XP Anti Virus

[Dan Heist]

When I started my computer this morning I got a page that encouraged me to
download a program called XP Anti Virus. There was an official looking
MicroSoft Security logo in the upper left hand corner.

I did not download the program but somehow wound up with a bunch of XP Anti
Virus files on my computer. I have tried to delete all of them.

Now when I open Internet Explorer to go to MSN I get a virus warning. If I
try to go back to MSN two or three more times, and finally get connected and
try to go to Google, I get a message that Google has found an unregistered
copy of XP Anti Virus. All XP Anti Virus links take me to a page wanting
$49.95 to download this program.

Is this XP Anti Virus a hoax or is it an actual MS program? If it is some
sort of malware or virus, how can I delete it?

Thanks for your help.

 

[Tom [Pepper] Willett]

How to remove XPAntiVirus
http://www.bleepingcomputer.com/forums/topic111715.html

"Dan Heist" <DanHeist@discussions.microsoft.com> wrote in message
news:7DF42588-7B23-4A67-9AA6-CDDDDBDCDCB9@microsoft.com...
: When I started my computer this morning I got a page that encouraged me to
: download a program called XP Anti Virus. There was an official looking
: MicroSoft Security logo in the upper left hand corner.
:
: I did not download the program but somehow wound up with a bunch of XP
Anti
: Virus files on my computer. I have tried to delete all of them.
:
: Now when I open Internet Explorer to go to MSN I get a virus warning. If I
: try to go back to MSN two or three more times, and finally get connected
and
: try to go to Google, I get a message that Google has found an unregistered
: copy of XP Anti Virus. All XP Anti Virus links take me to a page wanting
: $49.95 to download this program.
:
: Is this XP Anti Virus a hoax or is it an actual MS program? If it is some
: sort of malware or virus, how can I delete it?
:
: Thanks for your help.
:
:

 

[David H. Lipman]

From: "Dan Heist" <DanHeist@discussions.microsoft.com>

| When I started my computer this morning I got a page that encouraged me to
| download a program called XP Anti Virus. There was an official looking
| MicroSoft Security logo in the upper left hand corner.
|
| I did not download the program but somehow wound up with a bunch of XP Anti
| Virus files on my computer. I have tried to delete all of them.
|
| Now when I open Internet Explorer to go to MSN I get a virus warning. If I
| try to go back to MSN two or three more times, and finally get connected and
| try to go to Google, I get a message that Google has found an unregistered
| copy of XP Anti Virus. All XP Anti Virus links take me to a page wanting
| $49.95 to download this program.
|
| Is this XP Anti Virus a hoax or is it an actual MS program? If it is some
| sort of malware or virus, how can I delete it?
|
| Thanks for your help.
|

It is a malware con to get your money. The fact that you got that warning may mean you are
already infected with a Trojan.



1. Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

2. Disable Notepad's word wrap:
In Notepad.exe Format --> uncheck "Word wrap"

3. Download/run Deckard's System Scanner:
http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post in one of the below
expert forums...


{ Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }

Forums where you can get expert advice for HiJack This! (HJT) and Deckard's System Scanner
Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.malwarebytes.org/forums/index.php?showforum=7

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://aumha.net/viewforum.php?f=30
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13



--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

 

[C.B.]

"Dan Heist" <DanHeist@discussions.microsoft.com> wrote in message
news:7DF42588-7B23-4A67-9AA6-CDDDDBDCDCB9@microsoft.com...
> When I started my computer this morning I got a page that encouraged me to
> download a program called XP Anti Virus. There was an official looking
> MicroSoft Security logo in the upper left hand corner.
>
> I did not download the program but somehow wound up with a bunch of XP
> Anti
> Virus files on my computer. I have tried to delete all of them.
>
> Now when I open Internet Explorer to go to MSN I get a virus warning. If I
> try to go back to MSN two or three more times, and finally get connected
> and
> try to go to Google, I get a message that Google has found an unregistered
> copy of XP Anti Virus. All XP Anti Virus links take me to a page wanting
> $49.95 to download this program.
>
> Is this XP Anti Virus a hoax or is it an actual MS program? If it is some
> sort of malware or virus, how can I delete it?
>
> Thanks for your help.
>
>

It's malware. Remove it.

C.B.


--
It is the responsibility and duty of everyone to help the underprivileged
and unfortunate among us.

