Same AVG "fake trojan"

[pljp38]

Seems I may be having the same problem as "Dopavash". I am operating IE8 on Windows 7, and ensured I am logged in the 32-bit version. Upon using my McAfee Security Scan Plus, it seems to have "cleaned" my computer. I attempted to view YouTube videos, which I received the same message to install Flash 10.1 version, in which I unistalled, then reinstalled several times, only to keep getting the same msg. I even "restored' my computer to a previous point (to a date at least 7 days prior) without avail. I have gone through my "securities" (following Adobe guidelines), and thus...no improvement...I'm at a loss...please help!

[Guest]

Hi, You and Dopavash aren't the only two having issues, as I've been at this for 3 weeks or so. I've lost track of how many threads with the same problem. Just different malware.

I'm a little skeptical of an Anti-Virus that can "clean" malware/viruses, but can't keep them off in the first place. Not picking on McAfee, the same can be said of Norton and a few others.

If I thot I had a virus/malware/trojan etc on my computer, I would only have MBAM scan it. www.malwarebytes.org and download to your Desktop the free version, update it and allow it to run a scan.

Before you do that, Disable McAfee so as there is no conflict while MBAM is scanning.

If you have any other Anti-Virus/Spyware programs, let me know that and for MBAM to scan, disable them also.

It is not recommended to use System Restore unless you knew/know what files the malware was in.

Let me know the results of the MBAM scan.

Thanks,

eidnolb

[pljp38]

Finally was able to perform a "full" scan to discover the following:  Rogue:win32/Fake XPA  (Trojan).

Found it in 4 areas of my program files, of which 2 scans seemed to have "wiped" in out; however, still can get Flash 10.2 version to work. Please help!

[Guest]

Hi, I'm assuming MBAM found those and were able to clean your system of them. Boy, those and the antivirus8/AV8 can really cause problems!!

Give me a few minutes to review your thread and see if there is any info I need from you. Then I'll post the procedure you need.

I can't remember at the moment the thread, never mind I found his. I haven't heard back from him since my post to him on 2/7/11. Therefore I don't know what he did, since he didn't reply back to me.

Thanks,

eidnolb

[Guest]

Hi again. Following are the procedures that have helped others with Viruses etc. You may want to print them out. One thing, be sure to use the links posted from your thread here. Don't use links from your email as they cause issues.

I think you can Disable that McAfee Security Scan. Under Start menu, go to all Programs
Open McAfee Security Scan Plus folder OR if there is an icon in your system tray perhaps.

First download and SAVE the FP Uninstaller to your Desktop:

http://kb2.adobe.com/cps/141/tn_14157.html 

Next go to this Archived site   http://kb2.adobe.com/cps/142/tn_14266.html     Download the Flash Player 9.0.280 21.8 MB to your Desktop. This is a zipfile.

Look for and extract: Internet Explorer flashplayer9r280_winax.exe and put it on your Desktop.  (1.46 MB)
Download the FP Installer for IE and SAVE to your Desktop:(latest version)
http://fpdownload.macromedia.com/get/flashplayer/current/install_flash_player_ax.exe

Once you have those on your Desktop, Using the Administrator Account, you will CLOSE all browser windows.
Disable any Anti-Virus program
Look in your system tray(area near the clock) for any instant messengers, aol, yahoo, etc and Disable them.
Run the Uninstaller and when it is finished, Reboot(restart) your computer.
Check and make sure any Anti-Virus is  still Disabled.
Run the Installer for vs 9 and when finished, Reboot your computer
Test your browser here and you should be able to see the Flash logo animation(spin) and the version of Flash Player should be listed.
http://www.adobe.com/software/flash/about/ It should be vs 9
Now you will run the Uninstaller again to Uninstall vs 9, when finished, Reboot your computer
Check and make sure any Anti-Virus is still Disabled.
Run the Installer for vs 10.2.152.26 and when finished, Reboot your computer.
Then test your browser and you should have vs 10.2.152.26 now Installed. If you can see the Flash logo animation(spin) then most likely you have Shockwave Flash Object in the IE addons, so check that.

