Antivirus 2010
- Thread starter hotcoffee
- Start date
FromTexas
This Space for Rent
Do not download ANTIVIRUS 2010. It is rogueware.
But - if stuff like this can fool you, you should likely do the steps in the following link and make sure you don't have stuff on your computer. A lot of these trojans can be missed by the major programs because they know how to subvert them.
HELP!How to remove these damn Trojan Virus? - Yahoo! Answers
G1G4
Find em Hot, Leave em Wet
Antivirus 2010 is a rogue anti-spyware program from the same family as Antivirus 2008 and Antivirus 2009. Like its previous incarnations, Antivirus 2010 is advertised through the use of advertisements on the Web pretending to be online anti-malware scanners. These advertisements pretend to scan your computer and then state that your computer is infected and that you should download and install Antivirus 2010 to remove these infections. These rogues are also known to be advertised and installed through Trojans that display fake security alerts in your Windows taskbar stating you are infected. Once you click on one of these alerts, it will bring you to the download page for Antivirus 2010, or even download and install it without your permission.
Once Antivirus 2010 is installed on your computer, it will be automatically configured to run when you logon to Windows. This is done by adding a startup that launches the C:\Windows\System32\wingamma.exe executable. This executable will then launch the AV2010.exe and the fake Windows Security Center. Once running, it will scan your computer and list a variety of infections that cannot be removed unless you first purchase the software. This infection will also randomly display fake security alerts on your computer stating that you are infected or have some sort of security risk. If you click on these alerts, it will prompt you to purchase the software. These fake alerts, along with a fake Windows Security Center that advertises Antivirus 2010, are used to further scare you into thinking you are infected so you purchase the software.
Another new addition to these types of rogues is the creation of a fake Blue Screen of Death. At random intervals, Antivirus 2010 will create what appears to be a Windows crash, but in reality is just a fake screen. These fake crashes are used to further persuade you into purchasing the software. If you receive this crash, you can simply reboot your computer , or try pressing Alt-Tab or Control-Alt-Delete to get out of it. The text of the crash is:
***STOP: 0x000000D1 (0x0000000, 0xF73120AE, 0xC0000008, 0xC000000)
A spyware application has been detected and Windows has been shut down to prevent damage to your computer
SPYWARE.MONSTER.FX_WILD_0x0000000
If this is the first time you've seen this Stop error screen, restart you [sic] computer. If this screen appears again, follow these steps:
Click to make sure your antivirus software is properly installed. If this is a new installation, ask you [sic] software manufacturer for any antivirus updates you might need.
Windows detected unregistered version of Antivirus 2010 protection on your computer. If problem continue, please activate your antivirus software to prevent computer damage and data loss.
*** SRV.sys - Address F73120AE base at C0000000, DateStamp 36b072a3
# Print out these instructions as we will need to close every window that is open later in the fix.
# Download Malwarebytes' Anti-Malware, or MBAM, from the following location and save it to your desktop:
Malwarebytes' Anti-Malware Download Link
# Once downloaded, close all programs and Windows on your computer, including this one.
# Double-click on the icon on your desktop named Download_mbam-setup.exe. This will start the installation of MBAM onto your computer.
# When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure you leave both the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware checked. Then click on the Finish button.
# MBAM will now automatically start and you will see a message stating that you should update the program before performing a scan. As MBAM will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main program.
# On the Scanner tab, make sure the the Perform quick scan option is selected and then click on the Scan button to start scanning your computer for Antivirus 2010 related files.
# MBAM will now start scanning your computer for malware. This process can take quite a while, so we suggest you go and do something else and periodically check on the status of the scan.
# When the scan is finished a message box will appear that should read 'The scan completed succesfully. Click 'Show Results' to display all objects found.'
# You should click on the OK button to close the message box and continue with the Antivirus2010 removal process.
# You will now be back at the main Scanner screen. At this point you should click on the Show Results button.
# A screen displaying all the malware that the program found will be shown.
# You should now click on the Remove Selected button to remove all the listed malware. MBAM will now delete all of the files and registry keys and add them to the programs quarantine. When removing the files, MBAM may require a reboot in order to remove some of them. If it displays a message stating that it needs to reboot, please allow it to do so. Once your computer has rebooted, and you are logged in, please continue with the rest of the steps.
# When MBAM has finished removing the malware, it will open the scan log and display it in Notepad. Review the log as desired, and then close the Notepad window.
# You can now exit the MBAM program.
Once Antivirus 2010 is installed on your computer, it will be automatically configured to run when you logon to Windows. This is done by adding a startup that launches the C:\Windows\System32\wingamma.exe executable. This executable will then launch the AV2010.exe and the fake Windows Security Center. Once running, it will scan your computer and list a variety of infections that cannot be removed unless you first purchase the software. This infection will also randomly display fake security alerts on your computer stating that you are infected or have some sort of security risk. If you click on these alerts, it will prompt you to purchase the software. These fake alerts, along with a fake Windows Security Center that advertises Antivirus 2010, are used to further scare you into thinking you are infected so you purchase the software.
