| Pages: [1] :: one page |
| Author |
Thread Statistics | Show CCP posts - 0 post(s) |

Belladona Grimm
Raven's Heart
|
Posted - 2008.12.29 05:16:00 -
[1]
So, the lovely automatic Micro-**** updater has been blitzing me with alert messages saying my 'MS AntiSpyware 2009' needs to be registered. Fist off, I've never registered for an anti-virus program in my live, and have no idea what the crap this is, but it won't go away.
Anyone have any suggestions on what I should snag to scan my pc that will be more effective them the McAfee that I got free from my provider that can't seem to clean anything? 
|

DubanFP
Caldari R.U.S.T.
|
Posted - 2008.12.29 05:19:00 -
[2]
Edited by: DubanFP on 29/12/2008 05:22:36
Originally by: Belladona Grimm So, the lovely automatic Micro-**** updater has been blitzing me with alert messages saying my 'MS AntiSpyware 2009' needs to be registered. Fist off, I've never registered for an anti-virus program in my live, and have no idea what the crap this is, but it won't go away.
Anyone have any suggestions on what I should snag to scan my pc that will be more effective them the McAfee that I got free from my provider that can't seem to clean anything? 
Anti-virus XP 2009 is a virus in itself. Basically it gets onto your system and refuses to get out until you pay for its "antivirus". Of course it also adds a few things that give false alerts to legitimate antivirus stuff and it can come packaged with any number of viruses too. It also places an item in the registry that gives the false alert you're seeing now. _______________
"It's not about the look of your ship or the size of your guns. It's about how much **** you can @#$# up with it" |

Belladona Grimm
Raven's Heart
|
Posted - 2008.12.29 05:21:00 -
[3]
Lovely. I was thinking it might be, what with the random 'you downloaded us and so this started' sans actual download. What a load of horse ****. First one in years 
|

DubanFP
Caldari R.U.S.T.
|
Posted - 2008.12.29 05:35:00 -
[4]
Edited by: DubanFP on 29/12/2008 05:44:03 I had it, and I've actually seen quite a few others who have had it. The problem is it's one of those extremely few viruses that you don't actually have to do something stupid to get. Just visit a site with a infected common advertisement in explorer and you're hit. At least it's not to hard to get rid of as far as viruses go.
First you need to remove the program that's giving you the alert from the registry. Hit ctrl+alt+delete and find the suspicious file under processes. It should one of a very few files running under your user name. For the following DO NOT TOUCH explorer.exe or anything under System or Local/Network Service.
The offending file should be pretty obvious from the start if you know what you have running. If you're still not sure end any suspicious or unaccounted for processes under your user name one at a time until the popups stop showing up. Remove said offender from the registry with your program of choice and the popups should be gone.
After that the malicious automatically running part of the program should be gone but you'll still have anti-spyware stuck on your desktop. The best way to get rid of the anti-spyware itself is to find the antispyware 2009 folder in program files, delete "uninstall.exe", and you should be unable to uninstall the program itself normally from the add or remove programs tab. _______________
"It's not about the look of your ship or the size of your guns. It's about how much **** you can @#$# up with it" |

Belladona Grimm
Raven's Heart
|
Posted - 2008.12.29 06:10:00 -
[5]
Well, I've got it off the process list. T'was msanti2009 or some such so even I could find it. But I don't seem to have it on my programs list, and when I go into the file folder I can't seem to find an uninstall.exe for it. I even went so far as to do a system search for any uninstall.exe and didn't get one poping up for this. Why does this always happen in the middle of the night when you really would rather go to bed?
|

DubanFP
Caldari R.U.S.T.
|
Posted - 2008.12.29 06:23:00 -
[6]
Edited by: DubanFP on 29/12/2008 06:25:14
Originally by: Belladona Grimm Well, I've got it off the process list. T'was msanti2009 or some such so even I could find it. But I don't seem to have it on my programs list, and when I go into the file folder I can't seem to find an uninstall.exe for it. I even went so far as to do a system search for any uninstall.exe and didn't get one poping up for this. Why does this always happen in the middle of the night when you really would rather go to bed?
So Antivirus XP 2009 is showing up on your desktop and/or start/programs but you can't find the folder containing them correct? If you've ended the task and removed it from the registry the popups should be gone and nothing of the virus should run unless you actually open the file from the desktop again or try to uninstall it "the uninstaller runs the program and makes you restart from scratch". _______________
"It's not about the look of your ship or the size of your guns. It's about how much **** you can @#$# up with it" |

