Antivirus XP 2008

1. Download Malwarebytes’ Anti-Malware (mbam-setup.exe) and save it on your Desktop.
2. After downloading, double-click on mbam-setup.exe to install the application.
3. Follow the prompts and install as “default” only
4. Before the installation completes, check on the following prompts:
- Update Malwarebytes’ Anti-Malware
- Launch Malwarebytes’ Anti-Malware
5. Click “Finish.” Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
6. Scan your computer thoroughly.
7. When scanning is finished click on the “Show Results”
8. Make sure that all detected threats are marked, click on Remove Selected.
9. Restart your computer.

Note: Antivirus Xp 2008 may prevent mbam-setup.exe from downloading and running. You can download and rename this program from a different computer before running it on infected system.

Thanks! The removal process worked for me.

Here is how:

Once you have the virus deleted you will notice you are missing the Screensaver and Background Wallpaper TABS in Display Properties. This will prevent you from removing that annoying message or the modified Wallpaper. Here is how you get the TABS back to be able to get rid of the message or stupid Wallpaper:

Manual Steps Using Windows XP Registry…….. be careful

1. Click Start and then Run.

2. Type regedit in the Run dialog box & Click OK.

3. Navigate to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

4. Right-click NoDispScrSavPage to select Modify.
Change the value to 0.

5. Do exactly the same with the NoDispBackgroundPage entry

6. Go out of the Registry and Restart your Computer

*************************************

In Addition this Viral Abomination also goes and disables your System Restore Options

Here are Instructions to correct this:

1. Go to the System Registry (Start Run, type in: regedit and click OK)

2. Highlight My Computer, then under Edit in the File Menu select Find

3. Type RestoreOpenIsSafe and click on Find Next

4. At the Fist Instance of the Entry, Right-Click on it and select Modify………. change the value to 1 (if it is not 1 already, Click OK, then press the F3 Button to search for more of the same Entry

5. At the 2nd Instance of the Entry, do the same

6. There should only be 2 Instances of the Entry but to make sure that you press F3 again and modify any additional Instances of the Entry until you are through the Registry.

7. Go out of the Registry and Restart your computer.

Now your Restore Systems should work again.

Regards

Rudi Geldenhuys
Legal Easy CC - Computer Consultants
Gauteng Province, South Africa

My computer is Ruined by this vicious program, I never authorized it’s installation on my pc, but both “Avast” and “AVG free” antivirus programs Failed to detect it.

Now when I turn on my pc, all the desktop shows is the banner of “antivirus XP 2008″ and nothing else, It just freeze there and cannot do anything, no matter what I do, it just freeze.

What should I do to fix this problem ?
and how do I claim damages from this vicious software maker??
PLEASE HELP!!!!!!!!!!!!

Are you able to run in Safe Mode, without it freezing? If you can, you should be able to uninstall it.
Hope this helps…

Hi

Thanks, your advice has been very useful. I was able to remove the Malware. It wasn’t possible with any other anti virus I tried.

Regards

Just to mention one fact. When ever I tried to install the Anti - malware software, my system would freeze. To stop it from hanging, when my system would reboot, I pressed ctrl+shift+esc and then stopped all the applications from running. The system then didn’t hang. Hope this is of some use

Help. I got the system restore back, but I can’t go to a earlyer date. I would ike to restore it sometime in june.

Thank you mate this process solved my problem and i am so happy keep it up.

Regards

Shepherd
UK

I downloaded and ran the anti-malware program and did the steps. It did show in the results but when I restarted, it was still there.

I have the problem addressed in number 3 and followed the directions but for some reason when I change the value from 1 to 0 it doesn’t save. Does anyone have any idea what I am doing wrong?

Worked first time, complety goen. Task Manager back, system restore seems fine. The only thing I had to do is to screen back to ‘Windows Classic’.

Rudi Geldenhuys, Thank you. I had gotten that awful Antivirus XP 2008 virus. I had gotten rid of it, after about a days worth of work, but couldn’t get rid of the background telling me to download antivirus software. I was missing the two tabs as you mentioned. I went through your instructions and it worked. Thanks.

I think I have cleared off most of it, but I am still locked out of Task Manager, and I am unable to run Regedit (says it’s disabled by the administrator..). Also, it has hidden my main drive(C:) in My Computer, which I don’t know how to reveal again, and it has placed the text “VIRUS ALERT!” in the time on my taskbar. It now reports as “19:22: VIRUS ALERT!”, and this also appears beside MSN messages and many files on my system

Any help appreciated!

Thnx - worked exactly as you said. Thnx a lot.

Last night this F$#$@# Virus got into my system as well..thanks to google i found your forum and followed the instructions…took me 3 hrs but at the end of it the virus was gone…system back on track…

U r a life saver man…cheers

I had this on my system last week… followed the instructions and unfortunatly could do nothing about the intrusion. After sever hours (into the next day) i decided to just say forget it and reinstall the operating system. I took it in due to some issues with the reinstall. Turns out the Hard Drive has fully crashed. The hard drive was fine prior to this virus… it was upgraded 6 months ago.

Not saying it will cause everyone hard drive failures.. but watch for new forms of this.

HELP! My browser refuses to work on many sites. cannot access malware. its like the brower has had many sites blocked to stop me deleting it! I am nearly giving up. have spent days trying to delete it.

I have followed all the instructions to get this malware off my niece’s laptop, but I cannot get the desktop tab back on the display properties box. Also, I cannot change the screen saver as it is grayed out. I have run the anti-malware program, run gpedit to enable the display box tabs, edited the registry, etc. The laptop would not run before and I have it almost right except for this issue. Any thoughts?

Great program. 38 minute full scan, around 160 items removed. thank you

I went through different steps for removal from various sites. Seems my computer is doing ok, when I go online
I can get to my browser but after that when clicking on any searched web site I keep getting re-directed to other sites like antispyware sites. What do I need to change to keep from getting re-directed other than what I click on?
Thank you

the malware program didnt find it when i ran the scan but i found a folder in program files with a name that was a bunch of letters and a few numbers. malware has a program called file assassin and i deleted a part of the program and could remove the rest normally after restarting my computer… i noticed though that my firewall is snow missing in control panel… what do i do?

All went well, except at the end of the scan suggested by #1 i got this error

Hkey_local_machine/software/rhca7gjoe9el
C:/WINDOWS/system32/lphce7gj0el.exe
Could not be removed
should i be concerned?

This is for Rudi Geldenhuys::

I’ve done eerything you recommend to restore the “restore” function & to remove the screen saver, and neither works.
In trying to restore the screen, when I Change both values to “0″, when I reboot the computer, they are changed back to “1″. In safe mode, however, the changes made remain in effect. Unfortunately, I cant stay in safe mode.
For “System Restore”, I cant find these entries. The search in regedit comes up empty.

Im using XP Home (SP2) on a Pentium 4 with 2 GB of memory
Any Help

Thank You
John.

I purchased the Antivirus XP 2008 and several days later it was lost from my computer for some odd reason. Help! Please

Holy crap…this program is good. After a full day of trying to remove this malware myself, it took this program to fully get rid of the files i missed.

got rid of antivirus xp 08 using SpyHunter and
Other accounts on my PC any fine….but
My account still has problems like changing the desktop properties display. response to a right click on desktop is
“system admin has disabled this display function”
It also hides the c drive still.
I want to find and destroy”system admin”
When I log in safe mode, I can’t see my account at the login screen witht the rest of the accounts?
I can however log in as ADMIN

worked perfectly fine for me.
didn’t even have to mess with the registry actually.

thanks! second fucking time i’ve gotten this thing.

Malwarebytes’ Anti-Malware did the trick! Thank you so much for the help and support. My Trend Micro was not able to remove. All of my settings were fine and back to normal.

Thank you!!!
-chris

I used Revo Uninstaller
(Freeware)

I used this to uninstall the “Antivirus XP 2008″ from my brother’s laptop it’s an excellent program and best of all it’s free i’ve been using this program for quite a long time, it doesn’t just uninstall the program but also removed all the files to your registry that is part of the program that it removed. hope this help.

Revo Uninstaller helps you to uninstall and remove unwanted programs installed on your computer even if you have problems uninstalling and cannot uninstall them from “Windows Add or Remove Programs” control panel applet.

p.s. click on my name “zaviour” to take you to the website
or you can search it on google by yourself.
just type REVO UNINSTALLER”

I filed a complaint with the federal Trade Commission, FBI , and Finally INTERPOL. This site has partners in Singapore and Russia. more to come

ran the anti-malware and it seems to have removed most of the bad stuff installed by this program but my desktop only allows me to change the desktop color. If I attempt to put a picture (windows provided or not) it thinks like it is going to put it on there but doesn’t just whatever color is chosen. Any thoughts?

Also, Internet Explore fails to load images from sites(ie the google image at its homepage or even the images that show up when a page fails to load or you stop a page from loading and get the Action Canceled page. I have installed and am currently using Firefix and it is running fine (something I probably should have done a long time ago!) Any thoughts on this as well?

update: I found out that when I right click->Arrange Icons By->Show Desktop Icons my image appears. Normally I like to hide my icons and just have a picture up as the background (I like the uncluttered look) but when the option to hide icons is checked it hides my image as well I hope there is some easy fix for this!

Everything is working except my background is not filling the whole screen as it use to when I did the steps of #3 it was already set at 0 for both of them and I have restarted my computer and it still hasn’t worked Also tried it with seperate backgrounds the tan color around the background is annoying Any Suggestions?

What if you can’t access the Task Manager or the Run function from the start menu? How would I remove it without those functions?

Thanks for the help. You’re a lifesaver. For all the security on my PC this one got through. Great job!

I forgot to add that i have no restore points from before i had the infection

What an awesome piece of software. Removed it no hassles first time.

Today I found this site. Too Late For Me. I was sucked into purchasing the program (”Antivirus XP 2008″) to erase the supposedly 1500 viruses that it found in my computer after it innstalled itself without my consent. (I tried to erase the supposedly 1500 viruses with Norton but I was unable. Norton indicated that there were three viruses that it removed.) So I decided to purchase it. I purchased it and it supposedly erased the viruses, but every time I booted up the system it would show a new virus (the same one over and over.) Then I tried to restore my system but I couldn’t. I tried to delete the program (Antivirus XP 2008) but it wouldn’t allow me. I went into safe mode to try to erase it and nothing. So I decided to reinstall the operating system (Windows XP). Now I noticed in my bank statement that these people charged me for three different programs. I am trying to dispute the charges but who knows what will happen. I may end up losing about $90.00.

