Comments on: XPAntivirus2009 (XP Antivirus 2009) Removal Instructions (Antivirus XP 2009)

By: hann

hann — Fri, 02 Jan 2009 13:30:41 +0000

i got the SAME thing hey. i could not be bothered with the “DOWNLOAD A FREAKIN UPDATE OR I’LL DIE ON YOU” popups. yeah my zone alarm is doing it too. man i cannot believe i fell for it. the fact that they said “enter email and serial key, if you can’t remember your serial key, just click next”(or something) got me, i was like….what program goes ‘oh don’t worry if you don’t have verification we’ll let you have it anyway’ :P dammit stupid virus i’ll kill you!! i hate technology, and i’m 18 hahaha

By: Kathleen Adams

Kathleen Adams — Wed, 17 Dec 2008 16:21:25 +0000

Well, I admit it — I was took. I think my brain must have been softened from the alert windows that popped up again and again and again and again and again and again and again…

I mean, I resisted a long time and finally gave in. It somehow invalidated portions of my Zone Alarm security package, too — at least, I think that’s why I suddenly couldn’t reinstall Zone Alarm, even from the disk.

Crap. I guess…I guess I should try my XP installation disk?

By: Ed Sterling

Ed Sterling — Wed, 29 Oct 2008 03:15:44 +0000

This virus automatically downloads from rogue websites. Usually they come from rogue websites with very similar names to popular sites, for example http://www.ebya.com, or http://www.yahooo.com etc. The mistake people make is believing what they see. The antivirus scan you initially see is simply a flash movie, there is no program actually scanning. Removal techniques vary based on the variant of the virus. Usually this virus adds itself to the USERINIT command line, or the Winlogon notify section of the registry, making it impossible for the average user to remove. Your best hope is using a bootable CDROM such as BartPE and possibly even your own XP installation CDROM in “console recovery” mode, so that your own infected Windows is not running, that way you can clean it up thoroughly and remove the infected files. I have not yet seen any antivirus package (McAfee, Norton, AVG) that was able to remove this completely.