One of our computers got infected with the "Microsoft anti-virus 2009"
software virus. It was installed. We found it, uninstalled it. Access
to edit the registry was denied but we finally got that fixed so we
can now get into the registry but we are still having problems. The
virus is still there.
When we try to use the internet it sometimes redirect our pages. It
will not let us run spybot and all our images are gone on internet
pages.

We tried to restore the system using system restore to restore to an
earlier time. But when we click that and then click "Next" nothing
will happen.

We then turned off system restore because I read that it will keep
restoring the virus if we run mcaffee again.

Any suggestions on what to do?

Rae

Rae

Is this a commercial or home computer?

Antivirus 2009 needs to be manually removed. You need specialist help.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Rae88 wrote:
> One of our computers got infected with the "Microsoft anti-virus 2009"
> software virus. It was installed. We found it, uninstalled it. Access
> to edit the registry was denied but we finally got that fixed so we
> can now get into the registry but we are still having problems. The
> virus is still there.
> When we try to use the internet it sometimes redirect our pages. It
> will not let us run spybot and all our images are gone on internet
> pages.
>
> We tried to restore the system using system restore to restore to an
> earlier time. But when we click that and then click "Next" nothing
> will happen.
>
> We then turned off system restore because I read that it will keep
> restoring the virus if we run mcaffee again.
>
> Any suggestions on what to do?
>
> Rae

On Dec 18, 2:23*pm, "Gerry" <ge...@nospam.com> wrote:
> Rae
>
> Is this a commercial or home computer?
>
> Antivirus 2009 needs to be manually removed. You need specialist help.
>
> --
>
> Hope *this helps.
>
> Gerry
> ~~~~
> FCA
> Stourport, England
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>
> Rae88 wrote:
> > One of our computers got infected with the "Microsoft anti-virus 2009"
> > software virus. It was installed. We found it, uninstalled it. Access
> > to edit the registry was denied but we finally got that fixed so we
> > can now get into the registry but we are still having problems. The
> > virus is still there.
> > When we try to use the internet it sometimes redirect our pages. It
> > will not let us run spybot and all our images are gone on internet
> > pages.
>
> > We tried to restore the system using system restore to restore to an
> > earlier time. But when we click that and then click "Next" nothing
> > will happen.
>
> > We then turned off system restore because I read that it will keep
> > restoring the virus if we run mcaffee again.
>
> > Any suggestions on what to do?
>
> > Rae

home computer.
I uninstalled form add/remove programs but the problems continue

Rae88

Do you have data files you need to back up?

A new install of Windows XP is one option. It can be quite complicated
getting all the the third party drivers and programme disks together.

The other way is to clean the computer and repair damage. This is also
quite involved.

Download and run HijackThis and post details to one of the forums list
below.. You may have to wait several days for a reply. Otherwise take
your computer to a small computer repair shop for cleaning. It's not
cheap.
http://us.trendmicro.com/us/products...eTools_9292008

Forums
http://aumha.org/downloads/hijackthis.zip
http://aumha.net/ - Click on the HijackThis forum. Read the announcement
and
the stickies first.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/...splay.php?f=25
http://www.geekstogo.com/forum/Malwa..._Here-f37.html
http://www.malwarebytes.org/forums/i...hp?showforum=7
http://gladiator-antivirus.com/forum...?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/
http://www.thespykiller.co.uk/index.php?board=3.0
http://forums.subratam.org/index.php?showforum=7
Source of List: Malke

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Rae88 wrote:
> On Dec 18, 2:23 pm, "Gerry" <ge...@nospam.com> wrote:
>> Rae
>>
>> Is this a commercial or home computer?
>>
>> Antivirus 2009 needs to be manually removed. You need specialist
>> help.
>>
>> --
>>
>> Hope this helps.
>>
>> Gerry
>> ~~~~
>> FCA
>> Stourport, England
>> Enquire, plan and execute
>> ~~~~~~~~~~~~~~~~~~~
>>
>> Rae88 wrote:
>>> One of our computers got infected with the "Microsoft anti-virus
>>> 2009" software virus. It was installed. We found it, uninstalled
>>> it. Access to edit the registry was denied but we finally got that
>>> fixed so we can now get into the registry but we are still having
>>> problems. The virus is still there.
>>> When we try to use the internet it sometimes redirect our pages. It
>>> will not let us run spybot and all our images are gone on internet
>>> pages.
>>
>>> We tried to restore the system using system restore to restore to an
>>> earlier time. But when we click that and then click "Next" nothing
>>> will happen.
>>
>>> We then turned off system restore because I read that it will keep
>>> restoring the virus if we run mcaffee again.
>>
>>> Any suggestions on what to do?
>>
>>> Rae
>
> home computer.
> I uninstalled form add/remove programs but the problems continue

