Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help Forums Windows Startup Programs Database Virus, Spyware, and Malware Removal Guides Computer Tutorials Uninstall Database File Database Computer Glossary Computer Resources
 

Welcome Guest ( Log In | Click here to Register a free account now! )



Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

 
Reply to this topicStart new topic
> The secret recipe for Antivirus XP Pro
Grinler
post Mar 23 2009, 07:57 PM
Post #1


Bleep Bleep!
******

Group: Admin
Posts: 31,601
Joined: 24-January 04
From: USA
Member No.: 3



Vundo uses a formula of constant security warnings, desktop hijackings, and Internet Explorer hijackings to foist Antivirus XP Pro on to your computer. Recent installs of Vundo have been showing an increasing amount of advertisements for Antivirus XP Pro, so we should expect to see quite a few computers infected with this malware.

The formula consists of a healthy dose of Internet Explorer hijackings:



Internet Explorer Hijack #1 advertising Antivirus XP Pro
Internet Explorer Hijack #1 advertising Antivirus XP Pro



Internet Explorer Hijack #2
Another Internet Explorer Hijack

Add a dose of fake security warning:

Fake Security Warning
Fake Security Warning

A sprinkle of desktop hijacking:

Desktop Hijacking
Desktop Hijacking
 

Finally, stir a little Vundo to glue it all together in, and you have Antivirus XP Pro.




Antivirus XP Pro
Antivirus XP Pro
 

Unfortunately, Google Trends data corroborates what I am seeing as shown by the graph below. This graph shows a recent increase of activity for the search keyword Antivirus XP Pro.

 

Google Trends graph for the keyword Antivirus XP Pro
Google Trends graph for the keyword Antivirus XP Pro


So, if you are one of the unlucky ones who has Antivirus XP Pro installed, please ignore the warnings, and instead use the guide linked to below to remove it for free.

 



--------------------
Lawrence
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Go to the top of the page
 
+Quote Post
Zachary09
post Mar 30 2009, 10:07 AM
Post #2


New Member
*

Group: Members
Posts: 7
Joined: 29-March 09
From: Florida, USA
Member No.: 314,352



Hey thanks for putting this up my friend got this program and it has really screwed up his computer.


--------------------
$652.50 / $829.99 raised for this PC.
Go to the top of the page
 
+Quote Post
pochp
post Apr 1 2009, 07:24 PM
Post #3


Member
**

Group: Members
Posts: 42
Joined: 17-January 09
Member No.: 284,011



I have written about these 'scarewares' but maybe not here.


--------------------
pochp.wordpress.com
Plato on-line
Go to the top of the page
 
+Quote Post
Surfrunner
post Apr 4 2009, 12:22 PM
Post #4


New Member
*

Group: Members
Posts: 1
Joined: 4-April 09
Member No.: 316,798



I have the black warning screen and fake security button (pic 3 & 4) as shown on your page, I don't seem to have AntivirusXP on my computer.. What else can it be and how do I get rid of it. Right now it seems to disable Malewarebytes program, so I can't run that.. Help!!!
Go to the top of the page
 
+Quote Post
m0le
post Apr 4 2009, 07:27 PM
Post #5


I know the drill!
******

Group: HJT Team
Posts: 6,262
Joined: 24-July 08
From: London
Member No.: 224,929



Hi Surfrunner,

I suggest you click this link to the Am I Infected forum for some confirmation of what you have.

Link


--------------------

m0le is a proud member of UNITE (Unified Network of Instructors and Trusted Eliminators)

If I have helped you fix your PC then please donate to the anti-malware cause. Thanks
Go to the top of the page
 
+Quote Post
o_rly
post Apr 13 2009, 09:57 PM
Post #6


Forum Regular
***

Group: Members
Posts: 193
Joined: 21-March 09
From: An unclean desk
Member No.: 311,039



I found this on my VM, but it didn't have the black background.


--------------------
Don't mind me, I'm just lurking.
Go to the top of the page
 
+Quote Post
fardin100
post Apr 14 2009, 04:40 AM
Post #7


Member
**

Group: Members
Posts: 108
Joined: 5-April 09
From: United Kingdom
Member No.: 317,134



Hi, Thanks again for this great post admin! It is nice of you to teach others about this infection and teach them to remove it. thumbup.gif
Go to the top of the page
 
+Quote Post
fatih_ictuzer
post Apr 15 2009, 03:39 PM
Post #8


New Member
*

Group: Members
Posts: 1
Joined: 15-April 09
Member No.: 321,377



thnak you
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



Lo-Fi Version Time is now: 22nd November 2009 - 01:16 AM


Advertise   |   About Us   |   Terms of Use   |   Privacy Policy   |   Contact Us   |   Site Map   |   Chat   |   Tutorials   |   Uninstall List
Discussion Forums   |   The Computer Glossary   |   Resources   |   RSS Feeds   |   Startups   |   The File Database   |   Virus Removal Guides

© 2003-2009 All Rights Reserved Bleeping Computer LLC.