Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsWindows VistaWindows XPWindows MeWindows 98Windows 95Virtual PCInternet ExplorerOutlook ExpressWindows MediaSecurity
Related Topics
MS Server ProductsMS OfficePC HardwareMore Topics ...

Windows Forum / Security / Viruses / July 2008

Tip: Looking for answers? Try searching our database.

XP Anti Virus

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Dan Heist - 10 Jun 2008 15:07 GMT
When I started my computer this morning I got a page that encouraged me to
download a program called XP Anti Virus. There was an official looking
MicroSoft Security logo in the upper left hand corner.

I did not download the program but somehow wound up with a bunch of XP Anti
Virus files on my computer. I have tried to delete all of them.

Now when I open Internet Explorer to go to MSN I get a virus warning. If I
try to go back to MSN two or three more times, and finally get connected and
try to go to Google, I get a message that Google has found an unregistered
copy of XP Anti Virus. All XP Anti Virus links take me to a page wanting
$49.95 to download this program.

Is this XP Anti Virus a hoax or is it an actual MS program? If it is some
sort of malware or virus, how can I delete it?

Thanks for your help.
Tom [Pepper] Willett - 10 Jun 2008 15:29 GMT
How to remove XPAntiVirus
http://www.bleepingcomputer.com/forums/topic111715.html

: When I started my computer this morning I got a page that encouraged me to
: download a program called XP Anti Virus. There was an official looking
[quoted text clipped - 13 lines]
:
: Thanks for your help.
David H. Lipman - 10 Jun 2008 15:37 GMT
From: "Dan Heist" <DanHeist@discussions.microsoft.com>

| When I started my computer this morning I got a page that encouraged me to
| download a program called XP Anti Virus. There was an official looking
[quoted text clipped - 13 lines]
|
| Thanks for your help.

It is a malware con to get your money.  The fact that you got that warning may mean you are
already infected with a Trojan.

1. Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

2. Disable Notepad's word wrap:
In Notepad.exe;  Format --> uncheck; "Word wrap"

3. Download/run Deckard's System Scanner:
http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post in one of the below
expert forums...

{ Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }

Forums where you can get expert advice for HiJack This! (HJT) and Deckard's System Scanner
Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.malwarebytes.org/forums/index.php?showforum=7

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://aumha.net/viewforum.php?f=30
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13

Signature

Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

C.B. - 10 Jun 2008 16:44 GMT
> When I started my computer this morning I got a page that encouraged me to
> download a program called XP Anti Virus. There was an official looking
[quoted text clipped - 15 lines]
>
> Thanks for your help.

    It's malware. Remove it.

C.B.

Signature

It is the responsibility and duty of everyone to help the underprivileged
and unfortunate among us.

Dell Techie - 16 Jun 2008 15:50 GMT
1. Run Deckard's System Scanner (DSS
http://securitynewsfromthenet.blogspot.com/2008/06/deckards-system-scanner-dss.html

2. Run the vundo and combo fix
http://securitynewsfromthenet.blogspot.com/2007/05/vundofix-and-combo-fix.html

3. Run Malwarebytes Anti-Malwar
http://securitynewsfromthenet.blogspot.com/2008/03/malwarebytes-anti-malware-105.html

4. Run the anti spyware removal programs spybot
http://securitynewsfromthenet.blogspot.com/2007/03/spybot-search-and-destroy-spy
ware-and.html


5  Run Superantispyware
http://securitynewsfromthenet.blogspot.com/2007/04/superantispyware-home-edition
-free.html


6.  Run a complete scan with free curing utility Dr.Web CureIt!
http://securitynewsfromthenet.blogspot.com/2008/05/dr-web-cureit.html

> When I started my computer this morning I got a page that encouraged me to
> download a program called XP Anti Virus. There was an official looking
[quoted text clipped - 13 lines]
>
> Thanks for your help.
lisa8325 - 11 Jul 2008 11:49 GMT
Do you have to run all 6 steps to completely remove any malware?

> 1. Run Deckard's System Scanner (DSS)
> http://securitynewsfromthenet.blogspot.com/2008/06/deckards-system-scanner-dss.html
[quoted text clipped - 31 lines]
> >
> > Thanks for your help.
Malke - 11 Jul 2008 13:04 GMT
> Do you have to run all 6 steps to completely remove any malware?

Follow the removal steps here:

Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, get guided help. Either post at Bleeping Computer or
choose one of the specialty forums listed below. Register and read its
posting FAQ. PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS.

http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/

Malke
Signature

MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

donna.asbrock@gmail.com - 17 Jul 2008 16:16 GMT
> When I started my computer this morning I got a page that encouraged me to
> download a program called XP Anti Virus. There was an official looking
[quoted text clipped - 13 lines]
>
> Thanks for your help.
prijikn - 24 Jul 2008 06:59 GMT
try out AVG Anti-Virus, it's a very good anti-virus spyware that is
free.

Signature

prijikn

 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.