<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: AV2009 the fake anti-virus</title>
	<atom:link href="http://www.theweeklygeek.com/2008/10/30/av2009-the-fake-anti-virus/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.theweeklygeek.com/2008/10/30/av2009-the-fake-anti-virus/</link>
	<description>I'm the Geek so you don't have to be!</description>
	<lastBuildDate>Tue, 27 Jul 2010 16:20:01 -0700</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: kyle</title>
		<link>http://www.theweeklygeek.com/2008/10/30/av2009-the-fake-anti-virus/comment-page-1/#comment-61</link>
		<dc:creator>kyle</dc:creator>
		<pubDate>Sun, 17 May 2009 04:44:15 +0000</pubDate>
		<guid isPermaLink="false">http://www.theweeklygeek.com/?p=145#comment-61</guid>
		<description>Guys remember to look for add ons in the browser IE they will need to be removed to complete the removal good luck</description>
		<content:encoded><![CDATA[<p>Guys remember to look for add ons in the browser IE they will need to be removed to complete the removal good luck</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: AV2009 virus - causes fake security popups - Southern Maryland Community Forums</title>
		<link>http://www.theweeklygeek.com/2008/10/30/av2009-the-fake-anti-virus/comment-page-1/#comment-51</link>
		<dc:creator>AV2009 virus - causes fake security popups - Southern Maryland Community Forums</dc:creator>
		<pubDate>Fri, 30 Jan 2009 13:42:50 +0000</pubDate>
		<guid isPermaLink="false">http://www.theweeklygeek.com/?p=145#comment-51</guid>
		<description>[...] virus - causes fake security popups     AV2009 the fake anti-virus  My PC became infected this week, I&#039;m assuming from the kidlet visiting MySpace (a favorite [...]</description>
		<content:encoded><![CDATA[<p>[...] virus &#8211; causes fake security popups     AV2009 the fake anti-virus  My PC became infected this week, I&#8217;m assuming from the kidlet visiting MySpace (a favorite [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Obbop</title>
		<link>http://www.theweeklygeek.com/2008/10/30/av2009-the-fake-anti-virus/comment-page-1/#comment-48</link>
		<dc:creator>Obbop</dc:creator>
		<pubDate>Thu, 08 Jan 2009 04:43:35 +0000</pubDate>
		<guid isPermaLink="false">http://www.theweeklygeek.com/?p=145#comment-48</guid>
		<description>Dearly beloved,

We are gathered together on this solemn occasion to lament the infiltration of our beloved electronic brains by AV2009 or one of the similarly named trojans, viri, whatever.

Sadly, the scum creating or evolving this malady are making constant changes to thwart attempts at prevention and/or removal.

It appears the latest variant has done a fine job at browser hijacking to prevent the infected one from accessing Web sites that offer information and/or downloads that can be used to defeat the infection.

I assisted one of the kinfolk who was infected and took along printed instructions found on the Web along with three different programs burned onto a DVD to apply against the AV2009.

The damnable trojan (supposedly infecting via a rootkit) actually prevented the Malwarebytes free program (reported to have worked for several folks) from activating on the infected machine.

I used several different removal methods reported by others to have worked for them but to no avail.

I talked to a local pro who informed me his shop has seen several permutations of the trojan and that different removal methods are needed with a couple worst-case scenarios actually requiring a hard-drive wipe and reinstalling the O/S.

Be aware of the evolving nature of this trojan and that you may need to use different removal methods until you find the one that works against the variant of the trojan infesting your machine.

Good Luck!!!!!!!

http://obbop.wordpress.com/</description>
		<content:encoded><![CDATA[<p>Dearly beloved,</p>
<p>We are gathered together on this solemn occasion to lament the infiltration of our beloved electronic brains by AV2009 or one of the similarly named trojans, viri, whatever.</p>
<p>Sadly, the scum creating or evolving this malady are making constant changes to thwart attempts at prevention and/or removal.</p>
<p>It appears the latest variant has done a fine job at browser hijacking to prevent the infected one from accessing Web sites that offer information and/or downloads that can be used to defeat the infection.</p>
<p>I assisted one of the kinfolk who was infected and took along printed instructions found on the Web along with three different programs burned onto a DVD to apply against the AV2009.</p>
<p>The damnable trojan (supposedly infecting via a rootkit) actually prevented the Malwarebytes free program (reported to have worked for several folks) from activating on the infected machine.</p>
<p>I used several different removal methods reported by others to have worked for them but to no avail.</p>
<p>I talked to a local pro who informed me his shop has seen several permutations of the trojan and that different removal methods are needed with a couple worst-case scenarios actually requiring a hard-drive wipe and reinstalling the O/S.</p>
<p>Be aware of the evolving nature of this trojan and that you may need to use different removal methods until you find the one that works against the variant of the trojan infesting your machine.</p>
<p>Good Luck!!!!!!!</p>
<p><a href="http://obbop.wordpress.com/" rel="nofollow">http://obbop.wordpress.com/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Paul Kevil</title>
		<link>http://www.theweeklygeek.com/2008/10/30/av2009-the-fake-anti-virus/comment-page-1/#comment-47</link>
		<dc:creator>Paul Kevil</dc:creator>
		<pubDate>Fri, 02 Jan 2009 15:41:34 +0000</pubDate>
		<guid isPermaLink="false">http://www.theweeklygeek.com/?p=145#comment-47</guid>
		<description>What if you finally were convinced that it was authentic and paid for it?  Like a dummy after 2 days it had worn me down and I paid for it.  There was something about a 30 day refund.  I have checked my credit card to see if I was billed, so I could dispute the charge.  Nothing has shown up yet.  I did finally get rid of it with spybot which I had forgotten that I had on my computer from a couple of years ago.</description>
		<content:encoded><![CDATA[<p>What if you finally were convinced that it was authentic and paid for it?  Like a dummy after 2 days it had worn me down and I paid for it.  There was something about a 30 day refund.  I have checked my credit card to see if I was billed, so I could dispute the charge.  Nothing has shown up yet.  I did finally get rid of it with spybot which I had forgotten that I had on my computer from a couple of years ago.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
