locked
xp antivirus 2008 RRS feed

  • Question

  •  

    How do I get rid of this?  OneCare does not even recognize it as Malware.  It has not been caught in any scans.
    Wednesday, February 20, 2008 3:12 AM

Answers

All replies

  • Where are you seeing this? Are you getting popups, I assume?

     

    Follow the instructions in this post, http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=662566&SiteID=2, to report a virus that is not cleaned by OneCare and to get help in removal.

     

    -steve

    Wednesday, February 20, 2008 1:35 PM
    Moderator
  • I did find this website http://www.xp-vista.com/spyware-removal/xp-antivirus-2008-removal-instructions-xp-antivirus-2008 that tells you how to remove it manually. However when I went to look for the files none were there. So I can't say if the process works or not but maybe it will help you.

    Thursday, February 28, 2008 9:10 PM
  • Last week a pop-up appeared that landed on my icon line.... xpantivirus2008.  Thinking that it was another security alert from windows, I clicked on it.  It proceeded to "scan" my hard drive and inform me that I had 90+ security "issues" that needed to be addressed.....  while the scan was underway, a windows msg appeared saying that it did not recognize the program source.  I found that odd... but, as a result, did not buy the xpantivirus2008 program.  Now, one week later, I am constamtly being asssaulted by never-ending pop-ups, regisdtry scans, bubbles, etc.  I followed a suggested uninstall (though I never installed the program) plus all of the usual ateps in detecting and removal of unwanted programs...  but, although I removed everything that I was able to find via search commands, and using the process recommended by TomT (using regedit, hkey current user, msconfig, and unchecking "xpa" at the startup file, the program continues to reappear, pop-up every 2 minutes and at every start up....  Although I finally succeeded, attempting to delete xpantivirus.exe would not allow me to delete saying that it was being used by another user or runniong in another program which, obviously, it was not....  Even with all of it apparently gone, it still reappears and performs its maddening process.  Even a file search at this point does not detect xpantivirus....  HELP!!!!!   Thank you....  AB

    Saturday, March 22, 2008 7:08 PM
  • I ran up on this while I was at Classmates.com  I almost did complete install n stopped. I downloade n ran rogue remover n afterwards ran spybot after it. Spybot found entries that rogue didn't find. I don't know if I've gotten it all but I'll let you know later Also Spybot found the directory file of xp antivirus 2008

     

    Sunday, March 23, 2008 4:47 PM
  • the post above takes me to a drop down menu and I dont know which option to select.  I have Malicious Software Removal, MalburnWare, Windows defender, and VirusHeal 4.0  can I delete this XP Antivirus  or is it a part of the windows xp package that was predownloaded with the computer.  it is becoming a pain.  i do a very thorough complete scan of my computer and no threats or virus is detected  but this literally keeps popping up approximately every 2-3 minutes.  it just started 2 days ago. 

    Tuesday, March 25, 2008 8:25 PM
  •  BikerDude wrote:

    the post above takes me to a drop down menu and I dont know which option to select.  I have Malicious Software Removal, MalburnWare, Windows defender, and VirusHeal 4.0  can I delete this XP Antivirus  or is it a part of the windows xp package that was predownloaded with the computer.  it is becoming a pain.  i do a very thorough complete scan of my computer and no threats or virus is detected  but this literally keeps popping up approximately every 2-3 minutes.  it just started 2 days ago. 

    You are infected. XP Antivirus is not a pat of Windows.

    If  you are not using Windows Live OneCare, you are off topic for this forum. This is not a general forum for viruses, spyware, or Windows Help. For help with spyware issues, you may want to try the forums here: 

    http://aumha.net/ For help with virus removal, contact the maker of your Antivirus program.

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx for details. For international information, see your local subsidiary Support site.

    Wednesday, March 26, 2008 1:54 AM
    Moderator
  • i have teh same problem...did you ever find out to eliminate this problem...if so, please email me at bwchambers@charter.net how to get rid of this..it is driving me crazy...thanks..Bruce

     

    Monday, March 31, 2008 3:38 PM
  • I too need to get rid of this.  I did the uninstall but I still get the pop-ups and can't get rid of them.  Please help me.

    Saturday, April 5, 2008 4:33 AM
  •  

    Try the use of Spybot (it's free) n then use a good rootkit remover. Hijack This is another good freebee n  forums of people to help you use it
    Saturday, April 5, 2008 4:41 AM
  • I ran the full scan at microsoft online safety scanner, rebooted my computer,  and it got rid of xp antirus and thank God no more popups...Below are steps that I used.....They were driving me nuts...thanks to all......Bruce

     

    To resolve the issue, please try our Online Safety Scanner. Here are the detailed steps:

     

    1. Use Internet Explorer and browse to http://safety.live.com

    2. Click the "Full Service Scan" button to start the scan.

     

    Note: Depending on the amount of data on your machine this Scan could take anywhere from thirty minutes to over an hour. Your patience is highly appreciated.

