Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: YoKenny on August 02, 2008, 08:37:44 PM

Title: Antispyware 2008 XP
Post by: YoKenny on August 02, 2008, 08:37:44 PM
avast needs to detect this as a rogue malware remover:
dwl.as2008dl.com/load/setup_100527_3_.exe

Ref:
http://www.malwarebytes.org/forums/index.php?showtopic=5635
 
Title: Re: Antispyware 2008 XP
Post by: ardvark on August 02, 2008, 08:53:55 PM
Hi all...

Just to let everyone know, I have personal experience with this one. I helped a neighbor of mine remove it from his system.

This is a DIFFICULT one to remove, there is no remove option from either the Start Menu (All Programs) or under the Control Panel (Add/Remove Programs.) It WILL hound the user relentlessly, the only way to stop "hearing from it" is to shut it down.

Attemting to find and remove the folder under "program files" can also be difficult and when it is found, it will not allow you to delete it.

The only program I used that successfully removed it was Rogue Remover (the same site YoKenny listed...)

http://www.malwarebytes.org/rogueremover.php

Best Regards...
Title: Re: Antispyware 2008 XP
Post by: wyrmrider on August 03, 2008, 01:28:50 AM
Yes it should

did you report it to avast?

yokenny is correct
Rogue Remover or Malware Bytes Anti malware is the first step

depending what was bundled with the SCAM XPAntivirus will determine what you do next
xpantivirus evidently is marketed by a pay per install scheme which encourages their "affiliates"  to bundle as many different similar products in their package

all affiliates bundle a different mix of bad stuff

update avast and do a boot time scan
send to chest / quarantine do not delete/remove on any of these scans

many recommend a scan with an anti trojan as the next step
that site recommended "Trojan Remover" (a program name not a generic label)
I've never used it
Trojan Hunter 30 day trial may be worth a shot

or BO Clean

your mileage will vary

at the end of the day post a HJT in the "virus and worms" forum to make sure no other scumware joined the party