Avast WEBforum

Avast Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: sameeer_45 on September 26, 2008, 09:54:32 PM

Title: A DANGEROUS VIRUS can anyone help ??!!
Post by: sameeer_45 on September 26, 2008, 09:54:32 PM
i found a DANGEROUS VIRUS in the internet its called more than one name such as

antivirus  2008         antispyware 2008     anti maleware 2008   
   
note

((( if you following that VIR steps such as your system  is in abig damaged and believe it your system will

be in the cemetery

so you need to install anew system )))

my avast home and pro deleat his data base    but the big   problem  is

this VIR   has   install  notify  in my system tray which talking about there is a problem  in my system safety center but when i open it i found there is no proplem there 

so i  know  after that it was that  Stupid  virus

can anyone tell me how remove that pro
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: ardvark on September 26, 2008, 10:02:10 PM
Hi...

You can first try a program called "Rogue Remover." You can find it here...

http://www.majorgeeks.com/RogueRemover_d5360.html

If that doesn't fix it, you can try Tech's regimen here...

http://forum.avast.com/index.php?topic=38871.0

Scroll down to the third post and follow the instructions. :)

Best Regards...
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: havildar on September 27, 2008, 12:18:45 AM
I don`t think this is a virus but the name does change and it may call itself several different things in order to create maximum confusion.

You might want to check out this page in BleepingComputers which recommends the use of the MalwareBytes Anti-Malware removal tool (scroll down) and if that fails to do the job completely, a Hijack This log:

http://www.bleepingcomputer.com/malware-removal/remove-antivirus-xp-2008
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: ardvark on September 27, 2008, 12:28:21 AM
You might want to check out this page in BleepingComputers which recommends the use of the MalwareBytes Anti-Malware removal tool (scroll down) and if that fails to do the job completely, a Hijack This log

Hi...

This was covered in my initial reply when I said use "Tech's regimen" and gave the link. ;)

Best Regards...
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: wyrmrider on September 27, 2008, 12:52:25 AM
Go Step by step
Tech's method is very similar to other will known ones on the web
Virius if any have to be knocked down first
rt click the avast ball and update>programs  just in case
then
open avast and schedule the boot time scan
move any hits to the chest do not delete/ remove
POST THE LOG

then MBAM   update, scan, check each baddie then click REMOVE CHECKED
post log  Free
While at the Malwarebytes.org site update and run rogue Remover Free
do not stop  MBAM get's most of this infection but there are some new versions that are tough

SAS  update scan clean Quarantine  Free
post log but edit out cookies 

That's a start
do you have any other scanners like Spybot?- any hits recently?
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: sameeer_45 on September 28, 2008, 08:20:07 AM
;D  thanks to every one  ;D



by the way

Mr.havildar 

you say it doesnt a DANG  VIR   i think you talking about another VIR


because i fall in its trap in 6 month ago


i didnt know in that time it was a VIR

so i following its steps and did you know what did i got from it


that stupid VIR has inst  it self in my COMP  background  and more than 300 mal spy vir file in my COMP


when i try to close it 

it is gaven me a Q to REG this PRO


after that i cant remove it from my COMP so i havent any option  EXP anew OS


ttthhhaaannnkkkssss to you


Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: ardvark on September 28, 2008, 04:49:20 PM
Hi sameeer_45...

I'm not sure what is meant in your last post. ???

Are you referring to MalwareBytes? It should uninstall just fine without having to register it. If Malwarebytes, for whatever reason, can't completely take care of the infection, there are other programs listed in the link provided in my initial post. MalwareBytes isn't rogue software or a virus as I have used it myself to help take care of an infection on a neighbor's system. No one on this forum is knowingly going to advocate or inform others to use rogue software.

Furthermore, havildar, like everyone else here, took the time to post to try and help you, he doesn't get paid for it. He is a fellow user on here, just like you and I. Whatever problem you are having doesn't mean the information he provided is wrong. Actually, the information he gave in his link is sound. Please be respectful. ::)

If I have misunderstood your meaning, please let me know.

Best Regards...
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: havildar on September 29, 2008, 12:01:59 AM
ardvark,

Thank you for your defence of my post.  As you have said, the link was genuine and I would never knowingly give false or deceitful information in a situation of this kind. The removal tool from MalwareBytes has been proven to be effective in cases where Antivirus XP 2008 (or some other of its several similar names) needs to be removed, though I am aware that there are variations of it that are more difficult to shift and a Hijack This log and a trip to a malware removal forum will be necessary.

Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: havildar on September 29, 2008, 12:23:01 AM
sameeer_45,

You have clearly misunderstood several things but be aware of this:

1. I said Antivirus XP 2008 is not a virus.  It isn`t.  It is a rogue or false anti-virus program designed to scare people into thinking their computers are infected, when they are not.
It`s purpose is to deceive and extract money from computer users.

2. I don`t know what you have installed on your computer but whatever it is you are describing it isn`t MalwareBytes Anti-Malware which is a respected anti-malware program. To say that it has forced into installing a new OS is ridiculous.

3. Finally, I my honest opinion, your attitude is both deplorable and offensive.
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: Jeleal on September 29, 2008, 02:41:05 AM
I am believer in Avast but I'm not sure it can detect this rogue program. Avira does, but I'm not sure the free version will.

http://www.avira.com/en/security_news/faked_anti-virus_solution.html
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: wyrmrider on September 29, 2008, 03:36:47 AM
Ths series of infections is morphing so fast that no one program can claim to be first to detect every new version
No one program can claim to detect all versions early in the infection cycle
An id of what version is present is necessary for removal especialy those with ZLOB and other co- mingled infections
Just because HJT (or Avast or--- (put name off favorite program here) shows clear does not meant that there is not an infector or rootkit present
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: ardvark on September 29, 2008, 04:15:00 AM
Thank you for your defence of my post. 

You're welcome. :)

I do hope reconciliation and understanding will come of this.

Best Regards...
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: havildar on September 29, 2008, 12:05:25 PM
ardvark,

Whether reconciliation and understanding will come of this remains to be seen, though I`ve read sameeer_45`s posts again in order to try and decypher exactly what it is that he is saying.

He seems to be taking exception my statement that Antivirus XP 2008 is not a virus or DANG VIR as he calls it. Six months ago he has fallen into the classic trap of believing the fake alerts and having installed this malware on his computer, has been plagued by demands for cash to licence it, and cannot find a way to get rid of it, short of re-installing his OS.

He is not, I think, referring to Malwarebytes Anti-Malware at all and seems to be unaware that "thanks to you" will be taken as a sarcastic comment, attributing the blame for his problems entirely to me.

Without wishing to sound patronising, I suspect his problems are as much due to an inadequate grasp of English as to anything else, and I have failed to make allowance for that in my response.

Best regards ...
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: havildar on September 29, 2008, 12:10:05 PM
Jeleal,

Thanks for that. I think you`re right.  According to this comparison chart , Avira free has no anti-spyware component:

http://www.free-av.de/en/products/1/avira_antivir_personal__free_antivirus.html
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: havildar on September 29, 2008, 12:16:46 PM
wyrmrider,

I would like to think Avast! is on to this one too, altough I can`t find any official statement to that effect.

I know that SpywareBlaster has it listed in the Restricted Sites section of the program, and hopefully that will stop it before it can install itself.
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: RNfromTN on September 29, 2008, 03:13:56 PM
I am believer in Avast but I'm not sure it can detect this rogue program. Avira does, but I'm not sure the free version will.

http://www.avira.com/en/security_news/faked_anti-virus_solution.html
Hi, :) avast home detects it at least since 09/19 update.
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: havildar on September 29, 2008, 06:37:42 PM
Thanks timcan,

I`m impressed by the screenshot ... "a picture paints a thousand words"?

The entry "Antivirus-abc" refers to whichever version of Antivirus XP 2008 that Avast! has caught, does it?

Is there a list anywhere of the nasties that Avast! is programmed to detect or is such a thing not available to ordinary users?
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: RNfromTN on September 29, 2008, 06:51:51 PM


Is there a list anywhere of the nasties that Avast! is programmed to detect or is such a thing not available to ordinary users?

http://www.avast.com/eng/vps_history.html (http://www.avast.com/eng/vps_history.html)
Hi, hope this helps, tim
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: ardvark on September 29, 2008, 07:02:37 PM
He is not, I think, referring to Malwarebytes Anti-Malware at all and seems to be unaware that "thanks to you" will be taken as a sarcastic comment, attributing the blame for his problems entirely to me.

