Aces High Bulletin Board

General Forums => The O' Club => Topic started by: dkff49 on November 11, 2008, 03:35:46 PM

Title: antivirus 2009
Post by: dkff49 on November 11, 2008, 03:35:46 PM
My wife called me at work today to tell me that she keeps getting this popup from "Antivirus 2009". It first asks if she wants to do free scan and whenever she tries to close this popup it does it's "scan" (I think this is a fake scan) anyway and says that it detected viruses and she needs to download. If she closes this window it starts all over. It also works this way no matter what website she goes to and won't let her do any surfing at all.

Now my McAfee can't find any bad files after doing scan and the CA spyware scanner that I also use as an extra also doesn't salve it.

2 questions

1) Has anybody here had this problem with this or something like it and what have you done to fix?

2) I have done some searching over the net using laptop and some others form other sites have said that system restore can fix this issue. My question is will this get rid of the problem or just mearly cover it up? In other words I want to make sure that this thing won't just pop back up later and cause further issues because I just pushed it under the rug instead of getting rid of it.

thanks for your help here.
Title: Re: antivirus 2009
Post by: Saxman on November 11, 2008, 04:03:31 PM
I deal with this one all the time at work.

Download Malwarebytes Anti-Malware. AFAIK it's the only scanner that even detects it. You can also look in the running processes for WAV (can't remember the extension off-hand, tho) and kill it there. This will stop the popups and any interference with normal web browsing.

This is a nasty little bastage. Some versions even hijack Windows Security Center.
Title: Re: antivirus 2009
Post by: MotleyCH on November 11, 2008, 04:05:07 PM
Antivirus 2009, also known as Antivirus2009, is a rogue anti-spyware program that uses false spyware results to lure you to purchase its full version. Antivirus2009 is an updated version...

Try "Spybot Search & Destroy", its free.
Title: Re: antivirus 2009
Post by: rob53 on November 11, 2008, 04:26:11 PM
My son had that on his computer.  I agree with Saxman, malwarebytes was the only thing that I found would detect it and get rid of it.
Google "malwarebytes anti malware". 


Rob
Title: Re: antivirus 2009
Post by: Saxman on November 11, 2008, 05:15:05 PM
Motley,

Spybot doesn't detect it, unless they've released an update recently that does.
Title: Re: antivirus 2009
Post by: 1pLUs44 on November 11, 2008, 05:16:37 PM
AVG does pretty well for me. I still cant use Intardnet Explorer as there's tons of viruses waitin for me on it.
Title: Re: antivirus 2009
Post by: CAP1 on November 11, 2008, 05:38:08 PM
Antivirus 2009, also known as Antivirus2009, is a rogue anti-spyware program that uses false spyware results to lure you to purchase its full version. Antivirus2009 is an updated version...

Try "Spybot Search & Destroy", its free.

spybot search and destroy has saved my arse a couple times........that and zone alarm.

i just read down further.......didn't know spybot didn't find this one.
how does this malware infect your puter?
is it delivered through emails, or if you're not careful about what websites you go to?

like....what do we watch out for to NOT get it?

thanks
Title: Re: antivirus 2009
Post by: Denholm on November 11, 2008, 05:41:58 PM
AVG does pretty well for me. I still cant use Intardnet Explorer as there's tons of viruses waitin for me on it.
Please recognize the differences between Malware, Spyware, and Viruses before you recommend software to, "Help" someone.

You recommended Anti-Virus Software when the issue is Spyware/Malware related.
Title: Re: antivirus 2009
Post by: 1pLUs44 on November 11, 2008, 05:47:57 PM
I have Vundo for Malaware. But it doesn't do any good for me either.  AVG can find malaware as well.
Title: Re: antivirus 2009
Post by: Denholm on November 11, 2008, 05:57:47 PM
However Grisoft's main strength has been and most likely will always be in anti-virus programs. Therefore it's a better idea to download or buy a piece of software from a company that was basically founded on the principle of battling spyware/malware.
Title: Re: antivirus 2009
Post by: Buzzard7 on November 11, 2008, 07:03:57 PM
Malwarebytes got rid of that nasty bugger for me. It will keep dropping and changing if your not careful.
Mcaffee doesn't see it.
Title: Re: antivirus 2009
Post by: MotleyCH on November 11, 2008, 07:08:41 PM
Motley,

Spybot doesn't detect it, unless they've released an update recently that does.

Ok, was just a suggestion since it seemed to work on about everything before. There does seem to be an entry for "Antivirus 2009 Spyware" at Spybots Website, not sure if it works.
Title: Re: antivirus 2009
Post by: dkff49 on November 11, 2008, 10:01:32 PM
Just did some testing at home and it seems that it might not be on my computer. It appears to be running from a link on yahoo. I am going to be emailing them now to let them know that something weird is going on there.

The search I did on Yahoo was "Adams County SPCA" and the first link is "adamscountyspca.net" when I click on the link it pops up with the window that tells you to do a scan and no matter what you click it sends you to a webpage that looks like it is scanning your computer. I am very sure i is not since it is a webpage. Iknow it is a webpage because I can clik the back button pull down menu and get back to yahoo again.

