antivirus 2009

[dkff49]

My wife called me at work today to tell me that she keeps getting this popup from "Antivirus 2009". It first asks if she wants to do free scan and whenever she tries to close this popup it does it's "scan" (I think this is a fake scan) anyway and says that it detected viruses and she needs to download. If she closes this window it starts all over. It also works this way no matter what website she goes to and won't let her do any surfing at all.

Now my McAfee can't find any bad files after doing scan and the CA spyware scanner that I also use as an extra also doesn't salve it.

2 questions

1) Has anybody here had this problem with this or something like it and what have you done to fix?

2) I have done some searching over the net using laptop and some others form other sites have said that system restore can fix this issue. My question is will this get rid of the problem or just mearly cover it up? In other words I want to make sure that this thing won't just pop back up later and cause further issues because I just pushed it under the rug instead of getting rid of it.

thanks for your help here.

[Saxman]

I deal with this one all the time at work.

Download Malwarebytes Anti-Malware. AFAIK it's the only scanner that even detects it. You can also look in the running processes for WAV (can't remember the extension off-hand, tho) and kill it there. This will stop the popups and any interference with normal web browsing.

This is a nasty little bastage. Some versions even hijack Windows Security Center.

[MotleyCH]

Antivirus 2009, also known as Antivirus2009, is a rogue anti-spyware program that uses false spyware results to lure you to purchase its full version. Antivirus2009 is an updated version...

Try "Spybot Search & Destroy", its free.

[rob53]

My son had that on his computer.  I agree with Saxman, malwarebytes was the only thing that I found would detect it and get rid of it.
Google "malwarebytes anti malware". 


Rob

[Saxman]

Motley,

Spybot doesn't detect it, unless they've released an update recently that does.

[1pLUs44]

AVG does pretty well for me. I still cant use Intardnet Explorer as there's tons of viruses waitin for me on it.

[CAP1]

Antivirus 2009, also known as Antivirus2009, is a rogue anti-spyware program that uses false spyware results to lure you to purchase its full version. Antivirus2009 is an updated version...

Try "Spybot Search & Destroy", its free.

spybot search and destroy has saved my arse a couple times........that and zone alarm.

i just read down further.......didn't know spybot didn't find this one.
how does this malware infect your puter?
is it delivered through emails, or if you're not careful about what websites you go to?

like....what do we watch out for to NOT get it?

thanks

[Denholm]

AVG does pretty well for me. I still cant use Intardnet Explorer as there's tons of viruses waitin for me on it.

Please recognize the differences between Malware, Spyware, and Viruses before you recommend software to, "Help" someone.

You recommended Anti-Virus Software when the issue is Spyware/Malware related.

[1pLUs44]

I have Vundo for Malaware. But it doesn't do any good for me either.  AVG can find malaware as well.

[Denholm]

However Grisoft's main strength has been and most likely will always be in anti-virus programs. Therefore it's a better idea to download or buy a piece of software from a company that was basically founded on the principle of battling spyware/malware.

[Buzzard7]

Malwarebytes got rid of that nasty bugger for me. It will keep dropping and changing if your not careful.
Mcaffee doesn't see it.

[MotleyCH]

Motley,

Spybot doesn't detect it, unless they've released an update recently that does.

Ok, was just a suggestion since it seemed to work on about everything before. There does seem to be an entry for "Antivirus 2009 Spyware" at Spybots Website, not sure if it works.

[dkff49]

Just did some testing at home and it seems that it might not be on my computer. It appears to be running from a link on yahoo. I am going to be emailing them now to let them know that something weird is going on there.

The search I did on Yahoo was "Adams County SPCA" and the first link is "adamscountyspca.net" when I click on the link it pops up with the window that tells you to do a scan and no matter what you click it sends you to a webpage that looks like it is scanning your computer. I am very sure i is not since it is a webpage. Iknow it is a webpage because I can clik the back button pull down menu and get back to yahoo again.

I tested this on my home computer and my laptop and t does it on both.

I am still going to download anti-malware though to make sure.


thanks for your guys, I knew I could count on you guys.

 

[CAP1]

Just did some testing at home and it seems that it might not be on my computer. It appears to be running from a link on yahoo. I am going to be emailing them now to let them know that something weird is going on there.

The search I did on Yahoo was "Adams County SPCA" and the first link is "adamscountyspca.net" when I click on the link it pops up with the window that tells you to do a scan and no matter what you click it sends you to a webpage that looks like it is scanning your computer. I am very sure i is not since it is a webpage. Iknow it is a webpage because I can clik the back button pull down menu and get back to yahoo again.

I tested this on my home computer and my laptop and t does it on both.

I am still going to download anti-malware though to make sure.


thanks for your guys, I knew I could count on you guys.

 

yaknow what? i forget what i was looking for, but it was on the shop machine. i got a screen similar to what you said, and when i tried to click the red "X" to close the box, it opened my "my documents" folder, and started scanning. i immediatly shut down th eputer, and pulled the cable out of the router. waited a few, then rebooted, scanned with norton, and spybot. spybot found bunches of bad stuff, and cleared it out. i haven't had any problems since then, and it's been about 2 weeks now.

[Latrobe]

I had the same thing happen, and just did a system restore. Seems to have worked, I haven't had any troubles.