Trusted Antivirus Protection or Scam ?

hi
XP Prof 2002 Serv Pack 2
I recently looked at a friends computer
With my limeted knowledge I noteced something
It looked more like a Bug than a Protector
Computer is very slow
Its Called Trusted Antivirus
It does ask for registration and payment
It does behave as discribed in
Windows XP/Vista Blog
Trusted Antivirus Removel Instruction. March 18th by Alex
here it also offers
download Spyhunter Spyware Utility
any good, what does it do?
Is there a Virus Protection Program ? called
Anti Vir Gear V 3.7
have seen many not this one
thanks
confused

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_R...:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

silver hair wrote:
> hi
> XP Prof 2002 Serv Pack 2
> I recently looked at a friends computer
> With my limeted knowledge I noteced something
> It looked more like a Bug than a Protector
> Computer is very slow
> Its Called Trusted Antivirus
> It does ask for registration and payment
> It does behave as discribed in
> Windows XP/Vista Blog
> Trusted Antivirus Removel Instruction. March 18th by Alex
> here it also offers
> download Spyhunter Spyware Utility
> any good, what does it do?
> Is there a Virus Protection Program ? called
> Anti Vir Gear V 3.7
> have seen many not this one
> thanks
> confused

thank you very much
much to study for me
and it does look complex
thanks

--
confused


"PA Bear [MS MVP]" wrote:

> Unexplained computer behavior may be caused by deceptive software
> http://support.microsoft.com/kb/827315
>
> Run a /thorough/ check for hijackware, including posting your hijackthis log
> to an appropriate forum.
>
> Checking for/Help with Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://aumha.net/viewtopic.php?t=5878
> http://wiki.castlecops.com/Malware_R...:_Introduction
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine2.blogspot.com/
> http://www.elephantboycomputers.com/...moving_Malware
>
> When all else fails, HijackThis v2.0.2
> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
> It will help you to both identify and remove any hijackware/spyware with
> assistance from an expert. **Post your log to
> http://forums.spybot.info/forumdisplay.php?f=22,
> http://castlecops.com/forum67.html,
> http://forums.subratam.org/index.php?showforum=7,
> http://aumha.net/viewforum.php?f=30, or other appropriate forums for review
> by an expert in such matters, not here.**
>
> If the procedures look too complex - and there is no shame in admitting this
> isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
> silver hair wrote:
> > hi
> > XP Prof 2002 Serv Pack 2
> > I recently looked at a friends computer
> > With my limeted knowledge I noteced something
> > It looked more like a Bug than a Protector
> > Computer is very slow
> > Its Called Trusted Antivirus
> > It does ask for registration and payment
> > It does behave as discribed in
> > Windows XP/Vista Blog
> > Trusted Antivirus Removel Instruction. March 18th by Alex
> > here it also offers
> > download Spyhunter Spyware Utility
> > any good, what does it do?
> > Is there a Virus Protection Program ? called
> > Anti Vir Gear V 3.7
> > have seen many not this one
> > thanks
> > confused
>
>

On Mon, 7 Apr 2008 15:35:00 -0700, silver hair wrote:

> hi
> XP Prof 2002 Serv Pack 2
> I recently looked at a friends computer
> With my limeted knowledge I noteced something
> It looked more like a Bug than a Protector
> Computer is very slow
> Its Called Trusted Antivirus

Trusted Antivirus Removal:
Download SmitfraudFix v.2.250 (note the removal procedure).
http://www.precisesecurity.com/tools.../smitfraudfix/

Then download/execute SuperAntispyware - Free
http://www.superantispyware.com/supe...freevspro.html
After the software is updated, it is suggested scanning the system in Safe
Mode.
Still infected?
Download David H. Lipman's MULTI_AV.EXE from the URL:
Download MULTI_AV.EXE from the URL --
http://www.pctipp.ch/ds/28400/28470/Multi_AV.exe
http://www.pctipp.ch/downloads/dl/35905.asp
English:
http://www.raymond.cc/blog/archives/...irus-for-free/
To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }
NOTE: You may have to disable your software FireWall or allow WGET.EXE to
go through your FireWall to allow it to download the needed AV vendor
related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in
Normal Mode. This way all the components can be downloaded from each AV
vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and
Reboot the PC.
You can choose to go to each menu item and just download the needed files
or you can download the files and perform a scan in Normal Mode. Once you
have downloaded the files needed for each scanner you want to use, you
should reboot the PC into Safe Mode [F8 key during boot] and re-run the
menu again and choose which scanner you want to run in Safe Mode. It is
suggested to run the scanners in both Safe Mode and Normal Mode.
When the menu is displayed hitting 'H' or 'h' will bring up a more
comprehensive PDF help
file.
Additional Instructions:
http://pcdid.com/Multi_AV.htm

