Antivirus XP 2008 - Computer Technical Help - Software and Hardware Forum

Two Plus Two Forums Other Topics Computer and Technical Help

Antivirus XP 2008

Post Reply Subscribe

...

Page 1 of 3

1 2 3

Page 1 of 3

1 2 3

08-26-2008 , 03:11 PM

mcsqr

grinder

Join Date: Aug 2008 Posts: 461

This one has taken away my restore points, interferred with my installed adaware SE program, blocks me from going to any spyware sites to download any other anti-spyware program, and misdirects google and other search engine searches.

So I can't it off my system.

Any idea?

Quote

$25m Guaranteed WPM on CoinPoker

Join the action now

Daily Rewards • Splash Pots • CoinRaces

08-26-2008 , 03:17 PM

F. McSimmons

old hand

Join Date: May 2007 Posts: 1,846

Try this:

Download, install, and update MBAM. Run a quick scan, fix all it finds, and post the log here.

Then download Hijackthis and run a scan and save a log. DO NOT FIX ANYTHING WITH HIJACKTHIS YET. Post the log here.

If you cannot reach those sites to download post back here.

Quote

08-26-2008 , 03:26 PM

mcsqr

grinder

Join Date: Aug 2008 Posts: 461

I am blocked from going to your first link.

I can get to the second, but all download attempts are blocked.

Quote

08-26-2008 , 03:29 PM

F. McSimmons

old hand

Join Date: May 2007 Posts: 1,846

Do you have another computer you could use to download them? What are you using for a browser?

Quote

08-26-2008 , 03:45 PM

mcsqr

grinder

Join Date: Aug 2008 Posts: 461

Window XP

No access another PC today

Quote

08-26-2008 , 03:52 PM

F. McSimmons

old hand

Join Date: May 2007 Posts: 1,846

Have you tried booting into safe mode with networking?

Reboot your computer and while it is booting up tap the F8 key repeatedly until you get the Advanced Options Menu. Select safe mode with networking.

Quote

08-26-2008 , 04:28 PM

mcsqr

grinder

Join Date: Aug 2008 Posts: 461

Ill try that

What do I do when in that mode?

I cant do system restore.

Quote

08-26-2008 , 04:32 PM

F. McSimmons

old hand

Join Date: May 2007 Posts: 1,846

Quote:

Originally Posted by mcsqr

Ill try that

What do I do when in that mode?

I cant do system restore.

Try and get to this thread and see if the downloads will go.

Quote

08-26-2008 , 04:38 PM

mcsqr

grinder

Join Date: Aug 2008 Posts: 461

My networking speed improved, but there still clearly interference from the virus.

I can't access your first website, and can't do a download from the second, just as before.

Quote

08-26-2008 , 05:20 PM

#10

F. McSimmons

old hand

Join Date: May 2007 Posts: 1,846

You use Internet Explorer, correct?

Quote

08-26-2008 , 05:27 PM

#11

mcsqr

grinder

Join Date: Aug 2008 Posts: 461

Yes I do. I also have AOL installed, but it responds the same way as IE (same virus interference). Does AOL use IE?

I get frequent error messages, which I ignore.

And I have to refresh to get full page loads often.

And eventually it takes up all my CPU and I have to reboot.

It does work better in safe mode than normal mode.

The virus is blocking a lot of sites (lavasoft and other antivirus sites for sure)

I can't even read the technical forums out there when I do a search on "Antivirus XP 2008" as I get redirected to totally unrelated sites.

Quote

08-26-2008 , 05:39 PM

#12

F. McSimmons

old hand

Join Date: May 2007 Posts: 1,846

They are both based on Trident, yes.

Your best bet is to download the programs on another computer and use a USB flash drive to transfer them over to your computer.

http://download.bleepingcomputer.com...mbam-setup.exe

What happens when you click the above link?

Quote

08-26-2008 , 05:54 PM

#13

mcsqr

grinder

Join Date: Aug 2008 Posts: 461

That link is another blocked website with the typical "The page cannot be displayed" message.