On Thu, 18 Dec 2008 11:28:45 -0800 (PST), Rae88 <(E-Mail Removed)>
wrote:

> On Dec 18, 2:23*pm, "Gerry" <ge...@nospam.com> wrote:
> > Rae
> >
> > Is this a commercial or home computer?
> >
> > Antivirus 2009 needs to be manually removed. You need specialist help.
> >
> > --
> >
> > Hope *this helps.
> >
> > Gerry
> > ~~~~
> > FCA
> > Stourport, England
> > Enquire, plan and execute
> > ~~~~~~~~~~~~~~~~~~~
> >
> > Rae88 wrote:
> > > One of our computers got infected with the "Microsoft anti-virus 2009"
> > > software virus. It was installed. We found it, uninstalled it. Access
> > > to edit the registry was denied but we finally got that fixed so we
> > > can now get into the registry but we are still having problems. The
> > > virus is still there.
> > > When we try to use the internet it sometimes redirect our pages. It
> > > will not let us run spybot and all our images are gone on internet
> > > pages.
> >
> > > We tried to restore the system using system restore to restore to an
> > > earlier time. But when we click that and then click "Next" nothing
> > > will happen.
> >
> > > We then turned off system restore because I read that it will keep
> > > restoring the virus if we run mcaffee again.
> >
> > > Any suggestions on what to do?
> >
> > > Rae
>
> home computer.
> I uninstalled form add/remove programs but the problems continue


Sure they continue. Removing malware is never anywhere near as simple
or easy as removing it like valid programs by using Add/Remove
Programs.

--
Ken Blake, Microsoft MVP - Windows Desktop Experience
Please Reply to the Newsgroup

On Dec 18, 4:39*pm, "Ken Blake, MVP"
<kbl...@this.is.an.invalid.domain> wrote:
> On Thu, 18 Dec 2008 11:28:45 -0800 (PST), Rae88 <rae...@gmail.com>
> wrote:
>
>
>
> > On Dec 18, 2:23*pm, "Gerry" <ge...@nospam.com> wrote:
> > > Rae
>
> > > Is this a commercial or home computer?
>
> > > Antivirus 2009 needs to be manually removed. You need specialist help..
>
> > > --
>
> > > Hope *this helps.
>
> > > Gerry
> > > ~~~~
> > > FCA
> > > Stourport, England
> > > Enquire, plan and execute
> > > ~~~~~~~~~~~~~~~~~~~
>
> > > Rae88 wrote:
> > > > One of our computers got infected with the "Microsoft anti-virus 2009"
> > > > software virus. It was installed. We found it, uninstalled it. Access
> > > > to edit the registry was denied but we finally got that fixed so we
> > > > can now get into the registry but we are still having problems. The
> > > > virus is still there.
> > > > When we try to use the internet it sometimes redirect our pages. It
> > > > will not let us run spybot and all our images are gone on internet
> > > > pages.
>
> > > > We tried to restore the system using system restore to restore to an
> > > > earlier time. But when we click that and then click "Next" nothing
> > > > will happen.
>
> > > > We then turned off system restore because I read that it will keep
> > > > restoring the virus if we run mcaffee again.
>
> > > > Any suggestions on what to do?
>
> > > > Rae
>
> > home computer.
> > I uninstalled form add/remove programs but the problems continue
>
> Sure they continue. Removing malware is never anywhere near as simple
> or easy as removing it like valid programs by using Add/Remove
> Programs.
>
> --
> Ken Blake, Microsoft MVP - Windows Desktop Experience
> Please Reply to the Newsgroup

Well, thanks for that very informative and helpful comment!

