Antivirus XP 08 virus

[Jonny Rochester]

I think it was a link on this forum that got me the virsus. Anyhow. I still need some help getting fully rid of this. Most of the info from google on this also want you to pay money or lead you into other tricks. Or, my computer crashes just beofre the scan finished. Or the virus won't even let me download the antivirus etc.... So frustrating.

Anyone sucessfuly beat this? And restored the background tab?

[Dom86]

I'm using it. no trouble as yet . you got me worried.

[Jonny Rochester]

"Antivirus XP 08" is the name of a virus, or malware or whatever. It is a fake antivirus that is evil. Mostly evil, in that it will waste a few hours of your time getting rid of it.

[marvis]

Try this mate.

http://www.windowsvistaplace.com/xp-antivi...spyware-removal (http://www.windowsvistaplace.com/xp-antivirus-2008-removal-instructions-xp-antivirus-2008/spyware-removal)

marvis.

[Jonny Rochester]

The link does not work. I think my virus is blocking that site.

[Delazy]

Manual XP Antivirus 2008 Removal Instructions:

Unregister XP Antivirus 2008 DLL Files:
shlwapi.dll
wininet.dll

Stop XP Antivirus 2008 Processes:
XPAntivirus.exe
XPAntivirusUpdate.exe
xpa.exe
xpa2008.exe

Find and Delete these XP Antivirus 2008:
xpa.exe
xpa2008.exe
XPAntivirus.exe
XPAntivirusUpdate.exe
shlwapi.dll
wininet.dll
XP antivirus
XPAntivirus.lnk
Uninstall XPAntivirus.lnk
XPAntivirus on the Web.lnk
XPAntivirus.url
XP Antivirus 2008.lnk
Uninstall XP Antivirus 2008.lnk

Remove XP Antivirus 2008 Registry Values:
HKEY_USERS\Software\XP antivirus

[marvis]

XP Antivirus 2008 Removal Instructions (XP Antivirus 2008)

XP Antivirus 2008 Descriptions:

XP Antivirus 2008 is one of the latest counterfeit antispyware that devastates the wolrd wide web. XP Antivirus 2008 usually come up after you installed a video codec that come with Trojan, malware and virus. XP Antivirus 2008 normally generates fake and misleading system popup error messages so end-users will be tricked into purchase XP Antivirus 2008.

It is very important to remove all the components of of the XP Antivirus 2008 and all the malware and trojans that it might have come bundle with (such as zlob.trojan, trojan.vundo and Trojan.Downloader). To effectively remove XP Antivirus 2008, we have created a manual removal instructions which is easy to understand.



Manual XP Antivirus 2008 Removal Instructions:

Unregister XP Antivirus 2008 DLL Files:
(Learn how to do this) (http://www.xp-vista.com/other/how-to-unregister-dll-files)
shlwapi.dll
wininet.dll

Stop XP Antivirus 2008 Processes:
(Learn how to do this) (http://www.xp-vista.com/other/how-to-stop-or-kill-a-process-in-windows-xp-or-vista)
XPAntivirus.exe
XPAntivirusUpdate.exe
xpa.exe
xpa2008.exe

Find and Delete these XP Antivirus 2008:
(Learn how to do this) (http://www.xp-vista.com/tipstricks/how-to-find-and-delete-a-file-in-windows-xp-or-vista)
xpa.exe
xpa2008.exe
XPAntivirus.exe
XPAntivirusUpdate.exe
shlwapi.dll
wininet.dll
XP antivirus
XPAntivirus.lnk
Uninstall XPAntivirus.lnk
XPAntivirus on the Web.lnk
XPAntivirus.url
XP Antivirus 2008.lnk
Uninstall XP Antivirus 2008.lnk

Remove XP Antivirus 2008 Registry Values:
(Learn how to do this) (http://www.xp-vista.com/troubleshooting/how-to-edit-registry-key-regkey-in-windows-xp-or-vista)
HKEY_USERS\Software\XP antivirus



I would suggest downloading AVG Free and adaware.

[Jonny Rochester]

I tryed all of that.

I still can't download AVG, it is blocked.

[rthy]

best solution


format

thanks Bill Gates...
http://militantgeek.com/wordpress/wp-content/uploads/2006/12/bill-gates-mugshot.jpg

[sr_rolla]

i got this last night, i just used spybot search and destroy

just google spybot s & d free download

restart the comp, the program blocks the xp virus from starting then i did a scan and deleted it.

