Gaming OMG you guys major problem on my computer.Please help!

[Sanderino]

Wow, I find myself typing the Topic title like a total troll.
Sory, didn't know on wich section to post this.
So, on my parents their laptop, my sister is always oding stuff on it too and now, this morning, XP Guardian pops up, it never said anything and says that the system is being hijacked and that third parties are scanning the laptop for info. I'm a total noob at this, do I need to start panic, or can I count on my Temper Tech's?

 

[BlueStar]

says that the system is being hijacked and that third parties are scanning the laptop for info.

Sounds more like something a pop-up ad would say rather than Windows security software - did it by any chance ask you to download something or click somewhere to "fix" it?

Get some free anti-virus software like avg and do a scan.

 

[DKAngel]

err pull the plug on the lappy, disconnect it from the web

and wtf is xp gardian?

 

[Sanderino]

I have wireless. xP Thank god for the answers so quick! But if i cut the connection with the internet, then no "third parties" can see the info?

says that the system is being hijacked and that third parties are scanning the laptop for info.

Sounds more like something a pop-up ad would say rather than Windows security software - did it by any chance ask you to download something or click somewhere to "fix" it?

Get some free anti-virus software like avg and do a scan.

Yeah? I maybe tought so too.. well, it's named XP Guardian, and that's on every windows comp is it? Well, my parents have Norton *GROAN* and it's scanning right onw. so.. should I wait ? oh and BTW: that XPGuardian is spaming with pop ups neer the right side of the task bar saying it's hijacked and stuff, and yeah, it's really strane it asks me to fix it, run a free scan and then you need to buy the full version and then it removes all of the viruses.

 

[Gariscus]

XP Guardian is a fake anti-spyware program that is distributed through the use of Trojans or comes bundled with other malware. Once a Trojan virus is installed, it will impersonate an Automatic Windows Updates window and download the rogue program onto your computer. When the rogue program is active, it will imitate a system scan and report false system security threats. What is more, XPGuardian will constantly display fake security alerts and impersonate Windows Security Center to make the scam look more realistic. Finally it will ask you to pay for a full version of the program to remove the infections which don't even exist. Don't purchase it and remove XP Guardian virus from your computer upon detection.

 

[Sanderino]

OMG Gariscus, love you! =D I love you, gonig to do it right away!

 

[Gariscus]

Hope you don't have trouble removing it...

 

[Sanderino]

Why? Is it hard to remove? Norton didn't found anything.. I was thinking to try it with CCCleaner.. Or does osmeone knows a better idea?

 

[mrfatso]

since it's a trojan, maybe malwarebytes might help? or perhaps spybot- search and destroy?

 

[Gariscus]

It might be wise to read this: http://www.myantispyware.com/2010/01/28/ho...ivirus-xp-2010/

 

[Sir-Fritz]

CCleaner doesn't clean any type of Malware, be it spy-ware, Trojans or virus'.

 

[Velveteer]

CCleaner doesn't clean any type of Malware, be it spy-ware, Trojans or virus'.

They may have been referring to the uninstaller tool of CCleaner, which I believe is just the same as the Windows Version.

I would go:
run> msconfig > disable the offending software > restart > uninstall > remove leftover files > AV Scan > Malware Scan.

I think there needs to be some sort of public announcement about these fake AV programs, as too many people get fooled. AntivirusXP, Antivirus 2010, it all sounds very official to someone who isn't suspicious.

 

[Sanderino]

Yeah true. Well, I'm going to try Spybot: Search and Destroy first and then your method, Velveteer.

EDIT: I can't getto other sites except my homepage.. What now ..

 

[Deleted_171835]

What an annoying virus. Is your homepage GBAtemp? Try entering the IP Address of a popular site like Youtube into your address bar.

When the virus is gone, get BitDefender. Great antivirus program if a bit resource intensive.

 

[Guild McCommunist]

I've had a few problems with fake anti-virus programs and usually I have to end up removing them myself since anti-virus always seems to pass over them. This has worked for me at least, it may not work for everyone.

0. Before doing any of this, I suggest using all your legit anti-virus programs. If none of them can do anything, you can do this or try an alternative one that the other posters listed
1. Cut off all internet connections. Not sure if this does anything really, but it's a paranoia thing. Helps me feel secure at least.
2. Go to Task Manager, and find out the name of the executable. For example, FireFox is firefox.exe.
3. If possible, right click the pop up of the fake anti-virus and go to properties. It should show you the folder where it's rooted. Find that folder and delete it.
4. End the process in Task Manager. This will stop fake pop ups and the like. Remember, stop the PROCESS, not the APPLICATION. It can just pop up again if you stop the application.
5. Go to Start->Search and type in the name of the program (like firefox or something). I'm guessing you'd search for xpguardian or something. Delete everything that the search finds that's related to your fake anti-virus. Odds are it'll be rooted in a folder similar to the one deleted previous, if you could do that. Otherwise, most of them should be rooted in one folder.
6. After you're done, no more pop ups should be appearing. Run anti-virus scanners just in case.

Not sure if this is a load of bullshit, but it has worked for me in the past. The last one I had was pretty annoying. It was blocking my executables and popping up porno websites. Not fun.

 

[Brian117]

Dude, just freaking pirate a good Anti-Virus program. It's really not that hard. Don't use no free AVG crap. AVG sucks to the highest.

Go pirate either Kaspersky, or ESET Smart Security.

 

[NoSmokingBandit]

Follow this guide:
http://www.spywarevoid.com/remove-xp-guard...#manual_removal

 

[CannonFoddr]

Another guide for removal

 

[NoSmokingBandit]

From what i've read its a pretty nasty piece of software. I'd instruct your family to be very careful what they install, OP.

 

[NeSchn]

I'd go with MalwareBytes. Thats always your best bet.