Forum Home
Press F1
 
Thread ID: 94708 2008-11-09 00:54:00 Help i need help with PC Virus Big Dan (14295) Press F1
Post ID Timestamp Content User
718938 2008-11-09 00:54:00 Last week i had an anti-virus pop up alerting me to do an update so me not knowing any better did it and then to find out it was a virus scam to get you to buy a programme by credit card that will be rebilled each month now at times this thing takes over my computer and i can't activate my own antivirus programme

Its the Antivirus 2009 that was on stuff a few days ago

anyone got any help

Cheers
Dan
Big Dan (14295)
718939 2008-11-09 01:07:00 Download and Install RogueRemoverFree (www.malwarebytes.org)

Next do a scan with MalwareBytesAnti-Malware (www.malwarebytes.org) and Spyware Terminator. (www.spywareterminator.com)

Post a HijackThis log here when you're done
Blam (54)
718940 2008-11-09 02:28:00 that one is resilient - best removed by connecting your hard drive to another computer & scanning it Greven (91)
718941 2008-11-09 02:37:00 full removal instructions here (www.spywareremove.com) gary67 (56)
718942 2008-11-09 03:46:00 The most common spyware removal tactic is to uninstall Antivirus 2008 by using the "Add/Remove Programs" utility.

And then run HJT, Spybot, Spyware Terminator etc.

Not too hard.
pctek (84)
718943 2008-11-09 04:06:00 I'd advise you to disable system restore first, and run Malwarebytes in safe mode.

Then get Trojan Remover (www.simplysup.com), update it and run a scan. Run all the utilities from that menu also.

Post a Hijackthis log here for Speedy & Wainuitech to take a look at for you!

:D
nofam (9009)
718944 2008-11-12 00:55:00 There is a .bat file available called "roguefix_2.190.bat" Google for it!

Boot into safe mode, double click the bat file and it will remove all trace of these infections.
I have now used it successfully on 3 infected machines.
minster (9180)
718945 2008-11-12 07:25:00 Minster - Just an update on the roguefix_2.190.bat - the latest variants of that Spyware are not being completely removed with it ( so it appears) - Ran it on 2 PC's today then Malwarebytes and removed even more - as well as Spybot S& D & Spyware terminator needs to be run.

Still even after that found 4 more entries in the Reg that had to manually delete.

Seems to be "doing the rounds" again since Monday I have collected 8 PC's:eek: in the workshop with all different variants of that bug - 3 more to get before the weekend.

But if any one wants the roguefix_2.190.bat you have to get it from Rapid share (rs95.rapidshare.com) as lots of other sites have removed it from downloading.
wainuitech (129)
718946 2008-11-12 19:11:00 Will hijack this show if computer is infected with av 2008? prefect (6291)
718947 2008-11-13 04:01:00 It should- if its a running process or is on the startup Blam (54)
1