Just got the virus today, found your site, downloaded and ran the program, seemed to fix everything, didn’t have to mess with anything to get my display tabs back, program fixed it al. TY TY and TY woooooooooh

i had it twice now and had to reload windows twice
im usually pretty good at fixing these things but these guys are good!!!!
top it off there getting rich from it
wonder how many people got sucked into 90 bucks?
ive seen several from different sites that sayed they payed
just think its all over the world
smart mo fo’s!!!!!
hope they get caught!!!!!!!!!

oh and watch out just as i was making progress getting rid of it
antivirus 2009 showed up
i just gave up and dumped everything
on three of my machines
what a hassle

thks for the editing of the registry, it works, my properties tab are back!
but abt the restore system;

1. Go to the System Registry (Start Run, type in: regedit and click OK)

2. Highlight My Computer, then under Edit in the File Menu select Find

3. Type RestoreOpenIsSafe and click on Find Next

4. At the Fist Instance of the Entry, Right-Click on it and select Modify………. change the value to 1 (if it is not 1 already, Click OK, then press the F3 Button to search for more of the same Entry

5. At the 2nd Instance of the Entry, do the same

6. There should only be 2 Instances of the Entry but to make sure that you press F3 again and modify any additional Instances of the Entry until you are through the Registry.

7. Go out of the Registry and Restart your computer.

Now your Restore Systems should work again.

THE PART 4-6 I DON UNDERSTAND, when i find, theres nth, then a pop up will says that searching is complete, is that the progress of these search??
is that all?

I thought that antiviriosxp08 program was the real deal. Got robbed of $49.95 of hard earned money. Who can I contact to try to get my money back??

Thank you to everyone that contributed to this forum. Helped a lot. The world needs more people like you guys.

I received this ugly virus 2 days ago on my laptop. I downloaded Malwarebytes’ Anti-Malware and it cleaned everything up…mostly. I am still unable to access the internet. I am connected to the access point and have an I.P. address but I am unable to view any webpages. Any ideas???????

This program has completely solved my problem.
I have got no remaining issues at all after just one scan.
Thank you very much.

This thing has ruined my weekend. I’m still in the process of removing it so I hope it doesn’t ruin my computer too. There needs to be prison time and a lawsuit for damages for those responsible. Someone out there has to know who’s responsible.

After using this software my background doesn’t fill the screen, firefox doesn’t work at all, my printer doesn’t work and a bunch of other shit is wrong such as my computer keeps crashing.

I’m now running Malware again hopefully we can fix this.

Thank you, what a great help!
For those of you that have your com crash while the Anti-malware is scanning; I’ve found that if my com goes into screen saver mode then it crashes. The best way I found to get rid of the virus is to DL and install the Malwarebytes software, then in msconfig unclick any suspect programs, reboot, run the Anti-malware and just incase, start up your Media Player and leave something running continously so your screen saver won’t start. Then do the registry modifications to get back the missing display tabs.

One more thing, the Anti-malware is great in that if you abort a scan you, once you scan again, it will quickly get to where you aborted it. So you can pretty much delete the viruses/spyware as you go along.

Good luck everyone,
and thanks once again!
Cheers.

Whenever I try to install the program, it tells me that some file is missing.

Malwarebytes Anti-Malware fixed it for me. Thank you thank you thank you!

Natalie of Antivirus XP 2008 support has kindly emailled me as follows:
Thank you for contacting Antivirus xp 2008 Customer Support Center.

Based on the information provided in your letter, you think that our software is fake and can damage your PC.

‘I beg to assure you that this information cannot be proved to be true. The only reason why this information appeared in the Internet is competitive companies’ desire to discredit Antivirus xp 2008. We work for our customers and we cannot afford offering dubious or dangerous products. However, our customers have never complained about problems they impute to us. Our top priority is to satisfy our customers.

Thus, if you really encountered a problem when using Antivirus xp 2008, please specify it and we will do our best to help you in finding solution.

As we understand you wish to cancel Premium support.
Please be informed that your Premium support was canceled.
And from this date you won’t be charged anymore.

Thank you for patience and cooperation’

Erm, yes but who is the mysterious ‘we’??

Used the advice given anti-malware removed this virus fron my laptop however the next day it reinstalled itself i had not been on the internet but had not removed the files from the registry but was in the process of doing so. Im running anti-malware again. i think i will try revo uninstaller also. if anyone has any other ideas please let me know

Thanks you saved my holiday!

Hi the malware program work and removed the virus, I have completed all the steps required as above to repair the system restore feture to date.

Thanks for the help. Got this terrible AntiVirus 2008 XP (don’t know how but I am still upset about it). I found this forum through Google and the download and tips suggested fixed my computer in one try! Before this forum, I tried calling Dell for help and they were going to charge me $150 to get rid of the problem…so THANKS FOR HELPING FOR FREE!!!!

Am i screwed?
i deleted the file with the virus in it so i dont know what to do?

special thanks of you.

Just put in a complaint to the FTC. Funny that while reading all these posts I wondered why it is taking them all so long to get them off the web?? First post was back in June?? I just called the support number of this rogue company and they are still in business??
I finally got another spyware on and my computer is good to go but you wonder what information they got and I am looking to get back my money I spent getting the darn stuff. How stupid I feel. I talked to some tech guys from work and I was explaining about what happened and if they wouldn’t have told me, I would still have these guys looking into everything. I am telling everyone I talk too, to watch out. You think that the FTC would put them out of business and have it on the nightly news??

Did anyone find a solution to not finding “RestoreOpenIsSafe” in the registry search?

Thanks for all the help, this thing was a real bastard. I started removing it manually. Had to go into safe mode a couple of times, because my system froze when I tried installing anti-virus software and then just kept on freezinf everytime I restarted. I finally used Malwarebytes, sceptically, cause I didn’t want to fall for another scam! So now its all seems fixed, I hope.

Only thing is i can’t find that entry “RestoreOpenIsSafe” in my registry, but my system restore seems to be working fine.

Should I be worried?

Thanks!

Thank you so much! I followed the instructions in message 1 and it worked perfectly!

Man, I swear by this program!!! I was soooo pissed that I got that damn virus and it was just annoying and frustrating. Got to this site by some luck and everything is back to normal. This thing SHOULD be worth millions!!!!! Thanks again!!!

Hi tried the malware program.. it took me ages to scan the system, but could not remove the virus
Then tried Revo Unistaller.. Perfect!!
Try this in case you are not able to remove through malware.
thanks Zaviour!! You are a real Saviour

”
1. Click Start and then Run.

2. Type regedit in the Run dialog box & Click OK.

3. Navigate to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

4. Right-click NoDispScrSavPage to select Modify.
Change the value to 0.

5. Do exactly the same with the NoDispBackgroundPage entry

6. Go out of the Registry and Restart your Computer
”
When I do that it only shows “ComDlg32″, and explorer?
What do I do?
Pease Help!

thanks a lot it really worked for me, it took 2 hours for me , but its really worth waiting(since it removed 370+)…yeah this thing must cost millions.
thanks again

Thanks! The removal process worked for me.

I used both mbam and the Revo uninstaller. It took 3 restarts to completely eliminate the viruses and worms.
And I got all my display tabs and my task manager back.

It seem forever to remove because my avast was alerting me every 5 seconds about the exe and tmp files in system32

I also had Spyware Eliminator with Clam AV but it didn;t eliminate all of it, so…. Cheers to Rudi and Zaviour on your request and advise. Good work!!!

Thank you so much! I got this one today and spent all morning trying to get rid of it. Browser hijacked couldn’t get anywhere to find help.

Got on my laptop and used that to search for info, came here and got rid of it.

It got by my AVG, then Spybot, Adaware, and CCleaner wouldn’t get rid of it. Spybot looked like it found part of it, but it couldn’t get rid of it for some reason.

Anyway, thank you so very much!

I’d also like to thank everyone involved who helped with tips, techniques and encouragement in helping us non-techies get this Virus/Spyware off our computers. I am usually very careful but this one came out of the blue - attached to a video codec I downloaded from cnn.com (a site I would have thought to be pretty clean).

Almost all my laptop has been purged now - except that I still can’t change the Restore date on my PC. Do any of you have any tips on how I can do that?

Hi,

Thanks for the information, was sitting with a project that I needed to have finished for a deadline when I got the virus attack. The new version (or updated at least) of the Malware program totally restored my computer,no regedit needed at all. The only thing missing is the icon for my network in the start menu (but I can live without that)

Thanks again,

Martin Seehuusen

I uninstalled the virus using the malware removal software, but now I still cannot access any antivirus sites like norton or mcafee, when i click on links from a google search I am directed to unrelated pages trying to sell me stuff, and the defragmenter and disk error checker now no longer work.

I fear that my hard drive has been damaged, and the problems with the internet lead me to believe that either there is still a virus on my system which is an excellent hider, or these are the after-effects of the virus which need to be fixed.

Please help! I have no idea how to fix these problems, short of doing a clean reinstall of XP

cheers
jamie

I was doing research for taking the Caliper Performance test. I was redirected to this site:
*****DO NOT GO THERE*****
httpxx://realonlinevideo2008.com/movies/white/0/25/487/1/caliper%20profile/

*****DO NOT GO THERE*****
It automaticly downloaded and installed on my system. I am in the process of extracting it. I pulled cords out of the wall (router) to prevent all of it from installing and tried to save as much info as possible. This is rediculous. Please find these people and do what needs to be done. Thanks for all of the informative posts. I am running program as we speak.

Thank you Malwarebytes. Worked. It would be nice to track the people that cause these little dilemas and send a little something their way, eh?

Thank you again,

Dave

The tool worked great but i am having an additional problem now my laptop is not diplaying any image anywhere. Meaning i cannot open photos, all that pop up is no preview availible and inside internet explorer as well. Anything that would normally have a photo (even submit buttons) just displays the picture icon nothing more. Any help is appreciated.

also now my symantic antivirus is going crazy with “unable to send your message” pop-ups.

ok so i figured out the internet portion of the situation it has to do with the security settings in ie. but i am still unable to open any jpegs on my laptop.

HELP! I thought I had done everything, and the I get yet another blue screen of death on my Dell Latitude D620: “STOP” c000021a {Fatal System Error} The Windows Logon Process system terminated unexpectedly with a staus of 0xc0000034 (0×00000000 0×00000000). The system has been shut down.” And now, it won;t do anything…what do I do? Any suggestions?

Hoping the program that was recommended will work, sounds like it will with the feedback. AVG and Ad-Aware didn’t. The bad part about the virus is it’s totally believable, until it starts the scanning… then not so much.

That program amlwarebytes worked awesome. no need to mess with my registry or anything. Thank you sooooo much!

i mean malwarebytes LOL

Im trying to get this off a friends laptop a small variation is that it does the same thing in safe mode with command prompt as it does when started in normal mode. It doesnt flash the “you have virus” but it logs off right away. The laptop is a toshiba with windows ME (it not mine i swear!!)
I agree people who write these garbage program should be hung in public executions along with the spammers!!

I got this virus yesterday and was so stressed about how to get it off. The malware program worked perfectly. I only had to change my background (through My Computer) and my laptop was good as new. Thanks!!!!!!!!!!!!!!!

Thank you sooooooo much. I took the steps in #1 and it cleared it up for me. Took about 40 minutes to scan my computer, but I did not have to change the registry or restore.

Just an fyi to others. I tried running viruscan through McAffee and that did not work!

Thanks to all again, saved me $129 from Dell!

