Expert: Brian Benosky - 8/21/2008

Question
QUESTION: Hi, it would appear i have been infected with a program called antivirus2008. problems being - background/wallpaper replaced with warning about infection also in properties there is no longer a desktop tab available. at one time windows task manager stated it was disabled so i could not access it at all. also same windows security warning keeps popping up and if clicked on takes me to a site to sell me anti - virus software.

i have run spybot,spyware doctor, avg 7.5 and anything else i can get my hands on. these programs seem to identify loads of malware etc, but so far fail to stop the errors messages or pop ups.

i have run anti spy programs on several occasion with system restore on and off.

i would appreciate any advice you can offer me

regards

Ian Kirwan

ANSWER: Hi Ian

Please download HijackThis to your desktop from here:
http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
Double-click on the file you just downloaded.
Click on the "Install" button.
Upon install, HijackThis should open for you.
Should it not open, go to C:\Program Files\Trend Micro\HijackThis and double click on HijackThis.exe
Choose 'Do a system scan and save a log file'.
Copy the text file which opens in Notepad and paste it in a follow-up  here.  I will analyze the log and recommend a course of action.

Brian

---------- FOLLOW-UP ----------

QUESTION: thanks for the help, but what i have done in the end was to load a back up file which seems to have done the job. if i should get this virus again i shall follow your instructions, as i would like to know how to remove this infection as i have never come across something that was so persistent

Answer
Hi Ian

Glad you got it fixed.  Read about the program and steps for removal here:

http://www.bleepingcomputer.com/malware-removal/antivirus-2008

If you need further assistance, send me a HijackThis! log so that I can troubleshoot it for you.  Good luck.

Brian