     

    3. When the scan is complete, please reboot your computer.

     

    Saturday, April 5, 2008 3:59 PM
  • what is a good rootkit remover?

    Saturday, April 5, 2008 4:01 PM
  •  

    Sassy,

     

    I did the following and got rid of xp antivirus popups...be sure to reboot your computer after the scan...hope this helps...

     

    To resolve the issue, please try our Online Safety Scanner. Here are the detailed steps:

     

    1. Use Internet Explorer and browse to http://safety.live.com

    2. Click the "Full Service Scan" button to start the scan.

     

    Note: Depending on the amount of data on your machine this Scan could take anywhere from thirty minutes to over an hour. Your patience is highly appreciated.

     

    3. When the scan is complete, please reboot your computer.

    Saturday, April 5, 2008 4:15 PM
  • i have spybot and it is good..

     

    what is a good rootkit remover...thanks

    Saturday, April 5, 2008 4:17 PM
  •  

    What is rootkit? - a definition from Whatis.com - see also: rootkits
    A rootkit is a collection of tools (programs) that enables administrator-level access to a computer or computer network.
    Sunday, April 6, 2008 6:17 AM
  • Well, I hate to report.......XP antivirus came back and popups as bad as before.....How do you get rid of this.....I ran online safety scanner, AVG, Spybot, and still have XP antivirus on my computer....this is driving me nutty.....Help!!!!!!!!

     

    Bruce

    bwchambers@charter.net

    Monday, April 7, 2008 3:03 PM
  • If you are using Windows Live OneCare and you have been infected, but OneCare did not detect or cannot remove the malware, please contact support to report this and for help with removal.

    How to reach support (FAQ) - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

     

    If  you are not using Windows Live OneCare, you are off topic for this forum. This is not a general forum for viruses, spyware, or Windows Help. For help with spyware issues, you may want to try the forums here: 

    http://aumha.net/ For help with virus removal, contact the maker of your Antivirus program.

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx for details. For international information, see your local subsidiary Support site.

     

    Monday, April 7, 2008 4:37 PM
    Moderator
  • THIS IS WHAT I DID

    wish I knew where these guys are man boom!

    1. Print out these instructions as we will need to close every window that is open later in the fix.


    2. Next, please reboot your computer into Safe Mode by doing the following:

      • Restart your computer

      • After hearing your computer beep once during startup, but before the Windows icon appears, press F8.

      • Instead of Windows loading as normal, a menu should appear

      • Select the first option, to run Windows in Safe Mode.

      • Login as a user with administrator privileges.

    3. When your computer has started in safe mode, and you see the Safe Mode by doing the following:

      • Restart your computer

      • After hearing your computer beep once during startup, but before the Windows icon appears, press F8.

      • Instead of Windows loading as normal, a menu should appear

      • Select the first option, to run Windows in Safe Mode.

      • Login as a user with administrator privileges.

    4. When your computer has started in safe mode, and you see the desktop, continue with the rest of the instructions.

    5. Click on the Start button and then select the Run option.

    6. In the Open: field type C:\Program Files\ and then press the OK button.

    7. When the folder appears, if it says These files are hidden, click on the Show the contents of this folder option.

    8. When the C:\Program Files\ folder opens, look through the list of folders and when you find the folder named XPAntivirus left-click on it once so it becomes highlighted.

    9. Then hit the Delete button on your keyboard and when it asks if you are you want to delete the folder, click on the Yes button with your mouse.

    10. When the folder is deleted, reboot your computer back to normal mode.



     

    Tuesday, April 8, 2008 5:27 AM
  • Hi Shecut,

     

    I did exactly what you instructed to rid myself of xp antivirus, rebooted my computer, and boom, xp antivirus program was deleted.

     

    Your instructions were precise and i thanks you so much!!!   how can i prevent it from ever getting back on my computer.

     

    Again, i want to thank you so much for taking the time to email me and helping me out!

     

    I am so grateful to you....Bruce

    Wednesday, April 9, 2008 2:37 AM
  • Bruce, do you remember how you picked this up?  I haven't gotten one of these rogue apps on my computer yet.  I am aware of them but assumed they are installed by banners on websites that say something like "WARNING--we have detected spyware on your computer!  Click here to clean the spyware" which results in having one of the rogue apps installed.

     

    A good source that keeps an updated list on all these types of programs is at MalwareBytes.org.  Right now the count is 444

     

    http://www.malwarebytes.org/roguenet.php

    Wednesday, April 9, 2008 11:12 PM
  • Mitch, I have no idea how I picked the xp antivirus up....It just started popping up one day...and it will drive you nuts....I used the instructions by shecut and got rid of it...you have to delete the program in safe mode becuase it will not delete otherwise...by the way what is the website you listed >>

    http://www.malwarebytes.org/roguenet.php  thanks...Bruce

    Thursday, April 10, 2008 2:47 AM
  • That is a site that sells an antimalware product of it's own.  I have never used it however.  It is the only place I know of that keeps an updated rogue apps list.  There is another site, SpywareWarrior, that also listed them but it has not been updated since early last year.