Rudi Geldenhuys:
Thanks so much. Your instructions to get my display tabs for the screen saver and background back worked perfectly. Thanks again!

i’m following all instruction.. and my computer works well..

87 Responses for “Antivirus XP 2008.Great Thanks its works for me.
1. Download Malwarebytes’ Anti-Malware (mbam-setup.exe) and save it on your Desktop.
2. After downloading, double-click on mbam-setup.exe to install the application.
3. Follow the prompts and install as “default” only
4. Before the installation completes, check on the following prompts:
- Update Malwarebytes’ Anti-Malware
- Launch Malwarebytes’ Anti-Malware
5. Click “Finish.” Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
6. Scan your computer thoroughly.
7. When scanning is finished click on the “Show Results”
8. Make sure that all detected threats are marked, click on Remove Selected.
9. Restart your computer.

Got the Antivirus 2008 XP too, real pain in the ass virus, McAfee couldnt fix it, nor could ad aware from lavasoft. What I did was load windows Vista in safe mode and ran a system restore to a check point from yesterday when I didnt have the virus, everything seems to be working fine again.

Hey Rudi. You’re the only one that explained what to do clearly and accurately. Many thanks. I have my desktop photo back and my screen saver. I don’t, however, have the System Restore Options back. Followed your directions, but only one instance of RestoreOpenIsSafe came up and its value was already a 1. Anybody have a solution? By the way, I had to repeat the changes for each user on my desktop computer. Why are these idiots who are spreading these viruses not in prison?

Same problem. Couldn’t get malwarebytes to download but revo uninstaller seems to have worked. I could not get background message off. I plugged in the o’s in step 2 which then gave me the ability to change my desktop again. However I had something called phc5q0j0et7g which was running in control alt delete processes which I shut down. I then did a search and found it as a background in my desktop options. I am still getting an error on start up that says exception Integer division by zero error. I think putting in a 1 in step 3 would solve it but when I run the RestoreOpenIs Safe it doesn’t find anything. Anything else I could type to restore my old settings?

just got this antivirus xp 2008 thing on my vista, didn’t hesitate after i read this thread, downloaded that malware software, ran it for like 36 mins, deleted all the infected files.. i had some 157 of them..lol.. restarted my laptop and now it seems that it runs even faster than before.. screensaver, background pic is back now and everything seems just fine..

This annoying and horrible virus mysteriously appeared on my computer last night. I had lost system restore, had the screaming screen saver on and it kept scanning files and supposedly finding viruses. Google wouldn’t let me in and then my computer kept shutting off saying that it was infected. I tried uninstalling the program 4 times with no success. Finally tried running in safe mode after numerous crashes and I somehow managed to get my Spybot up and running. Because it was running simultaneously with this annoying virus, it took forever to scan my computer. The first time didn’t do the trick because I had been unable to go to Spybot’s site to check for updates. I did realize that if you told annoying virus to leave your computer alone once it was finished scanning, it just started scanning all over again. So I left the virus screen open when it was done for the 3rd time and let Spybot finish the job. I manually changed my screen saver and desktop back, and have been able to set up system restore again as a daily task. Regardless of the fact that my computer appears to be running normally now, this entire cleanup process took about 10 hours, encompassed part of this morning as well, and I don’t think I’ve sworn that much in a long time.
These people should be seriously punished.

i followed the instructions found here. while running the scan with malwarebytes, the antivirus xp 2008 window pops up yet again. this caused my system to freeze. tried ctrl-alt-del with no luck i was forced to hard crash. now my computer will not load windows xp in any mode safe or otherwise. it just runs a boot up loop. i hate to have to reformat. any advice would be appreciated
thx eric

While scanning with malwarebytes, the blue screen of death pops up. but its actually a fake screensaver that shows the blue screen, changing to the windows startup and then it loops all over again. So just use alt+tab to make windows switch back to your malwarebytes scan window. This antivirus xp 2008 is pretty tricky…

I fell for this crap too! I called the customer service number to cancel the bocus anti virus software and spoke with an asian man who breathed heavily. Do to power outages I lost contact and called the number again and got that same person! He assured me that I would be credited my money but I don’t trust him! I d/l the AVG which took care of a lot but I still can’t get the thing off of my computer and the blue screen keeps appearing after I’ve changed it. I’ll try the ma;warebytes. Wish me luck.

Oh thank you. This “antivirus” installed itself somehow on my computer. These instruction helped a lot. I downloaded malwarebytes, ran the full system scan, deleted the infected files, and restarted my computer, just as the instructions said. It worked! I had a blue background screen set to none which I easily fixed. I double checked system restore and background and screensaver tabs. They were there.

Thank you soooooo much!

Major problem with this: I can’t update any anti-malware, anti-virus or anti-spyware software, nor can I initiate Norton. It’s also cut off search engines (fortunately, bar the Yahoo toolbar that I got with AVG which is how i found this place)

I’m hoping that the Malwarebytes scan will pick up on it without me being able to update its directory…the scan’s in progress now, and has picked up 19 objects, so wish me luck.

Thank you so much for your help. This is the only program that helped me out completely

I have the antivirusxp2008.At startup I get a blue screen and a warning spware detected. I cannot go past this point.I cant get to the internet to download any remedie. is there a way to identify and remove this from the registry

OHHHHH!!! MY GOD!!!! this Virus freak me out!!! This program is EXCELLENT. THANK YOU THANK YOU THANK YOU FOR RESTORE MY PC!!!! I LOVE YOU

Had to come back to comment… WE ARE NOT WORTHY!, WE ARE NOT WORTHY!….

This Programme just kicked AntiVirus XP’s! Tried Spyware Doctor, it failed, but this programme surprised me. Dark little horse.

Computer back on track!

It’s gone, (I LOVE YOU ALL)….

but….

now none of my (indirect) software will connect to the internet. I can use the internet and instant messengers just fine, but my anti-virus won’t update, (windows won’t download updates either) and my online games won’t work either.

PLEASE EMAIL ME
cjdontthink@yahoo.com

i cant get rid of it!

i tried the program i ran it and restarted what else can i do. little messages still pop up

Try using Revo uninstaller. There’s a link further up the page (number 30)

Thank you this site really helped. What if you only have one listing for RestoreOpenIsSafe instead of 2? Is there a way to fix that?

I too fell for this and purchased the program. I realized AFTER I hit submit for my payment that they were going to charge and additional $9.95 every month, so watch for that!

For everyone that fell for this crap, you can call 866-521-4864 (that’s the number that showed up today on my bank statement) and choose option 2 to cancel subscription. I explained to the lady what happened and supposedly they will refund me the $49.95 and nothing will every be charged to me again from that place. Hope it works….

ATTENTION/= Please be aware that this is an awful virus to get on your P.C. I have absolutely know idea how this got on my system. However after having this removed the tech guy told me there is currently a 2009 edition of this virus out. So please be careful. Take care guys and have a good night!!!

I fell for it too. Thankfully I found this site and was able to call and cancel an hour after subscribing. When I told them I wanted to cancel $49.95 charge, I found that I was also charged $29.95 for something and $24.95 for something else, not sure what. They gave me three confrmation numbers and said that it would take 5-7 days for the refund. We will see.

Thanks Shannon

theres a problem though

i already went into program files and deleted everything i could hoping that would help

ahh
i still get those pop ups
ive searched with three virus progeams and killed all the viruses found its still there

and i dont have any restor points before the virus

Thanks the regedit fixed my display properties. The system restore was not a 0 but it would not let me restore beforehand. Anyhow the Antivirus xp 2008 sure gave me a whirl. I got rid of it but could get the other stuff fixed. Your page here did the trick. Thanks a bunch.

Thank you for your advice.Everything worked as should.
God bless you.

Scanning with Malwarebytes currently for 15 min, and only 4 things found…. im getting worried. Hope this works.

I got this crap on my work computer!! Couldnt get mbam-setup.exe to open. HOWEVER… I downloaded Hijackthis (the latest version) free. (make sure you get it from the trendmicro.com site!!! ITS FREEEE!!! If you never used hijackthis before here’s what u do:

Before scanning your system with hijackthis right click on the antivirus2008xp icon on your desktop. Go to properties-general tab. Look at the name of the file or click go to target…you’ll need to know what to delete from the scan results!!
The scan takes like 3-10 SECONDs!!
Find the file name and delete it!
ALSO make sure to DELETE the back-ups on the main menu page of Hijack this as well as in the ‘back ups’ file located right next to the hijackthis program file whereever you saved it at.

The regedit trick for the background display tab issue WORKS!!

I got this obnoxious virus about a month ago - complete with the fake “blue screen of death” screensaver. Norton AntiVirus had no clue. Spybot Search & Destroy didn’t find it either. I found a forum somewhere that recomended the Malwarebytes program - so I downloaded it and tried it - and that did the trick! I did have to manually modify the registry to get my screensaver and background tabs back though. That was about five hours of my life I’d like to have back.

Last night, the d@mn thing was back! I was so disgusted I just powered the PC down and haven’t touched it since. Just like the first time, my 15-yr-old daughter had been surfing around on my wife’s account (which has admin rights). She says she had only been on MySpace, but who knows. Maybe it came from somewhere on there (or a link from there). She says she didn’t click on any dialog boxes or authorize any kind of installation, so it apparently installed itself without permission. I’d love to know exactly where she got it from, so we can avoid it in the future. Anyway… here’s to hoping that Malwarebytes will take care of it again. I’m also removing admin rights from my wife’s login. I don’t know if that would have prevented this or not, but I’m going to take that step just in case.

What a pain. Whoever is responsible for this should be hunted down and punished severely.

Thank you Webmaster, It solved my problem.
Thank you

Thank you guys buuuuuuuuuuuuuuuuttt still have the issues with the desktop tabs despite the fact I did what Rudi Geldenhuys adviced to do. I have change the values to 0 and 1 (respectively) but still have no access to the other properties tabs from my desktop. Also, It doesn’t allowed me to go on the internet and browse different pages. Please help !!!, This is my wife’s computer and I am as right now in the brink of an awfull divorce :( Thanks !!!

This along with some manual repairs helped me. One thing I can’t seem to fix is my clock. It won’t let me change it from military time. My settings say it is set to regular time, but it is showing military time. Also, my restore options work now, but all restore points prior to the infection date are gone. Can anyone help me fix these settings?

thanks..it took me 3 hours but finally gone. All this due to following a link to see some olympic coverage and was prompted to download some new video software. ctrl alt del solved the continuous flow of virus warnings my avg was saying. Just deleted it there to start and the rest..3 hrs later..damn

the malware software appears to have worked wonders! Thank you SO much! I spent a good bit of time messing with this before finding this board, once I did it took about 45 minutes to find the remaining 23 infected areas and cleaned them up. I restarted my computer. I have reset my desktop back to the picture I had up before. Everything appears to be good. I hope it is! THANK YOU SOOOOOOOO MUCH!!!!

i got this virus when i installed “True Sword” which is supposed to be an av program itself !