> It does ask for registration and payment
> It does behave as discribed in
> Windows XP/Vista Blog
> Trusted Antivirus Removel Instruction. March 18th by Alex
> here it also offers
> download Spyhunter Spyware Utility
> any good, what does it do?
> Is there a Virus Protection Program ? called
> Anti Vir Gear V 3.7
> have seen many not this one

Steer away from Anti Vir Gear V 3.7, it's junk!
This is what you want:-
Avira AntiVir® PersonalEdition Classic - Free
http://www.free-av.com/antivirus/allinonen.html
You may wish to consider removing the 'AntiVir Nagscreen'
http://www.elitekiller.com/files/dis...ntivir_nag.htm

Good luck

thank you
I find your answer most helpfull
and well explained
thank you

--
confused


"Kayman" wrote:

> On Mon, 7 Apr 2008 15:35:00 -0700, silver hair wrote:
>
> > hi
> > XP Prof 2002 Serv Pack 2
> > I recently looked at a friends computer
> > With my limeted knowledge I noteced something
> > It looked more like a Bug than a Protector
> > Computer is very slow
> > Its Called Trusted Antivirus
>
> Trusted Antivirus Removal:
> Download SmitfraudFix v.2.250 (note the removal procedure).
> http://www.precisesecurity.com/tools.../smitfraudfix/
>
> Then download/execute SuperAntispyware - Free
> http://www.superantispyware.com/supe...freevspro.html
> After the software is updated, it is suggested scanning the system in Safe
> Mode.
> Still infected?
> Download David H. Lipman's MULTI_AV.EXE from the URL:
> Download MULTI_AV.EXE from the URL --
> http://www.pctipp.ch/ds/28400/28470/Multi_AV.exe
> http://www.pctipp.ch/downloads/dl/35905.asp
> English:
> http://www.raymond.cc/blog/archives/...irus-for-free/
> To use this utility, perform the following...
> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
> Choose; Unzip
> Choose; Close
>
> Execute; C:\AV-CLS\StartMenu.BAT
> { or Double-click on 'Start Menu' in C:\AV-CLS }
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to
> go through your FireWall to allow it to download the needed AV vendor
> related files.
>
> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
> This will bring up the initial menu of choices and should be executed in
> Normal Mode. This way all the components can be downloaded from each AV
> vendor's web site.
> The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and
> Reboot the PC.
> You can choose to go to each menu item and just download the needed files
> or you can download the files and perform a scan in Normal Mode. Once you
> have downloaded the files needed for each scanner you want to use, you
> should reboot the PC into Safe Mode [F8 key during boot] and re-run the
> menu again and choose which scanner you want to run in Safe Mode. It is
> suggested to run the scanners in both Safe Mode and Normal Mode.
> When the menu is displayed hitting 'H' or 'h' will bring up a more
> comprehensive PDF help
> file.
> Additional Instructions:
> http://pcdid.com/Multi_AV.htm
>
> > It does ask for registration and payment
> > It does behave as discribed in
> > Windows XP/Vista Blog
> > Trusted Antivirus Removel Instruction. March 18th by Alex
> > here it also offers
> > download Spyhunter Spyware Utility
> > any good, what does it do?
> > Is there a Virus Protection Program ? called
> > Anti Vir Gear V 3.7
> > have seen many not this one
>
> Steer away from Anti Vir Gear V 3.7, it's junk!
> This is what you want:-
> Avira AntiVir® PersonalEdition Classic - Free
> http://www.free-av.com/antivirus/allinonen.html
> You may wish to consider removing the 'AntiVir Nagscreen'
> http://www.elitekiller.com/files/dis...ntivir_nag.htm
>
> Good luck
>
>

On Thu, 10 Apr 2008 17:50:00 -0700, silver hair wrote:

