Beware of Antivirus 2008 & Antivirus 2009 Malware

Services for Real Estate Pros with REODB Inc. / Technology Mechanics Inc.

There is a particular malware hitting many systems and has been for a few months now.  Some of my clients have unknowingly allowed this malware onto their computer because it looks like a legitimate anti-virus upgrade request.

Please be aware of this and if you see a "pop up" asking you to install or allow the Antivirus 2008 or Antivirus 2009 to install on your system do not let it.

If you are one of the unlucky recipients of this malware and it has indeed infected your system and just will not go away there is a removal tool that works.  It called malwarebytes and it is a free download.

It has saved us a lot of time and our clients a great deal of money and hartache.

Here is the link.

If you have any issues with it post them here or email me and I will get you squared away.



Comments (9)

Richard Ives
Chicago, IL

Welcome to AR, Brett.  Have a great week.

Sep 04, 2008 09:48 AM
Michael Wayne Jackson
Coldwell Banker - Novato, CA
Broker - Seniors Real Estate Specialist Novato

I think I have this on my pc right now. This pop up keeps coming up everytime I use internet explorer.

Sep 04, 2008 09:56 AM
Sherry Peckhoon Sim
Sims & Company - Cayucos, CA
Broker/Owner, Covering the Beautiful Central Coast

Thanks for sharing, Brett.  I did receive such a pop-up and was suspicious and did not download it.

Sep 04, 2008 12:24 PM
Li Read
Sea to Sky Premier Properties (Salt Spring) - Salt Spring Island, BC
Caring expertise...knowledge for you!

Thank you for the alert -- appreciated!

Sep 04, 2008 01:15 PM
Craig Rutman
Helping people in transition - Cary, NC
Raleigh, Cary, Apex area Realtor

Hey Brett,

I've completely uninstalled Norton from my computer and installed Avast Anti Virus.

It's so much better, protects your pc from viruses and mal/spyware, updates itself everytime you go online, and, best of all, it's FREE!

Here's the link for you or anyone who is interested:


Sep 05, 2008 02:10 AM
John Conca
CENTURY 21 Select Real Estate - Placerville, CA
Century 21 Select Real Estate

A fellow office mate got infected with this malware.  It kept wanting him to purchase the program to remove the infection that it caused.  What a racket!  I managed to get most of it removed but I am still having problems with the machine.  It seems that most links, especially those from say Yahoo or Google redirect you to some random site.  It is very frustrating when you search in an engine for Lavasoft and end up at some unrelated site.  I have tried the following spyware; HiJackThis, CCleaner, RRAB, ADDSpy, MsConfig-Cleanup and nothinig seems to work.  I tried AdAware but it cannot uptae the DEFs, same with SPyBot Search and Destroy, it's like to ports are blocked for these program.  It also prevents me from going directly to and ANY other valid antispyware site, it simply gives me a 404 type page. 

I uninstalled IE 7 and reinstalled it but that did not work either.  This thing even redirects when I run IE 7 in "safe mode".  I have spent two days with this machinie and I have a really bad headache.  Can you help me?  I downloaded your guide but I cannot get any of those links to work.  I downloaded the programs in your guide to an external drive but when I try to install them, they don't run properly on the infected machine.



Thanks, John

Nov 17, 2008 02:48 PM
John Conca
CENTURY 21 Select Real Estate - Placerville, CA
Century 21 Select Real Estate
Well, I ran a program called AVast this morning and it found one problem; it said that the c:\System Volume Information\_restore{7B2FBBA1-9AE9-4909-A9A6-AB025CC0749B}\RP928\A0195489.exe was infected with some kind of WinTrojan-eng/Worm. So I clicked on repair ( the recommended option) but it could not, I then clicked on move and it moved it somewhere (it did not give me an option). Since then I have not been able to reboot.

I am thinking that the only option left is to reformat and reinstall Windows. Would you agree or do you have any other recommendations?

Thanks John
johnc123 is online now Report Post  
Nov 19, 2008 07:54 AM
John Conca
CENTURY 21 Select Real Estate - Placerville, CA
Century 21 Select Real Estate

I have successfully re-formatted the hard drive C:\ and have successfully re-loaded Windows XP Home on the machine.  I am now in the process of updating Windows to service pack 3 and at the same time running AVF Free to make sure that I got the bug.  After which I will reload his software.  Thank you for the help.


Nov 21, 2008 05:21 AM
Robert L. Brown - Grand Rapids, MI
Grand Rapids Real Estate Bellabay Realty, West Mic

Sounds like a day in the life of a computer. Glad to see you're getting the situation under control.

Dec 03, 2009 10:59 AM