Hi Havildar...

You might be right, hence my comments, "Are you referring to MalwareBytes," and "If I have misunderstood your meaning, please let me know." It can be extremely hard trying to decipher meanings on a written forum that includes folks whose native tongue is not English. I should have confirmed first if the sarcasm was intended. This was my mistake and one that I apologize for to all concerned. :(

Best Regards...
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: sameeer_45 on September 29, 2008, 09:34:32 PM
thanks to everyone

and if i make trouble to anyone  especially to you Mr.havildar


than i ask all of you to  forgive me

thanks to everyone

and

Peace be upon evryone
[/color]


Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: wyrmrider on September 29, 2008, 10:17:50 PM
peace-love and spywareblaster

spywareblaster restricted sites prevents Internet explorer (only) from connecting to those sites
there are lots of other paths for this malware to take including P2P and IM
some even set up their own servers on your system
given the above it is still valuable but not unbeatable

Spywareblster is best known, however, for setting the kill bit in Active X baddies

a Hosts file is similar but also blocks for Firefox and other programs trying to access the internet, so too is valuable

Spybot Immunize adds baddies to all three categories and is very easy to use as is Spywareblaster
Spybot Immunize and Spywareblaster compliment Avast and do not conflict
(there are lots of other programs which deal with these protection, no slight intended)
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: ardvark on September 29, 2008, 11:54:40 PM
and if i make trouble to anyone  especially to you Mr.havildar


than i ask all of you to  forgive me

Hi Sameeer...

Likewise, if I have misunderstood your meaning and intention, then I wish to apologize to you and to ask your forgiveness as well. :)
I confess I didn't take into consideration the fact that English is not your primary language when responding to your post. I was pretty hasty in my judgement and should have taken the time to clarify your meaning. :(

You're more than forgiven (if there was anything to forgive in the first place) and I hope (and ask) that you will come back again should you have further problems. :)

May God Bless you!

Best Regards...
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: havildar on September 30, 2008, 12:10:19 AM
Hi timcan,

Thanks for that.  I`m appalled and impressed at the same time. There are hundreds of `em!
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: havildar on September 30, 2008, 12:13:17 AM
sameeer_45,

Apology accepted ... a misunderstanding, I think, nothing more.

Peace be on you also.
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: havildar on September 30, 2008, 12:23:00 AM
wyrmrider,

Information re. SpywareBlaster and Spybot understood and noted ... thank you.
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: havildar on September 30, 2008, 12:31:12 AM
ardvark,

"Blessed are the peacemakers: for they shall be called the children of God."

I hope I`ve got it right ... for once :-)
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: Jeleal on September 30, 2008, 02:09:47 AM
Jeleal,

Thanks for that. I think you`re right.  According to this comparison chart , Avira free has no anti-spyware component:

http://www.free-av.de/en/products/1/avira_antivir_personal__free_antivirus.html

Your welcome.
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: ardvark on September 30, 2008, 05:18:14 AM
"Blessed are the peacemakers: for they shall be called the children of God."

I hope I`ve got it right ... for once :-)

Hi Havildar...

Amen :)

Matthew 5:9

The Beatitudes

And anyone who confesses Jesus as his/her Lord and Savior and obeys our Father in heaven (Matthew 7:21) DEFINATELY has got it right! :)

May God Bless you and everyone else here on this site as well...

Best Regards...
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: PapaSmurf on September 30, 2008, 05:53:06 AM
Well, I have to think that if Jesus used windows,
he would probably trash IE and use FireFox instead.
He would load NoSCript and AdBlock Plus, use avast! in the backround,
and have Malwarebytes' at his finger tips along with Spybot.
He would trust the messages that his set up gave him, especialy the ones from NoScript telling him that scripts were blocked.
He would also SCAN everything downloaded..(oh, wait, avast! is doing that already), and lastly he would keep his system updated.