     

    My SysAdmin at work had to clean one of those apps out of a client a couple of weeks ago.  It liked to have drove him nuts as well, lol.

     

    I was just curious about how you got that thing on your computer.  I don't think I have anything to worry about because of UAC/Protected mode in Vista.

     

    Anyway, glad you was able to rid yourself of it Smile

     

    Thursday, April 10, 2008 3:49 AM
  • Midway 40....  I was infected at startup... not paying attention, a msg bubble appeared saying that I was infected by several malware viruses and I should run a virus scan, xpantivirus2008.  Thinking that it was a windows security alert - quite common on startup - I ran the scan... BIG MISTAKE!!!!!  The scan told me that I had more than 90 infections and that if I bought the cleaner program, I could rid myself of them all.....  Meanwhile, windows signaled me that it did not recognize the source..... hmmmmmm... was that a clue?  So, I didn't buy the program and sent off a e-mail to msn inquiring about xpantivirus.  Of course, they responded that the program was not theirs but malware itself.....  After that the endless pop-ups began.  I t took me two weeks and endless hours to get rid of it.....  using another commercial program I purchased from ad ad on msn or hotmail.....  they evidently updfate their virus lists twice a week and sent updates.....  the first attempted scan detected several places in the c drive that the program installed itself and deleted it.  But, the pop-ups continued...  2 scans (and 2 updates) later, the remove worked and no problems after.  Good luck!

    Thursday, April 10, 2008 1:00 PM
  • thanks Mitch!

    Thursday, April 10, 2008 1:28 PM
  • Avalanche, that reminds me of something that happened here at work last summer.  A co-worker came up to me and asked me to look at her computer in which a popup appeared.  When I first looked at it I thought it was just a Windows Update notification but I noticed that the shield was red instead of yellow and the background of the balloon was an off-white.  I cancelled the update request and then ran scans which found a spyware that installs a rogue app (can't remember the name of it now) when the "update" is approved.  This is the only way I know of on how these things get installed--through deception.

     

    Anyway, as in all events in life, we are now wiser from these experiences.

    Thursday, April 10, 2008 5:28 PM
  •  

    I'd like to find the creater of that monster!!!
    Thursday, April 10, 2008 5:33 PM
  •  

    Actually this is not a virus program but a virus... or trojan... more info is available here http://www.2-spyware.com/remove-xpantivirus.html?gclid=CIWO7_nM65ECFQ7GGgodE2v3wQ

    I now have this monster on my machine so will be doing all of the suggested things to remove it.

    Thanks to all for your input. I hope microsoft goes after these people, this program mimics XP and microsoft logo colors and shapes and even blocks my msn mcafee virus and firewall programs. They popped up but while I was reading what they were telling me this thing downloaded by itself. Wish me luck, thanks. ma

    Thursday, April 10, 2008 7:05 PM
  • can you tell me how to get rid of the xpantivirus 2008 that keeps popping up on my work computer?

    Thursday, April 10, 2008 7:46 PM
  •  

    shecut's post seems to be the answer your looking for
    Thursday, April 10, 2008 11:26 PM
  • How can I et rid of XP Atinvirus 2008, no matter what I do it keeps poping up in my computer every 2 minutes, How cn I completely delete it?

    Please Help!!!!

     

    Wednesday, April 16, 2008 11:09 AM
  •  

    If you are using Windows Live OneCare and you have been infected, but OneCare did not detect or cannot remove the malware, please contact support to report this and for help with removal.

    How to reach support (FAQ) - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

     

    If  you are not using Windows Live OneCare, you are off topic for this forum. This is not a general forum for viruses, spyware, or Windows Help. For help with spyware issues, you may want to try the forums here: 

    http://aumha.net/ For help with virus removal, contact the maker of your Antivirus program.

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx for details. For international information, see your local subsidiary Support site.

     

    Wednesday, April 16, 2008 6:17 PM
    Moderator
  •  

    help me please need to remove xp anitvirus from compuiter

     

    Sunday, April 20, 2008 6:37 PM
  • If you are not using Windows Live One Care you are off topic for this forum. If you are using One Care please contact support. How to reach support - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

    If you are not using One Care try this - http://www.lancelhoff.com/2008/02/22/how-to-remove-xp-antivirus-protection/

    Monday, April 21, 2008 5:17 AM
    Moderator
  • How do I get ride of this xp anitvirus 2008 from my computer

    Monday, April 21, 2008 1:37 PM
  •  colvillegeorge wrote:

    How do I get ride of this xp anitvirus 2008 from my computer

    If you are using Windows Live OneCare and you have been infected, but OneCare did not detect or cannot remove the malware, please contact support to report this and for help with removal.

