Click Here to Install Silverlight*
United StatesChange|All Microsoft Sites|Sign in
Microsoft
|Communities Home|Communities Worldwide
  how do i get rid of antivirus 2008 in Home Users Security Discussion  
 |  Edit my Profile  |  Help
 
     
   
 
 
 
zen 7/29/2008 11:39 AM PST
  Question
  a program was automatically downloaded onto my computer while surfing the
web, its called antivirus 2008 and its spyware. i need to get rid of it but
its undeletable.
 
  Was this post helpful to you?  
 
 
  Reply | Print post   TopTop  
 
 
 
 
MowGreen [MVP] 7/29/2008 11:59 AM PST
   
  zen wrote:

> a program was automatically downloaded onto my computer while surfing the
> web, its called antivirus 2008 and its spyware. i need to get rid of it but
> its undeletable.

Please read this tutorial : How to remove Antivirus 2008
http://www.bleepingcomputer.com/malware-removal/antivirus-2008

If you need assistance removing "it", please read the guidelines before
registering and posting at the above forum -

http://www.bleepingcomputer.com/forums/topic34773.html


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============
 
  Was this post helpful to you?  
 
 
  Reply | Print post   TopTop  
 
 
 
 
MowGreen [MVP] 7/29/2008 12:03 PM PST
   
  There's a newer removal page here:
http://www.bleepingcomputer.com/malware-removal/uninstall-antispyware-2008


MowGreen [MVP] wrote:

> zen wrote:
>
>> a program was automatically downloaded onto my computer while surfing
>> the web, its called antivirus 2008 and its spyware. i need to get rid
>> of it but its undeletable.
>
>
> Please read this tutorial : How to remove Antivirus 2008
> http://www.bleepingcomputer.com/malware-removal/antivirus-2008
>
> If you need assistance removing "it", please read the guidelines before
> registering and posting at the above forum -
>
> http://www.bleepingcomputer.com/forums/topic34773.html
>
>
> MowGreen [MVP 2003-2008]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
 
  Was this post helpful to you?  
 
 
  Reply | Print post   TopTop  
 
 
 
 
PA Bear [MS MVP] 7/29/2008 1:39 PM PST
   
  Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://aumha.net/viewforum.php?f=30,
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

zen wrote:
> a program was automatically downloaded onto my computer while surfing the
> web, its called antivirus 2008 and its spyware. i need to get rid of it
> but
> its undeletable.

 
  Was this post helpful to you?  
 
 
  Reply | Print post   TopTop  
 
 
 
 
Milo  7/30/2008 2:58 AM PST
   
  Am concern for the return aspect of that rogueware since its easy to remove
such

My 2 Cents:

Preventive measure:
Please don’t open zip file attached within mails from anonymous sender or so
even from a friend ( confirm first )
- No Security Application in the world can stop a day zero malware other
than they have good detection
Be cautious or so have your security filtering application updated and
running if your kids or family use such PC to go around the web
Do not download anything that implies the file to be compressed ( zip/rar )
and password protected if it didn’t came from a trusted site.
- this usually package music/video/docs alike.

"zen" <zen@discussions.microsoft.com> wrote in message
news:50A056B6-D396-4F65-BDC0-45B490CB4980@microsoft.com...
> a program was automatically downloaded onto my computer while surfing the
> web, its called antivirus 2008 and its spyware. i need to get rid of it
> but
> its undeletable.
 
  Was this post helpful to you?  
 
 
  Reply | Print post   TopTop  
 
 
 
 
Richard Urban 7/31/2008 11:50 PM PST
   
  I just had to cleanse 3 computers of Antivirus XP 2008 yesterday.

I used the free version of MalwareBytes Anti-Malware, available here:
http://www.malwarebytes.org/mbam.php

In each case the malware WAS removed!

--

Richard Urban
Microsoft MVP
Windows Desktop Experience



"zen" <zen@discussions.microsoft.com> wrote in message
news:50A056B6-D396-4F65-BDC0-45B490CB4980@microsoft.com...
>a program was automatically downloaded onto my computer while surfing the
> web, its called antivirus 2008 and its spyware. i need to get rid of it
> but
> its undeletable.

 
  Was this post helpful to you?  
 
 
  Reply | Print post   TopTop  
 
 
 
 
PA Bear [MS MVP] 8/1/2008 12:16 AM PST
   
  While MBAM is pretty useful for such infections (at least for now), simply
running MBAM does not necessarily mean a machine if free of all hijackware,
Richard (e.g., the rootkit protecting the infections).

Richard Urban wrote:
> I just had to cleanse 3 computers of Antivirus XP 2008 yesterday.
>
> I used the free version of MalwareBytes Anti-Malware, available here:
> http://www.malwarebytes.org/mbam.php
>
> In each case the malware WAS removed!
>
>
> "zen" <zen@discussions.microsoft.com> wrote in message
> news:50A056B6-D396-4F65-BDC0-45B490CB4980@microsoft.com...
>> a program was automatically downloaded onto my computer while surfing the
>> web, its called antivirus 2008 and its spyware. i need to get rid of it
>> but
>> its undeletable.

 
  Was this post helpful to you?  
 
 
  Reply | Print post   TopTop  
 
 
 
 
Richard Urban 8/1/2008 12:30 AM PST
   
  Right. But in this case (antivirus XP 2008) there is not any rootkit
involved - to all appearances. I ran Hijack This after the cleansing and it
came up clean.

