Spyware is getting me again..HELP

Signed-In Members Don't See This Ad
L

LandfillLumber

Member
Joined
Jul 9, 2007
Messages
1,706
Location
warren, michigan, USA.
Hello, well once again I have some spyware trying to sell me some program to clean up my computer.Its calling its self Antivirus XP 2010 trying to look like a microsoft program.What should I do i have ran a couple anti-spy/walware,and nothing is helping.It just pops up all the time,know I have tried to run a clean up program and nothing will work from my desk top icons.HELP.Victor
 
Signed-In Members Don't See This Ad
Victor go to www.combofix.org and download this program. You may have to run it in safemode and when you download it change the name from combofix to combo1 or anything but not the same name and download it to your desktop. This is one of the best and free and easiest spyware removers, always had success with it. Let me know if you need any help on it.
Here is a link to the instructions just follow them and you won't have any issues.

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

One thing you do not have to download the Microsoft recovery console if you don't want to it has no effect on combofix running properly.

Keep in mind it is better to reboot into safe mode with networking and then download it, sometimes spyware will not let you download it, so safe mode is the best way.
Jerry
 
Last edited:
I have had the same problem, I use Webroot spy sweeper with anti virus, but I can't remember if that found and got rid of in or not. That thing drove me crazy. Did you try going into Control Panel/Add Remove Programs to see if it is there and then remove it.? Hang in there some one will be along shortly to help you.
 
Add remove doesn't work on this, combofix runs several top cleaners at the same time and if you run it in safe mode it is even better.
 
I had the same problem at work and could not get rid of it even in safemode. The new term for it is "scareware". I had to pay a computer guy $85 to remove it.
 
To remove all malware we use a free program called "malwarebytes" I have been using it for years and have never had any issues since. If malware gets on your computer, be sure to just exit out using the X, and run this program and it will remove it. Go to: www.malwarebytes.org
We also use the free home edition of an anti-virus program called Avast. it can be found at www.avast.com
This website www.filehippo.com has a lot of good stuff you can download on your computer to make it run better.

John
 
This answer was cut copy and pasted from Yahoo Answers.

Antivirus 2010 is a rogue anti-spyware program that displays false and exaggerated scan results. Thankfully, though, there is a totally free way to remove this program.

Please visit this page and follow the guide in order to fully remove this program and any related malware:

http://www.bleepingcomputer.com/malware-…

Please note that some programs only scan your computer and do not remove anything for free. Use programs that do not require you to purchase them in order to remove found infections. The guide above includes a program that will remove this infection entirely for free.

If you feel comfortable doing it, here is a manual method taken from Yahoo answers as well, that involves editing your registry... Only do this if you know what you are doing with the registry. Registry mistakes can cripple your computer.

Antivirus 2010 is clone of ANTIVIRUS XP: Antivirus XP is fake antivirus software program. (it has many clones like ANTIVIRUS XP 2008, VISTA ANTIVIRUS, SMART ANTIVIRUS, MS ANTIVIRUS, MICRO AV2009, SYSTEM ANTIVIRUS, etc) . This program is typically known to infect a computer just after performing an install of specific video codec. This corrupted video codec is usually distributed with a Trojan, Malware and Virus. It is crucial to remove all the components of XP Antivirus and all malware and trojans such as zlob.trojan, trojan.vundo and trojan.downloader that may have been installed along with it. The following tutorial explains how to remove this XP Antivirus Protection.
Simply, It's a virus designed to extort money from you by demanding you pay for the "full version". to remove the viruses that it has "detected".

Navigate to Start-> Run, type cmd in the box and click Open
In the command window, type regsvr32 /u shlwapi.dll and press Enter
Next type regsvr32 /u wininet.dll and press Enter
Next Press Ctrl + Shift + ESC

Right click on XPAntivirus.exe from the processes window and select the option to end process
Right click on XPAntivirusUpdate.exe from the processes window and select the option to end process
Navigate to Start-> Search, then click on Files and Folders. Search for and delete the following files:
XPAntivirus.exe
XPAntivirusUpdate.exe
shlwapi.dll
wininet.dll
XP Antivirus 2008.lnk
Uninstall XP Antivirus 2008.lnk
XP antivirus
XPAntivirus.lnk
Uninstall XPAntivirus.lnk
XPAntivirus on the Web.lnk
XPAntivirus.url
Navigate to Start-> Run, type regedit in the box and click Open
Delete XP antivirus in the following path: HKEY_USERS\Software\
Restart your PC and everything should be back to normal


Note: If you dont know much about Registry, Please do not do the steps above because you may delete some usefull strings that may harm your computer. So better download an auto xp antivirus remover software.
 
Last edited:
I've used the malwarebytes program and still do I run it after combofix to see if anything was missed. So for no hits from malware, combofix runs find3m, regedit to delete the items there and another program called gmer which is an excellent program.
Everyone has there own fix these are just mine if it works for you great
 
Here are the instructions to remove the spyware if you do not want to run combofix. I think combofix is easier though I use it all the time at customers sites. Still costs them money but saves me time

http://www.2-spyware.com/remove-antivirus-xp-2010.html

This will not work I'm able to get through the first 5 steps but never get to download the spyware doctor.

www.malwarebytes.org

I have this and can't run it sue to the malware stopping me from doing so.

I have tried to do it through the links you have given me seer but get stopped at some point in the process.I'm stupid with computers so it could be me.I'm frustrated,rrrrrrr.Victor
 
Sometimes the malware gets into the computer very deeply and will not allow the computer to run or even download malware removers. We have had to re-format the HD in order to get the computer usable again.
When it gets into the registry, it goes beyond my knowledge, I have to refer to the guy I work with.
 
Victor reboot your computer and keep hitting F8 and it will give you the option of how to boot you want to boot into safe mode with networking. From there you can download combofix.
If Windows XP is the only operating system installed on your computer, booting into Safe Mode with these instructions.
  • If the computer is running, shut down Windows, and then turn off the power
  • Wait 30 seconds, and then turn the computer on.
  • Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
  • Ensure that the Safe mode with networking option is selected.
  • Press Enter. The computer then begins to start in Safe mode.
  • When you are finished with all troubleshooting, close all programs and restart the computer as you normally would.
The reason you want safe mode is the malware will not load here, windows only loads the minimum to get the computer working and everything will be big. Try this and let me know what you think.
 
Well after not being able to do any of the "easy" fixes that you people linked for me thank you but for some reason my computer would get half way through it then it would screw up.But I have got it taken care of I think I just ran the www.malwarebytes.org in the safe mode and it seems to have gotten ride of the junkware.Thanks everyone for the help and I hope I won't need anymore(fingers crossed),Victor
 
You must log in or register to reply here.
Back
Top Bottom