Anti Virus Xp 2008

Browntoa

it's deleted a couple of things, no sign on XP 2008 so hopefully it's clean

Lally

Back to my original question though :rotfl: how do I get it to stop popping up? It is happening about every 10 mins. And it comes in various guises but the box and everything looks the same, only the name changes. AntVirus XP 2008 is the most common though.
I know how to get rid of it once it's oin my laptop, and I now know how to close the box to get rid of it (cont-alt-del) but that closes all my windows and every 10 mins this is a total PITA!

Lally

About 2 seconds after I posted that it happened again, Antivirus Master this time. And earlier on I had something with 2009 in the title.

Browntoa

I suspect you have multiple infections , try

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

and then post that log ....

which will remove Vundo + Smitfraud type infections

no point in using the restore points are it's more than likely hiding in there

Malwarebytes should deal with Antivirus Master , try an Update , then a FULL scan and then let it reboot if needed

Lally

Just got another one, Antiviri 64....

loaner wrote: »

did you try a system restore or avast? Are you browsing again, and picking it up?

Try task manager, processes, end task on avm.exe.

then delete c:\program files\avm\*.* and c:\windows\system32\avm.cpl

I don't have any of those things, I tried to delete those two things via command prompt and then I looked for them too in start/mycomputer etc etc

Don't have that thing in task manager either even when the dialogue box is on the screen.

Will try the bleeping computer thing later and report back. Thanks all!

Lally

Had a quick look, it seems to be way over my head. I am a novice and I don't want to wreck my computer.....think I need to seek professional advice.

espresso

Lally wrote: »

Had a quick look, it seems to be way over my head. I am a novice and I don't want to wreck my computer.....think I need to seek professional advice.

That's what you are getting on here, just that you don't have to pay for it.

:cool:

Browntoa

just run the two programs I mentioned , malwarebytes you already have , this is the instruction for combifix (easy to follow and it does it ALL for you)

download ComboFix from one of the following URLs:

• BleepingComputer.com
• ForoSpyware.com
• GeeksTogo.com

To download ComboFix, simply left-click on one of the links above and if you are using Internet Explorer, you will see a prompt similar to the figure below.

Download ComboFix Prompt

Click on the Save button and then when it asks you where to save it, make sure you save it directly to your Windows Desktop. An image showing this is below.

Downloading ComboFix to the Desktop

When you have the Save as screen configured to save ComboFix.exe to the Desktop, click on the Save button. ComboFix will now start downloading to your computer. If you are on a dialup, this may take a few minutes. When ComboFix has finished downloading you will now see an icon on your desktop similar to the one below.

ComboFix Icon

Browntoa

double-click on the ComboFix icon found on your desktop. Please note, that once you start ComboFix you should not click anywhere on the ComboFix window as it can cause the program to stall. In fact, when ComboFix is running, do not touch your computer at all and just take a break as it may take a while for it to complete.
Once you double-click on the icon, you may see a screen similar to the one below.

Windows Open File Security Warning

Windows is issuing this prompt because ComboFix does not have a digital signature. This is perfectly normal and safe and you can click on the Run button to continue. If you are using Windows Vista, and receive UAC prompt asking if you would like to continue running the program, you should press the Continue button.

You will now see the first ComboFix screen as shown below.

ComboFix is Preparing to Run

ComboFix is now preparing to run and when it has finished you will see the Disclaimer screen shown below.

ComboFix Disclaimer

If you do not agree to the disclaimer, then press the number 2 key on your keyboard and then press enter to exit the program. Otherwise, to continue you should press the number 1 key and then press the enter key to continue. If you decided to continue, then ComboFix will create a System Restore point so that if any problems occur while using the program you can restore back to your previous configuration. When ComboFix has finished creating the restore point, it will then backup your Windows Registry as shown in the image below.

ComboFix is backing up the Windows Registry

Once the Windows Registry has finished being backed up, ComboFix will disconnect your computer from the Internet. Therefore, do not be surprised or concerned if you receive any warnings stating that you are no longer on the Internet as your connection will be completely restored at a later stage in the program.
ComboFix will now start scanning your computer for known infections. This procedure can take some time, so please be patient.

ComboFix is scanning the computer for infections

While the program is scanning your computer, it will change your clock format, so do not be concerned when you see this happen. When ComboFix is finished it will restore your clock settings to what they were previously. You will also see the text in the ComboFix window being updated as it goes through the various stages of its scan. An example of this can be seen below.

Stages of the ComboFix AutoScan

At the time of this writing there are a total of 41 stages as shown in the image below, so please be patient.

41st Stage of the ComboFix AutoScan

When ComboFix has finished running, you will see a screen stating that it is preparing the log report as shown below.

ComboFix is preparing the log report

This can take a while, so please be patient. If you see your Windows desktop disappear, do not worry. This is normal and ComboFix will restore your desktop before it is finished. Eventually you will see a new screen that states the program is almost finished and telling you the programs log file, or report, will be located at C:\ComboFix.txt. This can be seen in the image below.

ComboFix is almost done!

When ComboFix has finished, it will automatically close the program and change your clock back to its original format. It will then display the log file automatically for you as shown below.

ComboFix Log File

You should now post this log as a reply to the topic where you were asked to run combofix. Your helper will now analyze this log and let you know what they would like you to do next

Lally

When I said professional advice I meant someone do it for me lol

Browtoa, I will just need to be brave and try it. One of the first lines on the page was "Due to the power of this tool it is strongly advised that you do not attempt to act upon any of the information displayed by ComboFix without supervision from someone who has been properly trained. If you do so, it may lead to problems with the normal functionality of your computer." so it scared me off slightly