 Antivirus 2009 Hijacks The Google Web Site |
Welcome Guest ( Log In | Click here to Register a free account now! )
Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.  |
 Nov 19 2008, 10:58 AM
Post
#16
|
|
|
New Member  Group: Members Posts: 1 Joined: 19-November 08 Member No.: 258,380  |
I have sucessfully deleted the antivirus2009 , thanks to you.  Gur a maith agat Grinler. This post has been edited by taytomyname: Nov 19 2008, 11:00 AM |
 |
 
|
|
Nov 29 2008, 12:21 AM
Post
#17
|
|
|
New Member Group: Members Posts: 1 Joined: 28-November 08 Member No.: 262,127 |
umm.. Of Course! i'm going to say! THankkks! it's works 1000%.  hey, i just want to poin out..that i just get this windows:  check! it out!  then i get  cuz it was't in the INSTRUCTIONS!anyway,   |
|
|
|
|
Dec 1 2008, 01:42 PM
Post
#18
|
|
|
New Member Group: Members Posts: 1 Joined: 1-December 08 Member No.: 263,580 |
I just got this rogue. trojan yesterday. I tried to come here but it blocked my access to this site. I was however able to get to download.com and get Stopzilla and malwarebytes.
It wouldnt let me run malwarebytes, so I ran stopzilla and it seemed to work right away. After running stopzilla I was able to run malwarebytes. This is a tough one, because it blocks most sites with any information on how to get rid of the virus. I got lucky by reading enough in an off topic forum to get rid of it. I contacted trendmicro and the engineer told me this week there has been a huge number of these types of infections. May be a good idea to print out fix instructions and stick it in a drawer somewhere just to have. I have only one computer so it was pretty frustrating hunting down links while being redirected from every "proven" forum. Just thought I would share with you all. Good luck! edited to say: I was on a site about movie clips, something about the hbo series true blood as I remember it. The box came up saying i had a virus, and I have seen plenty of these things and have always hit X and they go away. I hit X and it launched. The Trend Micro guy told me clicking any part of the box will launch it. So for now I would just close my browser if I see anything similar to this. This post has been edited by JCtitan: Dec 1 2008, 01:46 PM |
|
|
|
|
Dec 24 2008, 03:08 AM
Post
#19
|
|
|
New Member Group: Members Posts: 1 Joined: 24-December 08 Member No.: 273,472 |
hi
here is a different take on it if you google search "pg equine rescue" and click on the link you get the antivirus 2009 site. i have tried it on a few different computers and same thing but i can go there direct from through other sites. i ran malware programs and it was not the computers infected it is google it's self that seems to be infected. i only figured it out when the owners of the computers told me they just used googles auto complete searches to get to the site. i tried a google search on a clean computer and bingo. i suppose they are using googles spiders to clone sites great site keep up the great work |
|
|
|
|
Dec 26 2008, 01:11 AM
Post
#20
|
|
 New Member Group: Members Posts: 11 Joined: 16-December 08 From: Virginia Member No.: 270,122 |
QUOTE(foxdark @ Dec 24 2008, 03:08 AM)  hi Thanks to this forum, on Christmas Eve my brother helped me vanquish the trojans from that rogue antivirus 2009/2008/360 et al. I think Goggle has a problem, or it seems to have a problem. So Malware Bytes has been installed on my PC. It took care of the problem completely. I agree, Goggle is the problem. Every other site with Goggle ads seem to have problems of some kind. here is a different take on it if you google search "pg equine rescue" and click on the link you get the antivirus 2009 site. i have tried it on a few different computers and same thing but i can go there direct from through other sites. i ran malware programs and it was not the computers infected it is google it's self that seems to be infected. i only figured it out when the owners of the computers told me they just used googles auto complete searches to get to the site. i tried a google search on a clean computer and bingo. i suppose they are using googles spiders to clone sites great site keep up the great work -------------------- TANSTAAFL
|
|
|
|
|
Jan 7 2009, 08:39 AM
Post
#21
|
|
|
New Member Group: Members Posts: 1 Joined: 7-January 09 Member No.: 279,449 |
Great article Grinler! One question, how is this contracted and how can I educate an end user on how to avoid contracting this?
Many thanks, CMS |
|
|
|
|
Jan 7 2009, 09:56 AM
Post
#22
|
|
 Bleep Bleep! Group: Admin Posts: 31,509 Joined: 24-January 04 From: USA Member No.: 3 |
This infection has so many attack vectors that there is no one way they may have gotten it.
