The niece of a friend was given an Asus Eee PC 1000H. It has on it something called Rapid AntiVirus (?). This reports a series of viruses and is suggesting you cough up payment to actually remove them. Loading AVG does appear to remove some of the viruses, but each time you switch the machine on Rapid AV tells you they are still there and even includes AVG as a virus.
No idea how it got there. It looks like a scam to me if it classes AVG as a virus, but I haven't a clue how to get rid of it. Possibly remove it from startup items and then uninstall, leaving AVG as the installed AV software? I would reinstall Windows but there isn't a CD drive and, AFAICT no means of doing a reinstall.
Any ideas?
Is there a hidden restore partition on the machine, Tac?
As Rik says. They usually have a hidden EISA partition so you can reinstall as a boot up option, it probably also has the option to backup this partition onto a USB stick. I have an Advent 4211(MSI Wind) which I can restore from a backup on a USB stick.
Information on removing this here (http://www.bleepingcomputer.com/malware-removal/remove-rapidantivirus)
You will need to download and run Malwarebytes Anti Malware to remove it, there is a download link on the site in the link above.
Quote from: Rik on Jan 10, 2009, 11:43:03
Is there a hidden restore partition on the machine, Tac?
Don't know Rik as I'm doing all this at arms length :-(
Quote from: Sheltieuk on Jan 10, 2009, 11:53:39
Information on removing this here (http://www.bleepingcomputer.com/malware-removal/remove-rapidantivirus)
Thanks for the link we'll have a go at that and see what happens.
Whilst on this could someone suggest a basic AV/Anti spyware setup? We've put AVG on it and it will have malwarebytes. Is there anything else needed bearing in mind it's owned by a teenager....
A ban on connecting to the 'net? ;D
Something like the Comodo firewall wouldn't do any harm.
You could also have Super Anti Spyware (http://www.superantispyware.com/superantispywarefreevspro.html) onboard, as an on demand spyware scanner, Tac.
how much is that in proper money Simon :)
There's Free and Pro versions, Baz. I have no idea how much the Pro version is. :)
$29.95...
So, that's about forty quid then. ;D
i have the free but its limited isnt it, no real time protection if i remember right.
Thanks Rik...........PROPER proper money though, you know english stuff ;D
About £22 at a guess.
so you have the free one Simon?
Yes, the Free one doesn't offer real time protection. I have it just to use as an occasional scanner, Baz, as I have F-Secure Internet Security, and Windows Defender in real time.
yeah same here for the free one.
windows defender on the two lappies we now have...... :thumb: :thumbd: dont know yet still looking at it
A few links to downloads and info:
http://www.bleepingcomputer.com/startups/Rapid_Antivirus-24043.html
http://www.2-spyware.com/remove-rapid-antivirus.html
http://www.superantispyware.com/
If you download the free SuperAntiSpyware and use it and then uninstall it you will often get a special offer for the Pro version, I got mine for $9.95, just over a fiver for a lifetime license ;D
MalwareBytes seems to be the most recommended removal for this particular rouge though.
Ian
Thanks, Ian. :thumb:
Thanks to all for the help and advice. :) MalwareBytes seems to have done the trick.
At present the machine has the free AVG installed and we've left MalwareBytes installed. I don't have the machine to hand and I'm not sure whether free AVG does realtime scanning. The machine is in the hands of a teenager, so realtime scanning would be a good idea given the difficulty of removing some of this c..p. I'll take a look at SuperAntiSpyware as well.
Whilst posting, what about stuff like Norton or McAfee?
Avoid like the plague, Tac. Although better of late, they are bloatware, imo.
Personally I always liked Avast! antivirus. The free version that I used to use was pretty decent.
Quote from: vitriol on Jan 10, 2009, 16:00:41
Personally I always liked Avast! antivirus. The free version that I used to use was pretty decent.
I was just typing much the same message when the one above appeared.
I have always had lots of success with the free Avast Home edition. You do need to register it to get a free code to allow it to run for more than one month. I have never had any spam to the email address I used to register. The virus database receives online updates at least once a day.
If required it will do real time monitoring and comes 'fitted' with several clients you can chose to monitor or not.
It's never let me down, if anything it's a little too enthusiastic with a couple of false positives, which I'd rather have than a virus.
HTH.
Better than positive falsies, JB. >:D
OK. MalwareBytes has removed RapidAV with no probs, to say nothing of a load of other stuff and, a further scan has given it a clean bill of health.
Thanks to all for the advice :)
So, either AVG or Avast (paid or free) together with MalwareBytes (probably worth paying for) should cover most eventualities. Does this sound a reasonable summary?
It does, Tac, but I'd add the free Comodo firewall to that to be on the safe side.
http://www.comodo.com/
Quote from: Rik on Jan 10, 2009, 17:28:30
It does, Tac, but I'd add the free Comodo firewall to that to be on the safe side.
http://www.comodo.com/
Thanks Rik, but is that any better than the Windows one that's already running?
Yes, the Windows one is incoming only, Comodo is two-way.
Quote from: Rik on Jan 10, 2009, 18:39:44
Yes, the Windows one is incoming only, Comodo is two-way.
Thought that might be the case.