On Dec 19, 1:16*am, Rae88 <rae...@gmail.com> wrote:
> On Dec 18, 4:39*pm, "Ken Blake, MVP"
>
>
>
> <kbl...@this.is.an.invalid.domain> wrote:
> > On Thu, 18 Dec 2008 11:28:45 -0800 (PST), Rae88 <rae...@gmail.com>
> > wrote:
>
> > > On Dec 18, 2:23*pm, "Gerry" <ge...@nospam.com> wrote:
> > > > Rae
>
> > > > Is this a commercial or home computer?
>
> > > > Antivirus 2009 needs to be manually removed. You need specialist help.
>
> > > > --
>
> > > > Hope *this helps.
>
> > > > Gerry
> > > > ~~~~
> > > > FCA
> > > > Stourport, England
> > > > Enquire, plan and execute
> > > > ~~~~~~~~~~~~~~~~~~~
>
> > > > Rae88 wrote:
> > > > > One of our computers got infected with the "Microsoft anti-virus 2009"
> > > > > software virus. It was installed. We found it, uninstalled it. Access
> > > > > to edit the registry was denied but we finally got that fixed so we
> > > > > can now get into the registry but we are still having problems. The
> > > > > virus is still there.
> > > > > When we try to use the internet it sometimes redirect our pages. It
> > > > > will not let us run spybot and all our images are gone on internet
> > > > > pages.
>
> > > > > We tried to restore the system using system restore to restore toan
> > > > > earlier time. But when we click that and then click "Next" nothing
> > > > > will happen.
>
> > > > > We then turned off system restore because I read that it will keep
> > > > > restoring the virus if we run mcaffee again.
>
> > > > > Any suggestions on what to do?
>
> > > > > Rae
>
> > > home computer.
> > > I uninstalled form add/remove programs but the problems continue
>
> > Sure they continue. Removing malware is never anywhere near as simple
> > or easy as removing it like valid programs by using Add/Remove
> > Programs.
>
> > --
> > Ken Blake, Microsoft MVP - Windows Desktop Experience
> > Please Reply to the Newsgroup
>
> Well, thanks for that very informative and helpful comment!

Sound like you have still more "infestation" of some type of spyware,
beside the MS A/V 2009 (which is not from Microsoft.) I would suggest
you try to use other spyware removal tools such as Malwarebytes or
SuperAntiSpyware.

Rae88

I could have included this earlier:
http://www.elephantboycomputers.com/...moving_Malware

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Rae88 wrote:
> On Dec 18, 4:39 pm, "Ken Blake, MVP"
> <kbl...@this.is.an.invalid.domain> wrote:
>> On Thu, 18 Dec 2008 11:28:45 -0800 (PST), Rae88 <rae...@gmail.com>
>> wrote:
>>
>>
>>
>>> On Dec 18, 2:23 pm, "Gerry" <ge...@nospam.com> wrote:
>>>> Rae
>>
>>>> Is this a commercial or home computer?
>>
>>>> Antivirus 2009 needs to be manually removed. You need specialist
>>>> help.
>>
>>>> --
>>
>>>> Hope this helps.
>>
>>>> Gerry
>>>> ~~~~
>>>> FCA
>>>> Stourport, England
>>>> Enquire, plan and execute
>>>> ~~~~~~~~~~~~~~~~~~~
>>
>>>> Rae88 wrote:
>>>>> One of our computers got infected with the "Microsoft anti-virus
>>>>> 2009" software virus. It was installed. We found it, uninstalled
>>>>> it. Access to edit the registry was denied but we finally got
>>>>> that fixed so we can now get into the registry but we are still
>>>>> having problems. The virus is still there.
>>>>> When we try to use the internet it sometimes redirect our pages.
>>>>> It will not let us run spybot and all our images are gone on
>>>>> internet pages.
>>
>>>>> We tried to restore the system using system restore to restore to
>>>>> an earlier time. But when we click that and then click "Next"
>>>>> nothing will happen.
>>
>>>>> We then turned off system restore because I read that it will keep
>>>>> restoring the virus if we run mcaffee again.
>>
>>>>> Any suggestions on what to do?
>>
>>>>> Rae
>>
>>> home computer.
>>> I uninstalled form add/remove programs but the problems continue
>>
>> Sure they continue. Removing malware is never anywhere near as simple
>> or easy as removing it like valid programs by using Add/Remove
>> Programs.
>>
>> --
>> Ken Blake, Microsoft MVP - Windows Desktop Experience
>> Please Reply to the Newsgroup
>
> Well, thanks for that very informative and helpful comment!

