Help
thxs
darco
This post has been edited by garmanma: 02 November 2008 - 03:43 PM
Reason for edit: Moved to appropriate forum
Page 1 of 1
XP Antispyware 2009- How did it d/l to YOUR pc?
#1
- New Member
-
- Group: Members
- Posts: 5
- Joined: 01-November 08
Posted 02 November 2008 - 12:36 PM
I see that this latest/greatest virus is hitting pc users big time. I would like to know from any user who is infected on how they became infected. Do you think it was from an email,a website or something else? I just want to warn some of my friends about this.
thxs
darco
thxs
darco
Back to top
#2
- Forum Addict
-
- Group: Malware Response Team
- Posts: 12,974
- Joined: 21-March 08
- Gender:Male
Posted 02 November 2008 - 06:30 PM
Hi Darco and welcome to BC. 
I never got infected by Anti-virus XP 2008 before, because I know it is a rogue programs so I never download/install them
I usually find them in "random" websites. What I mean by that is sites that you will never expect a rogue program redirect.
I went to this website related to an article and then it redirected me to the Rogue Anti-virus 2008 site. Which I closed because I knew it was bad.
I also have experienced it through e-mail, but very rarely. My mom was opening this attachment and then my AVG security program said it was a "Trojan.Fake Alert".
Not sure if its related to XP Anti-virus 2008 but its probably a rogue program of some sort. Which my mom deleted afterwards.
You can read more about this program here
Haven't experienced it from anywhere else yet. Maybe others have?
With Regards,
Extremeboy
I never got infected by Anti-virus XP 2008 before, because I know it is a rogue programs so I never download/install them
I usually find them in "random" websites. What I mean by that is sites that you will never expect a rogue program redirect.
I went to this website related to an article and then it redirected me to the Rogue Anti-virus 2008 site. Which I closed because I knew it was bad.
I also have experienced it through e-mail, but very rarely. My mom was opening this attachment and then my AVG security program said it was a "Trojan.Fake Alert".
Not sure if its related to XP Anti-virus 2008 but its probably a rogue program of some sort. Which my mom deleted afterwards.
You can read more about this program here
Haven't experienced it from anywhere else yet. Maybe others have?
With Regards,
Extremeboy
Note: Please do not PM me asking for help, instead please post it in the correct forum requesting for help. Help requests via the PM system will be ignored.
If I'm helping you and I don't reply within 48 hours please feel free to send me a PM.
The help you receive here is always free but if you wish to show your appreciation, you may wish to
.
If I'm helping you and I don't reply within 48 hours please feel free to send me a PM.
The help you receive here is always free but if you wish to show your appreciation, you may wish to
.
#3
- New Member
-
- Group: Members
- Posts: 5
- Joined: 01-November 08
Posted 05 November 2008 - 07:53 PM
extremeboy, on Nov 2 2008, 03:30 PM, said:
Hi Darco and welcome to BC.
I never got infected by Anti-virus XP 2008 before, because I know it is a rogue programs so I never download/install them
I usually find them in "random" websites. What I mean by that is sites that you will never expect a rogue program redirect.
I went to this website related to an article and then it redirected me to the Rogue Anti-virus 2008 site. Which I closed because I knew it was bad.
I also have experienced it through e-mail, but very rarely. My mom was opening this attachment and then my AVG security program said it was a "Trojan.Fake Alert".
Not sure if its related to XP Anti-virus 2008 but its probably a rogue program of some sort. Which my mom deleted afterwards.
You can read more about this program here
Haven't experienced it from anywhere else yet. Maybe others have?
With Regards,
Extremeboy
I never got infected by Anti-virus XP 2008 before, because I know it is a rogue programs so I never download/install them
I usually find them in "random" websites. What I mean by that is sites that you will never expect a rogue program redirect.
I went to this website related to an article and then it redirected me to the Rogue Anti-virus 2008 site. Which I closed because I knew it was bad.
I also have experienced it through e-mail, but very rarely. My mom was opening this attachment and then my AVG security program said it was a "Trojan.Fake Alert".
Not sure if its related to XP Anti-virus 2008 but its probably a rogue program of some sort. Which my mom deleted afterwards.
You can read more about this program here
Haven't experienced it from anywhere else yet. Maybe others have?
With Regards,
Extremeboy
I have not experienced it first hand , only the aftermath. Of course the user had "no idea" had it got installed. I was hoping other infected users here at this forum could say how they encountered it...
darco
p.s. check your link
This post has been edited by darco: 05 November 2008 - 07:54 PM
#4
- Bleepin' Animinion
-
- Group: Site Admin
- Posts: 18,908
- Joined: 18-August 05
- Gender:Male
- Location:Location, Location
Posted 05 November 2008 - 10:33 PM
Grinler, on June 25, 2008 @ 03:06 PM, said:
What this programs does:
Antivirus XP 2008 is a new rogue anti-spyware program that is advertised through Trojans and other malware. It is advertised in the form of fake security alerts and warnings on web sites that state you are infected with malware or are being attacked in some manner. When you click on these ads, it will automatically download the installer for Antivirus XP 2008 and install it on your machine. In some cases, this program is installed without any intervention at all from you.
Once installed, AntivirusXP 2008 will scan your computer and display a variety of security risks found on your computer that can only be removed if you purchase a license of the software. These risks, though, are all fake and are only being displayed to scare you into thinking you are infected and thus purchase their software. Another tactic that AntivirusXP 2008, and the accompanied malware, uses is to change your desktop background to be a message stating you are infected, popups and fake alerts stating your computer is being attacked, and a fake Internet Explorer page that states Google has found your computer to be infected. All of these are further scare tactics and should be ignored. These methods are all illustrated in the images below.
