Comments on: Antivirus XP 2008 Malware http://www.spamstopshere.com/blog/2008/09/07/antivirus-xp-2008-malware/ IT and security blog Thu, 11 Mar 2010 20:36:36 +0000 http://wordpress.org/?v=2.3.3 By: JohnGo http://www.spamstopshere.com/blog/2008/09/07/antivirus-xp-2008-malware/#comment-3954 JohnGo Wed, 15 Oct 2008 04:13:59 +0000 http://www.spamstopshere.com/blog/2008/09/07/antivirus-xp-2008-malware/#comment-3954 Hello Keith, I had a similar experience. after several reboots with the malware starting and the fake BSOD, the PC wouldnt boot anymore. I was able to get around this by booting from a Windows CD and going into recovery mode. Then use the "chkdsk c:" to repair the C drive. After the boot, I needed to do an F8 and start windows in safe mode. I was able to do a ctl-alt-del and get to task manager. Once there, I was able to kill off the malware process. I was then able to use AVIRA to scan and isolate the infected files. The bogus screensave is still in place, and I too have the problem where the tab is now missing. The other item that will help is going into the windows directory and rename the bougus .scr file, so it cant launch. Hope this helps, JohnGo Hello Keith,
I had a similar experience. after several reboots with the malware starting and the fake BSOD, the PC wouldnt boot anymore. I was able to get around this by booting from a Windows CD and going into recovery mode. Then use the “chkdsk c:” to repair the C drive.

After the boot, I needed to do an F8 and start windows in safe mode. I was able to do a ctl-alt-del and get to task manager. Once there, I was able to kill off the malware process.

I was then able to use AVIRA to scan and isolate the infected files. The bogus screensave is still in place, and I too have the problem where the tab is now missing.
The other item that will help is going into the windows directory and rename the bougus .scr file, so it cant launch.

Hope this helps,
JohnGo

]]> By: Mark Adams http://www.spamstopshere.com/blog/2008/09/07/antivirus-xp-2008-malware/#comment-3371 Mark Adams Mon, 22 Sep 2008 21:28:22 +0000 http://www.spamstopshere.com/blog/2008/09/07/antivirus-xp-2008-malware/#comment-3371 Keith, Since your computer was booting before you attempted to cure it of the virus, I suspect it was your attempts that have caused it to become unbootable. What was the last thing that you did before it becamse unbootable? Keith,

Since your computer was booting before you attempted to cure it of the virus, I suspect it was your attempts that have caused it to become unbootable. What was the last thing that you did before it becamse unbootable?

]]> By: Keith Sloane http://www.spamstopshere.com/blog/2008/09/07/antivirus-xp-2008-malware/#comment-3370 Keith Sloane Mon, 22 Sep 2008 20:50:39 +0000 http://www.spamstopshere.com/blog/2008/09/07/antivirus-xp-2008-malware/#comment-3370 I too have been infected. My attempts to cure have resulted in my machine refusing to boot up. I have put my hard drive in an old PC & on bootup it tells me I have a boot sector virus!! Help! I too have been infected. My attempts to cure have resulted in my machine refusing to boot up.
I have put my hard drive in an old PC & on bootup it tells me I have a boot sector virus!!
Help!

]]> By: Mark Adams http://www.spamstopshere.com/blog/2008/09/07/antivirus-xp-2008-malware/#comment-3148 Mark Adams Mon, 15 Sep 2008 20:44:09 +0000 http://www.spamstopshere.com/blog/2008/09/07/antivirus-xp-2008-malware/#comment-3148 hek, Unfortunately not, unless you did a backup of your system to an external drive or something. I guess it's possible that you could recover the restore point files using an "undelete" tool, but I hadn't tried. Your restore points are stored under "C:\System Volume Information" if you want to try. hek,

Unfortunately not, unless you did a backup of your system to an external drive or something. I guess it’s possible that you could recover the restore point files using an “undelete” tool, but I hadn’t tried.

Your restore points are stored under “C:\System Volume Information” if you want to try.

]]> By: Antivirus Expert http://www.spamstopshere.com/blog/2008/09/07/antivirus-xp-2008-malware/#comment-3122 Antivirus Expert Sun, 14 Sep 2008 10:37:36 +0000 http://www.spamstopshere.com/blog/2008/09/07/antivirus-xp-2008-malware/#comment-3122 I think XP antivirus showed how actually vulnerable and imperfect popular antivirus suites are. People bundle their computers with loads of security programs only to find out that XP antivirus feels just great in their protected systems. Self-proclaimed techies recommend to install half a dozen additional applications without giving any reasons except "this might help". Somehow this makes me think that it's much better to have protection AGAINST infection, rather than tools to cure XP antivirus. Not specaking about registry changes it can make; sometimes it just doesn't make sense to remove the trojan because the system is already a mess. I think XP antivirus showed how actually vulnerable and imperfect popular antivirus suites are. People bundle their computers with loads of security programs only to find out that XP antivirus feels just great in their protected systems. Self-proclaimed techies recommend to install half a dozen additional applications without giving any reasons except “this might help”. Somehow this makes me think that it’s much better to have protection AGAINST infection, rather than tools to cure XP antivirus. Not specaking about registry changes it can make; sometimes it just doesn’t make sense to remove the trojan because the system is already a mess.

]]> By: hek http://www.spamstopshere.com/blog/2008/09/07/antivirus-xp-2008-malware/#comment-3113 hek Sat, 13 Sep 2008 18:38:34 +0000 http://www.spamstopshere.com/blog/2008/09/07/antivirus-xp-2008-malware/#comment-3113 Is there any way to get to a previous restore point after deleting the virus? Is there any way to get to a previous restore point after deleting the virus?

]]>