On Dec 19, 10:17*am, smlunatick <yves...@gmail.com> wrote:
> On Dec 19, 1:16*am, Rae88 <rae...@gmail.com> wrote:
>
>
>
> > On Dec 18, 4:39*pm, "Ken Blake, MVP"
>
> > <kbl...@this.is.an.invalid.domain> wrote:
> > > On Thu, 18 Dec 2008 11:28:45 -0800 (PST), Rae88 <rae...@gmail.com>
> > > wrote:
>
> > > > On Dec 18, 2:23*pm, "Gerry" <ge...@nospam.com> wrote:
> > > > > Rae
>
> > > > > Is this a commercial or home computer?
>
> > > > > Antivirus 2009 needs to be manually removed. You need specialist help.
>
> > > > > --
>
> > > > > Hope *this helps.
>
> > > > > Gerry
> > > > > ~~~~
> > > > > FCA
> > > > > Stourport, England
> > > > > Enquire, plan and execute
> > > > > ~~~~~~~~~~~~~~~~~~~
>
> > > > > Rae88 wrote:
> > > > > > One of our computers got infected with the "Microsoft anti-virus 2009"
> > > > > > software virus. It was installed. We found it, uninstalled it. Access
> > > > > > to edit the registry was denied but we finally got that fixed so we
> > > > > > can now get into the registry but we are still having problems.The
> > > > > > virus is still there.
> > > > > > When we try to use the internet it sometimes redirect our pages.. It
> > > > > > will not let us run spybot and all our images are gone on internet
> > > > > > pages.
>
> > > > > > We tried to restore the system using system restore to restore to an
> > > > > > earlier time. But when we click that and then click "Next" nothing
> > > > > > will happen.
>
> > > > > > We then turned off system restore because I read that it will keep
> > > > > > restoring the virus if we run mcaffee again.
>
> > > > > > Any suggestions on what to do?
>
> > > > > > Rae
>
> > > > home computer.
> > > > I uninstalled form add/remove programs but the problems continue
>
> > > Sure they continue. Removing malware is never anywhere near as simple
> > > or easy as removing it like valid programs by using Add/Remove
> > > Programs.
>
> > > --
> > > Ken Blake, Microsoft MVP - Windows Desktop Experience
> > > Please Reply to the Newsgroup
>
> > Well, thanks for that very informative and helpful comment!
>
> Sound like you have still more "infestation" of some type of spyware,
> beside the MS A/V 2009 (which is not from Microsoft.) *I would suggest
> you try to use other spyware removal tools such as Malwarebytes or
> SuperAntiSpyware.

Yeah. Its a real demon. I can't seem to find the head to cut it off.
I've deleted a lot of files from the registry and windows and
documents and settings, local settings, and then it will pop up again
right back. There are many file names. Found another one called msas
2009. winlggn.exe, there's too many to remember and I don't have my
list right here.

Malwarebytes will NOT install. Rather, I got it *installed* but it
will NOT run. Spy bot will NOT run. Cyber Cop was the only new program
that would install AND run. It detects it but can't get rid of it. At
least it alerts me each time it's reproduced itself again and tries to
do something. IT will then block it. But I can''t log into any support
sites, as the internet will only run non support sites. All the
graphics in McAfee (which is freakin USELESS!!) are disabled.

Its a nightmare. I'm thinking the only way is a reformat. I've never
seen such a viscous virus. It just keeps reproducing itself and I have
system restore turned OFF. There are some many .exe files, I just
can't catch them all before they've reproduced again!