I tested this on my home computer and my laptop and t does it on both.

I am still going to download anti-malware though to make sure.


thanks for your guys, I knew I could count on you guys.

 :salute
Title: Re: antivirus 2009
Post by: CAP1 on November 11, 2008, 10:14:23 PM
Just did some testing at home and it seems that it might not be on my computer. It appears to be running from a link on yahoo. I am going to be emailing them now to let them know that something weird is going on there.

The search I did on Yahoo was "Adams County SPCA" and the first link is "adamscountyspca.net" when I click on the link it pops up with the window that tells you to do a scan and no matter what you click it sends you to a webpage that looks like it is scanning your computer. I am very sure i is not since it is a webpage. Iknow it is a webpage because I can clik the back button pull down menu and get back to yahoo again.

I tested this on my home computer and my laptop and t does it on both.

I am still going to download anti-malware though to make sure.


thanks for your guys, I knew I could count on you guys.

 :salute

yaknow what? i forget what i was looking for, but it was on the shop machine. i got a screen similar to what you said, and when i tried to click the red "X" to close the box, it opened my "my documents" folder, and started scanning. i immediatly shut down th eputer, and pulled the cable out of the router. waited a few, then rebooted, scanned with norton, and spybot. spybot found bunches of bad stuff, and cleared it out. i haven't had any problems since then, and it's been about 2 weeks now.
Title: Re: antivirus 2009
Post by: Latrobe on November 12, 2008, 05:34:17 AM
I had the same thing happen, and just did a system restore. Seems to have worked, I haven't had any troubles.
Title: Re: antivirus 2009
Post by: Denholm on November 12, 2008, 08:41:09 AM
System Restore?!

You must not be ranked rather highly in the category of, "Fix the Problem." :D
Title: Re: antivirus 2009
Post by: Fulmar on November 12, 2008, 11:21:03 AM
System Restore?!

You must not be ranked rather highly in the category of, "Fix the Problem." :D
I'd rather hit my keyboard with a hammer than use System restore :D
Title: Re: antivirus 2009
Post by: Ack-Ack on November 12, 2008, 12:59:06 PM
I deal with this one all the time at work.

Download Malwarebytes Anti-Malware. AFAIK it's the only scanner that even detects it. You can also look in the running processes for WAV (can't remember the extension off-hand, tho) and kill it there. This will stop the popups and any interference with normal web browsing.

This is a nasty little bastage. Some versions even hijack Windows Security Center.

I got hit by this crap hard at work.  The version I got hijacked the Windows Security Center and also managed to prevent me from being able to update my anti-spyware/virus programs.  In addition to that, it also prevented me from going to any site where I could download anti-virus/spyware programs.  It also hijacked the search engines, when I would search for something on Google and click on one of the links, I would get redirected to some marketing portal site.  Our IT department had to re-image my computer to make sure that they got rid of it.


ack-ack
Title: Re: antivirus 2009
Post by: bcadoo on November 12, 2008, 05:04:00 PM
I own my own pc repair business.  I have removed this along with other variants of it several times over the past few months.

I recommend sdfix (search for it on google)

Download and run the executable.  Reboot in safe mode and run 'runthis.bat' located in the c:\sdfix folder

additionally go to http://www.sysinternals.com and download autoruns and process explorer

Title: Re: antivirus 2009
Post by: Paxil on November 12, 2008, 06:43:05 PM
If you are using McAfee, open VirusScan console and make sure all the categories in Unwanted Programs Policy are checked. I don't think they are by default. Larger AV companies get sued by those small malware... err... 'Potentially unwanted program' producing companies claiming their programs are legit. They can use exploits to drop the malware producing the popups trying to get you to buy a semi-legit product. By making you configure the 'unwanted programs policy', I guess the AV companies protect themselves from some lawsuits.
Title: Re: antivirus 2009
Post by: Pander on November 12, 2008, 07:34:59 PM
just got rid of this thing a few days ago with "Malwarebytes"....it saved me O_O
Title: Re: antivirus 2009
Post by: 442w30 on November 12, 2008, 07:43:08 PM
About two months ago I had that virus.  I used Spybot and Avast to get rid of it.  Spybot detected things in the registry.  It was a bear to get rid of.  Symantec had removal instructions on its site but once I had those instructions, I had already solved the problem. 
Title: Re: antivirus 2009
Post by: Ack-Ack on November 12, 2008, 09:01:20 PM
Antivirus 2009, also known as Antivirus2009, is a rogue anti-spyware program that uses false spyware results to lure you to purchase its full version. Antivirus2009 is an updated version...

Try "Spybot Search & Destroy", its free.

Spybot doesn't pick it up and this malware and prevents you from being able to update Spybot.  It's a nasty little thing.


ack-ack
Title: Re: antivirus 2009
Post by: CAP1 on November 13, 2008, 08:16:07 AM
just saw this on aol main screen..........might be somewhat interesting.

http://www.switched.com/2008/10/09/12-sneakiest-computer-viruses/