It started with a firewall warning from windows about svchost.exe in win32/drivers - maybe this is how it got in, i may have been unfair to true sword, it all happened at the same time.

I have this virus on my computer thanks to my brother. But the problem is, everytime i start the machine up the OS system sometimes doesnt run so I cant get onto my machine to remove it can anyone help??

I have all of my work on here that I cant afford to loose as my origional copy has been destroyed as the server it is stored on at work crashed and lost everything…

Thanks.

Thanks, this is a great way to remove this piece of S%!+ Malware. I’m amazed at how SpySweeper nor Trend micro (supposed) anti spyware/malware program, which I have installed, was unable to stop this attack. Both detected it and told me it has it quarantined it and it would not be able to harm my computer once quarantined: However, this piece of S%!+ malware went to town on my laptop.
I hope the Feds does an investigation on those responsible and charge these crooks with mail fraud, or some sort of internet racketering.

I removed Antivirus XP2008 by spyware removal tools but my audio is still disturbed.It gives message bad directsound driver.error code 887800078. i have reinstalled win xp,sound driver.also tried new sound card but didn’t work.pl help

Like jj (119) above I got the virus from following an Olympic link. I seem to have removed the virus, albeit my desktop is blue, but after a few minutes the screen freezes and I can’t do anything. Does anyone know how to solve this problem? Also when the PC goes to the desk top the ProWireless comes up with an error message. What should I do as I’ve now spent all day on this. Thanks

Well, i downloaded the Malwarebytes program on the 14th and deleted the virus. My computer was back to normal for a day and now the stupid virus just popped back up…. The background is different though, so im wondering if whoever made the virus made a new version…….. stupid @sshole.

FYI….I just got this virus today and ran Spybot and it removed the virus. I just had to click on my desktop properties and double-click my old desktop and then the “Antivirus XP” Banner disappears.
Download Spybot for “free” at Download.com

Wow, my bitdefender took too long to scan so i downloaded the malware thingy and it WORKED PERFECTLY! Thanks for making it guys and DONT fall for the scam. If you had 1043 viruses on your computer it would explode…

I got this virus today and instantly realized something was up. The desktop on my computer changed to a blue screen that said something about viruses having been found and that I should buy an anti-virus program.

I ran the malware suggested above and it worked as far as I can tell. Thanks SO much!

I’ve been struggling with this problem for over a week. The Malwarebytes download seems to have cleared up the problem.

Many thanks,
gatorcpa

**********************
Edgar from Aug 14th says that Spybot didn’t clean his system…It did mine today! I would suggest updating your Spybot with the latest detection files and run it again. Spybot worked. I didn’t have to touch my Registry, which always extremely risky.

By the way, I’m using Spybot - Search & Destroy version 1.6.0.

malware link does not work anymore

My son downloaded antivirus 2008 onto his laptop. Downloaded malware as detailed above and ran the scan. The internet had been disabled by the trojan so could only run without an update. Did enough to get the laptop up and running again plus the internet. Did an update and full run afterwards which cleared out a few more. The first run cleared out the wallpaper also without need for further work.

great malwarebytes. after eight hours of struggle, thispiece of malware has gone away completely.

im pretty sure i deleted the anitvirus but now when i do what it says to get the background to normal i do it then we i restart the values go back to 1 and when i restart it the background i changed it to pulls up for about a minute then goes right to the antivirus background does this mean i havent deleted the virus all the way or what

Beautiful. This definitely works.

Tried this solution and it took a 40 minute scan, but everything works fine now. This program is great. Thanks a lot.

Life saver. Last night I was working on some projects (due today) when I got the virus. It wreaked havoc on my system - couldn’t even type more than a few lines .without some notice popping up. Malwarebytes’ Anti-Malware solved it all after a full system scan. It even found other malware on my system that I didn’t know about and that adaware, spyhunter, and windows defender didn’t catch.
Thanks again.

Thank you! Like most, I am amazed that my fancy virus scanner couldn’t get the job done… Link and instructions to get control of my desktop back worked great! This virus was a real piece of work.

thank u so much…worked for 2 hours last night to no avail, and this took about 10 minutes…

Hi, i found the program files and in due course deleted them, hence removing the virus it has not come up again however some effects still remain, notably the browser is still hijacked How do i stop this?

hey i got this scum virus yesterday.worked for about 4 hrs last nite tryin to get rid.found this site via google ,followed the instructions and all is fine now after an half hour scan.did not even have to mess with my display settings.

HI all,

Just had to deal with this issue on a friends PC! Browsing less than safe sites I feel!!

Anyways, It proves the theory “The best things in life are free”, this site proves it!

The Internet is now so un-safe that we all need to take care and work together to start to win the battle against the cyber criminals.

This site is a brick in that wall we should be builiding to keep those criminals out!

I still find it hard to chew that Microsoft and all the other multi million dollar technology vendors cant work together with authorities around the world to kick some serious ass.

Internatiional public humiliation would be a good start when these people are caight!

Thank you very much.I have been able to fix XP2008 malware with Malwarebytes tool.It really worked fine and the system is efficiently restored.

You can positively rely on this tool.

I tried using this program after looking up solutions to the problem on another site. The program found numerous threats, and I proceeded to delete all of them off. However, the RestoreOpenIsSafe method turned up no results.

Another major problem is that after running the program and deleting the files, after I restarted, the Windows XP loading bar is freezing, and the only way to boot up is in safe mode.

Did I end up deleting a vital registry, or is it another problem? It only started freezing immediately after the Malwarebytes program restarted.

Any help is appreciated.

Thank you SOOOOOOO much! So mad that I got this @%$# virus over the weekend. It stills show up in Safe Mode. Just downloaded Spybot from download.com on a usb thumb drive & diff PC and it got rid of the whole #&@$*@$ thing without requiring me to do anything else, not even regedit. WoooHoooYeppie!! Deepest thanks to people on this chat and SPYBOT!!! But I had to disable the virus from startup first by doing Start->Run->Msconfig and unchecking all funny looking task names I am not familiar with. After Spybot is finished, all desktop themes returned and I was able to get rid of their fake background warning screen. Hope they catch these bastard criminals for causing so much griefs and extorting money from people.

When I turn on my computer the screen is blue with a warning telling me the computer has a virus, there are no icons on the desktop, and the start menu is missing. I absolutely cannot do anything using the keyboard and there is nothing to click on using the mouse. Does anyone have any suggestions on how to solve this??????

Man what a nasty POS. All of a sudden I got a popup saying click accept to install without a cancel. The pop up said click here not to install in the text which was BS because it installed it anyways. Then my AV kept saying virus found no matter what I did and the background kept changing no matter what I did. Finally wrote down the three names of the file saying it found and opened up regedit and searched for each file and then deleted registry entries with the filenames. Malware didn’t pick this up because it probably thought the files were the screensaver I wanted. 8 hours later.

Hello people..
OK I also got screwed because of this virus, was up until 2 AM last night trying to clear my pc. Got all the crap out of my pc. Used spy bot and Malwarebytes’ Anti-Malware. Got everything more or less back to “normal” but there is still the proplem of not being able to right click and not being able to see the “All Programs” on the start. PLEASE can someone help me?
Thanks… people who do this type of crap should go to jail.

I got home from work today to discover that my 2 kids who had spent the day at home with colds had managed to infect the computer with this nasty malaware (Talk about ironic). “Dad! the computer is infescted with 599 viruses and we’ve installed AVG and it won’t fix it.”

The kids had downloaded and installed firefox and were using it to browse utube.

At first I didn’t know what was happening.

I copied an AVG download file from my USB and loaded it in safe mode, but it failed to finish scaning the computer.

I deleted the 4 infected files and folders that it had uncovered with windows explorer.

I couldn’t understand where this other virus program had come from and why it’s pop up screens were not going away. Then the penny dropped.

I went to my other computer and googled Antivirus XP 2008.

This lead me to your page.

I downloaded the mbam-setup.exe file and it successfully removed 32 infected files, then rebooted the computer.

Unfortunately the system was in a sorry state by this stage and we had lost wallpaper, screen saver, internet access, any function in the antiviral program. I am interested in your suggestions in fiddling with the registry items. It seems a bit hit and miss from other people’s comments. I resorted to a simpler strategy.

I reverted to a backup configuration, and reinstalled programs and data from discs / USB devices. So far so good. We have a good display and AVG is now scanning quite successfully. I haven’t got around to reconfiguring internet explorer and Netgear yet. Unfortunately I have not uncovered a trojan that may have let the beast in in the first place. Does this mean that I have missed something?

Now I also have to educate my kids on good browsing hygeine to try and prevent further attacks.

This has taken me around 6 to 8 hours to solve.

Thanks for the information.

James

Hey James,
You can also try downloading spy bot search and distroy. Run it about 2-3 times as well as the AVG (was able to catch the beasts and put them in the vault)
I am still trying to figure out how to regain access to all programs.. But cant try anything right now because i am at work =(

Thank You So Much! I hate whoever made this virus! I want to go and find out who this kids mother is and look in her basement. This dump will probably end up being some major nerd with Star Trek memorabila everywhere. I’d then proceed to dragging him outside and curb stopping him to death. The trick took everything away. I’m a happy camper now. I for some reason didn’t have to do the Registry things though. I give you an A+ webmaster.

Thanks.

I keep getting “the setup files are corrupted” when trying to download mbam-setup.exe. Also, got the same message for REVO. Does anyone know what I should do?

Thanks for the help, got it all cleaned up in an hour using Malwarebytes as recommended.

Desktop settings all fine too !

Want to get rid of it fast, easy and free? I called a friend when I tried to buy spy program and it would not take my credit card. What he told me worked in just minutes
Go to start, click on run. Type in msconfig. Look for
av20008XP in list and un-check it. (all others will remain checked in green). Then hit apply-ok. Click start up compter and whal-la. You will not have that agrivating pop up any more.
If you need to then can go to start settings and then to add or remove programs. My virus never did show up here, not did the systems start help as others had said.

Thanks for the help on restoring my screen saver! Here I thought my computer was ruined forever and I would have to look at that stupid warning picture forever!

Caught it a couple of days ago.. Went and restored my computer to a cople of days prior to catching the “Flu” and it has worked…. I did run my McAfee “wich didn’t catch AVXP2008 to begin with”, after letting it detect the virus I found that it is being delivered by some company called “SoftNet Ltd.” or they have something to do with it…

Help…

I have same blue screen of death as Jen (post 79) with a fatal system error - STOP” c000021a {Fatal System Error} The Windows Logon Process system terminated unexpectedly with a staus of 0xc0000034 (0×00000000 0×00000000). The system has been shut down.”

Does anyone have any suggestions…

TIA

I have gotten rid of the virus but this stupid background keeps popping up. I cant seem to get rid of it. I go to the registry to change the values bck to 0 but when i restart they go back to one and i have that same background again with the desktop and screen saver tabs missing. PLEASE i am a 14 year old who needs help getting the background back because i use this computer for school and i cant send it away to get fixed because then ill be missing class. IF YOU HAVE ANY DIRECT ANSWERS PLEASE EMAIL ME ON HOW TO GET THE BACKGROUND FIXED thank you will.brabston@yahoo.com

Thanks so much everyone. The Anti-Malware worked wonderfully. Put everything back to normal. Brilliant!