Rae

On Fri, 19 Dec 2008 12:26:32 -0800 (PST), Rae88 <(E-Mail Removed)>
wrote:

> On Dec 19, 10:17*am, smlunatick <yves...@gmail.com> wrote:
> > On Dec 19, 1:16*am, Rae88 <rae...@gmail.com> wrote:
> >
> >
> >
> > > On Dec 18, 4:39*pm, "Ken Blake, MVP"
> >
> > > <kbl...@this.is.an.invalid.domain> wrote:
> > > > On Thu, 18 Dec 2008 11:28:45 -0800 (PST), Rae88 <rae...@gmail.com>
> > > > wrote:
> >
> > > > > On Dec 18, 2:23*pm, "Gerry" <ge...@nospam.com> wrote:
> > > > > > Rae
> >
> > > > > > Is this a commercial or home computer?
> >
> > > > > > Antivirus 2009 needs to be manually removed. You need specialist help.
> >
> > > > > > --
> >
> > > > > > Hope *this helps.
> >
> > > > > > Gerry
> > > > > > ~~~~
> > > > > > FCA
> > > > > > Stourport, England
> > > > > > Enquire, plan and execute
> > > > > > ~~~~~~~~~~~~~~~~~~~
> >
> > > > > > Rae88 wrote:
> > > > > > > One of our computers got infected with the "Microsoft anti-virus 2009"
> > > > > > > software virus. It was installed. We found it, uninstalled it. Access
> > > > > > > to edit the registry was denied but we finally got that fixed so we
> > > > > > > can now get into the registry but we are still having problems. The
> > > > > > > virus is still there.
> > > > > > > When we try to use the internet it sometimes redirect our pages. It
> > > > > > > will not let us run spybot and all our images are gone on internet
> > > > > > > pages.
> >
> > > > > > > We tried to restore the system using system restore to restore to an
> > > > > > > earlier time. But when we click that and then click "Next" nothing
> > > > > > > will happen.
> >
> > > > > > > We then turned off system restore because I read that it will keep
> > > > > > > restoring the virus if we run mcaffee again.
> >
> > > > > > > Any suggestions on what to do?
> >
> > > > > > > Rae
> >
> > > > > home computer.
> > > > > I uninstalled form add/remove programs but the problems continue
> >
> > > > Sure they continue. Removing malware is never anywhere near as simple
> > > > or easy as removing it like valid programs by using Add/Remove
> > > > Programs.
> >
> > > > --
> > > > Ken Blake, Microsoft MVP - Windows Desktop Experience
> > > > Please Reply to the Newsgroup
> >
> > > Well, thanks for that very informative and helpful comment!
> >
> > Sound like you have still more "infestation" of some type of spyware,
> > beside the MS A/V 2009 (which is not from Microsoft.) *I would suggest
> > you try to use other spyware removal tools such as Malwarebytes or
> > SuperAntiSpyware.
>
> Yeah. Its a real demon. I can't seem to find the head to cut it off.
> I've deleted a lot of files from the registry and windows and
> documents and settings, local settings, and then it will pop up again
> right back. There are many file names. Found another one called msas
> 2009. winlggn.exe, there's too many to remember and I don't have my
> list right here.
>
> Malwarebytes will NOT install. Rather, I got it *installed* but it
> will NOT run. Spy bot will NOT run. Cyber Cop was the only new program
> that would install AND run. It detects it but can't get rid of it. At
> least it alerts me each time it's reproduced itself again and tries to
> do something. IT will then block it. But I can''t log into any support
> sites, as the internet will only run non support sites. All the
> graphics in McAfee (which is freakin USELESS!!) are disabled.
>
> Its a nightmare. I'm thinking the only way is a reformat. I've never
> seen such a viscous virus. It just keeps reproducing itself and I have
> system restore turned OFF. There are some many .exe files, I just
> can't catch them all before they've reproduced again!


You can almost never get rid of malware the way you are trying to do
it. You *need* software like Malwarebytes to accomplish this.

Although many people think of malware as something to get rid of after
getting infected, that thought is exactly backwards. What you need to
do is *prevent* infection in the first place. Malware can cause
serious damage to your installation, making it nearly impossible to
correct the problems after the fact. It sounds like you are in that
situation, and what you very likely need to do is to reformat and
reinstall Windows from scratch.

--
Ken Blake, Microsoft MVP - Windows Desktop Experience
Please Reply to the Newsgroup