xpantivirus 2008

[Nitin Soni]

Dear all,

I noticed some of symtomps of xpantivirus 2008 adware.

1. popup of xp/vista antivirus 2008.
2. automatic updates are disabled and not starting.
3. icon of xpantivirus 2008 in control center like security center.

I am able to block those popups but not able to start automatic update
service even after trying smithfraud fix, spybot, norton 360, rouge fix etc.
I followed all microsoft article related to windows updating service.

Windows update giving 1058 error and not able to start.



Thanks & regards
Nitin Soni
(e-mail address removed)

 

[Gerry]

Try the advice contained in this link:
http://www.bleepingcomputer.com:80/forums/topic111715.html

What anti-virus and anti-spyware programmes are currently installed?


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Nitin Soni]

Hi Gerry,

Thanks a lot for your time but still the same problem windows update is
disabled its giving 1058 error. I read a microsoft article related to this
error which says its the problem with hardware profile.

But winodws update was working fine before this virus.

 

[Olórin]

Hi Gerry,

Thanks a lot for your time but still the same problem windows update is
disabled its giving 1058 error. I read a microsoft article related to this
error which says its the problem with hardware profile.

But winodws update was working fine before this virus.

You need to focus on completely clearing your system of this malware and
whatever else it has installed, rather than just fixing the symptoms (merely
blocking popups or trying to get Windows update to start). Did you try
everything in the link Gerry provided? Have you followed all steps for
removal of this nasty? The very first thing I'd do is pull the network
connection from your machine in case it's sending all sorts of private info
out, downloading trojans, etc.

You might want to investigate RogueRemover referred to here:
http://cotojo.wordpress.com/2008/05/05/xpantivirus2008-removal/. Can't speak
for it myself one way or the other.

This site might also offer some insight:
http://billmullins.wordpress.com/2008/06/01/xp-antivirus-lies-fake-anti-malware-software/

Re Windows updates: what about Microsoft's suggestion about hardware
profiles that you mention (probably
http://support.microsoft.com/kb/896224) - did you follow that through? The
fact that Windows update was working before you got infected shouldn't put
you off from this course. Does your Event Log have the DCOM error that
article mentions, or any other error alerts?

 

[Gerry]

Did you complete the removal instructions detailed in the link I posted?
http://www.bleepingcomputer.com:80/forums/topic111715.html

If not where did you encounter a problem?

We can look at any problem with Windows Update when you have
successfully removed the malware.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[cotojo]

XPAntiVirus 2008 is another in a string of counterfeit antispyware software.
Once executed, XPAntiVirus2008 can hijack your web browser and redirect you
to undesirable web sites. It also serves unsolicited and annoying pop-up
advertisements and launch false security messages in your web browser.

My article covers this and the removal steps with RogueRemover Free:
http://cotojo.wordpress.com/2008/05/05/xpantivirus2008-removal/

Another useful program that also weeds out these parasites is Malwarebytes
Anti-Malware, details here
http://cotojo.wordpress.com/2008/03/17/removing-malicious-anti-malware-applications/

Colin
http://cotojo.wordpress.com - Free PC Security