AHH PLEASE HELP!

I cannot fully get rid of the virus. And guess what!!
i have a new one. AND THERES GIRLS TALKING ON MY COMPUTER AND THERE IS NO WINDOWS OPEN!

PLEEEEEASE HELPPP!

I tried getting rid of this for several hours. Norton could see it but not delete it. Even tried registry edits, msconfig, etc. Everytime I got closer to pitching it out of the window. The software and comments here worked like a charm.

Ditto to many of the notes above. eg. Anti-Malware did the trick. My version of AVXP2008 had buried itself rather deeply as I had tried several things before finding this site….Thank goodness I did! As a result several “things” happened - a couple “auto-lockout” screens popped up indicaing an eminent windows shutdown…several key strokes later I discovered Anti-Malware continuing its scan in the background. Another time the “thorough” scan aborted about 40 minutes into it. To make a long story short. Follow the instructions. I ran both long and short scans several times…..it took a bit of time …but….I am now skweeky cleeeen :)
…….proof is in the puddin’…….I am going to do a comparison between Anti-Malware and my Webroot SpySweeper (and my settings!) I may replace it …They have earned my business.

It worked absolutely fine. Thanks a lot.

Help! what ever i use malware or revo it says that the program cant run on windows32…
any suggestions?

both of my sisters got this problem on their PCs, and i did a quick search and found this page and within an hour we have fixed both. just wanted to say thank you very much.

i hope the people who create these problems are fined extremely heavily and learn a lesson.

malwarebytes worked like a charm! Cross my fingers but it looks like it fixed the problem unlike the ESET nod32 Security Suite I have installed which didn’t even tell me there was a malware infection. Malwarebytes has definitely earned my business and I am installing another program called returnil virtual system 2008. I don’t know how effective it is in preventing attacks like this POS we got but it certainly sound logical enough to try as another layer of defence.

I unfortunately did not find this site earlier. I reinstalled Windows XP. I had been able to save my files and favorites. This malware had even put 3 websites in my favorites!!

Hi Everyone — I want to thank everyone here for efforts, the anti-malware thing did the trick and found around 19 threats.. I am still scared that it’ll come back somehow — what do you recommend against similar Spyware and Malware intrusions..?

I am unable to even navigate to any malware or anti-spyware sites. I always get redirected to a Google-like page, which inevitably leads to a site related to these jerks. I was able to email the links from another pc for the recommended fixes mentioned above. They appeared to download (although very quickly) but none of them are working for me.

I downloaded mbam-setup and saved to my desktop, but when I attempt to run it, I get “The setup files are corrupted. Please obtain a new copy of the program.”

Then I tried the revosetup and when I try to run that one, I get “Installer integrity check has failed…”.

I’ve been reading various message boards and recommendations for hours and have gotten absolutely no where!

If anyone has any other ideas, please help!

franco, I don’t know if this will make any difference but you could dl mbam’s program directly from their site into a folder and install it from there. (That’s what I did; I didn’t dl to my desktop and I got it from their site)

thanks all of you guys… i read all and found what i was lookink for.

my computer got infected when i was trying to watch a video of myley cyrus suking dick, now i feel really stupid but thanks to you my computer got fixed

*note: if you want to change tha background before you fix the problem just choose any picture and do the right-click on it select “set as desktop background”

thanks again.

My computer also got hit with this Virus and I have spent hours and hours trying to remove it. However, it seems to have screwed up my Internet Explorer and no matter what I do (unistall, then reinstall) it doesn’t allow me to access some web sites and sometimes will redirect items when I click on them from google. When I can’t access some sites I get “Internet Explorer cannot disply the web page”

HELP! Does anyone know how to fix this part of the virus?????

I have installed a number of different scans - include Malwarebtes’ and nothing has fixed this problem.

Wow!, this program works like a charm!. I feel like hugging the programmer!. Thank you dude! You saved tons of people!!! GOOD KARMA FOR U!!!

Cheers,

Darren

This virus has gotten smarter. It blocks useful websites for getting rid of it (e.g. it will not let you go to malwarebytes.org). You get a page load error. It even blocks sites with news stories about the virus.

i had this and malwarebytes worked for me thankfully, i actually downloaded the set up for it on a flash drive on a different pc, and then installed it on my own. then run it .

Have read all comments - This virus is a work of art. Bogus install menus, bogus licence agreements, bogus virus detection, bogus support lines, etc. Real damage, real charges to credit cards. I have got it for the second time - downloads and installs from a limited account, acts on a computer like a nuclear explosion laced with cyanide. Excellent! What a power! What a sabotage! Going to reformat the HDD again and use Solaris10 for the web.

thanks for this wonderful page, it helped phenomenally
it is now gone and I have a computer back, what a pain in the @** that one was!

cheers

I have went 25 years without a virus and this sucker got me. Did a search on the internet for “forum signatures” as my nephew wanted a cool one and the first site I went to launched this virus. Damn I work with computers for a living and this sucker was hard to remove. It took me a few hours. Malware bytes helped get rid of it but there are some manaul steps you need to take. I recommend CCleaner to help finish the job. With this tool you can kill the processes easily from the startup and it also will fix the registry.

I am impressed by this virus because I completely cleaned it and one month later it appeared again as another cleaner..I cant remember the name.

Also be sure when you download Malware that you get it from a reputable source. There are phishing sites out there that will actually get you into deeper trouble when you think you are donloading the software you are actually downloading a virus. Use Firefox on your search and only click on the sites listes as “safe” Good luck!

I used a flash drive on another computer to download the fix, and then copied it to the desktop on my infected computer. It installed without a hitch. During the first run of the fix, I left it for a few minutes and returned to find the computer re-booting!?! Then I ran the program again, which took about 35 minutes, and it fixed everything, including the missing tabs and the desktop. Be sure you have the latest update (it was #1.24, I think), and you need to baby-sit your computer during the process or it will freeze-up and reboot for some reason. I just kept moving the mouse around, and it finally finished, and when I re-booted, it was fixed.
Thanks a bunch, and a tip of the hat to the guys at Precise Security.
Cliff

Malwarebytes tool WORKS 100%…Thanks

I only needed to run the Malwarebytes tool, now everything is running as normal!

Thanks for the help guys!

had this problem..fixed it with the scan…everything was fine…week later same damn thing happened again, this time it loads upto windows xp logo and then screen goes blank….i can feel a reformat in my bones…dam thing i was in the middle of getting the restore back when it just rebooted on its own…bloody hell!

luckily was able to come home from work after getting the dreaded call from wife and son, was able to use firefox vice IE to find this thread and installed the Malwarebytes fix immediately, cleared all issues with no registry fixes needed. No matter how many times I tell them never click on a pop-up, I guess this one was too good to resist.

A guy I work with just reformatted his harddrive last weekend because of this POS virus, I guess too late to give him the fix now…

My notebook was infected by Antivirus XP 2008. I’ve followed some similar instructions, but the fact is that MalwareAntiMalware deleted some archives that make my windows XP only accessible on safe mode. Now here I am trying to reinstall the OS

Still dont know how I get the virus though. It just entered and self-installed, I guess it was via BitTorrent because I wasn’t even on pc when the instalation began!

Had the same virus 2 weeks ago. I was trying to watch the Olympics on-line and the site said this only worked with Internet Explorer, which I hardly ever use anymore and now I’m definitely never gonna use it no more.

To watch the live stream I had to install some small program, which I manually scanned, but NOD32 didn’t detect anything. I’m guessing the file wasn’t infected, yet. Until I ran IE again and then some active-x element probably activated the virus in the file I downloaded, or something similar. When I scanned the file on another PC, also with NOD32, it found the trojan immediately.

I still have the virus-contaminated file (c-setup.exe), safely RAR-ed on an USB-stick, so if anyone wants to take a look at it, send me an email.

Ps. am I the only one who finds it suspicious that only Malwarebytes Anti-Malware can remove it. Makes ya think huh…

i previously had some viruses in my pc but i deleted them suddenly one day, i was searching for a site in google…….when i entered one site some pop up came up and some virus or malware got downloaded by itself…………since nod32 could not remove it…….. i unistalled nod32….after i uninstalled nod32 ,it took advantage and destoyed my pc, now i cannot create a new account, my sound drivers are not working and many applications have failed……………though i now installed kaspersky it could not do any thing……….i cannot restore my pc……………………..i dont have my windows xp reboot cd please helppppppp me……………or else i have to buy a new win xp cd………………please

i cannot even install new softwares like malware bytes help meeeeeeeeee………………………i wanna kick those virus spreaders and hackersssssss

I got this on my wife’s computer last night. I found this forum and downloaded Malwarebytes’ Anti-Malware from CNET to my computer, copied it by USB drive to my wife’s computer. The only thing I did before running it was to run msconfig (Start-Run-msconfig) and stop the two unidentified programs listed in startup from running at startup. I rebooted and then ren the Anti-Malware software. It cleaned it from my login. I then had to correct the display registry entries as above in #3 and everything seems to be fine.
Thanks to all.

Hi,

Ive been scammed fro $130. I went to eglobalbillingwebsite..their support email dont work.
Ive been reading at some posts here and said they have a phone number for this company. What is the number..I need my Money back ASAP!!!

Thanks

Hi friends mail me if you have any issues with Virus and I will help you to my extend.

Subject have to be in the Name of : Virus Issue

Note : Mail me if I know the answer I will help you !
If Not I am sorry ……….

Regard’s
Jeni

My email address is : dhivyajeni@yahoo.co.in

Arrrgh, i need help, ive deleted this virus manually, ie. the folder in program files, and now i want to run malwarebytes to clean it up, but it wont let me install it, says file corrupt, wont let me reinstall firefox, redirects nearly any address i enter in google. wont let me install AVG or anything.

The only thing wrong with pc is internet addresses keep redirecting, and it wont let me install anything to do with anti virus stuff. Im lost, plz help sum1, cheers.

Very Unfortunately, I had been caned to pay them $50. But I never find any contact information from then except that they send me e-mail with eglobalbilling.com, which will probably will steal more money if you do log on with your credit card information. There is no e-mail and no phone number. For the one who asked for phone number, here is what I did:
I called my credit card and try to stop the payment, they give me a website called nbx-help.com. So go to the site and get the 800 number hope you can get your money back. Let us know how it turned out.
Sam

I just run and done a scan with “Malwarebytes’ Anti-Malware” it found many bad things and deleted them but now says the following

” files that are required for windows to run properly have been replaced by unrecognised verisons. To maintain system stability windows must restore the original versions of these files. Insert your home XP edition CD rom now”

I cant find my CD rom, will my PC restart if I reboot this now without the CD rom?

Hey, I was wondering if anyone could help me.

Somehow this program managed to install itself onto my computer. I panicked for about half an hour… wondering what I should do.