Belladona Grimm
Raven's Heart
|
Posted - 2008.12.29 06:32:00 -
[7]
Originally by: DubanFP
So Antivirus XP 2009 is showing up on your desktop and/or start/programs but you can't find the folder containing them correct? If you've ended the task and removed it from the registry the popups should be gone and nothing of the virus should run unless you actually open the file from the desktop again or try to uninstall it "the uninstaller runs the program and makes you restart from scratch".
Well I found the program file, just not an uninstall.exe and neither MSantispyware2009 or the CrucialSoft LTD name the folder was under were on the add/remove list or the start menu programs list. I deleted the whole damn thing and when I rebooted I didn't get the process running again and it didn't get any hits on 'antispyware'.
Before I did that the install wizard kept borking when I tried to install Ad-Aware 08, but not it worked and I'm running a scan now to get any registry keys.
And, before I forget, thanks a ton for your assistance DurbanFP
|

DubanFP
Caldari R.U.S.T.
|
Posted - 2008.12.29 06:45:00 -
[8]
Edited by: DubanFP on 29/12/2008 06:56:15
Originally by: Belladona Grimm
Well I found the program file, just not an uninstall.exe and neither MSantispyware2009 or the CrucialSoft LTD name the folder was under were on the add/remove list or the start menu programs list. I deleted the whole damn thing and when I rebooted I didn't get the process running again and it didn't get any hits on 'antispyware'.
Before I did that the install wizard kept borking when I tried to install Ad-Aware 08, but not it worked and I'm running a scan now to get any registry keys.
And, before I forget, thanks a ton for your assistance DurbanFP
I had it back in August and even then I found a couple variants when I looked it up. My guess is your version had been changed a bit and/or whatever you used to remove it got both. In short, everything potentially damaging should be gone.
Just to be on the safe side delete the Antispyware XP 2009 folder, restart your computer, and make sure it doesn't come back. If the folder stays gone you've probebly gotten rid of it. If it comes back you missed something.
P.S. there is no R in my name :-). Duban. Don't worry, it's an annoyingly common mistake. Oh and NP for the help. _______________
"It's not about the look of your ship or the size of your guns. It's about how much **** you can @#$# up with it" |

Belladona Grimm
Raven's Heart
|
Posted - 2008.12.29 06:57:00 -
[9]
Originally by: DubanFP
I had it back in August and even then I found a couple variants when I looked it up. My guess is your version had been changed a bit and/or whatever you used to remove it got both. In short, everything potentially damaging should be gone.
Just to be on the safe side delete the Antispyware XP 2009 folder, restart your computer, and make sure it doesn't come back. If it stays gone you've probebly gotten rid of it. If it comes back you missed something.
P.S. there is no R in my name :-). Don't worry, it's an annoyingly common mistake. Oh and NP for the help.
Ha! Gotta love that annoying 'ppl need only see the first and last of a word to auto fill the rest' bent. Sorry 
I did delete the whole folder, and it seems to be gone so I'm just running every full scan I have all night, since all of them going at once is gonna probably take that long, to be sure.
|

DubanFP
Caldari R.U.S.T.
|
Posted - 2008.12.29 07:02:00 -
[10]
Edited by: DubanFP on 29/12/2008 07:06:04
Originally by: Belladona Grimm Ha! Gotta love that annoying 'ppl need only see the first and last of a word to auto fill the rest' bent. Sorry 
I did delete the whole folder, and it seems to be gone so I'm just running every full scan I have all night, since all of them going at once is gonna probably take that long, to be sure.
I wouldn't be too worried if it picks one or two things on your first scan. Like I said, antivirus 2009 intentionally place false positives on your computer every time it starts up. The harmful stuff should be gone and without the AV 2009 running the false positives shouldn't come back. Just restart your computer once and run the AV again to make sure of that. _______________
"It's not about the look of your ship or the size of your guns. It's about how much **** you can @#$# up with it" |

Meek Wriggle
|
Posted - 2008.12.29 07:07:00 -
[11]
My brother got this on both his desktop PC (in November) and later (beginning of December) he got a different variation of it on his laptop. In the case of his desktop I just ran loads of different anti-spyware/anti-virus programs (Spybot, Ad-Aware, AVG, and some others). That got rid of it.
His laptop was a different story though. It wouldn't boot up fully into Windows. Instead it just came up with the spoof anti-virus virus. I suppose I could have gone in to safe mode and got rid of it there, but I went for a format instead.
|

Lady Branwen
Amarr Ministry of War
|
Posted - 2008.12.29 12:06:00 -
[12]
try HitManPro you can get it at www.hitmanpro.nl page is in Dutch, but installer is in English, it runs multiple anti spyware programs, including adaware and spybot, but when you've installed go into the settings and tell it NOT to run "Spyware Doctor and Spysweeper" they are just trial versions, and wont clean jack, also tell it to "Accept all lisence agreements" make any other changes you need and hit start and sit back in wonder, it's really good.
|

clone 1
Laughing Leprechauns Corporation Lotto Syndicate
|
Posted - 2008.12.29 12:24:00 -
[13]
You can also use Malwarebytes Anti-Malware great tool for getting rid of Antivirus2009 and variants. -------------------------------------------------- The Angels Have the Phone Box |
| |
|
| Pages: [1] :: one page |
| First page | Previous page | Next page | Last page |