    How to reach support (FAQ) - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

     

    If  you are not using Windows Live OneCare, you are off topic for this forum. This is not a general forum for viruses, spyware, or Windows Help. For help with spyware issues, you may want to try the forums here: 

    http://aumha.net/ For help with virus removal, contact the maker of your Antivirus program.

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx for details. For international information, see your local subsidiary Support site.

    Monday, April 21, 2008 4:09 PM
    Moderator
  •  

    Read shecut's post
    Monday, April 21, 2008 10:54 PM
  • My computer just got infected with this, I'm in the border of a heart attack  Hellllp!!!!  How do I deal with thi???

    Saturday, April 26, 2008 1:15 PM
  •  

    i have had the XPAntiVirus popup come up multiple times; however i have hit Alt+F4 or the close button in the corner. Am i still possibly infected?
    Saturday, April 26, 2008 6:34 PM
  • I had the same problem all I did was to scan using  my AVG free virus program it came up with  3   XP Pantivirus 2008  I then put them in the Vault and then deleted them hope this helps any one who has AVG free

     Gary

     

    Thursday, May 1, 2008 11:33 AM
  •  

    How do I get my 1care to detect and get rid of this anoying antivirus 2008?
    Saturday, May 10, 2008 3:52 AM
  • You can use the removal instructions here -  http://www.bleepingcomputer.com/malware-removal/antivirus-2008

    or you can contact support for help with removal. How to reach support - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

     

    Saturday, May 10, 2008 4:43 AM
    Moderator
  • dear shecut

    did exactly as you reccomended and it worked!  Mcafee scanned for spyware malware virus etc and after three attempts and several hours the pop ups were still there. Thanks to you they are gone this a.m. i received this antivirus 2008 warning pop up while surfing goodyear tires in new hampshire and specifically began this malidy when I clicked on B.J.'s tire warehouse in Lebanon N.H.  Apparently their website carries this scam/ spyware... I never did get to see B.J.'s website as my screen was inundated with pop ups and warnings. Disguised as a windows update ( even appearing in the bottom right toolbar sharing windows security update shield and appearing identical I did run the program only to find it was not digitally signed by microsoft... but too late. this caused me days of delay and an immediate purchase of all Mcafee security measures but alas they had heard of is on their site advisor and knew it to be fake, but could not remove it. In retrospect (to those who can discern) I noticed after the fact that many of the "products" claims were misspelled e.g  viruses had two ss and trojan was spelled troyjan.... a clue that it is probably being sent and produced by an idiot. or perhaps a group of them.  nevertheless THANK YOU so very much I'm going to shop for tires again now but I'm going to get in the car and drive there it is less headache.

       ps after speaking with my much more savvy son in philadelphia, and explaining to him about the error of running this program he pointed out to me that for the promised one time $ 49.95 fee where they would remove all 44 infections, (at a savings of more than thirty dollars) according to them, after all they were not going to really remove anything, as the site is fake to begin with and so are the viruses that they claim to have found in their scan, He pointed out for $ 49.95 which tey might collect for doing nothing, but more importantly they would now have your credit card account information! His advice, don't even touch the pop up it is fake, all of it is fake including the alliged viruses.. in fact the pop-up is the virus! follow this persons advice it works on windows XP home version. THANKS AGAIN   Kevin.
    Monday, May 19, 2008 4:39 PM
  • This worked! This is the first thing I tried after dealing with this stinkin' thing for a couple of days. Thanks shecut! You saved me $30 (I was pondering SpyHunter). I did d/l another free software from another poster to this thread, but this worked and I now have my sanity restored, along with my computer.

    BTW, just a note: this virus hijacks your computer's ability to load IE. Use an alternate browser to access the Internet to find information if your computer has this stupid thing. I recommend Mozilla.


    Thursday, May 22, 2008 10:21 PM
  • this is absolutely insane-I cant get rid of Antivirus 2008-do i need to buy a new computer-it wont be a pc-how do i get rid of this malicious thing???

    Friday, May 23, 2008 5:40 PM
  •  clickandco wrote:

    this is absolutely insane-I cant get rid of Antivirus 2008-do i need to buy a new computer-it wont be a pc-how do i get rid of this malicious thing???

    Did you read the rest of the posts in this thread? There are a number of possible solutions.

    If  you are not using Windows Live OneCare, you are off topic for this forum. This is not a general forum for viruses, spyware, or Windows Help. For help with spyware issues, you may want to try the forums here: 

    http://aumha.net/ For help with virus removal, contact the maker of your Antivirus program.

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx for details. For international information, see your local subsidiary Support site.

    Friday, May 23, 2008 6:47 PM
    Moderator
  • Mitch -

     

    Don't know about Bruce or anyone else, but I got it over the weekend.  Did a google for Folgers coffee coupon.  First on list was a site with the word Pronto in the name.  Clicked on it and there was the "Warning".

