windowsxp antispyware2009

[wasted]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:cvudnTkZuYf3-GLVnZ2dnUVZ_oLinZ2d@giganews.com...
> From: "wasted" <rubbish@xxnone.notreal.com>
>
>
> | Sorry - who is Bruce - and are you indicating he has software that will
> deal
> | with it.
>
> | My friend just tried downloading malwarebytes and couldn't
>
> | Thanks
>
> Bruce is on the MBAM team.
>
> As for your friend, the malware he has on his PC is probably blocking one
> or more of the
> MBAM download sites.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>
Thanks again - I'm going round there tomorrow with malwarebytes on a disk

[Buffalo]

wasted wrote:
> "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
> news:cvudnTkZuYf3-GLVnZ2dnUVZ_oLinZ2d@giganews.com...
>> From: "wasted" <rubbish@xxnone.notreal.com>
>>
>>
>>> Sorry - who is Bruce - and are you indicating he has software that
>>> will deal with it.
>>
>>> My friend just tried downloading malwarebytes and couldn't
>>
>>> Thanks
>>
>> Bruce is on the MBAM team.
>>
>> As for your friend, the malware he has on his PC is probably
>> blocking one or more of the
>> MBAM download sites.
>>
>> --
>> Dave
>> http://www.claymania.com/removal-trojan-adware.html
>> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>>
> Thanks again - I'm going round there tomorrow with malwarebytes on a
> disk

Be sure to have the very latest update.
Just a reminder.

[The Real Truth MVP]

Use my Remove-it software, it will remove that malware from your system and
my site is not blocked from downloading. Choose yes for all options when
prompted. Download it here http://pcbutts1.com/downloads/tools/tools.htm

--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/




"wasted" <rubbish@xxnone.notreal.com> wrote in message
news:taqdnZ2DuN644GLVnZ2dnUVZ8rudnZ2d@posted.plusn et...
>
>
> "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
> news:cvudnTkZuYf3-GLVnZ2dnUVZ_oLinZ2d@giganews.com...
>> From: "wasted" <rubbish@xxnone.notreal.com>
>>
>>
>> | Sorry - who is Bruce - and are you indicating he has software that will
>> deal
>> | with it.
>>
>> | My friend just tried downloading malwarebytes and couldn't
>>
>> | Thanks
>>
>> Bruce is on the MBAM team.
>>
>> As for your friend, the malware he has on his PC is probably blocking one
>> or more of the
>> MBAM download sites.
>>
>> --
>> Dave
>> http://www.claymania.com/removal-trojan-adware.html
>> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>>
> Thanks again - I'm going round there tomorrow with malwarebytes on a disk

[Dustin Cook]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in
newsL-dnYzeQazN02LVnZ2dnUVZ_jKdnZ2d@giganews.com:

> From: "Dustin Cook" <bughunter.dustin@gmail.com>
>
>
>| Not yet, haven't had time. I've seen 4 or 5 different variations of
>| it so far. Bruce has run into it several times now as well. I'll
>| check with him
>
> Bruce indicated he's added detections for it.
>

We have detections for the ones we have seen. We expect the author(s) to
mutate it again at any time now.


--
Regards,
Dustin Cook, Author of BugHunter
BugHunter - http://bughunter.it-mate.co.uk
MalwareBytes - http://www.malwarebytes.org

[wasted]

"wasted" <rubbish@xxnone.notreal.com> wrote in message
news:0YOdneiTtYNDpWPVnZ2dnUVZ8v-dnZ2d@posted.plusnet...
> Hi - a friend has been hit with this and is having trouble running any
> scanners/fixers (Superantispyware won't run amongst many others)
>
> I'm planning to go over armed with whatever - can anyone recommend which
> software I can download and take - preferably free - some stuff he was
> trying - like spynomore seemed to be detecting everything, but wanted a
> fee before fixing.
>
> Thanks
Thanks to all - I downloaded Malwarebytes on my computer, saved to memory
stick and ran it on friend's computer - had to run it twice but seems to
have cleared it. A pleasur doing business with you!

[rjdriver]

"wasted" <rubbish@xxnone.notreal.com> wrote in message
news:0YOdneiTtYNDpWPVnZ2dnUVZ8v-dnZ2d@posted.plusnet...
> Hi - a friend has been hit with this and is having trouble running any
> scanners/fixers (Superantispyware won't run amongst many others)
>
> I'm planning to go over armed with whatever - can anyone recommend which
> software I can download and take - preferably free - some stuff he was
> trying - like spynomore seemed to be detecting everything, but wanted a
> fee before fixing.
>
> Thanks

Not sure if this will work for you, but I got the 2008 version of this off
my neighbors system with a simple system restore. Actually, it wasn't that
simple. All the normal routes to system restore were deactivated by the
virus, but the command prompt worked.

1. Restart in safe mode with command prompt.
2. If login required, sign in an administrator account.
3. Type this at the command prompt
%systemroot%\system32\restore\rstrui.exe
4. Press ENTER and follow the instructions. You may see "virus warning"s
even within the system restore GUI, but they are just to scare you. Proceed
with the system restore as instructed.


