Spyware, viruses, & security forum: Help with Antivirus 2009 virus

First, Download MalwareBytes. If you can't download, use a friends computer to download the installer to a disk, thumb drive or external hard drive. I downloaded mine from Download.com. Once you have it on a disk or other removable storage device, rename the installer file and then transfer it to your desktop. Run the installer and if it doesn't launch the program, don't worry. Right click on the shortcut icon that it put on your desktop or in the quicklaunch bar if you use one, then click "properties". There, you will see "find target". Click the "find target" and you'll open the folder with "mbam.exe" in it. All you have to do is rename that file to anything you like and then launch it by double clicking it. When the program launches, don't bother updating, just run a quick scan not a full system scan, you can do that later. Remove the crap that it finds and reboot as it will suggest. On reboot it will finish removing any crap that's left. You may get a message that windows needs to restore files. I ignored this because I didn't have an actual Operating System disk. I simply rebooted and everything came up fine with no issues. (Try that at your own risk, I had no choice.) Once you're booted up again, launch MalwareBytes again and this time run the update. When it's updated, scan again and remove any remaining crud again. When that's done, run it one more time just to be sure. Antivirus 2009 should be eliminated from your system. You can run a full system scan if you want to.

Another thing, if you already have MalwareBytes on your pc and it won't launch like mine wouldn't first try renaming the executable and then launch and scan. If that doesn't work, then you may need to remove the old version of MalwareBytes and install from another source as I mentioned above. It doesn't usually hurt to try the most simple things first.

I hope I've been of some help. If you have anything to add or see some detail that I've left out or needs corrected, reply and add your comment here. I'm sure it will be appreciated.

Good luck to all.

I hope the Buttwipes who made that program (AV2009) see the inside of a jail sometime soon.

densmora..

Have a look at this report about Pandora Software. It's one of many. They're responsible for a lot of rogue programs. I'm sorry to say, I doubt you'll be getting your money back. Despite the empty folder, I'd highly suggest scanning with the following:

Download Malwarebytes ' Anti-Malware at Here or Here. Double-click on mbam-setup.exe to install the application.

* Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform Quick Scan, then click Scan.
* The scan may take some time to finish, so please be patient.
* When the scan is complete, click OK, then Show Results to view the results.
* Make sure that everything is checked, and click Remove Selected.
* When disinfection is completed, a log will open in Notepad and you may be prompted to restart (see Extra Note below).
* The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.

Extra Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.

Have a look at the below if you have any problems with the above:
http://www.bleepingcomputer.com/malware-removal/uninstall-antivirus-2009

If you find you have any further problems, please post back and you'll get the help you need...
Carol

gpoole..

You wrote:
'However, at startup I get two messages: Can't find yitujafe and also buvujano. I assume that is a good thing?'

You said you're getting these at "startup". I take that mean immediately after starting up your system. (??) Where is the alert coming from? A program you have installed? I wouldn't be so quick to say it's "a good thing". Are you experiencing any of your previous problems?

I would run Malwarebytes' Anti-Malware again. And also try scanning with SUPERAntiSpyware FREE Edition.

One other thing to try is an online scanner such as:
F-Secure Online Scanner.
You'll need to use Internet Explorer with Active X enabled, in order to run it.

Do you have anything like CCleaner installed? If not, I would run that too. The instructions are here.

Other than the fact that you posted in an Antivirus 2009 thread, we don't know anything about your (specific) problem. It makes it difficult to suggest something more specific. Hopefully, one of the above suggestions will help.

Carol

gpoole..

You never did mention exactly what your original problem was. Did you run the scans mentioned in my previous post? Were the scans clean? If not, what did the reports indicate?

Something you might check, only because some infected with Antivirus 2009, found the below to be a contributing factor to their problems. It's more of a shot in the dark, than anything else, at this point. The information and background you've given is "scant".

-Go to Start > Control Panel > System > Hardware > Device Manager > View > Show Hidden Devices.
-Scroll down to Non-plug and Play Drivers and click the plus icon to open those drivers.
-Then search for TDSSserv.sys
-IF it's there, right click on it, and select Disable. (NOT uninsatll)
-Reboot

Also, have a look at the entire page, to include the files listed at the bottom.
How to remove Antivirus 2009 (Uninstall Instructions)

In lieu of making any further suggestions, it would help to have a little more background information. To include the answers to the first questions asked.

Carol

Marty..

"I am looking for free antivirus programs for my laptop computer but, from the reviews I've read, they are missing important aspects or they slow down the computer or it won't boot up, etc... I am assuming there are no good free version (No free lunch, right?)"

If you're asking my opinion, I would say the above is not necessarily true. (There are some good "free lunches", in my opinion. It depends upon where you go to eat. And what you wish to eat. ) You specify some are "missing important aspects", but haven't mentioned what those missing aspects are. You also mentioned AVG "costs an arm and a leg". Am I to presume, the free version of AVG is missing some of what you're looking for?

Have you looked into Avast's free version? Unfortunately, I can't speak from experience, since I don't use Vista, nor have I tried Avast. That said, I've read of many satisfied Avast user's.

I ran a search for "Vista Anti-Virus" at our Windows Vista Forum, and came up with quite a few pages of threads, where user's have given their opinions of different A/V's. It may help.

Marty, I may not be the right person to ask, when it comes to "which is better/best". We all have different opinions of what "best" incorporates. A good example being, while you say some "aspects are missing", I may not feel those aspects are as important. (Whatever they may be) Additionally, you may feel a suite is important, while I've created my own suite, in that I've installed only an A/V and added separate applications to cover what might be in a suite. It all boils down to personal opinion.

Sorry I can't be of more help. You might consider posting in the Vista forum and see what results you get there.
Carol

the MBAM folder ( C:\Program Files\Malwarebytes' Anti-Malware) and rename the "mbam.exe" file within the folder? Doubleclick on the "renamed" file.

on XP, I went to Start, Help and Support, Restore Computer to Earlier Date and chose a date before the problem showed up. Walked away for several hours and when I returned all was OK. Good luck.

In "what" did you change the mbam.exe ? Can you find the "renamed" file in \Program Files\Malwarebytes' Anti-Malware ?

I installed antivirus 2009 and had some music still coming on my computer. The only way I could stop the music was to restore my computer to an earlier date and then the antivirus 2009 was removed.
I paid for it and an extra 15 dollars for the upgrades.

how do I get it back and if I can't how do I get my money back.

Richard L Armitage

Richard..

In your last sentence you asked, "how do I get it back and if I can't how do I get my money back", after having lost Antivirus 2009 when using System Restore. I just wanted to be sure you understood, you shouldn't want it back. Simply put, the program is a "scam". It's why you see so many posts in this thread (and other's), asking how to remove it. You might benefit from reading, "Anatomy of a Malware Scam".

As "Nosmo179" and other's suggested, try calling your credit card company (ASAP). Explain what happened, and see if there's any way they can help.

Best of luck..
Carol

you need to delete the internet temporary files and temp, %temp%, prefetch files from your computer.

I just had this pop-up issue since a few days ago. I've run a2square, symantec, ad-aware, bitdefender, and malwarebytes -- but to no success! If you managed to get rid of the issue, please let me know how to fix it. I googled for a while and got no results, it's just pure luck that I happened to read this thread AND read your post!

Thanks in advance! I appreciate any help -- I'm a bit frustrated at this thing.