XP antivirus 2008

Ramsea · **Joined:** 20th Apr, 2008 **Posts:** 963

On my day off work yesterday I was feeling a little bored so had a look on the tinterweb for some pictures of the rather lovely Nina Minimi. However in doing so I stumbled across a cunt of a website which has given me the "XP antivirus 2008" virus despite having a number of spyblaster type programs and running Avast antivirus.

ok, now for the questions:

1) Do you know any websites that have pics of Nina on which will not fuck my computer up?

2) Has anyone here been unfortunate enough to have had their computer infected with this shitty thing and do you know how to get rid of it?

So far I have tried:
a) running all my antivirus/spyware programs which manage to find the virus but appear to be unable to delete it properly as it keeps returning.

b) This, which was suggested by someone from the ms forums:

http://forums.microsoft.com/windowsonec ... 0&pageid=4

ZOMG Spoiler! Click here to view!

This is how I got rid of Antivirus XP 2008. It is different than the XP Antivirus 2008 most sites refer to.

First you need to stop the program from loading on startup. This is what you do to stop it:

Start, run

Type msconfig

Go to Startup tab

Uncheck lphc35dj0e1an
Uncheck rhc75dj0e1an

Click apply, then ok
Restart computer

Then you need to delete the main files this program uses. Delete the following files:

C:\windows\system32\lphc35dj0e1an.exe
C:\program files\rhc75dj0e1an\rhc75dj0e1an.exe

This should remove the program from your system but you probably still have a warning message displayed as your wallpaper in Windows and the virus removed the ability to change the wallpaper or your desktop settings.

To restore ability to change your desktop settings and select a different wallpaper and screen saver do the following:

Start, run

type Gpedit.msc

Navigate to User configuration, Administrative Templates, Control Panel, Display

Right click on Remove Display in Control Panel
Click on Properties and select Disabled

Do the same steps to change the following attributes to disabled:

Hide Desktop Tab
Prevent changing wallpaper
Hide Apperance and Themes tab
Hide Settings tab
Hide Screen Saver tab

You should now be able to use your computer normally and change the wallpaper to

something other than the warning message Antivirus XP 2008 set it to.

I think I've got rid of some of the problem as I am no longer being prompted to download xp antivirus 2008 however my comp is still running slowly and I cannot change my desktop etc. I have tried the Gpedit.msc command but apparently that doesnt work in XP Home and I dont know what else to do.

Any help will be muchly appreciated.

Cras · **Joined:** 30th Mar, 2008 **Posts:** 49252

Ramsea wrote:

I have tried the Gpedit.msc command but apparently that doesnt work in XP Home.

Getting GPEdit to work on XP Home:

http://www.neowin.net/forum/index.php?s ... y589632380

AceAceBaby · **Posted:** Wed Aug 27, 2008 13:46

What browser were you using?

JamesOff · **Joined:** 31st Mar, 2008 **Posts:** 116

Had a machine at work get infected with this. Luckily Mcafee stepped in and stopped most of it. I used a combination of methods to get rid of it, but you're probably best off starting somewhere like here: http://www.bleepingcomputer.com/malware ... -2008-2009 which has a walkthrough for getting rid of it.

If you want to post a Hijack This! log I'll have a look at it for you.

Oh also you can re-enable your ability to change your wallpaper without using gpedit, you can just doing it directly with regedit - but that's something to do *after* getting all the malware off the system

Ramsea · **Joined:** 20th Apr, 2008 **Posts:** 963

Firefox v3.0.1

I'll check out them links so far...cheers guys

zaphod79 · **Joined:** 16th Apr, 2008 **Posts:** 14525

Realistically get some good antivirus , get it updated , and run it on the system.

This is known as a number of differnet things and is a complete pain to get rid of - you may have gotten it all , or you may only have removed part of it.

XPHome is also a problem here because in their infinite wisdom Microsoft decided that they should cripple parts of XP home to prevent you from doing things with it.
However , when they crippled these things really they just took off the tools and made it very hard for a standard user to change , malware doesnt care so goes in and changes these things and you find you cant easily change them back because XPHome defines that you 'dont really need that'

If you want to be really safe - backup your data and wipe the machine back to the start.

As for changing the screensaver settings you can do it in the registry (*NOTE* - DONT MESS WITH THE REGISTRY UNLESS YOU KNOW WHAT YOU ARE DOING ****)

If you go to :

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\

You can set :

* NoDispBackgroundPage = 0 (missing background tab)
* NoDispScrSavPage = 0 (missing screen saver tab)

To set these back without messing with Policies.

Blucey · **Joined:** 30th Mar, 2008 **Posts:** 2160

i got this virus. It got in past Adaware and AVG. In the end I installed Avast and that dealt but in the meantime I manually took it out of the start-up using MSCONFIG and did the registry thing described above.

Plissken · **Posted:** Wed Aug 27, 2008 14:31

Read this

AceAceBaby · **Posted:** Wed Aug 27, 2008 14:40

So was it something running on the site, or clicking on something to let it install? That link seems to say that the person has to click on a dodgy fake window.

Blucey · **Joined:** 30th Mar, 2008 **Posts:** 2160

AceAceBaby wrote:

So was it something running on the site, or clicking on something to let it install? That link seems to say that the person has to click on a dodgy fake window.

embarrassingly it was a click on a dodgy fake window. namely a virus alert disguised an AVG one. normally I dont get caught out by these things but I literally got played like a sucker.

AceAceBaby · **Posted:** Wed Aug 27, 2008 14:52

Oops.

Hooray for Vista UAC, maybe.

Ramsea · **Joined:** 20th Apr, 2008 **Posts:** 963

AceAceBaby wrote:

So was it something running on the site, or clicking on something to let it install? That link seems to say that the person has to click on a dodgy fake window.

For me it mustve been something on the site as I didnt click to install anything. I got a window saying that I had to install xp antivirus 2008 but I ignored this as I didnt believe there was such a thing as xp 2008 and mine certainly isnt xp 2008 as Ive had it for years.

As I'm fairly nooby when it comes to computers I cant get on to most websites now so I think Im just gonna do the inevitable and follow zaphod79's advice and backup and start again. Even this is gonna take all day, but at least I can do that and it will work.

Cheers for everyone's time. :luv:

you all very muchly

Be Excellent To Each Other

XP antivirus 2008
Arrrrggggh the bastards

Who is online

Be Excellent To Each Other

XP antivirus 2008 Arrrrggggh the bastards

Who is online

XP antivirus 2008
Arrrrggggh the bastards