I just spent the past 3-4 hours removing this virus, trojan...a lil of everything..

It's called AV Security Suite, it's a fake security program that basically fucks you over. You can't get on the internet, can't open any programs, you can't close the program, it acts like it will fix everything it did to you but it just makes it worse if you allow it.

But since I know a little bit about trojans and what not it wasn't too hard.. =\

But yeh, if this ever happens to land on your computer..well, take a look at my avatar... the hotdog is you and your computer, the yellow jizz, is the nasty goo withen the giant penis of the virus.

OMG...that thing is BADDDDDDD

It spoofs the IPs addresses of a lot of programs that update themselves on your computer, including real antivirus programs, windows update, real player, adobe and a ton of others. you might have gotten rid of it for now, but it's DEEP in your computer. It will be back, and mostly likely sooner rather then later. It replicates it's own registry entry as random numbers and letters (6 places out) and reinstalls it's own IP addresses for updates constantly. When anything on your computer updates it really updates/downloads AV security suite, opens back doors, installs keyloggers, gives you adware, and installs other viruses.

I had to reformat my friends computer....he was trying to work around this program for about 2 months...and by that time there was no hope of cleaning everything out.

Usually i can fix most virus issues, but this one is a monster. I hope that whoever made this is strung up by their balls over a fire ant hill that is being attacked by killerbees.

i agree, any sign of this virus...backup what u need...format...reinstall.

Don't f*** around with it, u'll never rid ur system of it totally unless you start again.

You can completely get it out without formatting. However, both your legit virus scanning program and SpyBot probably have to be relatively up to date. I got the this on my Windows XP x64 machine from a keygen to a soccer game I wanted to try before I bought, which turned out to completely suck anyway. I knew better to use the stupid thing and should have just looked for a key elsewhere.

Anyway, as soon as it comes up and starts doing its thing, hit the restart button on your PC. Boot to safe mode, preventing the bogus AV suite from launching. Run a virus scan with your legit virus scanner, now run SpyBot. The virus scan will probably find and remove the first trojon it creates. Spybot may or may not find ALL of the virus at this point. In the advance tools in Spybot, find and remove any startup program that looks like "alkjgflaksjdlkmc" or whatever in the name.

Now, reboot as normal. The bogus suite shouldn't start, at least not for a while. Update your virus scan. Update Spybot and run immunizations and a total scan. In my case, it identified the bogus suite and removed it. Check your startup programs again and make sure there's nothing fishy in it.

If you suspect a particular program you downloaded of giving you this, uninstall that program and remove EVERYTHING associated with it.

Reboot one more time. Run one more scan of both spyware and viruses now or the next day.

It was a pain in the ass, but I've been clean about a week now and it would have come back before that.

Also, don't bother running a restore point to try and avoid all these steps... AVG would usually pick up the trojons in the system restore sections of the system.

In my opinion, this is a bad virus but not quite as annoying to completely remove as "vundo" AKA "virtu mundo"

OH, and one of the biggest pains about this AV suite crap is that even after cleaning the system, you'll be like "I can't view any websites!" That's because you have to simply set your "proxy settings" back to default lol

Like Azimuth said though, if you don't do something the MINUTE you see this evil program, you will probably be riddled with BS so bad that you will be forced to reformat.

_________________
Ultima avatar: The Famed JIZABOZ,GWAR Guildmeister