Where does the trojan Antivirus XP 2008 attach itself? ?

Question

I want to back up my files before installing any software, but don't want to risk backing up the virus. Does anyone know where this thing attaches itself? Also: should I allow Live Update to run on Norton with this thing still on my computer?

Answer 1

It is a rogue anti-spyware program similar to the well known XP Antivirus rogue application.

http://www.bleepingcomputer.com/malware-...

Download SmitFraudFix

http://siri.urz.free.fr/Fix/SmitfraudFix...

Restart your PC in safe mode with networking

http://www.pchell.com/support/safemode.s...

Run SmitFraudFix

Download, install and run a full scan with Malwarebytes

http://www.malwarebytes.org

Answer 2

Antivirus XP 2008 (or AntivirusXP2008, AntiVirXP08, AntivirusXP 2008) is a rogue antispyware program. This program is a clone of Xp Antivirus, XPAntivirus2008, Antivirus2008, Antivirus 2008. Or you can say that Antivirus XP 2008 is just XPAntivirus2008 by another name. Just like Xp Antivirus, Antivirus XP 2008 uses fake pop up messages, fake security warnings to trick user into buying "full" version of Antivirus XP 2008. Usually users can infect them self with Antivirus XP 2008 through a Trojan, like Zlob. Antivirus XP 2008 usually launches when user starts up Windows.

http://www.pcthreat.com/parasitebyid-695...

Answer 3

Do NOT create a restore point now,As it attaches itself to critical system files.

A normal AV cannot get rid of it,but there's a program specially designed to.

Instead,download MalwareBytes from http://download.bleepingcomputer.com/mal...

It's specially designed to get rid of this virus.

If you need any one-on-one help whatsoever,feel free to mail me.

Answer 4

Info about Antivirus XP 2008 (files, removal instructions, etc.): http://www.bleepingcomputer.com/malware-...

You may want to work in Safe Mode (tap F8 at boot) while removing it, to avoid any annoying issues with Norton or other processes that might interfere. If you're running Windows Vista, you should also delete your C:\Windows\Prefetch folder just in case.

Answer 5

Any and all passwords you use are also compromised, so change all your passwords and I hope you don't use this computer for online banking!

See the link for a analysis of this "program"

XP Anitvirus warning link:

http://www.theregister.co.uk/2008/08/22/...

Answer 6

Antivirus XP 2008 is a suspect anti-spyware application that have a set of features which do not work, and produces false positives which may goad the user into purchasing the application. Antivirus XP 2008 show various pop-up advertisements and fake security messages, which may disturb your work and slow down computer performance. Antivirus XP 2008 is a clone of XP Antivirus fake antispyware. It is recomended to remove Antivirus XP 2008 from your computer.