Windows Antivirus 2008-can't get rid of it!

[AMink]

My McAfee and Spy Sweeper can't seem to find this thing and get rid of it. I'm not savvy enough to track it down myself, and I'm concerned that if I download some other antivirus/spyware stuff, it won't work with what I have. Has anyone else got this thing and got rid of it? How!?

 

[Joe G.]

If that thing is like Norton it's like a cancer in the system. I had to edit the registry and manually delete a bunch of support files to get rid of a trial copy of Norton. The thing was too much in my face and aggravating. I thought I was going to have to reinstall the system from the release CDs before I finally go rid of Norton. You may have to take your system to a computer shop.

 

[AMink]

It's not from Microsoft. It is designed to "LOOK" like a microsoft product. From what I can find, it is in the registry and two or three other places. It is annoying, but doesn't seem to do anything else... yet.

 

[Joe G.]

Have you tried to use the normal uninstall process?

 

[AMink]

It doesn't show up as a program, so there is nothing to uninstall, at least that I can find. I have found info on it, so you'd think Spy Sweeper or McAfee would find it. I've done multiple sweeps both in regular and secure modes with no luck. I can't find any of the exe files listed online, so I'm kind of at a dead end. I think folks who mess with other people's stuff should be tied between two CTD's and stretched!

 

[daytripper63]

I tried 4 different anti viruses to get rid of it and the only one that worked is SPYZOOKA SpyZooka - Your Ultimate Spyware Solution

thay also have a 100% money back guarantee

 

[gonehuntingagain]

I've had a few of these to deal with at work lately. It is coming in from email that looks like it is from UPS or the US Customs Service, and it is contained in an attached zip file that contains an executable file... Even though the email address listed next to the name is something like -- email address removed --.

Seems like some are worse than others, not sure if it is because of different patch levels or what. The worse ones kill Symantec AV Corporate ed and SpyBot, etc.

Moral of the story - pay attention to where your email comes from and do not run files with a . exe extension that you get in an email.

I totally agree with AMink - severe punishment for the a-holes that write this stuff!

 

[AMink]

Well, Spyzooka found and cleaned the Antivirus 2008. My computer is now running so slowly that it take over 5 minutes for it to open some programs. This happened suddenly before I got rid of the adware. GRRR!#@$%! Now I can't figure what's making it go slow!

 

[daytripper63]

Well, Spyzooka found and cleaned the Antivirus 2008. My computer is now running so slowly that it take over 5 minutes for it to open some programs. This happened suddenly before I got rid of the adware. GRRR!#@$%! Now I can't figure what's making it go slow!

With the Spyzooka you can send the report to spyzooka and tell them what your computer is doing or in your case not doing and they will analyze and help you with the problem. they are the best I have found

 

[ACoyle]

try this

|MG| RogueRemover Free 1. 24

 

[fest3er]

I found this link via The Spamhaus Project: Is your PC infected or part of a "botnet"? Check it Here



That leads to MyNetWatchman and a program you can download and run: SecCheck SCU



This program uses 'forensics' to detect shenanigans. Like all detectors, this one probably isn't perfect. But I figger if Spamhaus is touting it, it must be pretty decent.



mNW also has a guide to read: mNW Disinfection Guide



In particular, read the 'best practices' near the middle of this page.

 

[WDaniels]

AMink,

If you want to see what processes are running on your puter, I use an open source program called Sysinternals Process Explorer and it can be found at the 3w's. sysinternals.com. It is free and I find it a whole bunch better than the windows process explorer. Give it a try and it should be able to tell you what is using all your resources on your rig.

WD



P. S. Whats with the forum adding additional URL information to www.addresses? It is irratating at best!

 

[fest3er]

... P. S. Whats with the forum adding additional URL information to www.addresses? It is irratating at best!

No more so than you Northerners who are confortable wearin' tshirts 'n' shorts an' goin' out barefoot when it's -40.

 

[rbattelle]

My in-laws got this one on their computer. I removed it manually roughly according to one of the instruction sets online. Something like this.

Particularly nasty infection.

Ryan

 

[AMink]

I removed it manually roughly according to one of the instruction sets online.

Did you have to do a search for each item, or did you just go through the files until you found them?

 

[WDaniels]

No more so than you Northerners who are confortable wearin' tshirts 'n' shorts an' goin' out barefoot when it's -40.

Hey Fest,

Yes there are idiots up here that go out at -40 with tshirts on. Guilty as charged. Shorts for a short time, a real short time. Again, guilty as charged. But you find me a person who goes out barefoot at -40 and I'll call them "Sir!" or "Ma'me!" Anywise, its only till the Air Force lets me retire with full bennies then I'm gone to my other diesel. It's a Westerbink in a 44' sail boat and I'm gone to parts unknown!

WD

 

[rbattelle]

Did you have to do a search for each item, or did you just go through the files until you found them?

As I recall, I searched for "wav" files in the registry and deleted what was obviously from them.



Once you get the processes closed down, it's not too bad. Make a backup of the registry before starting in case you delete something by accident.



Ryan

 

[BNH4221]

Oh boy.



I have that rotten virus or something. Funny thing is, it only pops up when my wife is logged in. We have seperate log in id's.



I tried to run McAfee on her side and it wouldnt run. Runs fine on my side. Same as you guys, multiple sweeps with ad aware, spybot and Mcafee with no luck.



Now the computer won't boot up. Says something about error at USB-d checkpoint. Tried f12 and f2 with no luck.



Any suggestions? I am typing this at work so I will have to check back later tonight or tomorrow. Appreciate all help.



No punishment is enough for these people..... #@$%!



Steve

 

[rbattelle]

Now the computer won't boot up. Says something about error at USB-d checkpoint. Tried f12 and f2 with no luck.

Try F8. I think that will open the Windows menu where you can enter safe mode.



Ryan

 

[BNH4221]

Sorry Ryan,



Tried that too. Nothing. Guess it's time for the Geek Squad... .....





Steve