Live Chat & Podcast at 1:00PM Eastern on Sunday!
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
General Security
Tag Cloud
access acer asus bios bsod computer crash desktop driver drivers error ethernet excel freeze gaming graphics hard drive hardware hdmi internet laptop malware memory monitor motherboard network operating system printer problem ram registry router slow software sound svchost.exe trojan ubuntu 11.10 uninstall usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless
Search
Search for:
Tech Support Guy Forums > Security & Malware Removal > General Security >
Solved: AntiSpyWareXP 2009 Trojan

Reply  
Thread Tools
GotCake's Avatar
Member with 108 posts.
 
Join Date: Aug 2007
Experience: Partial Idiot
29-Oct-2008, 05:59 PM #1
Solved: AntiSpyWareXP 2009 Trojan
Hi there.

My first infection and it's a doozy. I can only get to some websites - most of the anti-virus sites won't open. Is there a free download to get rid of this bugger? If not free, what are some good ones to buy... if I can get to the site?

Thanks in advance.
GotCake's Avatar
Member with 108 posts.
 
Join Date: Aug 2007
Experience: Partial Idiot
29-Oct-2008, 06:01 PM #2
How about SpyHunter3? I can get to that one and even download it. $30.00 or so, I guess.
GotCake's Avatar
Member with 108 posts.
 
Join Date: Aug 2007
Experience: Partial Idiot
29-Oct-2008, 07:06 PM #3
I can't get to the AVG site. Is there any way around this thing so that I can download something?

How about burning it to a CD on one computer and using it on the infected computer?
hammer1's Avatar
Senior Member with 132 posts.
 
Join Date: Jan 2005
Experience: Beginner
29-Oct-2008, 08:24 PM #4
Have you tried running your programs in Safe Mode. That is done by rebooting and continuously tapping F8 until Safe Mode is activated. Your programs should run then.
Let the forum know how you are doing and someone should be around to help you, I probably won't be.... God Luck !
GotCake's Avatar
Member with 108 posts.
 
Join Date: Aug 2007
Experience: Partial Idiot
29-Oct-2008, 10:23 PM #5
Just tried Safe Mode. I couldn't get to the pages that I could in regular mode - home page, etc and couldn't run any spyware, nor get to any websites to download anything.

I somehow managed to download (maybe just part) of the SUPERAntiSpyware program. I scanned the computer and it found 1 thing in memory, 1 in the registry and 31 in cookies. I removed them all, restarted, and still the XP2009 thing is there. When I run SUPER again, it doesn't detect any spyware.

Any ideas? Thanks for your time anyone/everyone.
GotCake's Avatar
Member with 108 posts.
 
Join Date: Aug 2007
Experience: Partial Idiot
29-Oct-2008, 10:31 PM #6
I downloaded SVG to a disk and got it onto the infected computer. It was acting pretty odd, but I got the scan running - I can't check for updates because I still can't go to websites, but maybe the scan will set me straight.

I feel like an idiot. :P
GotCake's Avatar
Member with 108 posts.
 
Join Date: Aug 2007
Experience: Partial Idiot
30-Oct-2008, 01:03 AM #7
Here's where I am, and I still need a bit of help. I ran AVG and removed all of the nasty stuff that they listed. I ran McAfee and SUPERAntiSpyware again. I have rebooted. I tried to use the Add/Remove programs to clear out all of the XP2009 stuff, but it tries to install itself if you press the change/remove button. I went into the program folders and deleted the XP2009 stuff.

The problem is that I still can't get to some web sites - like this one. I can't go to McAfee or any other site that could possibly help me kill this thing. Visible signs of XP2009 are gone and AVG, SUPERAnti and McAfee seem to be working.

Any ideas about why I can't get to any sort of "technical" sites?

Thanks.

P.S. I can't do any updates for SUPERAnti, McAfee, etc. - anything that would require access to their web sites.

Also, can't load any page with IE - not my usual browser. I use Firefox.

Last edited by GotCake; 30-Oct-2008 at 01:29 AM..
hammer1's Avatar
Senior Member with 132 posts.
 
Join Date: Jan 2005
Experience: Beginner
30-Oct-2008, 09:02 AM #8
http://www.bleepingcomputer.com/malw...tispyware-2009 gives you what you need to complete the removal. Take your time, there is no shortcut.

After this "nasty " is gone from your life forever you can block third party cookies etc to clean up a bit but right now it's "first thing first"
GotCake's Avatar
Member with 108 posts.
 
Join Date: Aug 2007
Experience: Partial Idiot
30-Oct-2008, 11:03 AM #9
Thanks, I'll be ready to go with that when my infected computer decided to come up this morning. It seems to be stuck while loading the tray icon programs, but I'm trying to give it plenty of time.

I can't do a single Ctrl-Alt-Del to see what processes are running, nor can I launch anything. Just kind of waiting with the hourglass.

Sigh.....
GotCake's Avatar
Member with 108 posts.
 
Join Date: Aug 2007
Experience: Partial Idiot
30-Oct-2008, 11:04 AM #10
Seems to be hung up while trying to launch McAfee.
GotCake's Avatar
Member with 108 posts.
 
Join Date: Aug 2007
Experience: Partial Idiot
30-Oct-2008, 11:15 AM #11
Went into Safe Mode and can't get to BleepingComputer.com. Oy vey.
GotCake's Avatar
Member with 108 posts.
 
Join Date: Aug 2007
Experience: Partial Idiot
30-Oct-2008, 11:21 AM #12
Still in Safe Mode - can use IE to try to get to BleepingComputer but keeps sending me to search pages, directories of pages, etc. Tried opening link in new window - same thing.

I'm so close... heeeeelllllllpppppp.
GotCake's Avatar
Member with 108 posts.
 
Join Date: Aug 2007
Experience: Partial Idiot
30-Oct-2008, 11:24 AM #13
Oh great - now an automatic shutdown - NT Authority/System message.
GotCake's Avatar
Member with 108 posts.
 
Join Date: Aug 2007
Experience: Partial Idiot
30-Oct-2008, 11:29 AM #14
Back in regular mode - trying to load program from BleepingComputer onto infected computer from disk.
GotCake's Avatar
Member with 108 posts.
 
Join Date: Aug 2007
Experience: Partial Idiot
30-Oct-2008, 11:31 AM #15
Program loaded, but won't run unless I load updates - won't let me run update because it won't let me go to the website. Heeelllllpppp. LOL

"The malware removal databases for SpyWare Dcotor have not been installed and must be downloaded before the product can be used......"
Reply

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.
Thread Tools



Facebook Facebook Twitter Twitter TechGuy.tv TechGuy.tv Mobile TSG Mobile
You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 02:23 AM.
Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved.

Powered by Cermak Technologies, Inc.