More information about Antivirus XP 2008

[2ffat]

CNet has an article about removing Antivirus XP 2008. While this does provide some good information, you really need to also use Malwarebyte's Anti-Malware (see faq769-7060) since Antivirus XP also tends to download a bunch of junk. You can also get Malwarebyte's Anti-Malware at CNet


James P. Cottingham
-----------------------------------------
^{I'm number 1,229!
I'm number 1,229!}

 

[goombawaho]

I have NOT found this statement to be true AT ALL:

"A warning before we begin: do not boot your computer into safe mode. Leave it running as you normally would. I tried restarting into safe mode, and the malware was prepared for that--its folders and files became undetectable."

A better way of dealing with it IS booting to safe mode, running autoruns instead of MSCONFIG and disabling it that way, THEN running the Malware Byte Me program.

I always choose Safe Mode WITH networking so I can install MBAM AND get updates online.

 

[bugguy51]

Actually, a lot of the affected workstations across my Enterprise DID defend themselves very well against a safe-mode boot--about the time the boot attempted to process MUP.SYS, the workstation restarted again on its own, makeing a safe-mode impossible. Be aware, also, that I've caught this thing seeding the machine with several downloaders and multidroppers. Add to that the fact that the delivered binaries morphed every couple of days for a while, and it becomes a real fun piece of malware.--The Bug Guy