XP Antivirus

[Saint_clark]

I know it actually is a virus, just wondering whether anyone knows how to get rid of it.

Any help would be appreciated - none of the virus/spyware checkers i've run have picked up anything.

[Al de Man]

I've had to try and clear two instances of this b*stard.

 

The first time I gave up and formatted the drive, but the second, I think Malwarebytes' Anti-Malware worked.

 

http://www.bleepingcomputer.com/malware-removal/remove-antivirus-xp-2008

[Saint_clark]

My previous spyware and antivirus programs were obviously terrible - been running that thing for 2 and a half minutes and it's found 114 infections.

They could have been on here for years....

Cheers Al.

[Saint_clark]

The scans done, removed most but it says it can't remove the file which contains the XP virus. Typical.

Any ideas?

[JustMike]

i had this problem on one of the computers at work. The virus is a nasty little fooker, usually under the name of burrito.exe.

 

try using this..

http://www.superantispyware.com/

 

or a piece of software called "sdfix"

 

this link explains how to use it..

 

http://bicester-computers.com/support/showthread.php?t=18

 

the virus will leave files that end (or contain) .....j0e... do a search for this and see how many it finds. Using sdfix should get rid of this for you.

Edited 24 August, 2008 by JustMike

[saint_stevo]

SmitFraudFix

Run in Safe mode

[thesaint sfc]

Superantispyware gets rid of it.

 

Smitfraudfix is rubbish.

[Saint_clark]

Cheers Mike and thesaint_sfc, SuperAntiSpyware seems to have done the trick.

Thank f*ck for that, it was a right tricky little b*stard.

[saint_stevo]

Superantispyware gets rid of it.

 

Smitfraudfix is rubbish.

 

 

Wrong

[thesaint sfc]

My entire network at work is full of spyware thanks to this f*cking virus. We've got new PC's we're building only to find they're full of spyware just before we're about to send them out the door!

 

Sophos is absolutely crap considering the price we pay out. On total lockdown now

[Saint_clark]

You suggested the SuperAntiSpyware one to me, why didn't you use that?

[saint_stevo]

had a user in this morning with this, a combo of superantispyware, malware bites and smitfraud ridded it of it all.

[norwaysaint]

smitfraudfix never seems to have much effect on anything, but that malwarebytes one seems to have finally rid me of an irritating trojan, thanks.

[Johnny Shearer]

I used Malwarebytes and it seems to have worked - I think. I'm able to boot up without any problems but I still get a fake Blue screen of Death, saying I need to reboot my PC.

 

However if I CTRL+ALT+DEL I can get back to my normal screen.

 

Does this mean I still have the bar steward on the PC or have I got another one? Will be grateful for any help.

[saint_stevo]

I used Malwarebytes and it seems to have worked - I think. I'm able to boot up without any problems but I still get a fake Blue screen of Death, saying I need to reboot my PC.

 

However if I CTRL+ALT+DEL I can get back to my normal screen.

 

Does this mean I still have the bar steward on the PC or have I got another one? Will be grateful for any help.

 

The fake blue screen of death is all tied in, thats the screensaver it sets.

 

SuperantiSpyware ridded me of that part

[Johnny Shearer]

Aye have been reading up on it. Will re-run malwarebytes and then superantispy in safe mode.

 

The fake blue screen as I understand is something from another place but tied into the virus and not picked up by some anti virus programs.

 

I'll give it a go tonight but I think a full reformatting is in order and start afresh.

Edited 28 August, 2008 by Johnny Shearer

[Saint_clark]

Once you've removed the main part of the virus using malwarebytes, you should just be able to change your screensaver back - that's what I did.

However, it's best to run superantispy anyway.

[Johnny Shearer]

Once you've removed the main part of the virus using malwarebytes, you should just be able to change your screensaver back - that's what I did.

However, it's best to run superantispy anyway.

 

I thought of that this morning too but will run superantispy just in case. I'd rather be safe than sorry with this bugger.

[thesaint sfc]

You suggested the SuperAntiSpyware one to me, why didn't you use that?

 

Because we have about 14 systems connected to a crappy server. We've got about 4 users with memory sticks infected which have been plugged into new PC's and repairs.

 

Not good. Seem to be coming to a head with it now though.

[JustMike]

sdfix worked for us as well

[Johnny Shearer]

I hate this virus. Ruddy Malwarebytes crashed on me last night, so will have to run it again. Hopefully that'll get my screen background options back.

 

At least Superantispy went well and got rid of internal systems joke BSOD.

[exit2]

This is why I love this forum!

One of our receptionists said" can you look at my pc" I say yeah no probs and it had this bloody lot on it! 3hrs later and it is running like a dream!