PC Pals Forum
Technical Help & Discussion => Broadband, Networking, PC Security, Internet & ISPs => Topic started by: WeaveP on January 12, 2009, 10:43
-
Hello.
My computer has been infected with Internet Antivirus Pro, which constantly pops up messages saying my system is at risk, then i am directed to a site which asks for my credit card details.
I am using Windows XP. I have tried running an anti virus scan with AVG free edition, and running spypot search and destroy, but i cannot get rid of it.
Simply deleting the programme does not work either.
I have read various websites about removing the virus, but i am somewhat confused with all of the different advice.
Is there a simple ( ? free ) way of removing internet antivirus from my system, or can you reccomend a purchase ?
Many Thanks for your help.
Paul
-
Hi Paul,
Try Malwarebytes, and / or Super Anti Spyware, but you'll have to Google them as I can't do links from my phone.
Let us know how you get on. :)
-
Thanks Simon.
I will give those a try.
Is " Internet AntiVirus Pro " a common problem
Paul
-
Unfortunately these fake antivirus programs are very common Paul. See http://www.pc-pals.com/smf/index.php?topic=27068.0
-
And, unfortunately, a lot of them seem to get through AVG.
-
Use Malware bytes
http://www.malwarebytes.org/products.php
Make sure you disconnect your computer from the internet cable
Internet AntiVirus Pro will reconnect to the internet and reinstall while you are uninstalling it
-
Thankyou for all your replies.
I will certainly try malwarebytes. I have tried other "free" scan programmes which can detect problems, then ask you to register or pay to remove them. Is this the case with malwarebytes. :)
Really like the forum by the way.
Paul
-
That sounds like a virtumonde varient. Here is the fix page. Just scanning with this tool alone normally won't remove the infection. Look up virtumonde on google. You'll find forums that have pages devoted to just this type of infection.
http://vundofix.atribune.org/
You have one of the biggest pain in the arse malwares there are.
-
Thanks Reno, i will give that a try. Is this malware just annoying or can it steal information such as bank account details ?
Paul
-
Paul, neither Malwarebytes or Super Anti Spyware require payment before removing anything they find, :)
-
Thanks Simon.
-
Thanks Reno, i will give that a try. Is this malware just annoying or can it steal information such as bank account details ?
Paul
Sorry it took me so long to reply. I've been up at the university most of the day. Virtumonde is a trojan which for the most part is just an ad engine. It has many different variations written by many different people or thieves from all over the internet. Since there are so many different versions I can't tell you that the one you have can't steal your information. Chances are though the only way your information will get stolen is if you buy something or enter your card number through one of those popups.
Can you tell me if you've run a scan with the vundofix and whether or not it solved your problem. The fix isn't updated too often, but it has the option of picking out specified files that you suspect of being part of the virus to be removed manually.
-
Hi Reno
I used this link today :
http://www.malwarebytes.org/products.php
and the " Internet AntiVirus Pro " seems to have completely disappeared from my system, i.e the icons are no longer visible in the bottom right hand corner of the screen ( system tray ) and i no longer get any problems warning of spurious infections. I did have to reboot my computer to complete the process though.
Many thanks for all the advice.
Paul
-
I'm glad davy's tool was able to sort you out. That junk can be real hard to remove sometimes. Its a good thing you got it off. :thumbs:
-
A lot of the newer infestations are adding themselves to system Restore as welll as a dozen places in the registry
When you try to get rid of them they reinstall themselves from the net
Some are almost impossible to get rid of
-
I have a fairly basic understanding of computing, but it seems to me that people that write these malicious programmes should devote their talents to something more useful than spoiling the pleasure of innocently surfing the internet. Its a real comfort to know that there are good people like those on this forum who are all too willing to help those in need. Thanks again.
-
A simple solution is to just clone C drive, when disaster strikes a restore will fix it :)
-
Regular scans with Malwarebytes should keep your computer clean, or you could opt for the Pro version of Super Anti-spyware, which will act in real time to prevent infections getting through in the first place. Of course, there is a cost involved, and no protection is 100% infallible, but it may be a small cost, compared to the time you've spent getting rid of the problem. Just something to consider, that's all. I don't work for them! ;D
-
"simple solution is to just clone C drive, when disaster strikes a restore will fix it"
Can you explain how to do this ? Many Thanks ...
-
Ok, here's a guide with screenshots for "Acronis True Image " , http://www.terryscomputertips.com/computers/a-look-inside-acronis-true-image-home-11.php,
Of course make sure your system is clean before backing up :), its a lot quicker than stuffing around trying to remove stubborn Viruses/ Trojans.
-
Thanks gmax, that's great.