[Jonny Rochester]

I just tryed that. A link to spybot was blocked, so I can't do that either.

[Dom86]

don't mind me , I'm a knob... i was thinking AVG 08.

Good luck!

[Z-Style]

Go on another comp and download:

AVG Free:
http://free.avg.com/
CCleaner
http://www.ccleaner.com
Ad-Aware
(google it)

Install on your P.C

???

Profit!

You can use ccleaner to delete registry values to disable it from start up (if that's how the processes starts) either hat or go start>run>msconfig and see if its under the start-up tab.

[goldke70]

I'm don't really know, but heard something about this the other day

Apparently you can download the cleaner program you need on another computer, and then rename the startup file so the virus doesn't recognize it when you install it on you machine... then bam and the dirt is gone.

Brought to you by "Easy off Bam" :whistling:

[samuel]

<div class='quotetop'>QUOTE (Jonny Rochester @ Aug 14 2008, 11:58 PM) <{POST_SNAPBACK}> (index.php?act=findpost&pid=575696)</div>
I think it was a link on this forum that got me the virsus.[/b]

Somebody elses link I would say

As far as im aware we're virus free

[monkae86]

1. back up your porn.
2. format c:

[Driftspec]

XP AntiVirus (and all its variants) is incredibly nasty. To remove it is not exactly hard, but it can be infuriating if you want to cover all bases. If you can't go to websites, than you probably have more than that on your machine, as Winantivirus doesn't really do that to computers.

For starters, AVG is crap. Useless, will not get rid of WinAntiVirus. You need a tool called Rogue Remover: http://www.malwarebytes.org/rogueremover.php

See if you can access that. If you can't, then you do have serious issues, and you need to take it to a (good!) local computer tech. Full removal requires a good anti-virus, anti-spyware.

You'll typically find the virus files hiding in \systemroot\Program Files\Video ActiveX Object, or something along those lines. But I have a suspicion you have much worse than WinAntiVirus, that seems to be the least of your worries :(

[Jonny Rochester]

I tried malwarebytes a few times. It starts to scan, then after 10min I think it finds something but the computer crashes. So that is no good either.

I have Antivirus XP 08 which is think is nastyer than the old Antivirus XP 2008.

I have deleted the obvious files, but I still have it.

[kaibeecee]

Forget AVG.

after years of being a IT consultant, I've used every commercially available AV software (almost) and will only continue to use NOD32

right click > save as (http://download.eset.com/eval/win/ess/ess_nt32_enu.msi) Thats a direct link to the 30 day trial, so the malware shouldn't be able to block the mirror address. I've used it to remove the XPAV08 virus in question a few times this week.

Also, clear your IE/firefox cache(s) and reset your browser settings to the default values. that should be enough for you to access the internet and download ad-aware or whatever malware remover you choose and go from there

though if this doesn't work, you've really got to backup and format the hard drive to ensure it's gone.

EDIT: also, unless you delete the registry entries, you'll never get rid of it unfortunately, as theres file dependencies in the registry which won't allow the actual files to be deleted, prompting an error they are 'in use'

boot into safe mode (F8 on startup, before the winXP loading screen) and scan from there.

[ae85 trueno]

Jonny check and make sure it is actually crashing. I just fixed a computer that actually had a screensaver lock which stops you from being able to change it. also deletes desktop pic adjust in your display properties. I thought this comp was crashing at first then i found out it was a BLUE SCREEN SCREENSAVER

don't know whether you have fixed it but if not i can give you a run down on how i fixed this one. kaibeecee is right you will never fully get ride of it but you can dismantle it so it doesnt function.

NOD32 virus scanner is the best of the best as far as I'm concerned and also Superantispyware for spyware

[teknostorma]

I find many virus scan programs actually cause problems.

I would get on a virus forum and get some help getting rid of the virus manually.

I recommend ----- http://malwareteks.com/

[ae85 trueno]

Virus scanners can be very restrictive for what they do and slow the computer right down. Nod32 is a small but very effective program that people who have to repair and clean computers for a living usually know the right tools for there job.

[verm69]

i've come up against this bad boy a few times now and have just formated each time lol

i never get it personally, but it's doing the rounds atm by the sounds...





try boot into safe mode (hit f5 before the windows xp loading screen comes up) and do a scan then, see if that helps. Though you won't be able to get internet whilst in safe mode

[LIL BLU MAN]

Malwarebytes' Anti-Malware removes this, i had this problem on the weekend got rid of it after i got this program, would certainly recomend it.