Virus Remover 2008 Virus infection need help

[markiezzi]

Hello,

Has anyone come across the Virus Remover 2008 trojan/rogue virus? I have had the antivirus XP problem as was able to take care of it but this one doesn't seem to want to be killed. It reappears when I start up internet explorer for the first time after running 3 different virus/trojan tools. I have tried combo fix, malware bytes, super anti spyware, smitfraudfix. Any ideas?

Mark

 

[Jory]

If the infection seems to be gone after you run all those, but then only comes back after opening IE you might want to run "hijack this!" and check the BHO's. You could also try opening IE in the "without add-ons" mode to see if that stops the infection. If so that narrows it down a bit.

The cynical in me says just to use Firefox though.

 

[koonter]

try this:

1. install and update "trojan remover" (30 day trial)

http://www.simplysup.com/tremover/download.html

2. install and update "spybot search and destroy".

enable tea timer then restart

enable advanced mode

delete suspecious entries in the activex, bho, and startup catagories.

tell tea timer to allow the deletion of the entries, when the virus tries to re copy the files tell tea timer to deny it.

then scan with various AV and AM software.

3. boot with a PE and scan and disinfect.


good luck

 

[tartis]

I gave up on this one over the weekend and did a re-install.

 

[TimeCode]

Have you had any success? Please keep the knowledge flowing.

 

[spectech]

Try this removal tool

I found a removal tool which works well, just download and copy to HDD of infected PC then start infected PC in safe mode and run tool and follow on screen instructions.
Google internetinspiration roguefix and you will find it at bottom of the page.
Regards.

 

[seedubya]

Roguefix is very similar to ComboFix. They're both excellent tools in the right circumstances but not nearly every situation.

 

[spectech]

Removal Tools

I agree, not every infected PC has the same type or severity of infection. I have seen quite a few removal procedures on many web sites to deal with spyware and virus infection and many people have different opinions on what is best to fix the problem. Some people just do a format and wipe, some use every possible virus scanner they can get their hands on
I must admit that I have tried a certain CD from a certain large company from the US which has several scanners and tools with great success.
I do format and wipe as a last resort.

 

[seedubya]

@ the OP - have you had any luck with this? Sounds like you might have a rootkit hiding some malware that's re-infecting the PC.

 

[killergamer]

Malwarbytes is the best so far that I have seen for this virus i have had multiple computers that have had that virus. Try it out please.

 

[doortodoorgeek]

ok that is it!

Malwarbytes is the best so far that I have seen for this virus i have had multiple computers that have had that virus. Try it out please.

I just had a repeat phone call from 2 weeks ago, surprise “Win Antivirus 2008” returned, I don’t know if the user got reinfected or I missed something that “grew back” into the same thing. I ran everything including http://www.internetinspiration.co.uk/roguefix.htm everything looked good until I got a call today, the user said AVG keeps popping up a “move to vault” message and then a “Win Antivirus 2008” screen

I am going to run malwarbytes tonight including a few other things

 

[markiezzi]

Hello,

Going on 2 weeks now. P.C. Still infected with Virus Remover 2008. I have used spybot, malwarebytes, combofix, smitfraud fix, rogue fix. Still can't get rid of it. It stays dormant for a few hours then when I open file explorer or internet explorer the pop ups come back telling me to download and register. This is a tough one. May end up having to reformat and reinstall.

Mark

 

[seedubya]

@markiezzi - this is almost certainly being re-infected via a rootkit. Try Gmer and UnHackMe. If they fail, format.

 

[usacvlr]

Here's some instructions on removing it manually. I would probably boot using one of the bootcd's that are available and then remove it manually from within that environment.

http://www.xp-vista.com/spyware-removal/virusremover2008-virus-remover-2008-removal-instructions

PS You might try smitfraudfix