--

Richard Urban
Microsoft MVP
Windows Desktop Experience



"PA Bear [MS MVP]" <PABearMVP@gmail.com> wrote in message
news:OUCfnY68IHA.4536@TK2MSFTNGP05.phx.gbl...
> While MBAM is pretty useful for such infections (at least for now), simply
> running MBAM does not necessarily mean a machine if free of all
> hijackware, Richard (e.g., the rootkit protecting the infections).
>
> Richard Urban wrote:
>> I just had to cleanse 3 computers of Antivirus XP 2008 yesterday.
>>
>> I used the free version of MalwareBytes Anti-Malware, available here:
>> http://www.malwarebytes.org/mbam.php
>>
>> In each case the malware WAS removed!
>>
>>
>> "zen" <zen@discussions.microsoft.com> wrote in message
>> news:50A056B6-D396-4F65-BDC0-45B490CB4980@microsoft.com...
>>> a program was automatically downloaded onto my computer while surfing
>>> the
>>> web, its called antivirus 2008 and its spyware. i need to get rid of it
>>> but
>>> its undeletable.
>

 
  Was this post helpful to you?  
 
 
  Reply | Print post   TopTop  
 
 
 
 
Kerry Brown 8/1/2008 7:02 AM PST
   
  "PA Bear [MS MVP]" <PABearMVP@gmail.com> wrote in message
news:OUCfnY68IHA.4536@TK2MSFTNGP05.phx.gbl...
> While MBAM is pretty useful for such infections (at least for now), simply
> running MBAM does not necessarily mean a machine if free of all
> hijackware, Richard (e.g., the rootkit protecting the infections).
>
> Richard Urban wrote:
>> I just had to cleanse 3 computers of Antivirus XP 2008 yesterday.
>>
>> I used the free version of MalwareBytes Anti-Malware, available here:
>> http://www.malwarebytes.org/mbam.php
>>
>> In each case the malware WAS removed!
>>
>>


I agree with both of you :-)

I cleaned a Vista computer with AV2009 and a XP computer with AV2008
yesterday. MBAM cleaned both of them. I ran many other scans after MBAM and
they all came up clean. For now MBAM seems to to clean up AV2008/09 very
nicely. How long this will be true is anybodies guess. It did seem unusual
that both pc's didn't have other infections as well. In both cases the users
claimed the infections started by clicking on a link in a Google search. In
both cases they shut down the computers as soon as they realised something
was amiss.

As always I'd never run one scanner and declare a computer malware free.
That said, way to go Malwarebytes!

Unless of course they are using some new rootkit technology that none of the
current scanners find :-(

--
Kerry Brown
MS-MVP - Windows Desktop Experience: Systems Administration
http://www.vistahelp.ca/phpBB2/
http://vistahelpca.blogspot.com/




 
  Was this post helpful to you?  
 
 
  Reply | Print post   TopTop  
 
 
 
 
Derkaderkastan 9/2/2008 9:07 PM PST
   
  its updated itself to have a timeout connection. i just got it on my laptop
last night and ive tried all the links and it has blocked every single one.
wth should i do now lol

"Richard Urban" wrote:

> I just had to cleanse 3 computers of Antivirus XP 2008 yesterday.
>
> I used the free version of MalwareBytes Anti-Malware, available here:
> http://www.malwarebytes.org/mbam.php
>
> In each case the malware WAS removed!
>
> --
>
> Richard Urban
> Microsoft MVP
> Windows Desktop Experience
>
>
>
> "zen" <zen@discussions.microsoft.com> wrote in message
> news:50A056B6-D396-4F65-BDC0-45B490CB4980@microsoft.com...
> >a program was automatically downloaded onto my computer while surfing the
> > web, its called antivirus 2008 and its spyware. i need to get rid of it
> > but
> > its undeletable.
>
>
 
  Was this post helpful to you?  
 
 
  Reply | Print post   TopTop  
 
 
 
 
Malke 9/3/2008 5:25 AM PST
   
  Derkaderkastan wrote:

> its updated itself to have a timeout connection. i just got it on my
> laptop last night and ive tried all the links and it has blocked every
> single one. wth should i do now lol

If you can't get what you need from the infected computer (which shouldn't
be on the Internet or any Local Area Network anyway until it's clean),
you'll need to get tools/instructions, etc. from a clean machine.

Here are removal steps:

http://www.bleepingcomputer.com/malware-removal/uninstall-antivirus-2009
http://www.bleepingcomputer.com/forums/topic154529.html (earlier versions)

These may work for you and all may be well. However, in many cases the
computer will also be infected with Zlob and/or Vundo trojans and protected
by a rootkit. These machines are extremely difficult to clean.

If your machine is one of these cases, either get guided help at one of the
specialty forums below OR back up your data and do a clean install of
Windows. It is your choice. If you are unsure how to back up your data or
how to do a clean install, you can take your machine to a local computer
professional. I don't recommend using BigComputerStore/GeekSquad types of
places.

PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS.

http://aumha.org/downloads/hijackthis.zip
http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://www.malwarebytes.org/forums/index.php?showforum=7
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/
http://www.thespykiller.co.uk/index.php?board=3.0
http://forums.subratam.org/index.php?showforum=7

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

 
  Was this post helpful to you?  
 
 
  Reply | Print post   TopTop  
 
 
 
 
tommy 8/19/2008 1:27 AM PST
   
 

"zen" wrote:

> a program was automatically downloaded onto my computer while surfing the
> web, its called antivirus 2008 and its spyware. i need to get rid of it but
> its undeletable.
 
  Was this post helpful to you?  
 
 
  Reply | Print post   TopTop  
 
 
  Return to Microsoft Communities  Notify me of replies  
 
Windows Live ID

© 2009 Microsoft Corporation. All rights reserved. Contact Us |Terms of Use |Trademarks |Privacy Statement