Virus Response Lab 2009 ATTACK!

Status
Not open for further replies.
This stuff entered my PC somehow.

So i googled and looked for help.

I checked some sites that gave a manual repair option AND download link to MalwareByte and Spyware Doctor.

Initially i thought ill remove it manually.
However according to instructions

Code:
Stop VirusResponse Lab 2009 Processes:

VirusResponseLab2009.exe

Unregister VirusResponse Lab 2009 DLL Files:

AVLWarning.dll

Find and Delete these VirusResponse Lab 2009 Files:

VirusResponse Lab 2009 2.1.lnk
AVLWarning.dll
VirusResponseLab2009.exe
c:\Program Files\VirusResponseLab2009
c:\Program Files\VirusResponseLab2009\VirusResponseLab2009.exe
c:\Program Files\VirusResponseLab2009\AVLWarning.dll
c:\Program Files\VirusResponseLab2009\uninst.exe
c:\Documents and Settings\Adminstrator\Desktop\VirusResponse Lab 2009.lnk
c:\Documents and Settings\Adminstrator\Start Menu\VirusResponse Lab 2009.lnk
c:\Documents and Settings\Adminstrator\Start Menu\Programs\VirusResponse Lab 2009
c:\Documents and Settings\Adminstrator\Start Menu\Programs\VirusResponse Lab 2009 2.1\VirusResponse Lab 2009.lnk

Remove VirusResponse Lab 2009 Registry Values:
(Learn how to do this)
HKEY_CURRENT_USER\Software\VirusResponseLab2009
HKEY_CLASSES_ROOT\AVLWarning.WarningBHO.1
HKEY_CLASSES_ROOT\AVLWarning.WarningBHO
HKEY_CLASSES_ROOT\CLSID\{A21C8D81-A9C7-46c6-A488-2A32FA0DAEB6}
HKEY_CLASSES_ROOT\CLSID\{F5734812-E6A1-8833-ECA9-949B5B8A88BF}
HKEY_CLASSES_ROOT\Interface\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91}
HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
HKEY_CLASSES_ROOT\TypeLib\{A8954909-1F0F-41A5-A7FA-3B376D69E226}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\VirusResponseLab2009
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A21C8D81-A9C7-46c6-A488-2A32FA0DAEB6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusResponseLab2009

Problem is that there is no VirusResponseLab2009.exe and no dll called AVLWarning.dll.
Even the registry values which i am supposed to remove doesnt exist

I located the Folder of this malware in Program Files, i tried deleting it,but i couldn't, as it said its protected

I thought the manual procedure was over my head so i simply used MalwareBytes.

It detected it, and removed it.

However after restart of PC, the Folder and all signs of this malware was gone, but after around 15-20 seconds of booting my PC, that rogue software's irritating popup keeps coming up. Now where the fvck did this bugger hide? MalwareBytes cant detect it anymore
 
Last edited:

Abhishek Dwivedi

TechFreakiez.com
1st thing 1st...try all this only in Windows Safe mode...
nxt, use cmd.exe to locate your files as windows explorer act as if drunk in virus situation...
use: dir/a (displays all file in a directory...ALL)
attrib -h -r -s filename.extention (unhides the file and removes system priority)
del filename.extention (delete the file)

i've seen viruses which make different file at different locations depending upon the OS..like if ur on vista, the location could be difficult...so try googling for ur infected OS
 
OP
mikael_schiffer

mikael_schiffer

Padawan
Hey ppl, surfed around some forum and it seems many peopl;e have the same problem, the rogue virus is removed but still existing.

So some girl adviced SmitFraudFIX and it seems it worked for everyone in that forum, so i tried it myself and voila, cleaned in less than 1 minute!!

Thank god for SmitFraudFIX. They say this software is speacially meant to counter these rogue softwares
 
Status
Not open for further replies.
Top Bottom