Anti Virus 360
Author
Discussion

skinner05

Original Poster:

3,328 posts

209 months

Wednesday 11th March 2009
quotequote all
Has anyone had this infect their pc/laptop?

I've done a system restore and it appears to have dealt with the problem for now but it must still be on the system. There are loads of "alleged" ways to remove it from google searches but i thought it would be best to get the advice of someone on here who has had it.

sstein

6,249 posts

270 months

Wednesday 11th March 2009
quotequote all
skinner05 said:
Has anyone had this infect their pc/laptop?

I've done a system restore and it appears to have dealt with the problem for now but it must still be on the system. There are loads of "alleged" ways to remove it from google searches but i thought it would be best to get the advice of someone on here who has had it.
The thing is with these malware / trojans it's difficult to know if you have properly removed them. Once they are on your system it's pretty much game over.

For all you know the malware is using root-kit type technology and is hiding itself from the OS. A lot of malware is getting very sophisticated nowadays and using some pretty advanced techniques to evade detection and deletion.

I wouldn't personally trust a system that has had an infection, I would be blitzing it, format and full re-install.

-

Stuart

Mars

9,537 posts

230 months

Wednesday 11th March 2009
quotequote all
^^^ It's what I've had to do on a few systems I look after.

That said, I have followed a few instructions I found by Googling for another "few" systems and have only had one recurrance.


This was for "Anti Virus 2008" but I bet they're all the same.

If I found the writer of this, I might visit pain, death and destruction upon them.

philthy

4,697 posts

256 months

Thursday 12th March 2009
quotequote all
I removed this for a client a couple of weeks ago. I think it is a variant of the antivirus 2008/2009 malware.
Use this: www.malwarebytes.org
Download and update (it asks you to by default, say yes), and then run it.
If it won't run, or can't update, you will almost certainly be infected with the tdss.sys virus as well.
To remove this, right click my computer select properties, and then device manager.
Click the view tab, and select "show hidden devices". Scroll down, and you should have tdss.sys service showing. Right click on it, and disable it. DO NOT uninstall it, as it will simply re-install itself at start up. Restart your machine, and you should be able to update and run malwarebytes.

HTH ?