     

    Deleted it using the safe mode method mentioned here.

     

    Hope you can catch who/where ever this is coming from - a royal pain.

     

    Thanks!

    Tuesday, May 27, 2008 11:06 PM
  • Thankx shecut for posting these instructions.

     

    I was able to remove the *** with no problem.

     

    I'm not the most computer knowledgable but I can handle the basics.

     

    Thankx again.

    Thursday, May 29, 2008 4:34 PM
  • Hi

     

    Followed your easy to follow instructions and it worked to a T

    Fantastic help from a great source

    I was that close to buying aclean up programme.

     

    Once again

    a BIG thanks

    Tuesday, June 3, 2008 8:43 PM
  •  

    I have the same problem. Have been fighting with it for about a week. Finally, found you guys. Am going to try shecut's instructions. wish me luck. it's driving me crazy, as well, Bruce.

    thanx to everyone for all the info.

    Thursday, June 5, 2008 4:21 PM
  • I started getting this xp antivirus message yesterday.  The only way I can get rid of it is by running Microsoft's Malicious Software Removal Tool which is a free download on the Microsoft website.  The only problem is that after you shut your computer down and turn it back on, it begins all over again.  Xp antivirus is a program located on the C drive in program files, but it won't let me delete it.  If anyone figures out how to delete it, please let me know.

    Monday, June 9, 2008 5:21 PM
  • Michelemcrb,

     

    Did you read any of the postings in this thread or just add to it?

     

    shecut posted a solution, it works, people have posted their 'thank yous".

     

    Go back thru the posts and you will find it.

     

    Monday, June 9, 2008 8:16 PM
  • Thanks for the info.  I read a few of the postings, but didn't go back far enough.  Anyway, I managed to get rid of it, so thanks again!

     

    Michele

    Monday, June 9, 2008 11:23 PM
  • I have the same problem......Have you found out how to get rid of this?

     

    Thank you

    Karen

    Friday, June 13, 2008 3:11 PM
  •  Karen Seder wrote:

    I have the same problem......Have you found out how to get rid of this?

     

    Thank you

    Karen

    If  you are not using Windows Live OneCare, you are off topic for this forum. This is not a general forum for viruses, spyware, or Windows Help. For help with spyware issues, you may want to try the forums here: 

    http://aumha.net/ For help with virus removal, contact the maker of your Antivirus program.

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx for details. For international information, see your local subsidiary Support site.

     

    However, this lengthy, mostly off topic thread contains the solution to removing this threat. I suggest reading the thread.

    -steve

    Friday, June 13, 2008 3:33 PM
    Moderator
  • Hi Karen,

     

    If you look back to April 8th, Shecut posted directions of how you can get this virus off of your computer.  When I tried though, I didn't get the start button at the bottom of my screen, so I had to access the C drive through the recycle bin folder.

     

    Good luck!

     

    Michele

    Friday, June 13, 2008 4:34 PM
  • Sassy,

     

    Did it work for you?  It didn't for me and I keep getting the pop up.

     

    Needless to say I haven't gotten anything done today trying to get this off my computer.

     

    Please respond to aspenroofing@aol.com

     

    Thank you

    Friday, June 13, 2008 7:08 PM
  • Karen, please read my post following your original to this thread.

    Contact the maker of your antivirus program for help or call the number I provided in that reply for help from Microsoft if you are in North America.

    -steve

     

    Saturday, June 14, 2008 12:09 AM
    Moderator
  • Please be patient...not that pc savy.....Windows live care download their latest antivirus 2008, the free version or it is possibly the trial version.  My question is where on my pc do I find the "exe document " that would show the license for this product?  It says it is a trial version in the box that "pops up" where one is to enter a license number, but when I click on it, it takes me to windows & wants me to purchase it.  How do I bypass this?  I have tried to remove it but it just keeps coming back on my pc.  Any suggestions would be most helpful.

    Saturday, June 14, 2008 10:03 PM
  • DFDRUID:

     

    If you go back to the second page of this thread, you will see shecut's instructions on how to remove this Trojan Horse.

     

    IT WORKS BECAUSE I WAS ONE WHO FOLLOWED THE POSTED INSTRUCTIONS AND HAVEN'T HAD A PROLEM SINCE.

     

    I suggest anyone else who posts to this thread, to go back and read the posted replies. Save youself the time, trouble, and frustration of asking a question for the hundredth time that has already been answered. 

    Saturday, June 14, 2008 11:16 PM
  • i need it is attacking my computer

    Sunday, June 15, 2008 10:28 PM
  • I went back to shecut's suggestions and they didn't work as i can't read the screen when i push F8 when i restart,it is all scrambled.Been looking for another way to start in safemode.Any ideas?

