06-26-2008 11:54 AM
Need help in removing the Vista Antivirus 2008 from our pc running XP.
Need your suggestions.
Why can't Norton 360 find and remove?
06-29-2008 01:16 PM
Firstly, I would review the steps listed in How To Troubleshoot a Suspected Malware Infection and follow them until the malware was removed:
Then, I would review the website below for information on Misleading Applications:
Many times, Misleading Applications are blended threats that deliver other malware to your system, that are designed to try to disable your current security software. Without knowing the specifics of your situation, it's difficult to speculate how this happened, except that you saw a popup for the VistaAntivirus2008 and installed this program. Please let me know if you have questions about the above steps, or if you have already tried these steps and the problem still exists. Thanks!
07-26-2008 04:38 AM
07-26-2008 04:46 AM - edited 07-26-2008 05:03 AM
07-26-2008 05:36 AM - edited 07-26-2008 05:43 AM
Follow Johna's advice and look for a Private Message at the top right of the thread
Also worth looking here
If there is something you cannot do in any of the instructions, these or others, just let us know.
07-27-2008 09:39 AM
I am running Kaspersky's Online Scanner as I type this message... I am not feeling to positive about it working however. I have found various other sets of manual removal instructions during my searches... the problem is that this Vista Antivirus 2008 has somehow disabled all my administrative powers on my machine and made itself a "Super User". I seem to have less control over my system than if I were logged in on the guest account. :(
If anyone else has any other suggestions I, and I am sure there are others out there too, would love to hear them.
Thanks again for the help
07-27-2008 08:43 PM
07-27-2008 10:19 PM - edited 07-27-2008 11:10 PM
We should be able to get rid of this for you. Did you mean the Kaspersky scan would not scan your C drive? Did you click on My Computer for the scan? If so, can you please go into 'Safe Mode with Networking' and run the Kaspersky Online Scan again, then save the logs to your desktop, where you can retrieve them.
Let us know if you are unable to perform the above. Thanks
Edit: Try the solution in my post below before trying the above.
07-27-2008 10:24 PM
If you take the external link I provided and follow the instructions for removal, can you advise if you were succcessfuly or not, and/or where you had trouble. If you cannot rely upon a scanner or its does not work, you have to do this manually or try another scanner. You did not make clear whether you tried Microsoft onecare.
I appreciate how difficult this is. A virus has either got to be loaded on reboot or it has infected a core file.
Try installing procexp and autoruns from Microsoft. Procexp should kill processes and autoruns can kill anything loaded at reboot programs or services.
07-27-2008 10:33 PM - edited 07-27-2008 11:05 PM
OK, here is another solution you may try in the meantime. Method: Link . Note: Do full scan not quick scan as advised. You can perform this in Safe Mode with Networking if you like.
This should fix the problem. You may also want to check for and delete the associated files and registry values shown at the end of the written instructions if they are still present on your PC.
Also, you may want to download and run Hijack this and delete these values if they are still present::
O4 - HKCU\..\Run: [Antivirus] C:\Program Files\Antivirus 2008\Antvrs.exe
O4 - HKCU\..\RunOnce: [3P_UDEC] "C:\Documents and Settings\forensics\Desktop\AtnvrsInstall.exe" 0;C;
O4 - HKCU\..\Run: [Antivirus2008y] C:\Program Files\Antivirus2008y\antvrs.exe
Let us know.