XP Antivirus 2008 anyone?

[GomJabbar]

I have had three acquaintances recently acquire XP Antivirus 2008 malware. Turns out one place you could get it is from a Google ad download button on CNET.com.
http://blogs.pcmag.com/securitywatch/20 ... _ads_h.php

For any of you that are affected, one of my coworkers used the following two scanners to remove XP Antivirus 2008 from his laptop.
http://www.majorgeeks.com/Malwarebytes_ ... d5756.html
http://www.bleepingcomputer.com/combofi ... e-combofix

EDIT Update: MS Antivirus 2008 morphed from XP Antivirus 2008

[sarbin]

[soapbox mode=on]
frack, i hate malware... and it's purveyors.
[soapbox mode=off]

[carbon_unit]

Another good tool to remove it is malwarebytes Rouge remover.

[RealBlackStuff]

Another good tool to remove it is malwarebytes Rouge remover.

LOL. As the rogue removed his make-up...

[Purcy]

That Rogue Remover is a nice tool, thanks. Did the scan and my T23 is squeeky clean. I did see that XP Antivirus 2008 in the list of targeted apps to remove.

[carbon_unit]

Another good tool to remove it is malwarebytes Rouge remover.

LOL. As the rogue removed his make-up...

Oops!

[mikey pizano]

Installed Rouge scan and am doing a quick scan on my Toshiba since its my main computer first, Thanks!

[tfflivemb2]

I have had the unfortunate luck of dealing with several computers that have had either the XP Antivirus 2008 OR the Vista Antivirus 2008.

Each of these had MySpace in common....

Norton and Ad-ware couldn't remove it. By the third computer, I found an awesome program called MalWareBytes...AWESOME!!!

[Purcy]

I found an awesome program called MalWareBytes...AWESOME!!!

You mean the Rouge Remover ?? LOL, I love that and that's what I'm calling it.

[carbon_unit]

Malwarebytes also makes Malwarebytes Anti-Malware. It is good too.

[GomJabbar]

Malwarebytes also makes Malwarebytes Anti-Malware. It is good too.

So what is the difference between Malwarebytes Anti-Malware and Malwarebytes Rogue Remover?

Any Idea?

[Purcy]

Malwarebytes also makes Malwarebytes Anti-Malware. It is good too.

So what is the difference between Malwarebytes Anti-Malware and Malwarebytes Rogue Remover?

Any Idea?

Malwarebytes' Anti-Malware
Malwarebytes' Anti-Malware is an anti-malware application that can thoroughly remove even the most advanced malware. It includes a number of features, including a built in protection monitor that blocks malicious processes before they even start.

RogueRemover FREE
RogueRemover FREE is an application that can remove rogue antispyware, antivirus, and hard drive cleaning applications with ease. It removes rogue applications such as WinAntiSpyware, AVSystemCare, and SpySheriff.

[GomJabbar]

Yeah Purcy, I did see the information you posted on malwarebytes website. Seem like similar tools. But why two?
I notice the first one includes a protection monitor - I guess like Spybot. The second one appears to be just a scanner.

I have not tried either one. Haven't needed to.

[carbon_unit]

Malwarebytes anti-malware has been my replacement for AdAware. I use it in conjunction with Spybot S&D as general protection. It scans for a lot of different things and takes a while.
Rouge Remover is just for removing specific infections, not general protection. Rouge Remover only scans for ~418 items. It doesn't take very long.

[GomJabbar]

Just got an e-mail from Avira (my current A/V software) yesterday...

A fake anti-virus solution that reports phantasy threats is currently spreading massively and causing annoying alerts. AntiVir protects computers against the phantasy program.

Tettnang, 29 August 2008 – Internet criminals are using aggressive methods to push fake anti-virus solutions on innocent victims. They gain success by targeting people with little computer knowledge or occasional users and make victims of such people.

A fake anti-virus solution such as “Antivirus XP 2008" annoys the users with permanent security alerts, it changes the desktop background and it reports imaginative threats on the system. There are very few other real anti-virus solutions that recognize this infection – because the fake anti-virus solutions create files with data trash, for instance in the Windows folder or the system folder, they consequently report as a threat. The fake anti-virus solutions force the user to purchase the fraudulent software in order to remove the fake threats.

The fake security programs access the computer through drive-by-downloads. A (hacked) website takes advantage of vulnerabilities in the web browser or outdated software such as Flash-Player, QuickTime, RealPlayer or other plug-ins, in order to install a harmful program on the Internet user’s computer.

Avira recognizes the fake security programs that are currently in circulation. They belong to the Trojan family TR/FakeAlert. Users should always keep their system up-to-date, in order to protect against attacks from undesired software. It is not enough to install all product updates provided by Windows. Users should update all data that has encountered the Internet.

http://www.avira.com/en/security_news/f ... ution.html

[denisky]

This malware infected my dad's T41. Then I backed up the My Documents folder, and restore the whole system using IBM Rescue & Recovery. If someone made this thread earlier, I wouldn't have to wait for hours restoring the system.