View Full Version : Help i need help with PC Virus

Big Dan
09-11-2008, 12:54 PM
Last week i had an anti-virus pop up alerting me to do an update so me not knowing any better did it and then to find out it was a virus scam to get you to buy a programme by credit card that will be rebilled each month now at times this thing takes over my computer and i can't activate my own antivirus programme

Its the Antivirus 2009 that was on stuff a few days ago

anyone got any help


09-11-2008, 01:07 PM
Download and Install RogueRemoverFree (http://www.malwarebytes.org/rogueremover.php)

Next do a scan with MalwareBytesAnti-Malware (http://www.malwarebytes.org/mbam.php) and Spyware Terminator. (http://www.spywareterminator.com/download/download.aspx)

Post a HijackThis log here when you're done

09-11-2008, 02:28 PM
that one is resilient - best removed by connecting your hard drive to another computer & scanning it

09-11-2008, 02:37 PM
full removal instructions here (http://www.spywareremove.com/removeAntivirus2008.html)

09-11-2008, 03:46 PM
The most common spyware removal tactic is to uninstall Antivirus 2008 by using the "Add/Remove Programs" utility.

And then run HJT, Spybot, Spyware Terminator etc.

Not too hard.

09-11-2008, 04:06 PM
I'd advise you to disable system restore first, and run Malwarebytes in safe mode.

Then get Trojan Remover (http://www.simplysup.com/tremover/download.html), update it and run a scan. Run all the utilities from that menu also.

Post a Hijackthis log here for Speedy & Wainuitech to take a look at for you!


12-11-2008, 12:55 PM
There is a .bat file available called "roguefix_2.190.bat" Google for it!

Boot into safe mode, double click the bat file and it will remove all trace of these infections.
I have now used it successfully on 3 infected machines.

12-11-2008, 07:25 PM
Minster - Just an update on the roguefix_2.190.bat - the latest variants of that Spyware are not being completely removed with it ( so it appears) - Ran it on 2 PC's today then Malwarebytes and removed even more - as well as Spybot S& D & Spyware terminator needs to be run.

Still even after that found 4 more entries in the Reg that had to manually delete.

Seems to be "doing the rounds" again since Monday I have collected 8 PC's:eek: in the workshop with all different variants of that bug - 3 more to get before the weekend.

But if any one wants the roguefix_2.190.bat you have to get it from Rapid share (http://rs95.rapidshare.com/files/138195829/roguefix_2.190.bat) as lots of other sites have removed it from downloading.

13-11-2008, 07:11 AM
Will hijack this show if computer is infected with av 2008?

13-11-2008, 04:01 PM
It should- if its a running process or is on the startup