Here are some of the attack vectors:
-------------------- |
|
|
|
|
Jan 9 2009, 10:56 AM
Post
#23
|
|
 Distinguished Member Group: Members Posts: 620 Joined: 15-November 07 From: North Carlona Member No.: 169,959 |
Well, thats something you need to keep a clsoe eye on. I've never checked (For obvious reasons) but I hear goggle is a huge infecting site. Thats something you have to keep an eye on.
|
|
|
|
|
Jan 11 2009, 08:49 PM
Post
#24
|
|
|
New Member Group: Members Posts: 2 Joined: 5-January 09 Member No.: 278,616 |
you have to be careful getting music off limewire alot of the songs are infected with this virus.
|
|
|
|
|
Jan 14 2009, 05:31 PM
Post
#25
|
|
|
New Member Group: Members Posts: 1 Joined: 14-January 09 Member No.: 282,697 |
Thank you for your help.
I have run the malware program and removed the rouge file. I do not beleive Antivirus was installed but the google page still displays the Antivirus 2009 link. What is the best way to remove this? Thank you again, |
|
|
|
|
Jan 18 2009, 10:50 PM
Post
#26
|
|
 To INSANITY and BEYOND !! Group: Moderator Posts: 21,490 Joined: 10-September 04 From: NJ USA Member No.: 2,608 |
Hi jdamit As this is not the malware removal section you need to open a Topic in the Am I Infected forum in the Security section. You will get help there.
This post has been edited by boopme: Jan 18 2009, 10:51 PM -------------------- Can you spare some PC cycles to help FIND A CURE .. BC FOLDING TEAM Click me /info..
ThoughtVent a goodplace to discuss.<<>>>Staying Updated Calendar of Updates. For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear.... Become a BleepingComputer fan: Facebook |
|
|
|
|
Jan 22 2009, 01:45 AM
Post
#27
|
|
|
New Member Group: Members Posts: 2 Joined: 21-January 09 Member No.: 285,643 |
This solution did not work for me. Scans, removes, restarts, and everything is the same. Also "install this program and then use it" seems like an odd guide to removing a specific malware.
|
|
|
|
|
Jan 22 2009, 06:48 AM
Post
#28
|
|
|
New Member Group: Members Posts: 2 Joined: 22-January 09 Member No.: 285,766 |
Hi there,
I am a little confused. I appear to - about every other search on google - get shown websites that clearly do not match the search results, often with supposed antivirus websites instead of news.bbc.co.uk which it should say, for example. This seems to be my only symptom and when I go to the google homepage there is no big 'google tips' notification and I have not noticed any other things different with my pc apart from this occasional google search issue. Reading a few reports about this antivirus thing, including your own which most others seem to reference, I'm not entirely sure whether the problem must be with my computer or with google itself. I have the latest mcaffee software. Should I be concerned? Thanks for any help you could offer. |
|
|
|
|
Jan 22 2009, 10:14 AM
Post
#29
|
|
|
To INSANITY and BEYOND !! Group: Moderator Posts: 21,490 Joined: 10-September 04 From: NJ USA Member No.: 2,608 |
Hello wanny,please refer to post #26
EDIT: roaky you should also post there. This post has been edited by boopme: Jan 22 2009, 10:16 AM -------------------- Can you spare some PC cycles to help FIND A CURE .. BC FOLDING TEAM Click me /info..
ThoughtVent a goodplace to discuss.<<>>>Staying Updated Calendar of Updates. For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear.... Become a BleepingComputer fan: Facebook |
|
|
|
|
Jan 22 2009, 05:25 PM
Post
#30
|
|
|
New Member Group: Members Posts: 3 Joined: 20-January 09 Member No.: 285,259 |
QUOTE(roaky @ Jan 22 2009, 02:45 AM) This solution did not work for me. Scans, removes, restarts, and everything is the same. Also "install this program and then use it" seems like an odd guide to removing a specific malware. I followed the instruction 2 days ago, and did not work. Did the virus change ? |
|
|
|
|
2 User(s) are reading this topic (2 Guests and 0 Anonymous Users)
0 Members:
| Lo-Fi Version | Time is now: 8th November 2009 - 05:30 AM |
© 2003-2009 All Rights Reserved Bleeping Computer LLC.