I downloaded loads of virus scanners but they couldn’t update and still can’t.

I’ve gotten rid of the pop-ups, wallpaper and the virus scanner but in the corner it still says VIRUS ALERT.

I typed regedit in the Run box, but it says it has been disabled by the administrator. How do I get it back?
I can’t get past the third stage…

Thank you so much for this!!! Saved my computer.

antivirus 2008 installed itself on my computer and it became my homepage. i changed it back and i thought it disappeared but now i cant even log on my computer.it just doesnt seem to boot up right and i cant even go in on safe mode it just keeps going back to the control alt delete log in. what can i do?the system is windows xp professional

Thanks for the advice. The Malwarebytes worked pretty good but like others I still couldn’t download the updates or any other downloads. Every time I clicked on a site in google it transfered me to something else and some sites that I normally used I couldn’t enter. A friend told me to google “sdfix” - then pick “using sdfix-majorgeeks support forums” I downloaded sdfix and followed the directions and now all my internet connections are working and everything looks good for now!! I read some good advice - since many of the “bad Windows” virus use the standard Windows look - try changing your windows colors on your pc so the “bad” ones will stand out when they come your way!!

hey everybody…this virus destroyed my computer. not only did it take over my desktop, it disabled desktop options, it would block any malware sites, it would also block malware removal downloads, if i didnt open a new ie page it would also link any searches i did on google to bogus pages. it also wouldnt let me restore windows to a previous date so i spent 5hrs trying to fight it, ending up finding most of the files associated with the virus..but when trying to remove it, i moved some of the files from this virus to my desktop and when i tried to reset my computer it doesnt let windows start after the initial loading screen with the loading bars, it shows a blue screen with a message in the top left hand corner that doesnt make any sense…it blocks safe, mode…. everything….so im thinking im going to need to reformat windows in the process losing all the content of my hard-drive. How can i ever replace the thousands of dollars lost, from music purchases and collections, to the music production i was working on…2 years of my time was spent working on music with my computer, now its all gone. is there a way to sue these people, does anybody have info or advice. im actually at a loss for words right now…..

hey everybody…this virus destroyed my computer. not only did it take over my desktop, it disabled desktop options, it would block any malware sites, it would also block malware removal downloads, if i didnt open a new ie page it would also link any searches i did on google to bogus pages. it also wouldnt let me restore windows to a previous date so i spent 5hrs trying to fight it, ending up finding most of the files associated with the virus..but when trying to remove it, i moved some of the files from this virus to my desktop and when i tried to reset my computer it doesnt let windows start after the initial loading screen with the loading bars, it shows a blue screen with a message in the top left hand corner that doesnt make any sense…it blocks safe, mode…. everything….so im thinking im going to need to reformat windows in the process losing all the content of my hard-drive. How can i ever replace the thousands of dollars lost, from music purchases and collections, to the music production i was working on…2 years of my time was spent working on music with my computer, now its all gone. is there a way to sue these people, does anybody have info or advice. im actually at a loss for words right now…..

Webmaster and RG you are brilliant - worked first time. But these scum need locking up.

Recently I`m having a problem with my computer, i.e. sometimes when I`m clicking any drive or folder under it a critical alart appears on the desktop saying that need to download antispyware. When I`m clicking “yes” the browser autometically opens and trying to connect

httpx://www.ie-anti-virus.com/download.php

and when I`m clicking “no” the browser tries to connect

httpx://www.free-antiviruscan.com/id/4912933/4/1

This buggs a lot when I`m using my computer. I do not have an internet connection with my computer. In order to solve the problem once I`ve formated the C: drive, still the problem appears sometime. I`m using windows XP profesonal SP2. Please sugest how to solve the above problem.

Sumantra Ray

Much obliged for recommending Malwarebytes. It seems to have done the trick for the most part.

Like a few other people on here, i’m not getting any instances of RestoreOpenIsSafe in RegEdit though.
(As suggested by Rudi Geldenhuys in comment no. 3).

All system restore points appear to have been deleted by the virus. Also, i can’t view any previous months of the system restore calendar.

If anyone knows whether the above constitutes a serious problem, i’d appreciate your input.

PS: The way i got rid of that annoying fake message background was by simply going to CompuPic and resetting my old desktop pic as my wallpaper.
After stumbling upon this website, running a scan and deleting whatever it found with Malwarebytes took care of the rest.

I am still trying to get rid of the background i did all of the steps except when i get this

Right-click NoDispScrSavPage to select Modify.
Change the value to 0.

I don’t see that anywhere can you please help me!

I was finally able to download Malwarebytes, after several attemps. It ran for about 45 minutes, and found 29 infected objects. I had the program remove them, and rebooted. However, I am now missing the run option on the start up menu, so I can’t do anything listed in #3. Please advise.

Julie
dragoness_rage@yahoo.com

I had the same problem with the background. I logged on as a different user, and the background was fine, so I copied my start menu, and deleted the user. Then I created the same user, copied the start menu back, and the screen was fine. Even had the background and screen saver restored. But I still have problems accessing certain web sites. I’d like to know how to fix whatever it is doing to block them.

The 3rd part agent who collect credit card payment for this piece of shit software is jetts.com. You can go to their website to claim your money back. the number to call is: 8669055126 But please call your credit card company and ask a stop pay or dispute on this transaction first, then ask them to close this account and send a new card with a new number.

Do not forget to call FBI and file complaint on them, both the software and the agent aissit them to laundry the money. here is site you can go to look for more info.:
http://www.usdoj.gov/criminal/cybercrime/reporting.htm
If there is enough ppl complaint, FBI and Fed Gov will take action.

Though it is 1:25 and I am so tired, thanks to Malware for doing a good job!

I will purchase it!

Thanks! Malwarebytes is a great program. I performed a “quick scan,” and the program found the virus and eliminated it within 20 minutes. FYI - I had to keep my computer from going into screen saver mode, otherwise Malwarebytes would freeze up. Thanks again!

Much obliged for recommending Malwarebytes. It seems to have done the trick for the most part.

Like a few other people on here, i’m not getting any instances of RestoreOpenIsSafe in RegEdit though.
(As suggested by Rudi Geldenhuys in comment no. 3).

All system restore points appear to have been deleted by the virus.
I can’t view any previous months of the system recovery calendar.

Also, after i made a new store point, Avast told me during boot scan that a .sys file (A0000015.sys) in one of the C:\System Volume Information\_restore{…}\ folders was infected by a Win32:rootkit.gen [rtk]. Moved it to chest to keep it from doing harm.

If anyone knows whether the above constitutes a serious problem, i’d appreciate your input.

PS: The way i got rid of that annoying fake message background was by simply going to CompuPic and resetting my old desktop pic as my wallpaper.
(That was before i stumbled upon this website, ran a full scan with Malwarebytes and deleted whatever it found.)

Hey. Thanks webmaster!!!
Malwarebytes’ Anti-Malware (mbam-setup.exe) was THE ONLY program that detected this virus!!!
At least it removed or blocked stupid pop-ups and background of this virus.
System is probably still recovering because in IE actions that require form submit are taking longer time then usual.
But in anycase, thanks again webmaster for the original post!

Thanks to all the responses my computer is up and running again.

Thank you everybody!!!

I felt adventurous, so I tried to remove the browser hijack part manually. In my case, the hijack manifested itself by inserting a short script at the top of each HTML file opened in the browser. You can see it if you open the source view of an HTML page. The script contained the link to analitic-checks.google.com.

In the first post in the thread at forum.sysinternals.com/forum_posts.asp?TID=15943, there is a list of files and registry keys related to the rootkit responsible for the browser hijack.

The files in need to be removed first, but you can do it only if you boot from a CD or another drive. Otherwise, all tdss* files are hidden. Once the files are removed, you can go back to the original OS and look for registry entries and remove them. I had to reboot twice to be able to remove all registry entries.

Thank you so much……………………..It’s very work..

One thing that everbody is forgetting is that YOU downloaded the virus in the first place…but without sounding too harse… we ALL keep getting told if it is not from a source known to you, then **DON’T** download it, their is plenty of other websites that don’t require the downloading of active X as of e-mails as well. When friends contact me and say ” my PC has a virus” i ask what site were you looking at - at the time you noticed it misbehaving ?….More often than not, I get told “the site i was looking at required an active X download to view” **IF YOU DON’T KNOW IT…DON’T INVITE IT IN**…Come on you good folks, let this be a rule of thumb and save your goodselfs the hassle/time and possibly expence of righting your PC. -Pete-

Yes, it is something that is “downloaded” by the user; however, yesterday it attacked my computer. I did NOT download it on purpose by ANY means. A little windows help box popped up on my screen and said that scvhost was blocking something and did I want it to continue to blocking. Lo and behold, when I clicked keep blocking, I think that’s when the virus attacked.

I generally consider myself pretty suspicious of strange sites/emails/etc. but this totally caught me off guard. Had I known that “keep blocking” actually meant, “download this crappy virus onto my computer” then, yes, I would have ctrl-alt-dlt out of the pop up window.

Be very aware and cautious as this is a nightmare to remove.

So I have the virues also and I tried to download spyware removers and searching through google or yahoo would bring results but I couldn’t go to any of the links. It would pop up a new window with different search results. I went to dogpile and was able to pull the site up to download the spyware remover. When I went to install the program it started to run then a pop up window came up and said it wasn’t a valid win32 application…. any help?

Excellent thread guys. Rudi thx for the info on the tabs :) . The Malwarebytes software is a marvel the creator of it is a godsend. I manually removed the Antivirus xp 2008 myself before finding this post :( took a while i know a little about comps but not enough to sort this. Had it all uninstalled but still had the display tabs problem and the redirecting to random sites while online. Used Malwarebytes 50 minute scan found 42 problems removed them and restarted, everything is back 100%. Cheers for the valuable info guys and keep up the good work.

Regards.

This site was a great help to me. Unfortunately, I was hit with the antivirus twice.

The first time I had removed most of it, but could not remove the joke blue screen and felt my computer was still compromised.

I then foolishly tried to retrace my steps to see which website I opened had this virus attached to it, and I ended up landing on it and getting hit a second time.

The second time I got the virus nothing worked to remove it completely, and I spent hours each day fixing it only to have it reappear on startup. It eventually took over IE completely with a threat that my computer was infected and forced IE to its homepage to buy their bogus software.

I finally gave up the fight and got a new hard drive. I would love to know if anyone has filed any kind of lawsuit against the makers of this product or if there will be a class action lawsuit? I’m also up for beating them senseless and throwing them into a ravine instead a tedious trial. Words cannot express my anger towards these people for the amount of time and documents and money I have lost because of this virus.

I’ve found a couple of other helpful links for deterring problems like this to pass along. This is a link for a free download for a rootkit eliminator from F-Secure Blacklight:

f-secure.com/security_center/

Rootkits will hide where your virus software cannot reach them and this helps locate and remove them.