    Monday, June 16, 2008 11:54 PM
  • It didn't work for me because when i restart my computer and push F8 the screen is all scrambled and i can't read anything.Any ideas?Any other way to get to safemode?

    Tuesday, June 17, 2008 12:00 AM
  • After hours and hours of research and trying the hundreds of different suggestions posted by people I finally got rid of it using spybot search and destroy.

     

    I wasn't able to unregister the dll files as many suggested.  I removed all of the .exe files but no matter how many times I deleted it from the registry it came back.

     

    I downloaded Spybot.  I had to run it several times and restart each time for it to find and cleanup everything.  I also had to completely disconnect from the internet.  If I didn't every time I restarted it came back.

     

    I am VERY VERY disappointed that this situation has been known about since April and OneCare has yet to fix it.  Not only do I find it ridiculous that they have not taken top priority to fix a problem that is posing as a microsoft issue but that a FREE program got rid of it and not the one I have paid for!

    Tuesday, June 17, 2008 2:20 AM
  • Follow these steps:

     

    1) Click on start

    2) Open Run

    3) Type in "msconfig"

    4) Go to the "BOOT.INI" tab

    5) Check "/SAFEBOOT"

    6) Click "Apply"

    7) Hit "OK"

    8) Reset the computer

     

     

    Note: If you're using Windows VISTA, you need to run the MSCONFIG in elevated mode.

     

    To run the computer in elevated mode, check this link: How to use the elevated mode in Windows VISTA

    Tuesday, June 17, 2008 5:38 PM
  •  

    Tuesday, June 17, 2008 6:03 PM
  • I merged your post into the thread discussing this malware.

    If you are using Windows Live OneCare and you have been infected, but OneCare did not detect or cannot remove the malware, please contact support to report this and for help with removal.

    How to reach support (FAQ) - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

     

    If  you are not using Windows Live OneCare, you are off topic for this forum. This is not a general forum for viruses, spyware, or Windows Help. For help with spyware issues, you may want to try the forums here: 

    http://aumha.net/ For help with virus removal, contact the maker of your Antivirus program.

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx for details. For international information, see your local subsidiary Support site.

     

    -steve
    Tuesday, June 17, 2008 6:14 PM
    Moderator
  • 1.START 2. RUN 3.PRINT MSCONFIG IN RUN PROGRAM. 4. GO TO START-UP AND UNCHECK XPA. 4.  APPLY AND CLOSE. THAT WILL STOP XPA FROM EGAGING UPON START-UP. SO NOW YOU CAN DELETE!! FIRST GO TO PROGAM FILES AND DELETE XPA. THEN GO TO ADD REMOVE AND FINISH DELETING WINDOWS XPA ANTI-VIRUS. THIS WILL WORK FOR YOU, I HAVE DONE IT SEVERAL TIMES FOR FOLKS. ENJOY YOUR COMPUTER!!!!
    Wednesday, June 18, 2008 6:22 PM
  • I got this finally off by going through my CA Security Center.

     

    Thank you for your help all the fixes suggested didn't work though and the CA Security Spyware removed it.

    Thursday, June 19, 2008 4:14 PM
  • Antivirus xp 2008 showed up on my computer.  Nothing seems to be able to remove it  any suggestions

     

    Sunday, June 22, 2008 3:18 PM
  • I also was infected with Antivirus XP 2008 as well as others over the weekend. I went through the string of information on this site and decided to do the free full computer scan via Live OneCare. It worked on all the other viruses/adware, but didn't work on Antivirus XP 2008. Most of the previous messages call it XP Antivirus 2008, but it appears as Antivirus XP 2008 on my computer. I wonder if that has something to do with not being able to clean it. Does anybody else have this problem?

     

    Monday, June 23, 2008 2:00 PM
  • This is how I got rid of Antivirus XP 2008.  It is different than the XP Antivirus 2008 most sites refer to.

     

    First you need to stop the program from loading on startup.  This is what you do to stop it:

     

    Start, run

    Type msconfig

    Go to Startup tab

    Uncheck lphc35dj0e1an
    Uncheck rhc75dj0e1an

     

    Click apply, then ok
    Restart computer

     

    Then you need to delete the main files this program uses.  Delete the following files:

    C:\windows\system32\lphc35dj0e1an.exe
    C:\program files\rhc75dj0e1an\rhc75dj0e1an.exe

     

    This should remove the program from your system but you probably still have a warning message displayed as your wallpaper in Windows and the virus removed the ability to change the wallpaper or your desktop settings.


    To restore ability to change your desktop settings and select a different wallpaper and screen saver do the following:

     

    Start, run

    type Gpedit.msc

    Navigate to User configuration, Administrative Templates, Control Panel, Display

    Right click on Remove Display in Control Panel
    Click on Properties and select Disabled


    Do the same steps to change the following attributes to disabled:

    Hide Desktop Tab
    Prevent changing wallpaper
    Hide Apperance and Themes tab
    Hide Settings tab
    Hide Screen Saver tab

    You should now be able to use your computer normally and change the wallpaper to

    something other than the warning message Antivirus XP 2008 set it to.

