Antivirus 2008

[Blayze]

I clicked on what I thought was a youtube video link on a page. Instead it loaded up something that looked like the My Computer (with C:, D:, etc...) and it looked like it scanned something. Then a popup box came up talking about Antivirus 2008 with a OK button and it said not to close it. The scan of My Computer looked like a default XP theme. I'm using Vista so I knew something looked odd. When it scans the drives it says infected in red under them.

The popup box says

Windows is scanning your system for threats. The scanning is provided by our official partner AntiVirus 2008. Please refrain from closing the windows until scanning is finished.
We highly recommend you to install the full version of AntiVirus 2008 scaner to monitor your PC for threats and on-time security systemupdates.

I had no clue how to safely exit out of this thing so I went to start on Windows and rebooted the machine. Firefox gave me a message saying I had several tabs opened (I did) and did I want to quit. I clicked quit and the computer rebooted. What is this thing, and if I didn't click ok is there any chance this machine is infected?

I've run Spybot, and I'm running SUPERAntiSpyware scanner now. So far nothing is showing up. I actually tested to see what happened on my Wii when I visited this site, and it showed the same My Computer scan, so I don't think it was actually scanning my computer.

Anything else I should do, or is my machine "safe"? I've never seen this spyware/virus/whatever before.

 

[The Keeper]

It is a malware. One of my (stupid) customers had installed it. Was really pesky to get rid of it because none of the malware scanners detected it. Don't know if they do today. Google for removal instructions.

 

[Blayze]

So even if I didn't click on the buttons in the popup box its still on the system? I haven't noticed anything unusual about the system, and nothing else running that I know of. System restore is turned on. Would rolling back to a earlier restore point fix this?

I've Googled Antivirus2008 and I have not noticed the program thats pictured running on my system at all. No other popups, or warnings either. Could the malware be hidden?

 

[Billb2]

99.9 times out of a hundred, if you didn't click on anything, nothing gets installed.

You're all good. But it's scarry that you should be even asking such a question.

 

[ockky]

was it "Antivirus XP 2008"? if so, i screwed up and got it a week or two ago. just follow the directions on the link and it cleared it up for me...in case any of you guys get it

http://www.bleepingcomputer.co...move-antivirus-xp-2008

 

[MadAmos]

Just for good measure you could run the online scanner @ trendmicro and then there is some good reading in the security forum here on anandtech. One of our members, mechbgon has a lot of good info techniques on avoiding malware,

Amos

 

[Blayze]

Originally posted by: Billb2
99.9 times out of a hundred, if you didn't click on anything, nothing gets installed.

You're all good. But it's scarry that you should be even asking such a question.

Don't know why its scary that I ask the question. Anyway I've run a few Spyware scanners, and haven't found anything. I looked at one of the removal websites and it says where the files are located on the hard drive. These files are not on my drive at all.

So I assume my computer wasn't infected?

 

[iooiioio]

I know for a fact Lavasoft's Adaware will kill it, and then you may have to run the uninstall on it afterwards. I have cleaned it on three different machines with adaware. You might be careful, if it is running on the screen, it may already be in. I have seen that once before also.

 

[Blayze]

Originally posted by: iooiioio
I know for a fact Lavasoft's Adaware will kill it, and then you may have to run the uninstall on it afterwards. I have cleaned it on three different machines with adaware. You might be careful, if it is running on the screen, it may already be in. I have seen that once before also.

Thanks. I scanned with Adaware and it didn't find anything. I haven't seen the actual application run at all. I think I got lucky, or at least I hope I did.