MS Antispyware 2009 Virus

[rideswings]

Can someone help me remove this MS Antispyware 2009 Virus? It somehow got into my computer despite ESET NOD322 V3 running.

It tells me my computer is infected then stops me from doing anything else, and then opens many popup windows.

Thanks!

[SternMan]

Scan with with Malwarebytes' Anti-Malware
http://www.malwaresupport.com/mbam/p...mbam-setup.exe

[rideswings]

Thank you Sternman but can I use Malwarebytes' Anti-Malware on top of ESET NOD32? I read somewhere its not good to install 2 anti-virus programs because they might make your system unstable.

[CoolShady]

Originally Posted by rideswings

Thank you Sternman but can I use Malwarebytes' Anti-Malware on top of ESET NOD32? I read somewhere its not good to install 2 anti-virus programs because they might make your system unstable.

Malwarebytes' does something entirely different to NOD32, it's an anti malware program, not anti virus which NOD32 is. Malwarebytes' does pick up on viruses but since it isn't made for it, the two do not conflict.

Make sure that you also run the scan in safe mode.

[Marcos]

As far as I know, MB detects only already active threats. I'm not sure if it's effective when it comes to cleaning files infected with viruses or other malware types, but that's a question for discussion in other than ESET's forums.

[rideswings]

Marcos - can ESET NOD32 V3 fix this problem? Antivirus 2009.

[YeOldeStonecat]

We deal with these rogue antivirus problems all the time with clients.

Powered by the Vundu trojan, they come under many different names..
XPAntivirus2009, XPAntivirus2010, Antivirus360, Search and Destroy 5.20, WinFixer, there are many more names of this fake product.

99% of our clients have NOD32. It seems to stop some of the older variants from fully installing, but many of the newer ones get at least a partial install on the system.

The tools that work well..

First, disable system restore. Shut down the rogue process in task manager (usually very easy to spot).

Then install, update, and scan in safe mode with the following products...

CCleaner
MalwareBytes
SuperAntispyware
Spybot Search and Destroy

Run a TCP/Winsock repair utility

Follow up with Microsofts Malicious Software Removal Tool.

Should be clean.

On some systems that are badly infected, SDFix helps too.

[Nuke]

Originally Posted by YeOldeStonecat

Then install, update, and scan in safe mode with the following products...

CCleaner
MalwareBytes
SuperAntispyware
Spybot Search and Destroy

Run a TCP/Winsock repair utility

Follow up with Microsofts Malicious Software Removal Tool.

Should be clean.

On some systems that are badly infected, SDFix helps too.

Would using Firefox with NoScript add-on, block Antivirus 2009?

[Darth AkSarBen]

Is this also related to a nasty my wife's computer had today that had 4 .dll files that insisted on loading at startulp. WinPatrol helped to notify the items. The scotty dog of WinPatrol woudl pop up telling me that a new program wanted to start at windows starup, did I wish for it to do that? I tried killing it but it just kept coming back. After a while a pop up window would appear as some kind of advertisement. The file was called Stat Reader or Stats Reader. I finally stopped all processes, and restored to an early day. THEN I downloaded Superantispywares program and scanned her computer.

How come Eset NOD32 did not pick up on this? latest version 3.0.684.0 with latest virius definitions. It updates daily several times. This is the Antivirus program, not the other for more blocking via firewall, etc. The other program seems to only add a bit of anti spam and firewall to the anti virus, however, this AV should have picked it up from theonset.

[funkydude]

Darth you should read this thread: http://www.wilderssecurity.com/showthread.php?t=234374