<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" 
      xmlns:thr="http://purl.org/syndication/thread/1.0">
  <link rel="alternate" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html" />
  <link rel="self" type="application/atom+xml" href="http://ask-leo.com/atom.xml" />
  <id>tag:ask-leo.com,2011://3/tag:ask-leo.com,2008://3.3601-</id>
  <updated>2011-12-23T03:02:38Z</updated>
  <title>Comments for My anti-virus performed a virus removal but I still have a symptom, how do I get rid of it?</title>
  
  <generator uri="http://www.sixapart.com/movabletype/">Movable Type 4.32-en</generator>

  <entry>
    <id>tag:ask-leo.com,2008://3.3601-comment:50822</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2008://3.3601" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html#c50822" />
    <title>Comment from andrea on 2010-09-30</title>
    <author>
      <name>andrea</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>i would like to know how to get this off my comp i wasnt home my boyfriend was i am not sure what happened and i cant even get into remove programs its called secutity tool number is 500625 </p>]]>
      <p>A comment on: <a href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html">My anti-virus performed a virus removal but I still have a symptom, how do I get rid of it?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2010</a>.</p>
    </content>
    <published>2010-10-01T04:24:59Z</published>
  </entry>

  <entry>
    <id>tag:ask-leo.com,2008://3.3601-comment:33586</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2008://3.3601" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html#c33586" />
    <title>Comment from Terry Hollett on 2009-01-02</title>
    <author>
      <name>Terry Hollett</name>
      <uri>http://unspecified</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://unspecified">
      <![CDATA[<p>I just spent a couple of days trying to clear a rogue program called WiniGuard off my neighbour's computer. I tried two different virus programs, Avira and AVG. Neither one would update and WiniGuard alerts keep popping up.</p>

<p>The problem other than updating the antivirus was trying to research on an hijacked browser. I kept getting sent to other web pages.</p>

<p>I finaly did get what I thought was enough data to get rid of it;The program folder, reg entries, and a few extra ones in the System32 folder (baloon.exe and cfrog.exe). </p>

<p>Still, the browser was hijacked and the antivirus (AVG) was un-updated. I downloaded the updates from my computer burned them on a CD and used the option in AVG to update manually from folder.</p>

<p>Updated successful, but scanner didn't seem to be scanning anything. So I restarted in Safe Mode, and ran their scanner there. It removed a few items one being a file called autorun.inf (from another virus program). Did some more resaerch, checked for associated files...luckily found none.</p>

<p>Everything seemed to be clean but then every time Internet Explorer started up AVG would complain about an infected file called msqpdxiveoypff.dll with Trojan horse Generic 12.AH1J.</p>

<p>Using Hijackthis I was able to delete this threat but still no updates. A day later I tried again and found some WiniGuard traces had reappeared. Deleated them as before, finally I was able to get eniugh control of the browser to download Malewarebytes and update it. It SEEMS to have taken care of the rest. </p>

<p>AVG is now updating normally. Formating and reinstalling Windows from scratch is not an option when you don't have a CD and don't have the finances to buy one.</p>

<p><a href="http://www.geocities.com/terryhollett2003/" rel="nofollow"><a href="http://www.geocities.com/terryhollett2003/" rel="nofollow"><a href="http://www.geocities.com/terryhollett2003/" rel="nofollow"><a href="http://www.geocities.com/terryhollett2003/" rel="nofollow">http://www.geocities.com/terryhollett2003/</a></a></a></a></p>]]>
      <p>A comment on: <a href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html">My anti-virus performed a virus removal but I still have a symptom, how do I get rid of it?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2009</a>.</p>
    </content>
    <published>2009-01-03T00:26:47Z</published>
  </entry>

  <entry>
    <id>tag:ask-leo.com,2008://3.3601-comment:33585</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2008://3.3601" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html#c33585" />
    <title>Comment from Narc on 2008-12-30</title>
    <author>
      <name>Narc</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>There is one further point to make, and it is this: even if you have been backing up and have a complete image of the system that you can roll back to, <i>you cannot be sure it was made prior to the infection</i> unless it was made immediately after installing the operating system, and before connecting the computer to a network (local network or the Internet). So, for truly paranoid people like myself, reformatting and reinstalling is still required. The backup therefore just gives you the ability to selectively restore data you've created, as long as proper precautions are taken.</p>

<p>Furthermore, there are any number of possible infections that are not obvious, or even apparent to even the most technical users (I'm thinking spambot trojans, which survive longer if they can hide from the computer operator). It's a truly terrifying world out there for us paranoid people.</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html">My anti-virus performed a virus removal but I still have a symptom, how do I get rid of it?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2008</a>.</p>
    </content>
    <published>2008-12-31T06:55:56Z</published>
  </entry>