Let me know if you have any questions,

eidnolb

[pljp38]

THANK YOU THANK YOU THANK YOU!!!  You don't know how much help you were and you FIXED my problem. Yes, MBAM found the virus. Now, I guess my question is, how do I keep this AVG virus (or fake) from infecting my computer again...with the MBAM keep it off, and do I need to update the MBAM once a month or more often? Again, I don't know how to thank you enough. Even if you have only been able to resolve one issue this week/month, know you have made one person VERY VERY VERY happy!!! This was a HUGE favor to me! Thank you again!!!

[Guest]

Hi, I can see you are pleased, good job!! Glad that worked for you. MBAM is only an on demand program, but one of the top ones.

I would update it every two or three days, but run a scan each day or evening.

That McAfee Security Scan, I would delete it because MBAM is so much better. If you have no realtime Anti-Virus program, you may want to Install Microsoft Security Essentials. This is an Anti-Virus/Anti-Spyware Free program. Very light on resources, and does not Install any conflicting addons into the browser. It does not contain a Firewall, but you can use the Windows Firewall. It does have a Realtime Protection(which means it runs in the background). You can get this at: http://www.microsoft.com/security_essentials/ 

To Uninstall McAfee Security Scan:

You can also uninstall through the McAfee Security Scan Plus folder:

Under Start menu, go to all Programs
Open McAfee Security Scan Plus folder
Select “Uninstall”

Then Reboot

Where these Trojans come from I don't know. The "antivirus8/AV8" Virus appears to appear as AVG(legit Anti-Virus) and people click on it and it's the Virus. I read a couple of nights ago that this Virus is even using the AVG logo!! Just don't click on any "warnings" and if you think you may have been compromised on a site, close your Windows and run MBAM. Keep your Temp files(cache) emptied frequently.

Well, I'm glad you are happy:-) I've worked most of the day on this procedure on several different threads.

I would appreciate it if you marked your thread as answered (I'll refer others here, LOL)

Thanks,

eidnolb

[pljp38]

Yes, the "notice" pops up with the AVG logo...this is what misled me.  Usually, I don't "fall" for ads, but guess I let my guard down this time.

[Guest]

Thanks pljp38, You are the first one that has confirmed the use of the AVG logo with that Virus. I'm hoping the "Virus" hunters find which sites it is coming from. The problem is it's somewhat like the common cold, it spreads:-) I know Facebook/games is one place, but other places too. Sometimes users forget what site they were even on.

Glad you Installed MSE too.

Thanks for marking your thread as answered. I'm sure it will get a lot of hits, since so many users are having this same problem.

Regards,

eidnolb

[pwillener]

pljp38 wrote:

Now, I guess my question is, how do I keep this AVG virus (or fake) from infecting my computer again...

What is your regular antivirus program?  Any active antivirus program that is kept up-to-date with virus defintions should be able to detect any such intrusion.

[pljp38]

I have Microsoft Security Essentials. Also had McAfee, but just deleted it upon your recommendation. Thanks

[pwillener]

Good - you should be protected by MSE.

[pljp38]

Outstanding service from Adobe Forum trouble-shooters! Recommend MBAM program to all! Thanks again!

[YamahaDon]

I too had the

fake AVG show up on my computer and

ended up loosing Flash Player as a result. I tried the

solution posted here with loading t

he older version and that did not work for me. I called a computer tech

in and she could not get that to work either. I ended up using the 'restore' to an ealier date with windows. That worked for me. I then had to reistall a couple of programs installed after the restore date but that was easy enough.

Later on Flash Player updated me to the new version.

It seems that if you catch the fake AVG in time and do not use it then you are okay.

I am running Windows 7 Premium on a 64 bit system if this helps.

My laptop has Windows 7 Premium with 32 bit and when I do not try to use this fake AVG to fix the system I have had no problems with it.

This trojan has appeared several time and as long as I do not follow it's instructions I am fine.

[Guest]

Hi Yamaha..I don't think the "Fake trojan" or any other Virus/Malware is going to "fix" your system, LOL If it's on your system, you don't need to "use" it, it's already using you.

You need to remove this and any other malware you have on your system. Also if you need help, then you need to start your own thread/discussion.

Thanks,

eidnolb