Bob

[David H. Lipman]

From: "rjdriver" <rjdriversNOSPAM@cox.net>


| "wasted" <rubbish@xxnone.notreal.com> wrote in message
| news:0YOdneiTtYNDpWPVnZ2dnUVZ8v-dnZ2d@posted.plusnet...
>> Hi - a friend has been hit with this and is having trouble running any
>> scanners/fixers (Superantispyware won't run amongst many others)

>> I'm planning to go over armed with whatever - can anyone recommend which
>> software I can download and take - preferably free - some stuff he was
>> trying - like spynomore seemed to be detecting everything, but wanted a
>> fee before fixing.

>> Thanks

| Not sure if this will work for you, but I got the 2008 version of this off
| my neighbors system with a simple system restore. Actually, it wasn't that
| simple. All the normal routes to system restore were deactivated by the
| virus, but the command prompt worked.

| 1. Restart in safe mode with command prompt.
| 2. If login required, sign in an administrator account.
| 3. Type this at the command prompt
| %systemroot%\system32\restore\rstrui.exe
| 4. Press ENTER and follow the instructions. You may see "virus warning"s
| even within the system restore GUI, but they are just to scare you. Proceed
| with the system restore as instructed.


| Bob


What do you mean "virus warnings"

Do you mean the text; Virus Alert!

If yes, this is an alteration in the Registry with the Time and Date Stamp.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[rjdriver]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:Lb2dnbD9TKBHAp7UnZ2dnUVZ_szinZ2d@giganews.com ...
> From: "rjdriver" <rjdriversNOSPAM@cox.net>
>
>
> | "wasted" <rubbish@xxnone.notreal.com> wrote in message
> | news:0YOdneiTtYNDpWPVnZ2dnUVZ8v-dnZ2d@posted.plusnet...
>>> Hi - a friend has been hit with this and is having trouble running any
>>> scanners/fixers (Superantispyware won't run amongst many others)
>
>>> I'm planning to go over armed with whatever - can anyone recommend which
>>> software I can download and take - preferably free - some stuff he was
>>> trying - like spynomore seemed to be detecting everything, but wanted a
>>> fee before fixing.
>
>>> Thanks
>
> | Not sure if this will work for you, but I got the 2008 version of this
> off
> | my neighbors system with a simple system restore. Actually, it wasn't
> that
> | simple. All the normal routes to system restore were deactivated by the
> | virus, but the command prompt worked.
>
> | 1. Restart in safe mode with command prompt.
> | 2. If login required, sign in an administrator account.
> | 3. Type this at the command prompt
> | %systemroot%\system32\restore\rstrui.exe
> | 4. Press ENTER and follow the instructions. You may see "virus
> warning"s
> | even within the system restore GUI, but they are just to scare you.
> Proceed
> | with the system restore as instructed.
>
>
> | Bob
>
>
> What do you mean "virus warnings"
>
> Do you mean the text; Virus Alert!
>
> If yes, this is an alteration in the Registry with the Time and Date
> Stamp.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>
>

David, yes it might have been Virus Alert. It's been a few months since I
did this and I'm not sure of the exact wording.

From the bright red desktop background replacement, to the dire nature, and
frequent persistence of the pop up window messages, the virus warning phrase
in the task bar tray, and the Virus Alert should anyone manage to actually
get to the System Restore window, this nasty malware was geared to scare the
**** out of people. It worked on my neighbor quite well. The tone of dread
in her voice (My God, I've got a bad one this time!) when she called me on
the phone was quite real. I was expecting a long drawn out fight ending in
multiple file deletions from the Command Prompt, and was pleasantly
surprised when System Restore worked.


Bob

[David H. Lipman]

From: "rjdriver" <rjdriversNOSPAM@cox.net>



| David, yes it might have been Virus Alert. It's been a few months since I
| did this and I'm not sure of the exact wording.

| From the bright red desktop background replacement, to the dire nature, and
| frequent persistence of the pop up window messages, the virus warning phrase
| in the task bar tray, and the Virus Alert should anyone manage to actually
| get to the System Restore window, this nasty malware was geared to scare the
| **** out of people. It worked on my neighbor quite well. The tone of dread
| in her voice (My God, I've got a bad one this time!) when she called me on
| the phone was quite real. I was expecting a long drawn out fight ending in
| multiple file deletions from the Command Prompt, and was pleasantly
| surprised when System Restore worked.


| Bob


It is a simple trick. The Time and Date stamp is changed from...

h:mm:ss tt

to

h:mm:ss tt Virus Alert!

Any program that shows the Time and Date will show "Virus Alert!" appended to it.

Neat trick that confuses the hell of of many people.






--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[Dzias]

On Oct 21, 10:17*pm, "wasted" <rubb...@xxnone.notreal.com> wrote:
> Hi - a friend has been hit with this and is having trouble running any
> scanners/fixers (Superantispyware won't run amongst many others)
>
> I'm planning to go over armed with whatever - can anyone recommend which
> software I can download and take - preferably free - some stuff he was
> trying - like spynomore seemed to be detecting everything, but wanted a fee
> before fixing.
>
> Thanks


hmmm try to use this site as a guide :
http://www.pcthreat.com