I'm on Mac OSX.
Don't bother me with this ridiculous shit.
This is popping up on SeaMonkey and Firefox on Mac OS X. A complete waste of my time as it wipes out my current pages I'm working on.
Losers.
It just happened on my Mac as well. So Boswell, you're not safe, either. I've never had any problems with my Macs in 15 years, but, come on, no point in becoming complacent. Bahrath, is there any action I should take, or should I just forget about it?
This threat doesn’t affect Mac OS users currently as we haven’t seen a MAC variant of this rogue or any other from this group yet (except the macsweeper(dot)com)
As Wendy has experience it just annoys MAC users, and poses a dangerous threat to PC users.
Thank-you. I feel better.
Just popped up for me, thank you for posting this. Having no clue what it was I googled it and found your site. Thanks for the instant info!
The purveyors must have hacked classmates.com because that is where I recieved a pop-up redirect to the xponlinescanner.com website. The rogue site displayed a graphic which was a poor attempt to make it look like a scan was in progress. I just closed the browser at that point. Nothing was downloaded and I did not become infected. I am on Vista with UAC on so MAC users do not get so self-satisfied and boastful as my Windows platform is still clean.
If you try to move around the "Warning !!!" window in the second of the 3 screen shots above, it will not move. Rather, it activates the Save File operation, trying to save the file [XPantivirus2008_v77011816.exe]
The value of "Your IP address" is correct.
Hmm. I wasn't on Classmates.com at the time, but I have been there recently. Also I concur with Gordon. Moving around the stationary warning sign was the real tip-off, and I did check the IP address. They had it right.
@Carolyn
classmates.com had problems with some malicious advertisement.
Check out Sandi's Blog "Spyware Sucks" for more information:
http://msmvps.com/blogs/spywares...23/
1550900.aspx
http://msmvps.com/blogs/spywares...24/
1551597.aspx
http://msmvps.com/blogs/spywares...ks/
default.aspx
Well MAC users beaware of this applciation "imunizator"
hxxp://imunizator(dot)com site pushes a new MAC rogue application.
Whoa. I'll be vigilant.
antiviros
This happened to me yesterday and I also googled it and found your sight. Thanks for helping me!
So what do you do when your a dummy and you buy this crap and then can't get it off your computer....I keep getting the cleaner pop up in my url and I did get rid of the sp antivirus and file shredder.
Joyce, Its not only the dumb,the scammers behind these rogue security applications comes up with new ideas to trick many users into downloadingpurchasing this application.
If you are still having issues try posting a hijackthis log at the following great site:
http://www.temerc.com/forums/vie...wforum.php?
f=12
They will help you to clean up your system.
I bought this crap today, but realized it was a fraud almost immediatly. Just a little too late!
I'm trying to stop the puchase transaction and canceled my credit card. Do you think I have a chance of getting my money back on the card?
Monica,
We haven’t heard any one reporting that they have got their money back after being scammed by this group. Please keep us posted with the updates.
I have just brough this program and found out that this is a scam I will let my friends know about this too I know I can't stop transaction now but I will try to uninstall it thats for your advice from now on will buy from computer shop
Cheers Gary
I too fail for this scam and was able to contact my bank to have the charges reversed. I downloaded another
antispyware software(PC tools) that worked. XP is very shady. Beware!
These guys are number one frauds....
They are looting people want to find a way of suing these guys and pay for their false deal.
This flood of XP antivirus clones seems unstoppable. Yesterday I spent half a day sorting out the malware problem two guys from UK had with their computers. Both had XP antivirus, but with different behavior and symptoms! Malicious files had different names. What's really scaring is that McAfee and Lavasoft helped no at all. I clearly see why people get so frustrated with this resilient malware.
ilost my anitivirus program and i need help to get it back
i lost my antivirus program and i need to get it back and the file shredder 2008
@jesus,
Can you let us know which antivirus program you are referring to?
