Trusted Antivirus Protection or Scam ?

S

silver hair

hi
XP Prof 2002 Serv Pack 2
I recently looked at a friends computer
With my limeted knowledge I noteced something
It looked more like a Bug than a Protector
Computer is very slow
Its Called Trusted Antivirus
It does ask for registration and payment
It does behave as discribed in
Windows XP/Vista Blog
Trusted Antivirus Removel Instruction. March 18th by Alex
here it also offers
download Spyhunter Spyware Utility
any good, what does it do?
Is there a Virus Protection Program ? called
Anti Vir Gear V 3.7
have seen many not this one
thanks
confused
 
P

PA Bear [MS MVP]

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
 
K

Kayman

hi
XP Prof 2002 Serv Pack 2
I recently looked at a friends computer
With my limeted knowledge I noteced something
It looked more like a Bug than a Protector
Computer is very slow
Its Called Trusted Antivirus
Click to expand...

Trusted Antivirus Removal:
Download SmitfraudFix v.2.250 (note the removal procedure).
http://www.precisesecurity.com/tools-resources/adware-tools/smitfraudfix/

Then download/execute SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
After the software is updated, it is suggested scanning the system in Safe
Mode.
Still infected?
Download David H. Lipman's MULTI_AV.EXE from the URL:
Download MULTI_AV.EXE from the URL --
http://www.pctipp.ch/ds/28400/28470/Multi_AV.exe
http://www.pctipp.ch/downloads/dl/35905.asp
English:
http://www.raymond.cc/blog/archives/2008/01/09/scan-your-computer-with-multiple-anti-virus-for-free/
To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }
NOTE: You may have to disable your software FireWall or allow WGET.EXE to
go through your FireWall to allow it to download the needed AV vendor
related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in
Normal Mode. This way all the components can be downloaded from each AV
vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and
Reboot the PC.
You can choose to go to each menu item and just download the needed files
or you can download the files and perform a scan in Normal Mode. Once you
have downloaded the files needed for each scanner you want to use, you
should reboot the PC into Safe Mode [F8 key during boot] and re-run the
menu again and choose which scanner you want to run in Safe Mode. It is
suggested to run the scanners in both Safe Mode and Normal Mode.
When the menu is displayed hitting 'H' or 'h' will bring up a more
comprehensive PDF help
file.
Additional Instructions:
http://pcdid.com/Multi_AV.htm
It does ask for registration and payment
It does behave as discribed in
Windows XP/Vista Blog
Trusted Antivirus Removel Instruction. March 18th by Alex
here it also offers
download Spyhunter Spyware Utility
any good, what does it do?
Is there a Virus Protection Program ? called
Anti Vir Gear V 3.7
have seen many not this one
Click to expand...

Steer away from Anti Vir Gear V 3.7, it's junk!
This is what you want:-
Avira AntiVir® PersonalEdition Classic - Free
http://www.free-av.com/antivirus/allinonen.html
You may wish to consider removing the 'AntiVir Nagscreen'
http://www.elitekiller.com/files/disable_antivir_nag.htm

Good luck :)
 
S

silver hair

thank you
I find your answer most helpfull
and well explained
thank you

--
confused


Kayman said:
hi
XP Prof 2002 Serv Pack 2
I recently looked at a friends computer
With my limeted knowledge I noteced something
It looked more like a Bug than a Protector
Computer is very slow
Its Called Trusted Antivirus
Click to expand...

Trusted Antivirus Removal:
Download SmitfraudFix v.2.250 (note the removal procedure).
http://www.precisesecurity.com/tools-resources/adware-tools/smitfraudfix/

Then download/execute SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
After the software is updated, it is suggested scanning the system in Safe
Mode.
Still infected?
Download David H. Lipman's MULTI_AV.EXE from the URL:
Download MULTI_AV.EXE from the URL --
http://www.pctipp.ch/ds/28400/28470/Multi_AV.exe
http://www.pctipp.ch/downloads/dl/35905.asp
English:
http://www.raymond.cc/blog/archives/2008/01/09/scan-your-computer-with-multiple-anti-virus-for-free/
To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }
NOTE: You may have to disable your software FireWall or allow WGET.EXE to
go through your FireWall to allow it to download the needed AV vendor
related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in
Normal Mode. This way all the components can be downloaded from each AV
vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and
Reboot the PC.
You can choose to go to each menu item and just download the needed files
or you can download the files and perform a scan in Normal Mode. Once you
have downloaded the files needed for each scanner you want to use, you
should reboot the PC into Safe Mode [F8 key during boot] and re-run the
menu again and choose which scanner you want to run in Safe Mode. It is
suggested to run the scanners in both Safe Mode and Normal Mode.
When the menu is displayed hitting 'H' or 'h' will bring up a more
comprehensive PDF help
file.
Additional Instructions:
http://pcdid.com/Multi_AV.htm
It does ask for registration and payment
It does behave as discribed in
Windows XP/Vista Blog
Trusted Antivirus Removel Instruction. March 18th by Alex
here it also offers
download Spyhunter Spyware Utility
any good, what does it do?
Is there a Virus Protection Program ? called
Anti Vir Gear V 3.7
have seen many not this one
Click to expand...