 

[Dell Techie]

1. Run Deckard's System Scanner (DSS)
http://securitynewsfromthenet.blogspot.com/2008/06/deckards-system-scanner-dss.html

2. Run the vundo and combo fix
http://securitynewsfromthenet.blogspot.com/2007/05/vundofix-and-combo-fix.html

3. Run Malwarebytes Anti-Malware
http://securitynewsfromthenet.blogspot.com/2008/03/malwarebytes-anti-malware-105.html

4. Run the anti spyware removal programs spybot
http://securitynewsfromthenet.blogspot.com/2007/03/spybot-search-and-destroy-spyware-and.html

5 Run Superantispyware
http://securitynewsfromthenet.blogspot.com/2007/04/superantispyware-home-edition-free.html

6. Run a complete scan with free curing utility Dr.Web CureIt!
http://securitynewsfromthenet.blogspot.com/2008/05/dr-web-cureit.html

"Dan Heist" wrote:

> When I started my computer this morning I got a page that encouraged me to
> download a program called XP Anti Virus. There was an official looking
> MicroSoft Security logo in the upper left hand corner.
>
> I did not download the program but somehow wound up with a bunch of XP Anti
> Virus files on my computer. I have tried to delete all of them.
>
> Now when I open Internet Explorer to go to MSN I get a virus warning. If I
> try to go back to MSN two or three more times, and finally get connected and
> try to go to Google, I get a message that Google has found an unregistered
> copy of XP Anti Virus. All XP Anti Virus links take me to a page wanting
> $49.95 to download this program.
>
> Is this XP Anti Virus a hoax or is it an actual MS program? If it is some
> sort of malware or virus, how can I delete it?
>
> Thanks for your help.
>
>

 

[lisa8325]

Do you have to run all 6 steps to completely remove any malware?

"Dell Techie" wrote:

> 1. Run Deckard's System Scanner (DSS)
> http://securitynewsfromthenet.blogspot.com/2008/06/deckards-system-scanner-dss.html
>
> 2. Run the vundo and combo fix
> http://securitynewsfromthenet.blogspot.com/2007/05/vundofix-and-combo-fix.html
>
> 3. Run Malwarebytes Anti-Malware
> http://securitynewsfromthenet.blogspot.com/2008/03/malwarebytes-anti-malware-105.html
>
> 4. Run the anti spyware removal programs spybot
> http://securitynewsfromthenet.blogspot.com/2007/03/spybot-search-and-destroy-spyware-and.html
>
> 5 Run Superantispyware
> http://securitynewsfromthenet.blogspot.com/2007/04/superantispyware-home-edition-free.html
>
> 6. Run a complete scan with free curing utility Dr.Web CureIt!
> http://securitynewsfromthenet.blogspot.com/2008/05/dr-web-cureit.html
>
> "Dan Heist" wrote:
>
> > When I started my computer this morning I got a page that encouraged me to
> > download a program called XP Anti Virus. There was an official looking
> > MicroSoft Security logo in the upper left hand corner.
> >
> > I did not download the program but somehow wound up with a bunch of XP Anti
> > Virus files on my computer. I have tried to delete all of them.
> >
> > Now when I open Internet Explorer to go to MSN I get a virus warning. If I
> > try to go back to MSN two or three more times, and finally get connected and
> > try to go to Google, I get a message that Google has found an unregistered
> > copy of XP Anti Virus. All XP Anti Virus links take me to a page wanting
> > $49.95 to download this program.
> >
> > Is this XP Anti Virus a hoax or is it an actual MS program? If it is some
> > sort of malware or virus, how can I delete it?
> >
> > Thanks for your help.
> >
> >

 

[Malke]

lisa8325 wrote:

> Do you have to run all 6 steps to completely remove any malware?

Follow the removal steps here:

Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, get guided help. Either post at Bleeping Computer or
choose one of the specialty forums listed below. Register and read its
posting FAQ. PLEASE DO NOT POST LOGS IN THE MS NEWSGROUPS.

http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

 

[donna.asbrock@gmail.com]

Dan Heist wrote:
> When I started my computer this morning I got a page that encouraged me to
> download a program called XP Anti Virus. There was an official looking
> MicroSoft Security logo in the upper left hand corner.
>
> I did not download the program but somehow wound up with a bunch of XP Anti
> Virus files on my computer. I have tried to delete all of them.
>
> Now when I open Internet Explorer to go to MSN I get a virus warning. If I
> try to go back to MSN two or three more times, and finally get connected and
> try to go to Google, I get a message that Google has found an unregistered
> copy of XP Anti Virus. All XP Anti Virus links take me to a page wanting
> $49.95 to download this program.
>
> Is this XP Anti Virus a hoax or is it an actual MS program? If it is some
> sort of malware or virus, how can I delete it?
>
> Thanks for your help.

 

[prijikn]

try out AVG Anti-Virus, it's a very good anti-virus spyware that is free.