I know that seems overly simple, but even us ubber download geeks need to be reminded of the basics every once in awhile.
I purposely back my system up, then expose it to items that I see in the respectable posts such as this one.
avast! does work. So does NoScript with-in firefox. Malwarebytes and Spybot are two of my all time favs, keep em updated and they work too.
I guess in the end, if you have the tools loaded, you should trust them. If warnings pop up, don't just close the window, read it.
Amen
You can all be seated now  :P 
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: sameeer_45 on October 28, 2008, 09:44:12 PM
ok everyone i will exeplain what happend to my computer system in 6 month ago very very simply

1 - download avast + update
2 - searching for wanted program
3 - finding zip file for that program and download it
4 - extract that zip file and avast detect that stupid VIR in that zip file so i let him to delete it
5 - finishing my searching and goingto shutdown my computer, but when i close my web browser window i see that stupid VIR has put a shortcut icon on my desktop and called it XP ANTIVIRUS
6 - clicking that stupid shortcut icon and the biggest problem has been started
7 - after clicking that icon , XP ANTIVIRUS has been starting install itself in my computer
8 - avast detect that is VIR installing and caution me and i let him to delete that but he didnt block the VIR installing
9 - when i tried to uninstall that stupid VIR , it asked me to regester that program.
     so i tried avast scheduling but nothing happend.
10 - i am tiring from that proplem so i install another xp in my computer



SO EVERYONE THAT WHAT HAPPEND TO ME

And I ask everyone who is expirtin this problems kind to answer my this Q’s

A - why didnt avast block that installing?
B - if avast delete the virus from the beginning why that shortcut icon let that VIR enter my computer after deleting it by avast  ((( i think it because i didnt remove that VIR to AVAST CHEST from the beginning because i delete it )))
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: ardvark on October 28, 2008, 11:00:26 PM
Hi...

Good to see you back. :)

If I had to guess why Avast didn't see "XP Antivirus 2008" and attempt to delete it is probably because this particular class of malware falls under the heading of "rogue" software. It's not actually a virus per se but it has negative or harmful effects. On the other hand, as Timcan noted, it's listed in Avast's virus definition database, so I really don't know. ???

As for removal, it looks like you got frustrated and just reinstalled the operating system. Well, that's one way of taking care of it. ;D However, I'm pretty sure installing and running MalwareBytes and SuperAntiSpyware would have removed it. It did on my neighbor's system a while back. :)

Best Regards...
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: YoKenny on October 28, 2008, 11:28:19 PM
Quote
Well, I have to think that if Jesus used windows,
he would probably trash IE and use FireFox instead.
If Jesus was alive today he would know that zealots still abound and to take their advice carefully as not one browser suits everyone.
Quote
He would load NoSCript and AdBlock Plus, use avast! in the backround,
and have Malwarebytes' at his finger tips along with Spybot.
He would use avast! and a HOSTS file as one of his disciples.

HOSTS files I use:
http://www.mvps.org/winhelp2002/hosts.htm
http://hosts-file.net/?s=Download

Managed with HostsMan and I use its HostsServer proxy to speed up browsing:
http://www.abelhadigital.com

Quote
He would trust the messages that his set up gave him, especialy the ones from NoScript telling him that scripts were blocked.
He would also SCAN everything downloaded..(oh, wait, avast! is doing that already), and lastly he would keep his system updated.

I know that seems overly simple, but even us ubber download geeks need to be reminded of the basics every once in awhile.
I purposely back my system up, then expose it to items that I see in the respectable posts such as this one.
avast! does work. So does NoScript with-in firefox. Malwarebytes and Spybot are two of my all time favs, keep em updated and they work too.
I guess in the end, if you have the tools loaded, you should trust them. If warnings pop up, don't just close the window, read it.
Amen
You can all be seated now  :P 
I never got up.
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: SKYCOMP on October 29, 2008, 06:14:06 AM
Well, i can attest that at least on some rogue websites this latest so-called malware/spyware is exhibiting authentic virus behavior because i landed on one and it completely uninstalled/corrupted IE where it became "mute" at clicking on it.

A quick check of Iexplore.exe file size made it evident that a file infector was in play here.

As soon as i can retrace this site again and verify it, i'll offer more info, but i will say this, i had to revert to an image restore to regain my IE web browser again.

With this particular exploit spreading like it has, and it's makers releasing more and more modified versions of it, don't be surprised. They are integrating more than just simple malware code in it, they've now elevated to adding a virus infection within it too.

Regards: SKYCOMP
Title: Re: A DANGEROUS VIRUS can anyone help ??!!
Post by: ardvark on October 29, 2008, 07:11:09 AM
If Jesus was alive today

He still is. :)

See Luke starting at 23:50 through the end of chapter 24. ;)

Best Regards...