    Monday, June 23, 2008 5:33 PM
  • try 2 unstall it wont go off .ran a scan check no files infected

    Wednesday, June 25, 2008 8:39 PM
  •  

    Then you need to delete the main files this program uses.  Delete the following files:

    C:\windows\system32\lphc35dj0e1an.exe
    C:\program files\rhc75dj0e1an\rhc75dj0e1an.exe

     

     

    THIS IS THE ONE THING I CAN'T FIGURE OUT HOW TO DO. CAN ANYONE HELP???

    Thursday, June 26, 2008 6:35 AM
  • SHECUT is correct on removing Antivirus XP 2008. There is a difference in XP antivirus and Antivirus XP 2008. Steps to remove one will not remove others. I have the virus under controll now but it made a mess of my PC. Print spool has stopped, windows updates have stopped, settings are missing. When I try to start print spool I get error that tells I cant start while in Safe Mode. Anyone know how to fix this? Of corse i'm not still in safe mode.

     

    Thursday, June 26, 2008 5:33 PM
  • I am having this problem. I have followed both sets of directions one sent by shecut and the other that was loaded today. I can't get rid of it.

     

    If there are any other suggestions please advise

     

    Thanks

     

    McDuke

    Thursday, June 26, 2008 6:31 PM
  • REMINDER

    If you are using Windows Live OneCare and you have been infected, but OneCare did not detect or cannot remove the malware, please contact support to report this and for help with removal.

    How to reach support (FAQ) - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

     

    If  you are not using Windows Live OneCare, you are off topic for this forum.

     

    This is not a general forum for viruses, spyware, or Windows Help.

     

    For help with spyware issues, you may want to try the forums here: 

    http://aumha.net/

     

    For help with virus removal, contact the maker of your Antivirus program.

     

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx for details. For international information, see your local subsidiary Support site.

     

    -steve
    Thursday, June 26, 2008 7:13 PM
    Moderator
  • I tried the link, h
    http://www.xp-vista.com/spyware-removal/xp-antivirus-2008-removal-instructions-xp-antivirus-2008 

     

     

    however I believe this F*ck software changes its file name so you are not easy to find it by following this  manual instruction.

     

    This is what I did and successful

     

    Reboot in Safe Mode.

     

    You should see this Antivirus XP08 on your desktop.

    Right click on the icon

     

    then click on "find target."

     

    Now you will see where is the program has been created.

     

    Delet the whole folder.

     

    Restore your computer to a earlier time

     

    Restart your computer

     

    you should see your computer is normal now, but

     

    Run full scan with whatever you have.

     

     

     

    Let me know if this works for you.

    Thursday, June 26, 2008 10:20 PM
  • I removed this program from my dad's computer last week following shecut's instructions but didn't locate the program right away when I was searching for it. We are running XP but my dad is running Vista. So with that being the case I was looking for the same program icon/listing name on his system. It was different from mine though. It was listed as VAP instead. (If I remember right?) I'd guess it's short for Vista Antivirus Program most likely. I was able to remove it from his system also. Thankx again shecut. 

    Thursday, June 26, 2008 11:46 PM
  • Let me know if you are successful?

    I plugged in my wifes L/top to acess the I/net & Vavooom! It's a scam as they ask for all your usual details, which unfortunately, she gave. We contacted our bank who are now aware of it but holding $100+ against our account. She thought it was only a years sub of $49.00. What fooled her was the look alike MS logo tucked away in the corner, then the pop up screens showing you that its doing a scan/trojan log in,then boom! The screen runs thru a loop and you are stuck. Unplug as soon as you see it!

     Go Bill Gates, spend your retirement on catching these crooks-I'll volunteer if you pay me[;-) ! Any suggestions MSN as to how we remove it?????

    THx

    Friday, June 27, 2008 1:05 AM
  •  

    Thanks so much shecut.  This spyware stuff was starting to give me a headache.  I almost picked up my laptop and threw it.  But i quickly realized that wouldn't do anything but create a bigger problem because I would have been without a computer altogether.  But thanks for the information on how to get rid of that nuisance of a program.  I mean everytime i typed in a webpage, it asked be about that darn virus program.  But, I followed your instructions and PRAISE GOD, it's not there anymore. HALLELUJAH!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    Friday, June 27, 2008 8:58 PM
  • I had the same problem and I run a program called Super Ad Blocker, it got rid of the Antivirus xp 2008. Try it. I hope you get rid of it. good Luck
    Saturday, June 28, 2008 2:49 AM
  • from the advice i took here, when i restarted my PC, all icons are giving me an "Open With" box whenever i click into them, how can I fix this??? HELP!!!!!!!!!!!

