Winantiviruspro 2006 ??

[seaweed1317]

I am having all kinds of crap pop up on my laptop with this so called
"Winantiviruspro 2006 " I have run Norton, Defender, Adaware & Spysweeper,
all telling me I am clean yet every time I even open my Home Page, all this
stuff pops up. NO, I did not install anything, I just keep canceling it. Not
sure if I have to reformat to get rid of this thing. What a nightmare! Any
suggestions are welcome
.....Sandy

 

[David H. Lipman]

From: "seaweed1317" <[email protected]>

| I am having all kinds of crap pop up on my laptop with this so called
| "Winantiviruspro 2006 " I have run Norton, Defender, Adaware & Spysweeper,
| all telling me I am clean yet every time I even open my Home Page, all this
| stuff pops up. NO, I did not install anything, I just keep canceling it. Not
| sure if I have to reformat to get rid of this thing. What a nightmare! Any
| suggestions are welcome
| ....Sandy
|



Two phase answer...

Perform Part 1 then perform Part 2

If the first two parts don't work, perform the alternate utility.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.

If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to JRE/JSE
Version 5.0. There are vulnerabilities in them and they are actively being exploited.
This is most likely why you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of Sun Java
to Version 5 on the PC that they be removed and Sun Java JRE/JSE Version 5.0 Update 7
be installed ASAP.

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version...

C:\Program Files\Java\jre1.5.0_07


http://www.java.com/en/download/manual.jsp



Part 1
------------
Download Adware-Virtumundo Removal Tool --
http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

Information on the Adware-Virtumundo Removal Tool:
http://forums.mcafeehelp.com/viewtopic.php?t=57049

Part 2
------------
Download WinFixerFix.exe from the URL --
http://www.ik-cs.com/programs/virtools/WinFixerFix.exe

Execute; WinFixerFix.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it will be
displayed in your browser (Opera, FireFox or Internet Explorer). However, if you are using
WinXP, Win2K or Win2003 your system will be left in a state where you will have to manually
shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in your bowser
but your PC will automatically be shutdown. It is suggested that you move the report out of
c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.


ALTERNATE:
--------------

Download Atribune's VUNDOFIX.EXE
http://www.atribune.org/ccount/click.php?id=4

Save VUNDOFIX.EXE to "C:\" ( C:\VUNDOFIX.EXE ) and execute it from there.


Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.

* * * Please report back your results * * *

 

[NoStop]

From: "seaweed1317" <[email protected]>

| I am having all kinds of crap pop up on my laptop with this so called
| "Winantiviruspro 2006 " I have run Norton, Defender, Adaware &
| Spysweeper, all telling me I am clean yet every time I even open my Home
| Page, all this stuff pops up. NO, I did not install anything, I just
| keep canceling it. Not sure if I have to reformat to get rid of this
| thing. What a nightmare! Any suggestions are welcome
| ....Sandy
|



Two phase answer...

Perform Part 1 then perform Part 2

If the first two parts don't work, perform the alternate utility.

It is suggested that you execute each tool in Normal Mode then in Safe
Mode.

If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to
JRE/JSE
Version 5.0. There are vulnerabilities in them and they are actively
being exploited. This is most likely why you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of
Sun Java to Version 5 on the PC that they be removed and Sun Java JRE/JSE
Version 5.0 Update 7 be installed ASAP.

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version...

C:\Program Files\Java\jre1.5.0_07


http://www.java.com/en/download/manual.jsp



Part 1
------------
Download Adware-Virtumundo Removal Tool --
http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

Information on the Adware-Virtumundo Removal Tool:
http://forums.mcafeehelp.com/viewtopic.php?t=57049

Part 2
------------
Download WinFixerFix.exe from the URL --
http://www.ik-cs.com/programs/virtools/WinFixerFix.exe

Execute; WinFixerFix.exe { Note: You must accept the default of
C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to
go through your FireWall to enable WGET.EXE to download the needed McAfee
related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan,
it will be
displayed in your browser (Opera, FireFox or Internet Explorer). However,
if you are using WinXP, Win2K or Win2003 your system will be left in a
state where you will have to manually
shutdown/reboot the PC. On Win9x/ME platforms the report will not be
shown in your bowser
but your PC will automatically be shutdown. It is suggested that you move
the report out of c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a
copy of the HTML report for each session.


ALTERNATE:
--------------

Download Atribune's VUNDOFIX.EXE
http://www.atribune.org/ccount/click.php?id=4

Save VUNDOFIX.EXE to "C:\" ( C:\VUNDOFIX.EXE ) and execute it from there.


Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your
reply.

* * * Please report back your results * * *

Part of your report back on your results should include the total time spent
applying all these "fixes" just so others can appreciate what they're
getting themselves into when they follow David's advice.

David,

Can you give us an estimate of the time required to do all the above? Do
Windoze users actually get to use their computers to do anything productive
or do they spend all their time trying to undo damages done to their
systems because of the insecurity of this toy operating system? How many
reboots will have to be done through this process? Is it necessary to also
defrag ones Sea drive too, just for good measure or run a registry cleaner
in order to waste even more time? When will Windoze users finally say
enough is enough and demand the MickeyMouse supply a secure o/s? Can't be
too much to ask considering how much users need to spend to get this "o/s"
in the first place.


--
WGA is the best thing that has happened for Linux in a while.

The ULTIMATE Windoze Fanboy:

http://video.google.com/videoplay?docid=-2370205018226686613

A 3D Linux Desktop (video) ...

View Some Common Linux Desktops ...
http://shots.osdir.com/

 

[David H. Lipman]

From: "NoStop" <[email protected]>


| Part of your report back on your results should include the total time spent
| applying all these "fixes" just so others can appreciate what they're
| getting themselves into when they follow David's advice.
|
| David,
|
| Can you give us an estimate of the time required to do all the above? Do
| Windoze users actually get to use their computers to do anything productive
| or do they spend all their time trying to undo damages done to their
| systems because of the insecurity of this toy operating system? How many
| reboots will have to be done through this process? Is it necessary to also
| defrag ones Sea drive too, just for good measure or run a registry cleaner
| in order to waste even more time? When will Windoze users finally say
| enough is enough and demand the MickeyMouse supply a secure o/s? Can't be
| too much to ask considering how much users need to spend to get this "o/s"
| in the first place.
|

The time will depend on many factors. Syuch as...
- If you use all the suggested utilities or just one of them.
- You do it in Normal Mode and Safe Mode
- You have many, many, files
etc...

The WinFixerFix will admittedly take the longest. The other utilities are purely scrippted
removal utilities. The WinFixerFix however includes a full On Demand anti virus scanner
that uses signarure and heuristic dectecion and removel. Thus not only will WinFixeFix
(with the Mcafee Command Line Scanner) remove the Vundo Trojan and/or the Virtumunde Adware
but it may find addition malware (both viral and non-viral malware).

What is *MOST* important is prevention. An ounce of prevention is worth a pound of cure.
Practice Safe Hex and protect your computer and the chances of malware are greatly reduced
and one does not have to go through all of the above. Also note that there are two
suggested utilities and one alternative. If the 1st and/or second utility removes the the
Vundo Trojan and/or the Virtumunde Adware the there is no reason to perform the alternatate
utility.

I can not and won't try to quantify the time needed beacuse of all the variables.