Another new addition to these types of rogues is the creation of a fake Blue Screen of Death. At random intervals, Antivirus 2010 will create what appears to be a Windows crash, but in reality is just a fake screen. These fake crashes are used to further persuade you into purchasing the software. If you receive this crash, you can simply reboot your computer , or try pressing Alt-Tab or Control-Alt-Delete to get out of it. The text of the crash is:
***STOP: 0x000000D1 (0x0000000, 0xF73120AE, 0xC0000008, 0xC000000)
A spyware application has been detected and Windows has been shut down to prevent damage to your computer
SPYWARE.MONSTER.FX_WILD_0x0000000
If this is the first time you've seen this Stop error screen, restart you [sic] computer. If this screen appears again, follow these steps:
Click to make sure your antivirus software is properly installed. If this is a new installation, ask you [sic] software manufacturer for any antivirus updates you might need.
Windows detected unregistered version of Antivirus 2010 protection on your computer. If problem continue, please activate your antivirus software to prevent computer damage and data loss.
*** SRV.sys - Address F73120AE base at C0000000, DateStamp 36b072a3
# Print out these instructions as we will need to close every window that is open later in the fix.
# Download Malwarebytes' Anti-Malware, or MBAM, from the following location and save it to your desktop:
Malwarebytes' Anti-Malware Download Link
# Once downloaded, close all programs and Windows on your computer, including this one.
# Double-click on the icon on your desktop named Download_mbam-setup.exe. This will start the installation of MBAM onto your computer.
# When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure you leave both the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware checked. Then click on the Finish button.
# MBAM will now automatically start and you will see a message stating that you should update the program before performing a scan. As MBAM will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main program.
# On the Scanner tab, make sure the the Perform quick scan option is selected and then click on the Scan button to start scanning your computer for Antivirus 2010 related files.
# MBAM will now start scanning your computer for malware. This process can take quite a while, so we suggest you go and do something else and periodically check on the status of the scan.
# When the scan is finished a message box will appear that should read 'The scan completed succesfully. Click 'Show Results' to display all objects found.'
# You should click on the OK button to close the message box and continue with the Antivirus2010 removal process.
# You will now be back at the main Scanner screen. At this point you should click on the Show Results button.
# A screen displaying all the malware that the program found will be shown.
# You should now click on the Remove Selected button to remove all the listed malware. MBAM will now delete all of the files and registry keys and add them to the programs quarantine. When removing the files, MBAM may require a reboot in order to remove some of them. If it displays a message stating that it needs to reboot, please allow it to do so. Once your computer has rebooted, and you are logged in, please continue with the rest of the steps.
# When MBAM has finished removing the malware, it will open the scan log and display it in Notepad. Review the log as desired, and then close the Notepad window.
# You can now exit the MBAM program.
hotcoffee
New Member
I saw that too g1g4... and ironically there was an antispyware add at the bottom of the page when I opened the last post [cyber something... but now I'm afraid to open anything....]
Hubby googled it and found something for XP_Vista that told how to delete it using the task manager and I'm trying that...
I'm telling you.... IE keeps crashing [it's been doing that for weeks] and then when I try firefox and opera I come up with a virus... I wonder if any of these actions are related...
I just upgraded my memory from 1G to 2G too... so now it's fast and infected...
Firefox does some things... Opera is nice... IE is unstable... I want to use my browser with roboform and still be able to listen to my Calvert Scanner... I'm so confused... and now I have a virus.... this is me reading the instructions...
Hubby googled it and found something for XP_Vista that told how to delete it using the task manager and I'm trying that...
I'm telling you.... IE keeps crashing [it's been doing that for weeks] and then when I try firefox and opera I come up with a virus... I wonder if any of these actions are related...
I just upgraded my memory from 1G to 2G too... so now it's fast and infected...
Firefox does some things... Opera is nice... IE is unstable... I want to use my browser with roboform and still be able to listen to my Calvert Scanner... I'm so confused... and now I have a virus.... this is me reading the instructions...
FromTexas
This Space for Rent
I saw that too g1g4... and ironically there was an antispyware add at the bottom of the page when I opened the last post [cyber something... but now I'm afraid to open anything....]
Hubby googled it and found something for XP_Vista that told how to delete it using the task manager and I'm trying that...
I'm telling you.... IE keeps crashing [it's been doing that for weeks] and then when I try firefox and opera I come up with a virus... I wonder if any of these actions are related...
I just upgraded my memory from 1G to 2G too... so now it's fast and infected...
Firefox does some things... Opera is nice... IE is unstable... I want to use my browser with roboform and still be able to listen to my Calvert Scanner... I'm so confused... and now I have a virus.... this is me reading the instructions...
You need to run Malewarebytes like his instructions said. Print out the instructions before starting to follow them.
G1G4
Find em Hot, Leave em Wet
Task manager doesn't do anything but delete the running process. Viruses usually embed themselves in core files (WinLogon, explorer, etc etc). You'd be better suited to print those instructions (or save them in Notepad, like I do) and start following them. Knowing the 'Antivirus 20xx' variant, it's probably embedded within the registry.
Highlander
ONE NATION UNDER GOD
I was having the same problem a few weeks ago with two of my laptops. I think my daughter was going to the Myspace aux sites that allow you to copy and paste code. Bam! She pasted more than Myspace backgrouds.
Anyway, I tried my best to clean the laptops up to not avail. Symantec was less than helpful.
I found a site called "malwarebytes.org" They have a piece of software that scans and cleans this crap. I was leary that it was more BS software but I was to the point where it really didn't matter any more. My laptop was too far gone.
Anyway, I downloaded the software, ran it, rebooted and my computers were clean.
If you are a little leary, google it first. I don't remember anyone reporting it as bad. Highly recommended. It worked for me.
hotcoffee
New Member
Ran it.... seems to be ok... thanks
