A friend's laptop has been infected with a program called Contravirus2.0 that
I cannot delete via Control Panel, Add or Remove Programs, etc. After doing
the uninstall, the program automatically comes back, popping up. I have
deleted the desktop icon (I know this does not remove the program) and this
comes back too.

The program asks for $29 - I think if this is paid, the program might go
away...just might.

Thanks for any help to get rid of this annoying thing.

Roger
--
Roger

Do NOT pay the $29!

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_R...:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.org


rogeepete wrote:
> A friend's laptop has been infected with a program called Contravirus2.0
> that I cannot delete via Control Panel, Add or Remove Programs, etc.
> After
> doing the uninstall, the program automatically comes back, popping up. I
> have deleted the desktop icon (I know this does not remove the program)
> and
> this comes back too.
>
> The program asks for $29 - I think if this is paid, the program might go
> away...just might.
>
> Thanks for any help to get rid of this annoying thing.
>
> Roger

On Jul 11, 8:24 am, rogeepete <areb...@yahoo.com> wrote:
> A friend's laptop has been infected with a program called Contravirus2.0 that
> I cannot delete via Control Panel, Add or Remove Programs, etc. After doing
> the uninstall, the program automatically comes back, popping up. I have
> deleted the desktop icon (I know this does not remove the program) and this
> comes back too.
>
> The program asks for $29 - I think if this is paid, the program might go
> away...just might.
>
> Thanks for any help to get rid of this annoying thing.
>
> Roger
> --
> Roger

Can you do a System Restore to a time before you got infected?

Start | Programs | Accessories | System Tools | System Restore

Good Luck.
BarryG

On 7/10/2007 3:43 PM On a whim, cornedbeef007-(E-Mail Removed)
pounded out on the keyboard

> On Jul 11, 8:24 am, rogeepete <areb...@yahoo.com> wrote:
>> A friend's laptop has been infected with a program called Contravirus2.0 that
>> I cannot delete via Control Panel, Add or Remove Programs, etc. After doing
>> the uninstall, the program automatically comes back, popping up. I have
>> deleted the desktop icon (I know this does not remove the program) and this
>> comes back too.
>>
>> The program asks for $29 - I think if this is paid, the program might go
>> away...just might.
>>
>> Thanks for any help to get rid of this annoying thing.
>>
>> Roger
>> --
>> Roger
>
> Can you do a System Restore to a time before you got infected?
>
> Start | Programs | Accessories | System Tools | System Restore
>
> Good Luck.
> BarryG
>

A lot of virus programs like that actually *depend* on SR to store their
backup files, so when the program is uninstalled, it reinstalls from the
SR folders. I usually turn off SR when trying to eradicate programs of
this nature.

But it would hurt to at least try it.


--
Terry R.

***Reply Note***
Anti-spam measures are included in my email address.
Delete NOSPAM from the email address after clicking Reply.

You can also go into the registry and remove it. (If you know what your
doing.)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
Look for the application and delete it,, then go to Add & Remove and delete
it from there. If your not sure take it in to be done.



"Terry R." <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> On 7/10/2007 3:43 PM On a whim, cornedbeef007-(E-Mail Removed) pounded
> out on the keyboard
>
>> On Jul 11, 8:24 am, rogeepete <areb...@yahoo.com> wrote:
>>> A friend's laptop has been infected with a program called Contravirus2.0
>>> that
>>> I cannot delete via Control Panel, Add or Remove Programs, etc. After
>>> doing
>>> the uninstall, the program automatically comes back, popping up. I have
>>> deleted the desktop icon (I know this does not remove the program) and
>>> this
>>> comes back too.
>>>
>>> The program asks for $29 - I think if this is paid, the program might go
>>> away...just might.
>>> Thanks for any help to get rid of this annoying thing.
>>>
>>> Roger
>>> --
>>> Roger
>>
>> Can you do a System Restore to a time before you got infected?
>>
>> Start | Programs | Accessories | System Tools | System Restore
>>
>> Good Luck.
>> BarryG
>>
>
> A lot of virus programs like that actually *depend* on SR to store their
> backup files, so when the program is uninstalled, it reinstalls from the
> SR folders. I usually turn off SR when trying to eradicate programs of
> this nature.
>
> But it would hurt to at least try it.
>
>
> --
> Terry R.
>
> ***Reply Note***
> Anti-spam measures are included in my email address.
> Delete NOSPAM from the email address after clicking Reply.

On 7/11/2007 3:55 PM On a whim, Jack pounded out on the keyboard

> You can also go into the registry and remove it. (If you know what your
> doing.)
> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
> Look for the application and delete it,, then go to Add & Remove and delete
> it from there. If your not sure take it in to be done.
>
>
>
> "Terry R." <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> On 7/10/2007 3:43 PM On a whim, cornedbeef007-(E-Mail Removed) pounded
>> out on the keyboard
>>
>>> On Jul 11, 8:24 am, rogeepete <areb...@yahoo.com> wrote:
>>>> A friend's laptop has been infected with a program called Contravirus2.0
>>>> that
>>>> I cannot delete via Control Panel, Add or Remove Programs, etc. After
>>>> doing
>>>> the uninstall, the program automatically comes back, popping up. I have
>>>> deleted the desktop icon (I know this does not remove the program) and
>>>> this
>>>> comes back too.
>>>>
>>>> The program asks for $29 - I think if this is paid, the program might go
>>>> away...just might.
>>>> Thanks for any help to get rid of this annoying thing.
>>>>
>>>> Roger
>>>> --
>>>> Roger
>>> Can you do a System Restore to a time before you got infected?
>>>
>>> Start | Programs | Accessories | System Tools | System Restore
>>>
>>> Good Luck.
>>> BarryG
>>>
>> A lot of virus programs like that actually *depend* on SR to store their
>> backup files, so when the program is uninstalled, it reinstalls from the
>> SR folders. I usually turn off SR when trying to eradicate programs of
>> this nature.
>>
>> But it would hurt to at least try it.
>>
>>
>> --
>> Terry R.
>>
>> ***Reply Note***
>> Anti-spam measures are included in my email address.
>> Delete NOSPAM from the email address after clicking Reply.
>
>

But the OP's issue is when he uninstalls, it reinstalls itself.

--
Terry R.

***Reply Note***
Anti-spam measures are included in my email address.
Delete NOSPAM from the email address after clicking Reply.

=?Utf-8?B?cm9nZWVwZXRl?= wrote:
>
> A friend's laptop has been infected with a program called Contravirus2.0 that
> I cannot delete via Control Panel, Add or Remove Programs, etc. After doing

http://www.bootdisk.com/utility.htm
GENERAL FILE UTILITIES
Stubborn File Deleters

Hi Roger - See if this helps: http://remove-contravirus.blogspot.com/

--
Regards, Jim Byrd,
My Blog, Defending Your Machine,
http://defendingyourmachine2.blogspot.com/



In news:56B6E65E-05EF-4008-B368-(E-Mail Removed),
rogeepete <(E-Mail Removed)> typed:
|| A friend's laptop has been infected with a program called
|| Contravirus2.0 that I cannot delete via Control Panel, Add or Remove
|| Programs, etc. After doing the uninstall, the program automatically
|| comes back, popping up. I have deleted the desktop icon (I know
|| this does not remove the program) and this comes back too.
||
|| The program asks for $29 - I think if this is paid, the program
|| might go away...just might.
||
|| Thanks for any help to get rid of this annoying thing.
||
|| Roger
|| --
|| Roger