If you need assistance to remove malicious files from your system they try posting your problem @ Temerc.com forum
http://www.temerc.com/forums/
vie...6955c80bcdac036
This is somthing I have been looking for a long time. Thanks!!!
Chase refused the transaction the minute it happened for me. I called to report the fraud and the guy looked over my recent activity and saw that Chase had blocked and flagged the whole thing. They issued me a new card and I was never charged. So, call your card company right away if it happens to you. This company has become known to a lot of card companies and they block it automatically. Not all, but some cards..
I too have just had ths hapen to me, I assumed something was wrong so kinda went with it, i'm not hot on pc's but the lptop i'm using automatically scanned and removed any threat, but I sill keep getting a message box saying " someone is trying to access your pc" Please, is this bullshi7, or have I got anything to worry about? I haven't filled out any payment info. and being as this is my mums laptop, I hop this isn't going to damage this?! Andrew, worried now!
Bharath:
My Norton AV caught the xpantivirus file, but when I restarted, a window popped up trying to get me to install their software. Did not do so, and finally task mgr closed down the window.
Apparently some damage was done - I have lost the "desktop" and "screen saver" tabs in my display options dialog box.
Any ideas what happened, and how to fix??
Thanks, C-b
@Andrew if you are still getting the popup's regularly then you need to get your system cleaned. Post your log @Temerc.com site and the expert will guide you to clean up your system.
Follow the link: http://www.temerc.com/forums/vie...wforum.php?
f=12
@Corgi looks like Notron has cleaned up the malicious files, but as the trojan ran on your system the registry changes made by the trojan has not been rolled out by the AV.
Post a log @Temerc.com site follow the link specified above, The experts over there will either suggest you a tool or might guide you through steps that will restore the registry settings back to normal.
The easy way to get rid of it is http://www.net-studio.org/
applic...pyware_2009.php
There's a patch for this rogue there.
I found a couple of executables that may have something to do with it:
C:WINDOWSbrastk.exe
C:WINDOWSSYSTEM32brastk.exe
All i done was open the program filesfolder n delete then emptyed the recycle bin tht works
I think I've been infected with this, but I didn't buy anything. I've got some XP Antispyware balloon that keeps popping up saying I'm infected. I've tried using Hitman Pto to clean it out but when I run it, it tries to install an app called SpywareBuster, and then locks up.
I'm not sure where I picked this up, but it's brought my laptop to a standstill.
Any ideas?
@Alan
Try the steps mentioned in the following link
http://www.bleepingcomputer.com/...ntispyware-
2009
This should help you to remove any infections related to rogue security application.
Thanks Alan...
I just followed your link and the processed worked.
Thanks,
JV
yea I got it two... I spent about 4 hours on the phone with a microsoft rep that basically couldn't help me much.. I cannot open any of the posted links and I have no idea what to do... any ideas?
@yana, Did you try accessing this link
http://download.bleepingcomputer.../mbam-
setup.exe
if you can install the program and give it a run, this toll will do the trick..
This thing was carried a trojan horse with on some google ads. Beware! Took a lot to clean it up. I finally used regedit and got it off.
@ Bharath M N: Is there a way to remove this virus without downloading the malwarebytes program? I'm on a laptop right now. On my desktop, every time I go to a useful site to try to get rid of this virus, it either automatically redirects me to a page that tells me to download AntiSpywareXP 2009 or it says I can't establish a connection to the internet, even though I am able to access other pages.
@Julianne i am afraid i wont be able to provide you workaround to eliminate the Trojan until and unless we know which Trojan is installed on your system.
Usually a Trojan horsemalware is responsible for the kind of action seen on your system.
if you can download HijackThis tool try posting t on Temerc.com site the address of the forum is mentioned in the above comments.
You can also try downloading Malwarebytes on a different computer and then transfer the file through an external device to your laptop and install it...
@ Bharath MN: I actually had my friend send it over to me through MSN as a .rar and I finally got it installed. The virus is all gone now. Good thing too..I was going nuts at how slow my computer was running. Thanks for the help! 
Commenting by HaloScan
