VirusRemover2008 - PersonalAntiSpy

[Fernand Thill]

Since about 2 weeks, once IE7 (under XP) is started, about one minute later
there is an automatic opening of a new window asking for download of
VirusRemover2008, because XP infection and so on. The window is hard to
close as there are several pop-ups insisting for download. Once closed
there is another new window opening for PersonalAntiSpy, once closed,
followed by a third one for Antispyware.
I really don't know how to get rid of this and I ask for help
Thanks
Fernand
PS: did a post in the right forum?

 

[Thee Chicago Wolf]

Since about 2 weeks, once IE7 (under XP) is started, about one minute later

there is an automatic opening of a new window asking for download of
VirusRemover2008, because XP infection and so on. The window is hard to
close as there are several pop-ups insisting for download. Once closed
there is another new window opening for PersonalAntiSpy, once closed,
followed by a third one for Antispyware.
I really don't know how to get rid of this and I ask for help
Thanks
Fernand
PS: did a post in the right forum?

Someone installed this annoy-ware by clicking a pop-up. Spy-bot will
get rid of it for you.

- Thee Chicago Wolf

 

[Richard in AZ]

| Since about 2 weeks, once IE7 (under XP) is started, about one minute later
| there is an automatic opening of a new window asking for download of
| VirusRemover2008, because XP infection and so on. The window is hard to
| close as there are several pop-ups insisting for download. Once closed
| there is another new window opening for PersonalAntiSpy, once closed,
| followed by a third one for Antispyware.
| I really don't know how to get rid of this and I ask for help
| Thanks
| Fernand
| PS: did a post in the right forum?
|
If you had done a Google on "Virusremover 2008" you would find that The VirusRemover2008 is a
scumware product.

Download Malwarebytes from www.Malwarebytes.org and run it.
That should clear the VirusRemover 2008 program.

 

[Fernand Thill]

Hello Richard,
what is a scumware?

 

[Mick Murphy]

Malwarebytes will fix it; but do it in Safe Mode
All info below.

http://www.malwarebytes.org/mbam.php

Malwarebytes is as the name says, a Malware Remover!
For the Free version scroll down their page to either download from
Download.com, or Major Geeks.com

Download, install, and update.

Important re: Safe Mode
If you happen to find a problem that you can’t uninstall / delete, reboot
the computer, and go into Safe Mode.
To get into Safe mode, tap F8 right at Power On / Startup, and use UP arrow
key to get to Safe Mode from list of options, then hit ENTER.
RESCAN your computer with your Malwarebytes while in Safe Mode.

 

[PA Bear [MS MVP]]

[Richard, the utility is called MalwareBytes Anti-Malware (MBAM), not
Malwarebytes.]

Richard in AZ wrote:

 

[PA Bear [MS MVP]]

For some background on what you're dealing with, see:

Anatomy of a malware scam (Security MVP Jesper Johansson)
http://www.theregister.co.uk/2008/08/22/anatomy_of_a_hack/print.html

VirusRemover2008 is but a newer variant of XP Antivirus 2008.

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

NB: While running MBAM may provide temporary relief, I would not rely on it
solely.

 

[The Real Truth MVP]

Use my Remove-it software, it will remove that malware from your system.
Choose yes for all options when prompted. Download it here
http://pcbutts1.com/downloads/tools/tools.htm

 

[Richard in AZ]

Scumware is software written by some scum bag that is trying to rob you.

| Hello Richard,
| what is a scumware?
|
| | >
| > | > | Since about 2 weeks, once IE7 (under XP) is started, about one minute
| > later
| > | there is an automatic opening of a new window asking for download of
| > | VirusRemover2008, because XP infection and so on. The window is hard to
| > | close as there are several pop-ups insisting for download. Once closed
| > | there is another new window opening for PersonalAntiSpy, once closed,
| > | followed by a third one for Antispyware.
| > | I really don't know how to get rid of this and I ask for help
| > | Thanks
| > | Fernand
| > | PS: did a post in the right forum?
| > |
| > If you had done a Google on "Virusremover 2008" you would find that The
| > VirusRemover2008 is a
| > scumware product.
| >
| > Download Malwarebytes from www.Malwarebytes.org and run it.
| > That should clear the VirusRemover 2008 program.
| >
| >
| >

 

[Plato]

Since about 2 weeks, once IE7 (under XP) is started, about one minute later
there is an automatic opening of a new window asking for download of
VirusRemover2008, because XP infection and so on. The window is hard to

Next time, dont click on popups or install some thing some website asks
you to, "to properly view" the webpage.

 

[Fernand Thill]

I thank you all. It seems that I got rid of the problem, I only don't know
if it was with Spy-Bot or MalwareBytes. Impatient as I am, I launched both
(simultaneously, don't blame me), both found malware. You are great people,
that's also why as an luxemburgish user (Europe) I'm addressing me to too
US-Newsgroups