Another free download to help you to see what programs are being run on your computer is from HiJackFree:

hijackfree.com/en/hijackfree/

It shows you what programs are active on your system so if a program installs itself and is running you will see it in the list.

I’ve used a lot of different virus protection programs but so far it seems that Spyware doctor works the best. Out of all my other programs, this was the only one that at least noticed antivirus on my system and removed a good chunk of it.

pctools.com/spyware-doctor/

It’s about $30 but worth the investment. Hope this helps anyone else dealing with these jerks.

I somehow picked up this XP 2008 thing. Now my PC is totally frozen. The desk top symbols come up but are covered by the dang XP notice. Nothing works. I cannot even get the start button to operate. just sits there all day with the hour glass staring at me.
So how can I get the thing working to clean that virus off ? Do I have to spend a couple hundred dollars (which I don’t have right now) to the Geek Squad ?
Please if anyone has an answer HELP
Also does anyone have the phone number from these bandits so I can bring a lawsuit to pay for my damages ?

Malwarebytes’ Anti-Malware (mbam-setup.exe) was THE ONLY program that detected this virus!!!

Thanks for the advice. This virus was killing me until I found the solution here. It blocked access to McAfee virus database update. That’s why the virus scanner could not detect it.

The posters of this site have saved my sanity. Many thanks.

Sam,

Thanks for the info! I will give them a call now.

Thank you! Thank you! Thank you!!!

So I got rid of the virus. But now I can’t connect to the internet. My IP address’s and all that that stuff is gone. It reads 0.0.0.0 for my IP address and other. How can I get my IP back? I tryed to repair it…but no use. Any help would be great! THANKS!

Spence

Antivirus XP2008 was somehow installed on my PC .

Followed the 9 step instructions that the Webmaster posted at top of this page .

Also before running the scan close all open programs and browser windows .

Let it finish the scan , took me about a lil over 20 minutes .

Everything is back to normal .

Big thanks to Webmaster and Malwarebytes .

As for Antivirus XP 2008 is there anything that can be legally done to them ?? Maybe a petition ?

Spence if you have Windows go to Start > Control Panel > Network and Internet Connections .

Hope that helps .

Thank you Webmaster for the easy instructions . And a big hug to Malwarebytes !!!!!!!!

THANK YOU THANK YOU!!! we just bought a VERY expensive computer to run a bussiness, and my husband, against my reccomendation, downloaded a program that unleashed this beast virus, and trashed my computer, and GEEKSQUAD wanted to charge me 200 + to fix it, and u came through!!

I got the Anti virus 2008 XP virus and then got rid of it. Then I had the lingering problems of the permanent desktop background fake warning message and the display property tabs taken away. Each time I made the tabs available and removed the background, the problems would come back when I rebooted. I found also that malwarebytes anti malware software (the free version) took away all the problems and returned my settings back to normal. Now when I reboot everything is fine. The virus had also removed my windows picture and fax viewer capabilities. To fix it go to start button, run, and type in regsvr32 /u %windir%\system32\shimgvw.dll this reset the picture viewer so it was working.

I ALSO PURCHASED THE PIEACE OF CRAP , AND IT MADE MY COMPUTER A PIEACE OF CRAP ALSO, I HAD JUST GOTTEN MARRIED AND HAD GRANDBABY PICTURES AND WEDDING PICTURES, AND GUESS WHAT MY COMPUTER CRASHED AND I LOST EVERTHING BEFORE I HAD A CHANCE TO BURN PICTURES TO CD. REALLY PISTED ME OFF. AND AS SOON AS I GET OFF HERE, I’M CALLING THE BANK AND THE PEOPLE ABOUT GETTING MY 49.95 BACK.1-866-905-5126 OR 1-866-521-4864 OPT 2. WISH ME LUCK. NOT A HAPPY CAMPER RIGHT NOW, IT NOT ONLY COST ME DOCUMENTS,PICTURES, AND 49.95, BUT ALSO 50 DOLLARS TO FIX THE COMPUTER.

IT WORKS!

I was crossing my fingers throughout the whole scanning processes hopeing that it’ll work and it did.

Thank You So Much, my computer is back!

found this site after googling ”antivirus xp 2008”…………..followed the instructions using Malwarebytes’ Anti-Malware and after 10 mins or so and a reboot later, my pc is working properly.

Used version 1.26 downloaded from malwarebytes own website and saved onto usb pendrive. Ran the problem pc in safe mode , copied the program to the desktop and ran as instructed. there were no probs with setting desktop picture again,but there were 2 antivirusxp 2008 shortcuts left on my quickstart launch (just above the start button) which i scanned again with malwarebytes program and it said they were safe so i just deleted them

Many thanks to the webmaster for the info .
I hope the people responsible for this malware are caught and prosecuted.
cheers,

Gaz

Thank you very very much…..anti virus 2008 has been a major problem on my moms computer…Now i fixed it and everything from the explanations you have given.

Regards
–Bubba–

Hey!

Thanks for posting all this. I seriously want to smack the person who made this malware.
I found the virus this morning, I think I blindly clicked on the License Agreement and the program installed itself all over my computer. I knew it was fishy so I didn’t click on anything: The pop up alerts about how many viruses I had, the program in general, even the picture on my desktop.
My little bro and I decided to run the computer in safe mode and run an online virus scan to remove as much as we could. After we got rid of 2 out of 4 corruptions, we went back to normal mode and downloaded Symantec, but that didn’t detect anything. I finally decided to google the name of the malware and found this site!
Thanks a lot! I’m sorry to hear about most people actually going through and paying. I hate malware!!!

Big thanks to Webmaster on June 26th and Rudy of July 10th! After realizing that Antivirus XP 2008 was an unwanted bad thing now on my computer presenting all the bad symptoms previously described by others, I ran NOD 32 anti virus, I already had, to see what it would do. It did remove most of the files that the malware added but it did not remove the program itself or fix the screensaver, desktop or restore systems functions. Everything seems to work great now by running Malwarebytes and doing Rudy’s fixes. I am thankful for finding this forum and for the insightful contributors who offered their knowledge at no cost. Good karma headed your way.

thanks for the info….it really worked

This didn’t work for me. Ran the scan and removed the threats it found. Reset my computer and the ANTIVIRUS XP 2008 license agreement still pops up and I still can’t access some sites

I tried the Malewarebytes 1.27 version last night and it got the computer to a “working” state. I actually ran it three times, once in safe mode. When I ran it the second time, it still came up with ~500 infected files. I think it is replicating. When I ran it the third time - the McAfee kept kicking in and finding infected files. (Shame it didn’t find this initially) I went ahead and let it delete them as I don’t care “who” kills them - I just want them off my computer!

The internet is now working fine - no more zillion ads - and the bogus ” red - X security icon” is gone. My problem is that the computer itself is still running soooo slow. It took nearly 5 minutes to access “RUN” from the START menu - as it took nearly that long to open START. I went into the Registry to make the fixes as mentioned in #3. My setting was already at “1″. My screen saver has been affected but my wallpaper never was. I still can’t get the screensaver back or general functions back to speed.

All the spyware and virus software I have used (also ran Lavasoft and the McAfee) are no longer finding infected files but the computer isn’t running well. It acts like it is still trying to do a million processes at once (like under the viral influence) but all scans are clean. Now what?

I had this nasty POS virus about a month ago, and did not have a clue as to how I got it…I just got it again about an hour ago and then realized how….GOOGLE!! I rarely ever use google since my homepage is yahoo. I remembered last time I got it I used google and went to a website, and it automatically downloads to your comp.

Luckily, I found this web page because the virus filters out helpful websites to rid your computer of it. Anyways, first try, worked like a charm! When I got rid of it the first time, it took around 6 hours! TY Malwarebytes, r this help I just pruchased your awesome product!

Like most of you I spent far too much time fighting this POS. Everytime I tried to run spyware to remove it the Blue Screen Of Death would kick in and restart the computer. Thanks to reading the comments on this site I resolved the problem.

To get around the BSOD.
Start your computer in ’safe mode’ (press F8 on boot up) and follow the prompts.
Run malwarebytes antimalware quick scan.
Keep your fingers over - Control + Shift + Tab.
As soon as the BSOD appears, press Control + Shift + Tab.
The BSOD will disappear and malwarebytes will continue to run.
The BSOD may appear again, so keep your fingers over those buttons and press Control + Shift + tab again if it reappears.
Eventually the malwarebytes scan will complete and you can remove the infection.
Malwarebytes will reboot your computer and windows will do the rest.
Hopefully, your computer will restore as cleanly as mine.

If I could get hold of the S$%ts who wrote this POS. I’d string them up by knackers for the same amount of time it took me to remove it.

Thank you malwarebytes and all those who contributed to this forum

This worked great, but I still get the pop-up?? Not sure what to do? My tabs are automatically back on the desktop background and screensaver though!

Hi Kelly

try running some other free anti-spyware programs. Spybot S&D, ad-aware, superantispyware, etc, see if it finds it and clears it.

If it comes up when start your computer, it may still be in the start up configuration. Search for ‘msconfig’ and under the start up tab you will find all the programs that run on start up. Look down the list and you may find two programs that are just identified by a load of letters and numbers. Un-check the tick in the boxes, click on ‘apply’, restart your computer and see if the popup disappears.

Hopefully, the anti spayware will find it and do the job for you.

I think this is a government program that’s collecting moneys from people. or else the company and the virus would have been deleted by now

to Rudi Geldenhuys…
Thank you sooooo much!!!

I spent all day getting rid of this nasty virus, and was left with missing control panel items. I followed your directions exactly, and everything is back to normal.

I used Malware Bytes anti-malware, and AVG free version 8. It took 3 scans from Malware to completely remove this @#$%.

Good luck to all…

Anybody have a problem getting to the internet with internet explorer or firefox after removing the virus?

FYI - I had removed the virus without using the malware tool and apparently missed a few things. I downloaded the malware tool, ran it, did the fix and rebooted. It fixed the internet access problem.

Cheers!

Malwarebytes an outstanding product. It completley removed Antivirus XP 2008, and it did so quickly.

The support desk of my (then current) antivirus program suggested that I run Restore, which did NO good at all. Then they said that I would have to reformat my drive and rebuild it. Two different people with that company said that. Thank goodness I found Malwarebytes.

Amazing job! Thanks!!

Thank you to all the people that said use Revo Uninstaller-which by the way is free. It took this virus off in 10 minutes.
No thanks to Norton Antivirus, which was running on my PC and did not catch it—and then said they would get rid of it for $ 99.00…..boo to Norton.

Malwarebytes worked for me, it took slightly longer than others have fedback (around 1hr20mins for 40Gb harddrive), but looks like its done the job - cheers to all for the trusted respones - 1-NIL to Malware!!!

Like an idiot I thought it was legitate and I bought it and downloaded it, how bad is it, what will it do to my computer? Is it a scam to get my info??? PLease anyone help me and let me know if I need to get it off my computer once I have installed it!!!