    Saturday, June 28, 2008 5:31 AM
  • I was able to get rid of most of the Antivirus XP 2008 from my lapttop. But I am running Windows XP home on this laptop and do not have the Gpedit.msc on this operating system. I can't get to the display data on the computer to disable them. Have a prestartup screen that lists data about viruses and the message about the need to get virus protection on my display screen, also the restore calendar is stuck on month of June.

     

     Any thoughts on how to get to user configuration without Gpedit.msc. Thanks

     

    Saturday, June 28, 2008 9:01 PM
  • Funny thing is, I have tried two or three times to get through to support and it says there are "technical difficulties" and to "try back later."

     

    Sunday, June 29, 2008 1:53 AM
  • I had this problem very recently but managed to get rid of it completely by using the revo uninstaller software. Please go to www.revouninstaller.com and download their software. When running it, it is advisable to use the advanced mode option for unistalling. This will do a thorough uninstall by checking for all leftover tracks and the bits and pieces in the registry, files and folders. Please follow the instructions carefully and one should not have a problem.

     

    I personally find revo uninstaller one of the finest programs to accomplish  a detailed and complete unistall of software and programs. Post a reply and let know whether it worked for you. So with any others who may want to try this out.

    Sunday, June 29, 2008 12:06 PM
  • I feel your pain.......I have iolo antivirus and it didn't do diddly either. I had to do a hard recovery after I saved all my stuff, I located the virus myself attached to WINDOWS\FONTS\'\ and it was hidden. Xp windows 2008 antivirus kept popping up

    Monday, June 30, 2008 4:06 AM
  • I spent about 6 hours on the phone with my dad trying to get it off of one of his computers. Unfortunately, shecut's directions didn't work. It definitely is changing it's name as it goes along. We tried some of the other suggestions but so far he seems to be clean after downloading and running SpyBot Search & Destroy. It is free.

    If you would like to see the blow by blow account (with pictures of the damn thing in action), take a look at these posts:

    XP Antivirus 2008 and antivirus 2009 are evil!

    XP Antivirus 2008 and antivirus 2009 - Round 2!

    Oh yeah, in addition to trying out SpyBot, please switch to Firefox (from Internet Explorer). Or at least have it installed as a secondary browser. It is a much safer browser, and comes in really handy for when IE has been rendered useless.

    Good luck everyone!

    Matt
    Monday, June 30, 2008 12:16 PM
  • OK- I have succesfully removed part of the virus, but when I get to the "gpedit.msc in run" it says no such file. Any ideas? Thanks so much for your help!

    Monday, June 30, 2008 10:20 PM
  •  pineapple_queen wrote:

    OK- I have succesfully removed part of the virus, but when I get to the "gpedit.msc in run" it says no such file. Any ideas? Thanks so much for your help!

     

    same problem here. i think i've gotten rid of antivirus but have no gpedit function on my laptop. PLEASE help

    Monday, June 30, 2008 10:40 PM
  • Are you able to connect to the internet?

    Tuesday, July 1, 2008 12:41 AM
  •  pineapple_queen wrote:

    OK- I have succesfully removed part of the virus, but when I get to the "gpedit.msc in run" it says no such file. Any ideas? Thanks so much for your help!

    There is no gpedit.msc (The Group Policy Editor) in Windows XP Home edition.

     

    And, I will repeat - this forum is *not* general virus and spyware removal help.

    If you are using Windows Live OneCare and you have been infected, but OneCare did not detect or cannot remove the malware, please contact support to report this and for help with removal.

    How to reach support (FAQ) - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

     

    If  you are not using Windows Live OneCare, you are off topic for this forum. This is not a general forum for viruses, spyware, or Windows Help. For help with spyware issues, you may want to try the forums here: 

    http://aumha.net/ For help with virus removal, contact the maker of your Antivirus program.

    If you are in North America, you can call 866-727-2338 for help with virus and spyware infections. See http://www.microsoft.com/protect/support/default.mspx for details. For international information, see your local subsidiary Support site.

     

     

    -steve

    Tuesday, July 1, 2008 1:25 PM
    Moderator
  • Bruce,

    Your tip worked for me. I still have a couple issues. When viewing "all programs" the XP Antivirus 2008 application still appears. I have repeatedly tried to delete it with no success. Also when starting my computer I continue to receive a message on the screen which states:

    "Warning! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer"

    it also appears to have disabled my ability to change my desktop displays (pictures themes etc).

    Lastly as my computer sits idle after a couple minutes these bugs come on and appear to be eating the computer screen. All of these things seem to begin when the XP program downloaded.

    Any suggestions

    Tuesday, July 1, 2008 3:01 PM
  • I am now locking this thread.

    Please review the information above regarding the purpose of this forum and what to do if you are using OneCare and the PC has been infected. Do not start a new thread on this threat or it will be moved to the off topic folder.

    -steve

     

    Tuesday, July 1, 2008 3:27 PM
    Moderator