Quote

08-26-2008 , 06:06 PM

#14

F. McSimmons

old hand

Join Date: May 2007 Posts: 1,846

http://drop.io/download/48b47e3f/792...bam-setup2.exe

I uploaded the file to drop.io

What happens now?

Quote

08-26-2008 , 06:25 PM

#15

mcsqr

grinder

Join Date: Aug 2008 Posts: 461

Like all attempts at downloads I get a "[temporary file location][install file name].exe is not a valid win32 application" message.

I never had this problem before the virus.

Quote

08-26-2008 , 06:41 PM

#16

funkyworms

Pooh-Bah

Join Date: Jun 2004 Posts: 4,250

Download the file in safe mode. Use the "save" button, not the "open" button. Try to save the file to your desktop.

Quote

08-26-2008 , 07:19 PM

#17

mcsqr

grinder

Join Date: Aug 2008 Posts: 461

I get the same results (win32 message) in safe mode.

When I "save" it to desktop, it is done in one second. It says the file has 39K bytes, but I question this because it was so fast. When I click on the icon on the desktop I get the same win32 error message.

Quote

08-26-2008 , 07:44 PM

#18

F. McSimmons

old hand

Join Date: May 2007 Posts: 1,846

Try this one:

https://www.cleverbridge.com/342/coo...mbam-setup.exe

It should be around 2mb.

Quote

08-26-2008 , 07:51 PM

#19

mcsqr

grinder

Join Date: Aug 2008 Posts: 461

I get the Cannot find server msg.

I did a news search on Antivirus SP 2008 and it looks like it is new (past week) and very hard to deal with. Which I already know because it has so many defenses against being removed. Maybe a week from now some new ways to get it removed will be figured out.

This could affect a lot of us. It is hidden in normal video files.

Last edited by mcsqr; 08-26-2008 at 08:03 PM.

Quote

08-26-2008 , 08:16 PM

#20

F. McSimmons

old hand

Join Date: May 2007 Posts: 1,846

Antivirus XP 2008 is usually installed through a "media codec" trojan found on porn sites.

Quote

08-26-2008 , 08:17 PM

#21

tepgn

enthusiast

Join Date: Mar 2005 Posts: 99

Are you sure you didn't fall for the old fake codec scam? The nasty one is the Zlob trojan which sits there in the background and downloads further malware as and when it pleases.

Quote

08-26-2008 , 09:50 PM

#22

LirvA

banned

Join Date: Sep 2007 Posts: 43,505

We can get rid of it if you can get these apps onto your computer.

Quote

08-27-2008 , 02:32 AM

#23

renegades8

old hand

Join Date: Jun 2007 Posts: 1,679

It looks like you might have to download the programs on another computer and transfer it over to the infected computer, then install them.

Quote

08-27-2008 , 07:41 AM

#24

mcsqr

grinder

Join Date: Aug 2008 Posts: 461

Unfortunately I don't have any friends living close, so I will probably have to call a tech guy to do the flash drive transfer thing.

I'm going away for a few days now. Leaving the virus on my computer until I get back.

If anyone has any further ideas post them please. This will be the first place I check when I get back in a few days.

Thanks for all the help.

Quote

09-02-2008 , 05:10 PM

#25

Jehaim

Pooh-Bah

Join Date: Nov 2005 Posts: 5,055

Oh man, I got hit by this too.

The worse thing is I dont know where I got it from.

As far as i know I was just surfing and BOOM HEADSHOT! i was owned.......

Couldnt do anything, just like OP.

I reinstalled my comp to be sure.

But wtf, I have 3 'security' programs running and this mother****er gets through..

So sick. I really dont know where got it from. I never ever ever click on something that is sketchy.

I read it can come within video codecs, well I wasnt watching or loading a vid.

The reinstall wasnt the problem, just knowing it can hit me right now is ****ed up...

Last edited by Jehaim; 09-02-2008 at 05:16 PM.