Thank you! It looked pretty obvious so I never installed the “Antivirus XP 2008″ and instead just googled it and found this site and the instructions helped rid of it (which AVG failed to even detect) within 40 minutes. Thanks. I appreciate the help.

i have been fighting antivirus xp o8 for a week now and I have my system running at least. I have used malwarebytes and other scans but my internet explorer will only load home page. if you click on any link on home page it shuts window down. also my search for files and folders if you try to use it, it shuts down. can someone please help.
thanks in advance,

allen……email me at alwest2000@yahoo.com

I went to my bank and my banker contacted this bunch of crooks. I had all of my money back in 5 days.

The Antivirus protection was purchased for $109.85. It was paid for by credit card on 08-25-2008. I took the computer to Quik Internet Service, 824 Indiana Street office 2, Wichita Falls Tx 76301, telephone # 940-723-1385 on 9-15-2008. they removed the virus. I paid them cash for the full $109.85.

Please refund my $109.85.

Ralph Armstrong, 2706 Miller Ct,, Wichita Falls TX 76308.

I was mug enough to purchase this “fraudware” and it cost me to get it removed.
Does anyone know these crooks mailing address from the UK as the e-mail address stated in the rubbish they sent me does not exist.
Thanks to anyone who can assist.

Please help me! My XP is not starting because of the virus, so I cannot run any antivirus programs either. Seems that only DOS commands are working, so anything I could do? I could use antivirus cleaning program from CD, but don’t know how to ‘run’ it from DOS.

It worked. Thanks alot. First time to have a virus like this and it is scary. Still to sort out the bacground but I have spent hours on this.

I just got a virus 2 days ago that mirrors all your descriptions very closely!!! It wants you to download the software “Security Center 2008″ and the little balloon keeps popping up at the bottom saying “you have a security problem”.
McAfee Basic antivirus/antispy rendered the virus pretty lame, but didn’t totally eradicate it. It removed 3 trojans and some related files. I need to google around or something to try to find a complete fix. I will probably try the malwarebytes program.
Can you comment on the “Security Center 2008″ variation?

I too received this Anit virus XP 2008. Avast didnt detect it until it was already downloaded. I installed Adaware and it seemed to maintain the virus.

It found 3 items: the annoying new desktop in c:\windows\system32\ phclrbj0ec8v.bmp,
root hku path….controlpanel\desktop value: convertedwallpaper,
and hklm path:….. software\microsoft\software notifier value:installid.
I currently have them quarantined with no other instances or occurences since. I have full control over the desktop again and the tabs that were removed are back (Removed were in desktop control panel\display\ (screensaver, appearance, and settings tabs).

Avast also found: in c:\windows\system32\ blphclrj0ec8v.scr and lphclrbj0ec8v.exe
and c:\recycler\dc4.vbs and dc6.vbs
These files are currently in my avast virus chest.

Can someone tell me what I do now? If I delete them I think they will come back. Suggestions, help…

HELP!!!

I believe I have an altered version of this virus or perhaps a new one altogether.

Symptoms:
background gone
start menu mostly gone.
c drive gone ( but found via explore )
icons gone
Things that were in my C, are now in my C:\C
While browsing program files, or my c:\c, teh screen will keep trying to bounce back to “these are system files that you should not need, etc etc blah blah ” screen.
Unable to show hidden files and folders in some areas.
System restore no longer has any restore points!
I found 30+ notepad entries all with reg edits in them in my c:\c but they were just saved as notepads not as a reg change file.

had to change my permissions in Hkey_current_user software in order to properly install Spybot and Malwarebytes.

Spybot only found DSEXPLOIT nothing else. And thats no biggie.

MalwareBytes and AVG have failed to pick up ANYTHING!!!

What the hell do I do next?!

BAD Virus… Possibly a modded version of Antivirus08/09 HELP!
XP Pro. AVG/AVAST/SPYBOT/MALWAREBYTES

C Drive missing ( found via explore )

CD drive not visable, nor working.

Start menu mostly missing, resets if I put stuff in there.

If I try to adjust ( in tools ) the folder option to show hidden files and folders it flashes rapidly after I click apply and does not take my request.

C:\ doesnt have most of my files anymore. They are now in C:\c

If I try to access C, C:\c, or program files, it keeps flashing back and forth to “this section contains files and folders that you sould not access, etc etc blah blah” in order to keep me out of it.

c:\c has 30+ notepads full of reg edits and such. They are saved as notpad only,

Cannot system restore. The calendar is gone, no options to choose from. Plus I believe the restore that is coming up, is one made by the virus.

hkey_local has been messed with for sure as I lost my software permissions, but I was able to reset those so I could use malwarebytes and spypot.

None of the above kisted virus/malware scanners have picked up ANYTHING!

Im trying to show a screen shot of C:\c but of course, its blocked me from doing a print screen. Its also hid my notepad. And everything else useful. UGH!

in my newly aquired c:\c where all those text files are, is a ton of notepads called “concerto ensamble pro” and the other notepads I talked about are all named KB986743 or similar. There are also hidden files. Uninstallers for all of those KB files! This happened after I reconnected my LAN for a minute. Im sure I helped the replication along quite a bit when I did that, but it did uncover some lil secrets that I didnt see before as the scripting was going to work.

Yes!

It has worked on my PC and I can’t stop myself to comment.

“It’s great! Thank you!”

Should I remove this program from my PC after using it?
or I can have it installed on my PC ?

I need expert comment.

Directions worked exactly as stated. Excellent info! Many thanks!

For those of you stuck at STOP c000021 BSOD; here is how I do it.
Delete every brastk and karna at root, windows and system32 folder.
Remove all their registry with regedit from another XP. Check whether your csrss file need to be replaced or not!

Hi All!
I never had any trouble with this bogus spyware until some updates removed my shortcut…I feel terrible because I need the money I spent on it. I will follow the instructions and hope that will be good.
I should have known better. I only paid and downloaded it because it had the windows sign on it. I’ll do somke research next time!
Thank yall!

Malwarebytes is great,but the problem with the awful virus,is it sometimes installs a rootkit.
If all the other methods fail,check into a rootkit removal program.
I have cleaned several episodes of this monster for my friends,and one had this.
I finally removed it,but it was very time consuming.
If you are familiar editing the registry,that is also a big plus.
All these computers had one thing in common.
They were using Internet Explorer!
Nuff said….

I purchased antivirus xp 2008, paid 49.95, now its gone from my pc. the support(@)eclobalbilling.com cant even be reached. this outfit really sucks

[...] novirusfreecheck.com is a browser hijacker that redirects web browser to a site that endorses Antivirus XP 2008. [...]

[...] antivirus-world-2009.com can harm computer by dropping its own fake security program called Antivirus XP 2008. [...]

I used Malwarebytes and it worked! The virus had disabled Task Manager, taken over my desktop, and was running a Antivirus XP 2008 (I didn’t pay anything to those &@$!@^#$). I did have to delete some things in my Windows\System32 folder. I just checked creation dates and if it was recent I deleted it. Eventually I was able to use Task Manager again. From there I installed Malwarebytes from a thumb drive (my thumb drive was also previously disabled). I had to run the scan multiple times. Eventually it found more than 70 files and did a restart. The virus was finally gone. The whole process took 4 hours.

I to was one of those that got scammed into buying the windows2008 antivirus. Found out that it was really a virus from the IT tech at work. I called my credit card customer support and had the charge flagged. In doing so I found out that I had been double-charged. I disputed the charges and sent information from the internet regarding this malware and they removed the charges. Unfortunately, my computer crashed within days of downloading the virus. To bad the people that put this thing out there doesn’t have to pay for damages. I think something should be done about them.

I have the Malwarebytes program on my desktop but I cannot get it to open no matter what I do. I put it on my flash drive and took it to my laptop and it opened just fine but I cannot get it to open on my desktop where the virus is? Any suggestions on getting it open so I can get rid of the virus?

Thanks

My son did not know better, DL’d this thinking he had a virus…it crashed his computer and had to have it is wiped adn everything re-installed!

avast

maring this lathi foring this kapar

Ok. About 6 Months back I have had this virus or trojan on my laptop. Everytime I turn it on it freezes after about 20 seconds. I have tried using the Malwarebytes Program but failed epically. If you any ideas on how to help me, Please please please help. My Email is bamachad@bellsouth.net.

Um I kinda think you’re screwed. have you tried booting it in safe mode and removing the threat manually. If you dont know where it is then you could try running w/e Antivirus you have while the computer is in safe mode. doing it like that should stop the virus from running and make it possible to remove it. if that doesnt work email me and I can ask my friend cos he’s really good with stuff like that.

Um I kinda think you’re screwed. have you tried booting it in safe mode and removing the threat manually. If you dont know where it is then you could try running w/e Antivirus you have while the computer is in safe mode. doing it like that should stop the virus from running and make it possible to remove it. if that doesnt work email me and I can ask my friend cos he’s really good with stuff like that. ashley_162@hotmail.co.uk

My system was affected by this virus i got rid of it using system recovery. While it had the virus i kept turning off my pc using the power button alot. Now after the system recovery computer has no virus but it still crashes and i have to turn it off using the power button again! can someone help me with this?

Hi everyone. A joke’s a very serious thing.
I am from Namibia and bad know English, give please true I wrote the following sentence: “If you are sincerely looking for a professional resume that gives you enough hits, then free samples.”

Thank you very much ;). Bridgit.

thanks

Thanks to the original poster for giving a great solution.
Malewarebyte also worked for me. I wasn’t able to run it to uninstall the worm, but eventually was able to download it as a bogus name.

My journey with the worm started 36 hours ago, when I received the “your computer has threats…. .” on the desktop. Also, I kept being thrown immediately back to the login screen after successfully login in to windows, even as an admin. I can only describe it as a login/logout loop.

The short story, I had to re-install windows XP. Before all this happened, I was on XP Home SP3, I re-installed XP HOME SP1, downloded the MaleWareByte (MWB) and removed the worms. I also ran the Windows Defender program, and it caught some other entries, although not as severe as what MWB detected. I am now re-installing SP2 and SP3 from MicroSoft website.

The problem seems to have gone away. Now of course, i have to deal with outdated drivers and programs, but that should be much easier to deal with.

No data was lost because of the windows re-install or MWB removal. I HIGHLY RECOMMEND BACKING UP YOUR PERSONAL SETTINGS FOR IE AND LOCAL PROGRAMS. If you are having the login/logout loop problem, try to start the program in Safety Mode with Networking, that will allow you to move files to other drives on your network (if one is setup).

I hope this helpful.

omg…seriously. I paid $70.00+ just for the f’d up program, did absolutely nothing and hearing this now is just getting me so mad. Wth is with these people i actually thought my NEW comp had something. Thxs for this. Really…

i cant acces to my account,i was browsing earlier then i kinda click a site and accept it to run afterwards,something pop out on my screen and its saying privacy policy.its keeps on showing and scanning till i lost everything in screen and thats only left.even if i shut it down and open my computer again.the first thing thats happenning is a voice saying privacy and error then it will just show in the screen starting to scan.i lost all the icons on the screen

did not make this perchas would like my money back please