:

> I've just installed this on Vista home basic and now Windows Explorer is
> closing and opening all the time (when I click on control panel).
> Help!

You have been taken in by a scam. Antivirus 2008 is a rogue program. We call
it "rogue" because it pretends to be A Good Guy but is really Evil. If you
paid for this, contact your credit card company immediately to stop
payment. It would also be wise to get a new credit card number.

To remove the malware, go to this link and follow the removal instructions:

http://www.bleepingcomputer.com/malw...antivirus-2008

If you need more help, register at Bleeping Computer or one of the other
specialty forums listed below. Read their posting FAQ first. PLEASE DO NOT
POST LOGS IN THE MS NEWSGROUPS.

http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/...splay.php?f=25
http://www.geekstogo.com/forum/Malwa..._Here-f37.html
http://gladiator-antivirus.com/forum...?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

Got the removal tool from PCtools. Followed everything. All viruses removed,
but still no windows exporer and now multiple popups. Speed also compromised.

"Malke" wrote:

> popout wrote:
>
> > I've just installed this on Vista home basic and now Windows Explorer is
> > closing and opening all the time (when I click on control panel).
> > Help!
>
> You have been taken in by a scam. Antivirus 2008 is a rogue program. We call
> it "rogue" because it pretends to be A Good Guy but is really Evil. If you
> paid for this, contact your credit card company immediately to stop
> payment. It would also be wise to get a new credit card number.
>
> To remove the malware, go to this link and follow the removal instructions:
>
> http://www.bleepingcomputer.com/malw...antivirus-2008
>
> If you need more help, register at Bleeping Computer or one of the other
> specialty forums listed below. Read their posting FAQ first. PLEASE DO NOT
> POST LOGS IN THE MS NEWSGROUPS.
>
> http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
> the stickies *first*.
> http://www.atribune.org/forums/index.php?showforum=9
> http://aumha.net/viewforum.php?f=30
> http://www.bleepingcomputer.com/forums/forum22.html
> http://www.dslreports.com/forum/cleanup
> http://www.cybertechhelp.com/forums/...splay.php?f=25
> http://www.geekstogo.com/forum/Malwa..._Here-f37.html
> http://gladiator-antivirus.com/forum...?showforum=170
> http://spywarewarrior.com/viewforum.php?f=5
> http://forums.techguy.org/54-security/
> http://forums.tomcoyote.org/
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers - Don't Panic!
> FAQ - http://www.elephantboycomputers.com/#FAQ
>
>

popout wrote:

> Got the removal tool from PCtools. Followed everything. All viruses
> removed, but still no windows exporer and now multiple popups. Speed also
> compromised.

What usually happens with those sorts of infections is that they come with
Zlob and/or Vundo trojans and are protected by a rootkit. They are
extremely difficult to remove. You can do as I suggested and get guided
help at one of the forums or you can back up your data and do a clean
install of Windows. It's your choice of course.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

I've had 2 customers with this virus. Ran AVG 8 on both and problem
solved.

Jerry




On Sat, 12 Jul 2008 07:13:01 -0700, popout
<> wrote:

>I've just installed this on Vista home basic and now Windows Explorer is
>closing and opening all the time (when I click on control panel).
>Help!

In article <>, jchughes301
@hotmail.con says...
> I've had 2 customers with this virus. Ran AVG 8 on both and problem
> solved.

How do you know for sure?

I've seen 5 different AV scanners run on compromised machines, including
AVG8, and each one missed things that the others picked up, even after
10 scans the computer was not cleaned.

So, how do you know that the computer is clean?

--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(remove 999 for proper email address)

On Mon, 14 Jul 2008 20:17:08 -0400, Leythos <> wrote:

I did not say the system was cleaned. I said problem solved. They have
run for 10 days without the problem.

Jerrry

>In article <>, jchughes301
>@hotmail.con says...
>> I've had 2 customers with this virus. Ran AVG 8 on both and problem
>> solved.
>
>How do you know for sure?
>
>I've seen 5 different AV scanners run on compromised machines, including
>AVG8, and each one missed things that the others picked up, even after
>10 scans the computer was not cleaned.
>
>So, how do you know that the computer is clean?

Did a backup, did a recovery repair,restored and It's Clean - with crossed
fingers. Note for future - PCtools refunded me for the Spyware failure to
remove!

"Malke" wrote:

> popout wrote:
>
> > Got the removal tool from PCtools. Followed everything. All viruses
> > removed, but still no windows exporer and now multiple popups. Speed also
> > compromised.
>
> What usually happens with those sorts of infections is that they come with
> Zlob and/or Vundo trojans and are protected by a rootkit. They are
> extremely difficult to remove. You can do as I suggested and get guided
> help at one of the forums or you can back up your data and do a clean
> install of Windows. It's your choice of course.
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers - Don't Panic!
> FAQ - http://www.elephantboycomputers.com/#FAQ
>
>

Vundo and the Vundo Variant trojans often delete your System Restore
points and replace them with an infected restore point that will often
cause the virus to reappear after rebooting, even in safe mode. If you
are using Windows ME or XP then you should disable and then enable
system restore to make sure there are no infected files found in a
restore point left over from what was just cleaned. As for keeping it
clean, SuperAntiSpyware has never failed in this task.


--
scupper2008