Mobile/PDA About Us Advertise here
User User name Password  
  Not registered yet? Register here.
Lost your password? Click here. 		 
  Home   News   Guides   Downloads   Glossary   Hardware   Profiles   Forums   v4  
 Advertise at AfterDawn.com     Link to us!     Private messages     Compose a private message     List of all updated threads     Threads without replies     Search messages
Monday 3.3.2025 / 23:56
Search AfterDawn Forums:        In English   Suomeksi   På svenska
afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > hijack this... how can i get rid of this antivirus 2010?
Show topics
 
Forums
Forums
hijack this... how can I get rid of this antivirus 2010?
  Jump to:
 
Posted Message
xaznboitx
Senior Member
_ 		3. October 2009 @ 20:51 _ Link to this message    Send private message to this user   
nevermind please delete
[ + quote]

This message has been edited since posting. Last time this message was edited on 13. November 2010 @ 15:05
Advertisement
_ 		__
ddp
Moderator
_ 		3. October 2009 @ 21:10 _ Link to this message    Send private message to this user   
go into msconfig\startup to remove from there. check your all programs\startup to make certain it is not there. download, install update, immunize twice then check fpr problems with spybot search & destroy. http://www.majorgeeks.com/download2471.html#
[ + quote]
xaznboitx
Senior Member
_ 		8. October 2009 @ 22:19 _ Link to this message    Send private message to this user   
it stated that spybot got rid of it but it came back after I restarted the computer. Same with SmitfraudFix. I use SmitfaudFix on safe mode and normal mode and still comes back after restarting the computer. SmitfraudFix only gets rid of it on Normal mode til I restart again and the spyware comes back.
[ + quote]
ddp
Moderator
_ 		9. October 2009 @ 13:39 _ Link to this message    Send private message to this user   
did you go into msconfig\startup to remove it from there & startup in all programs?
[ + quote]
xaznboitx
Senior Member
_ 		10. October 2009 @ 00:01 _ Link to this message    Send private message to this user   
yes I did. I tried to do a window restore it said that the restore feature is turned off. When I went to control panel to look at the restore feature, it's not there.
[ + quote]
ddp
Moderator
_ 		10. October 2009 @ 00:10 _ Link to this message    Send private message to this user   
was it in msconfig\startup & startup in all programs? run spybot in safemode after you updated & immunize it twice.
[ + quote]
Advertisement
_ 		__
 
_
sodaman
Junior Member
_ 		12. October 2009 @ 00:39 _ Link to this message    Send private message to this user   
The problem using msconfig is that most new viruses can reload itself through DLLs and the prefetch. These are usually running in safemode too. Best way to remove any virus is to have a bootable OS CD. Make a UBCD4win CD and boot from this CD. Used the ezfix program to clean the temps,prefetch, and startup programs. you can also run spybot and superanti virus scans off this cd.

Delete Program Files\\AV2010\\AV2010.exe
Program Files\\AV2010\\svchost.exe
WINDOWS\\system32\\IEDefender.dll
WINDOWS\\system32\\wingamma.exe

Run regedit local and delete these registries:
HKEY_CURRENT_USER\Software\AV2010
HKEY_CLASSES_ROOT\AppID\{3C40236D-990B-443C-90E8-B1C07BCD4A68}
HKEY_CLASSES_ROOT\AppID\IEDefender.DLL
HKEY_CLASSES_ROOT\CLSID\{FC8A493F-D236-4653-9A03-2BF4FD94F643}
HKEY_CLASSES_ROOT\IEDefender.IEDefenderBHO
HKEY_CLASSES_ROOT\IEDefender.IEDefenderBHO.1
HKEY_CLASSES_ROOT\Interface\{7BC7565C-5062-43CE-8797-DC2C271140A9}
HKEY_CLASSES_ROOT\TypeLib\{705FD64B-2B7B-4856-9337-44CA1DA86849}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC8A493F-D236-4653-9A03-2BF4FD94F643}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0012
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0013
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Gamma Display"

Common hiding spots for viruses,malware, and trojans.
\windows\system32\
\document and settings\<user name>\application data\
\windows\prefetch\
\windows\temp\

Look for recently added files with wierd names. There usually exe, dll, or tmp files.
[ + quote]
afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > hijack this... how can i get rid of this antivirus 2010?
 

Digital video: AfterDawn.com | AfterDawn Forums
Music: MP3Lizard.com
Gaming: Blasteroids.com | Blasteroids Forums | Compare game prices
Software: Software downloads
Blogs: User profile pages
RSS feeds: AfterDawn.com News | Software updates | AfterDawn Forums
International: AfterDawn in Finnish | AfterDawn in Swedish | AfterDawn in Norwegian | download.fi
Navigate: Search | Site map
About us: About AfterDawn Ltd | Advertise on our sites | Rules, Restrictions, Legal disclaimer & Privacy policy
Contact us: Send feedback | Contact our media sales team
 
  © 1999-2025 by AfterDawn Ltd.

  IDG TechNetwork