Antivirus XP 2008 is a new rogue anti-spyware program that is advertised through Trojans and other malware. It is advertised in the form of fake security alerts and warnings on web sites that state you are infected with malware or are being attacked in some manner. When you click on these ads, it will automatically download the installer for Antivirus XP 2008 and install it on your machine. In some cases, this program is installed without any intervention at all from you.
Once installed, AntivirusXP 2008 will scan your computer and display a variety of security risks found on your computer that can only be removed if you purchase a license of the software. These risks, though, are all fake and are only being displayed to scare you into thinking you are infected and thus purchase their software. Another tactic that AntivirusXP 2008, and the accompanied malware, uses is to change your desktop background to be a message stating you are infected, popups and fake alerts stating your computer is being attacked, and a fake Internet Explorer page that states Google has found your computer to be infected. All of these are further scare tactics and should be ignored. These methods are all illustrated in the images below.
The above quote taken from: How to remove Antivirus XP 2008 (Uninstall Instructions)
The Internet is so big, so powerful and pointless that for some people it is a complete substitute for life.
Andrew Brown
A learning experience is one of those things that say, "You know that thing you just did? Don't do that." — Douglas Adams.
Why is the word abbreviation so long?
Follow BleepingComputer on: Facebook | Twitter | Google+
Andrew Brown
A learning experience is one of those things that say, "You know that thing you just did? Don't do that." — Douglas Adams.
Why is the word abbreviation so long?
Follow BleepingComputer on: Facebook | Twitter | Google+
#5
- Official Bleepin' Bama Belle
-
- Group: Moderator
- Posts: 4,556
- Joined: 24-February 07
- Gender:Not Telling
- Location:Tuscaloosa, Alabama
Posted 06 November 2008 - 12:01 AM
It's possible to become infected by a simple "drive by"-meaning you click on a link that looks like something legitimate, but in reality is a page set up to entice you into downloading Antivirus 2009.
IF you find yourself in that situation, the best thing to do is use task manager to close out the page.
NEVER click on the X to close out the warning-usually it won't work.
Some people are savvy enough to realize this is a dangerous warning, others will panic and actually fall for the trap it has set.
If you want to know more about "scareware" the following article is very informative:
http://www.informationweek.com/blog/main/a...curity_sca.html
Here is another which is an interesting read:
http://www.theregister.co.uk/2008/08/22/an...hack/print.html
While it pertains to links from blogs, there are pictures and descriptions of what XP Antivirus looks like when it pops up on your screen.
It shows and tells HOW to distinguish the the real Windows security center from the fake one.
Particularly interesting to me is the first paragraph under Figure 10-"other sites" (stay away from them) and the warning in the 3rd paragraph under Figure 21. In a perfect world, all computer users would realize the truth of paragraph 3.
IF you find yourself in that situation, the best thing to do is use task manager to close out the page.
NEVER click on the X to close out the warning-usually it won't work.
Some people are savvy enough to realize this is a dangerous warning, others will panic and actually fall for the trap it has set.
If you want to know more about "scareware" the following article is very informative:
http://www.informationweek.com/blog/main/a...curity_sca.html
Here is another which is an interesting read:
http://www.theregister.co.uk/2008/08/22/an...hack/print.html
While it pertains to links from blogs, there are pictures and descriptions of what XP Antivirus looks like when it pops up on your screen.
It shows and tells HOW to distinguish the the real Windows security center from the fake one.
Particularly interesting to me is the first paragraph under Figure 10-"other sites" (stay away from them) and the warning in the 3rd paragraph under Figure 21. In a perfect world, all computer users would realize the truth of paragraph 3.
#6
- Member
-
- Group: Members
- Posts: 53
- Joined: 07-November 08
Posted 07 November 2008 - 09:45 AM
Hi. I am new to the boards and came here specifically because I got this virus last night. It was a persistent pest for the entire evening until I ran MalwareBytes and another from here, ComboFx.
I have no idea how I caught it, as I have AVG, other viruses from my ISP carriers and emails, do not open suspicious emails, do not file share or download nasties. I run what I thought was a clean house. Now I feel dirty.
I would love to know myself another way it could enter. I am a teacher and a grad student with way too much on my PC to lose it all.
One change that I am wondering whether or not was caused by the virus, was that my Control Panel has completely changed. It is not going to the original formatting of the blue background. It is going to the white screen and icons like when going through the C drive. Also, when trying to fix things before using Malware, I noticed that System Restore could not work anymore, and somehow my firewall was turned off. I NEVER have it off, so am curious to see if the virus is capable of this.
Things seem ok for now. I have not had the pop ups, computer is running well, I do not appear to have lost anything though the Control Panel is still screwed up. My firewall is turned on.
Ideas and advice would be great. You do a super service for people. I for one really appreciate it.
I have no idea how I caught it, as I have AVG, other viruses from my ISP carriers and emails, do not open suspicious emails, do not file share or download nasties. I run what I thought was a clean house. Now I feel dirty.
I would love to know myself another way it could enter. I am a teacher and a grad student with way too much on my PC to lose it all.
One change that I am wondering whether or not was caused by the virus, was that my Control Panel has completely changed. It is not going to the original formatting of the blue background. It is going to the white screen and icons like when going through the C drive. Also, when trying to fix things before using Malware, I noticed that System Restore could not work anymore, and somehow my firewall was turned off. I NEVER have it off, so am curious to see if the virus is capable of this.
Things seem ok for now. I have not had the pop ups, computer is running well, I do not appear to have lost anything though the Control Panel is still screwed up. My firewall is turned on.
Ideas and advice would be great. You do a super service for people. I for one really appreciate it.
Share this topic:
Page 1 of 1