Steer away from Anti Vir Gear V 3.7, it's junk!
This is what you want:-
Avira AntiVir® PersonalEdition Classic - Free
http://www.free-av.com/antivirus/allinonen.html
You may wish to consider removing the 'AntiVir Nagscreen'
http://www.elitekiller.com/files/disable_antivir_nag.htm

Good luck :)
Click to expand...
 
S

silver hair

hi
i have worked on that computer today
for starter I uninstalled the antivirus stuff
it was not working at all
and installed AVG 7.5 free Edition
dozens of files ended up in the Virus Vault imediatly
trojen horses, I empty the Vault
that stoped new pop ups
I uninstalled and deleted half the stuff junk
now the computer is fast. the internet browser too
now the machine can be cleaned, work on that later
present pop ups
1) Stm.exe Trojen horse Gneric 9.awcc
Path. Program files\comon files\Secure PCCleaner
2) Twinlmd.exe Trojen horse generic 10.ATH
C\Windows\system 32
3) csseqch.dll Trojen horse generic 10.HET
C\Windows\System 32
the last one seems to copy itself
every time every time when switching program
and pops up.
click 3 times to put the bug in to Vault, then ok
thanks
some day Silverhair may become unconfused

confused
 
K

Kayman

hi
i have worked on that computer today
for starter I uninstalled the antivirus stuff
it was not working at all
and installed AVG 7.5 free Edition
dozens of files ended up in the Virus Vault imediatly
trojen horses, I empty the Vault
that stoped new pop ups
I uninstalled and deleted half the stuff junk
now the computer is fast. the internet browser too
now the machine can be cleaned, work on that later
present pop ups
1) Stm.exe Trojen horse Gneric 9.awcc
Path. Program files\comon files\Secure PCCleaner
2) Twinlmd.exe Trojen horse generic 10.ATH
C\Windows\system 32
3) csseqch.dll Trojen horse generic 10.HET
C\Windows\System 32
the last one seems to copy itself
every time every time when switching program
and pops up.
click 3 times to put the bug in to Vault, then ok
thanks
some day Silverhair may become unconfused
Click to expand...
Please download and execute David Lipman's Multi-AV tool as mentioned in my
post of 09-Apr-08 as well as SAS and SmitfraudFix!!!

In addition download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

Fora where you can get expert advice for HiJack This! (HJT) logs.

NOTE: Registration is required in any of the below before posting a log

http://www.theeldergeek.com/forum/index.php?s=2e9ea4e19d3289dd877ab75a8220bff6&showforum=29
http://www.thespykiller.co.uk/index.php?board=3.0
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://forums.tomcoyote.org/index.php?showforum=27
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://www.spywarewarrior.com/viewforum.php?f=5

(Keep on plugging, you'll get there eventually)

Once your OS is clean routinely practice Safe-Hex.
http://www.claymania.com/safe-hex.html
Hundreds Click on 'Click Here to Get Infected' Ad
http://www.eweek.com/article2/0,1895,2132447,00.asp

Good luck :)
 
K

Kayman

hi
i have worked on that computer today
for starter I uninstalled the antivirus stuff
it was not working at all
and installed AVG 7.5 free Edition
dozens of files ended up in the Virus Vault imediatly
trojen horses, I empty the Vault
that stoped new pop ups
I uninstalled and deleted half the stuff junk
now the computer is fast. the internet browser too
now the machine can be cleaned, work on that later
present pop ups
1) Stm.exe Trojen horse Gneric 9.awcc
Path. Program files\comon files\Secure PCCleaner
2) Twinlmd.exe Trojen horse generic 10.ATH
C\Windows\system 32
3) csseqch.dll Trojen horse generic 10.HET
C\Windows\System 32
the last one seems to copy itself
every time every time when switching program
and pops up.
click 3 times to put the bug in to Vault, then ok
thanks
some day Silverhair may become unconfused
Click to expand...
Please download and execute David Lipman's Multi-AV tool as mentioned in my
post of 09-Apr-08 as well as SAS and SmitfraudFix!!!

In addition download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

Fora where you can get expert advice for HiJack This! (HJT) logs.

NOTE: Registration is required in any of the below before posting a log

http://www.theeldergeek.com/forum/index.php?s=2e9ea4e19d3289dd877ab75a8220bff6&showforum=29
http://www.thespykiller.co.uk/index.php?board=3.0
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://forums.tomcoyote.org/index.php?showforum=27
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://www.spywarewarrior.com/viewforum.php?f=5

(Keep on plugging, you'll get there eventually)

Once your OS is clean routinely practice Safe-Hex.
http://www.claymania.com/safe-hex.html
Hundreds Click on 'Click Here to Get Infected' Ad
http://www.eweek.com/article2/0,1895,2132447,00.asp

Good luck :)
 
Top