> thank you
> I find your answer most helpfull
> and well explained
> thank you

YW :-)

hi
i have worked on that computer today
for starter I uninstalled the antivirus stuff
it was not working at all
and installed AVG 7.5 free Edition
dozens of files ended up in the Virus Vault imediatly
trojen horses, I empty the Vault
that stoped new pop ups
I uninstalled and deleted half the stuff junk
now the computer is fast. the internet browser too
now the machine can be cleaned, work on that later
present pop ups
1) Stm.exe Trojen horse Gneric 9.awcc
Path. Program files\comon files\Secure PCCleaner
2) Twinlmd.exe Trojen horse generic 10.ATH
C\Windows\system 32
3) csseqch.dll Trojen horse generic 10.HET
C\Windows\System 32
the last one seems to copy itself
every time every time when switching program
and pops up.
click 3 times to put the bug in to Vault, then ok
thanks
some day Silverhair may become unconfused

confused


"Kayman" wrote:

> On Thu, 10 Apr 2008 17:50:00 -0700, silver hair wrote:
>
> > thank you
> > I find your answer most helpfull
> > and well explained
> > thank you
>
> YW :-)
>

On Sat, 12 Apr 2008 22:59:00 -0700, silver hair wrote:

> hi
> i have worked on that computer today
> for starter I uninstalled the antivirus stuff
> it was not working at all
> and installed AVG 7.5 free Edition
> dozens of files ended up in the Virus Vault imediatly
> trojen horses, I empty the Vault
> that stoped new pop ups
> I uninstalled and deleted half the stuff junk
> now the computer is fast. the internet browser too
> now the machine can be cleaned, work on that later
> present pop ups
> 1) Stm.exe Trojen horse Gneric 9.awcc
> Path. Program files\comon files\Secure PCCleaner
> 2) Twinlmd.exe Trojen horse generic 10.ATH
> C\Windows\system 32
> 3) csseqch.dll Trojen horse generic 10.HET
> C\Windows\System 32
> the last one seems to copy itself
> every time every time when switching program
> and pops up.
> click 3 times to put the bug in to Vault, then ok
> thanks
> some day Silverhair may become unconfused
>
Please download and execute David Lipman's Multi-AV tool as mentioned in my
post of 09-Apr-08 as well as SAS and SmitfraudFix!!!

In addition download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en...HJTInstall.exe

Fora where you can get expert advice for HiJack This! (HJT) logs.

NOTE: Registration is required in any of the below before posting a log

http://www.theeldergeek.com/forum/in...showf orum=29
http://www.thespykiller.co.uk/index.php?board=3.0
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://forums.tomcoyote.org/index.php?showforum=27
http://www.5starsupport.com/ipboard/...p?showforum=18
http://www.spywarewarrior.com/viewforum.php?f=5

(Keep on plugging, you'll get there eventually)

Once your OS is clean routinely practice Safe-Hex.
http://www.claymania.com/safe-hex.html
Hundreds Click on 'Click Here to Get Infected' Ad
http://www.eweek.com/article2/0,1895,2132447,00.asp

Good luck

On Sat, 12 Apr 2008 22:59:00 -0700, silver hair wrote:

> hi
> i have worked on that computer today
> for starter I uninstalled the antivirus stuff
> it was not working at all
> and installed AVG 7.5 free Edition
> dozens of files ended up in the Virus Vault imediatly
> trojen horses, I empty the Vault
> that stoped new pop ups
> I uninstalled and deleted half the stuff junk
> now the computer is fast. the internet browser too
> now the machine can be cleaned, work on that later
> present pop ups
> 1) Stm.exe Trojen horse Gneric 9.awcc
> Path. Program files\comon files\Secure PCCleaner
> 2) Twinlmd.exe Trojen horse generic 10.ATH
> C\Windows\system 32
> 3) csseqch.dll Trojen horse generic 10.HET
> C\Windows\System 32
> the last one seems to copy itself
> every time every time when switching program
> and pops up.
> click 3 times to put the bug in to Vault, then ok
> thanks
> some day Silverhair may become unconfused
>
Please download and execute David Lipman's Multi-AV tool as mentioned in my
post of 09-Apr-08 as well as SAS and SmitfraudFix!!!

In addition download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en...HJTInstall.exe

Fora where you can get expert advice for HiJack This! (HJT) logs.

NOTE: Registration is required in any of the below before posting a log

http://www.theeldergeek.com/forum/in...showf orum=29
http://www.thespykiller.co.uk/index.php?board=3.0
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://forums.tomcoyote.org/index.php?showforum=27
http://www.5starsupport.com/ipboard/...p?showforum=18
http://www.spywarewarrior.com/viewforum.php?f=5

(Keep on plugging, you'll get there eventually)

Once your OS is clean routinely practice Safe-Hex.
http://www.claymania.com/safe-hex.html
Hundreds Click on 'Click Here to Get Infected' Ad
http://www.eweek.com/article2/0,1895,2132447,00.asp

Good luck