  <entry>
    <id>tag:ask-leo.com,2008://3.3601-comment:33584</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2008://3.3601" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html#c33584" />
    <title>Comment from fastfreddie1959 on 2008-12-30</title>
    <author>
      <name>fastfreddie1959</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>This is my personal instructions on virus removal.<br />
Ive passed it along to hundreds of people<br />
and it works every time.<br />
And i use both programs..and have been <br />
attacked by the xp-2008-2009 trojan<br />
and it has not entered my computer.<br />
I use this everyday helping someone.<br />
This must be done first......<br />
Steps to turn off System Restore<br />
1. Click Start, right-click My Computer, and then click Properties.<br />
2. In the System Properties dialog box, click the System Restore tab.<br />
3. Click to select the Turn off System Restore check box. Or, click to select the Turn off System Restore on all drives check box.<br />
4. Click OK.<br />
5. When you receive the following message, click Yes to confirm that you want to turn off System Restore:</p>

<p>Then download this but don't buy it...just<br />
use it to get rid of the trojan...<br />
<a href="http://www.malwarebytes.org/rogueremover.php" rel="nofollow">http://www.malwarebytes.org/rogueremover.php</a><br />
Once the trojans are removed then you<br />
need these 2 programs for better protection..</p>

<p><a href="http://www.personalfirewall.comodo.com/download_firewall.html" rel="nofollow">http://www.personalfirewall.comodo.com/download_firewall.html</a></p>

<p><a href="http://www.comodo.com/boclean/CBO_download.html" rel="nofollow">http://www.comodo.com/boclean/CBO_download.html</a></p>

<p>Firewall comes with a Toolbar-you don't need it.<br />
Just Uncheck the box for it.</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html">My anti-virus performed a virus removal but I still have a symptom, how do I get rid of it?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2008</a>.</p>
    </content>
    <published>2008-12-31T01:54:25Z</published>
  </entry>

  <entry>
    <id>tag:ask-leo.com,2008://3.3601-comment:33583</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2008://3.3601" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html#c33583" />
    <title>Comment from Allan on 2008-12-30</title>
    <author>
      <name>Allan</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>G'day Leo. I agree with John, perhaps an article on backing up would be a good one for the new year. i have had computers for about 8 years and have never done a back-up, as i don't know how!<br />
Happy New Year, Al.</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html">My anti-virus performed a virus removal but I still have a symptom, how do I get rid of it?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2008</a>.</p>
    </content>
    <published>2008-12-30T22:46:31Z</published>
  </entry>

  <entry>
    <id>tag:ask-leo.com,2008://3.3601-comment:33582</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2008://3.3601" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html#c33582" />
    <title>Comment from john on 2008-12-30</title>
    <author>
      <name>john</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>i like the answers you are giving and you are so right the only way to get rid and i do mean totally rid a virus or anything that slows your computor down is to fdisk and reformat and download windows again. ,  which alot of people just dont know how to do this.  maybe you could run an article on this procedure, it would save people alot of headaches if they knew how to. i'm a self taught person and i learned alot from mostly library books but also from your site keep up the super work.     p.s.  free antivirus is available at avast  go to c/net downloads for free. you might want to pass this on.     thanks for being.   john.</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html">My anti-virus performed a virus removal but I still have a symptom, how do I get rid of it?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2008</a>.</p>
    </content>
    <published>2008-12-30T21:42:56Z</published>
  </entry>

  <entry>
    <id>tag:ask-leo.com,2008://3.3601-comment:33581</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2008://3.3601" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html#c33581" />
    <title>Comment from Mary on 2008-12-29</title>
    <author>
      <name>Mary</name>
      <uri>http://unspecified</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://unspecified">
      <![CDATA[<p>Leland -<br />
Try using the techniques at bleepingcomputer:</p>

<p><a href="http://www.bleepingcomputer.com/malware-removal/remove-rapidantivirus" rel="nofollow"><a href="http://www.bleepingcomputer.com/malware-removal/remove-rapidantivirus" rel="nofollow">http://www.bleepingcomputer.com/malware-removal/remove-rapidantivirus</a></a></p>

<p>I used bleepingcomputer's advice a few months ago to get rid of a similar infection by Antivirus XP 2008. See this previous Ask-Leo article:</p>

<p><a href="http://ask-leo.com/how_can_an_infection_like_antivirus_xp_2008_happen.html" rel="nofollow"><a href="http://ask-leo.com/how_can_an_infection_like_antivirus_xp_2008_happen.html" rel="nofollow">http://ask-leo.com/how_can_an_infection_like_antivirus_xp_2008_happen.html</a></a></p>]]>
      <p>A comment on: <a href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html">My anti-virus performed a virus removal but I still have a symptom, how do I get rid of it?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2008</a>.</p>
    </content>
    <published>2008-12-29T20:36:20Z</published>
  </entry>

  <entry>
    <id>tag:ask-leo.com,2008://3.3601-comment:33580</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2008://3.3601" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html#c33580" />
    <title>Comment from Leland Wilburn on 2008-12-26</title>
    <author>
      <name>Leland Wilburn</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>How do I remove Rapid Antivirus? Norton 360 v2.0 will not unless I pay extra an extra $100 on top of what the program itself cost.</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/my_antivirus_performed_a_virus_removal_but_i_still_have_a_symptom_how_do_i_get_rid_of_it.html">My anti-virus performed a virus removal but I still have a symptom, how do I get rid of it?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2008</a>.</p>
    </content>
    <published>2008-12-27T04:56:04Z</published>
  </entry>

</feed>

