Saturday, January 7, 2012

Computer Invasion

Just had an uninvited guest on the computer called "XP Security 2012."
This is NOT an actual security program - but rather a rogue that invades and hijacks your computer - telling you that you have all kinds of viruses, etc. when, in fact - it IS the virus!
If you see this program popping up on your computer - Do NOT buy it - do NOT delete what it wants you to - and take action right away to get it off your computer.
Apparently it goes by different names as well:  
XP Antispyware 2012
Vista Antispyware 2012
Win 7 Antispyware 2012
XP Antivirus 2012
Vista Antivirus 2012
Win 7 Antivirus 2012
XP Security 2012
Vista Security 2012
Win 7 Security 2012
XP Home Security 2012
Vista Home Security 2012
Win 7 Home Security 2012
XP Internet Security 2012
Vista Internet Security 2012
Win 7 Internet Security 2012

I tried several things to try and eliminate it but finally used Trojan Killer:
http://trojan-killer.net/

I had to run the computer in Safe Mode (hold F8 key while restarting before welcome screen) - and run the trojan killer for both the Admin and under my name.  Of course, it may be different for others.

Also, I had to open the task manager (control-alt-delete) and keep pushing "end task" on avp.exe  (again may be different on other computers)  this stopped the rogue from having all the control - but it kept popping up.

So far, things seem to be working.  My regular anti-virus software, internet, firewall, etc. all seem to be back (they had all been hijacked by this nasty software).

I should note that I was typing reports and, apart from a brief look at my e-mail and facebook (i.e., I didn't open anything or download anything!) I was not doing anything that should have brought on this little creature. 
Of course, it may have been lurking from a previous e-mail or other program - who knows.

If anyone runs into it - maybe this will help.