Like dating sites, malware (used to be called "spyware" back in the day) shows up with a nice bright and shiny profile or user interface for you to look at... then when you try to get involved in the process because you are generally interested in what the profiles have to say, there are occassionally bad things that happen... for example, the malware can misbehave... this is usually obnoxious, frequently sarcastic, and above all not very helpful... perhaps that sounds somewhat familiar...

I used to be a Program Manager at a major software development company... the best advice that you have gotten to this point is to research a reliable spyware detection (and imunization) application... some of these are associated with anti-virus packages, but one that I have found to be helpful on Vista or XP and that actually allows you to innoculate your system... the one that I like and recommend is actually free to download, although the product is good enough that you might consider donating to its maintenance and development... it's called "SPYBOT SEARCH & DESTROY"... google the name, and it will direct you to a download site...

Things to do when you down load the app:

1) When you donwload the app, unclick TEA TIMER and RESIDENT... they aren't needed, and in some cases might cause you soe minor problems... this is a challenge with app developers trying to do too much with a simple app... keep it simple and use SPYBOT for spyware protection...

2) After you download the app, use the UPDATE button to make sure you have the most current spyware and other signatures...

3) After you download the UPDATES, use the IMMUNIZE button to allow it to work through your registry and IE plug ins...

4) After you IMMUNIZE, go to the MODE on the menu bar and set to ADVANCED... then select TOOLS on the left hand side... make sure RESIDENT is turned off (unclicked)...

5) Use the SEARCH & DESTROY button... this will perform a good scan of your system and will help you identify where you might have picked up the SPYWARE... not that you can do anything about it now, but if SPYBOT found the problem, it will immunize against it...

6) And for good measure when you are done with the scan, IMMUNIZE again just to make sure that SPYBOT was not prohibited from immunizing because you had a SPYWARE issue...

SPYBOT does not automatically update for you... so you will need to go out and UPDATE and IMMUNIZE every so often to keep up with new spyware signatures and definitions...

I hope this helps...

PolishedGeek

I have tried SPYBOOT S&D against Antivirus 2009 on a client's system, with no luck. Had to do it by hand.

This was in July 2008. (It might be able to do it now).

Other than that, it is an excellent piece of software.

Hello,
Did you straiten this out?


Im not sure I'd jump ship yet!
did it work before?
If so have you try systems restore? to a date you believe it was working propper?

if not
click start
*all programs
*accessories
*Systems Tools
Click:System Restore
to a date you believe it was working propper, just follow the easy steps they walk you threw it, very easy to do



I have used a bunch threw the last few years, I go in some dark area's on the web and get in trouble at times, so I need stuff that works! period, or Im off line. Heres a couple that has kept me online.I've found that you can get service free, thats just as good when it come to antivirus/antispyware

http://free.avg.comFree
Antivirus&Anti-Spyware AVG





I've been using this as a back up for a little over a year now, incase I feel what Im running on auto aint catching something, work good with AVG. like a pack of Hunting Dogs.

http://www.superantispyware.com
FreeSuperAntiSpyware
P.S. Allmost forgot, Don't forget to use a good Firewall.

It seems as though you restored and 'fixed' the problem?? I can't really tell, except that you reference this issue in the past tense.


In any case, lets ensure that your windows update registries are uncorrupted..

First, lets create a batch file that will reregister your windows update registries, as the malware seemingly corrupted them.

create a textfile [ whatever.txt ] on your desktop.

Add the following lines
"
regsvr32 /s wuapi.dll
regsvr32 /s wuaueng1.dll
regsvr32 /s wuaueng.dll
regsvr32 /s wucltui.dll
regsvr32 /s wups2.dll
regsvr32 /s wups.dll
regsvr32 /s wuweb.dll
"
(without the quotes)
Save the textfile (using the 'SaveAs' menuitem) as [ whatever.bat ]

At this time, you would focus on removing the malware.. (which you may not have, so we are just going to jump to using the batch file)

Go ahead and double click the newly created batch file. You will see a command console popup, that will 'correct' those dlls and the registry keys associated to them. You should now be able to turn on the Automatic Windows Update and the associated windows update services.

Alternatively, you could use Windows Update Repair Tool BETA. Downloadable at
http://software.hitoma.com/WURT/

There is one way to stop the "anti virus 2009" trojan virus from infecting your computer.
When that warning pops up, your two obvious options are to click the OK button or the x button to close. Do NIETHER!
hit ctrl+alt+del and bring up your task manager,
and under the tab of programs running, you'll see an email link with the win anti virus 2009 that is on your desktop. Click on it then click on end program at the bottom of the task manager.
If you click the x button to close the program from your desktop, you will actually be clicking a link that goes right back to the OK button.
What this virus does, is infect your system, and then the only way to remover the warning is to download and install their antivirus program. But that's not all, the program is NOT free, they want a hefty sum for the full version for the antivirus program.
Sad news? After your subscription runs out, the virus warning pops up again. In other words, the antivirus program will NOT remove the threat, simply hide from you.
System restore WILL NOT remove this threat.

I can give you a few free aids...

AVG = Free Anti Virus

Spybot Search and Destroy = Free Spyware remover and sheild

Comodo Firewall = Free firewall, Learns user Patterns, Simply set to training mode a few days and Viola! pop up messages should be minimal

Correction...
Microsoft System Restore will not eliminate it.

A DESTRUCTIVE restore will...this means reformating your drive and reinstalling Windows or the OS of your choice.

Yes, that is true, but I wasn't ponting that one out for the simple, most don't want to go that route unlees all othe options are exhausted.
I know, I had this bugger infect my system. Chased it down for a week until I killed it.

Just giving options and clarifying. I was a tech while I was in a community college....and I removed viruses...manually. Believe me...It's a F***ING pain...

Bonus note to those who don't completely understand what this strange guy is saying about restores...

Microsoft System Restore, the program in Windows XP, ONLY changes settings and SOME registry values. It DOES NOT, repeat, DOES NOT, change files. This is only for if you've changed settings and/or have toubles with programs.

Use anti-virus to remove viruses, but if you switch anti-virus software to attempt to get the virus...make sure you uninstall the OLD anti-virus FIRST! THEN go ahead and install the new anti-virus.

A note for Norton users... Norton anti-virus NEVER unistalls cleanly. Go to the Norton site. Then search the support section for the "Norton Removal Tool", uninstall Norton, then run the tool, restart the machine and then it's gone!

As a LAST RESORT, there is always the restore disks and/or the restore partition for the machine. These are provided by the manufacturer with the machine at the time of purchase.

A BIG NOTE! Using restore disks erases ALL YOUR FILES! The result is it will be exactly as you got it from the store/manufacturer.

If you need more help, feel free to ask questions.

Seems to me that automatic updates was disabled for some reason.

Go to your Services and devices. Right click My

Computer..go to Device Manager and click on

Services and Applications.(another way is to Open up Control panel>>device manager> then select
services and applications.(some windows will say: Services and Devices)

Open it up and you should see a long list of

items displayed under the Service collum. Just

Look for AUTOMATIC UPDATES on the list.

Locate Automatic Updates. It should say Running on the far right hand side of it.

If it doesn't, just right click Automatic Updates

and select Start or restart. Check Start first.

It should now say running.


You should be good to go now.