Antivirus Studio 2010

Thank you SO much for your help! Somehow, McAffe let the virus through and it scared the …. out of me! I used a different website (bleepingcomputer.com) to disengage the virus and then followed their instructions, but it didn’t delete everything. That’s where your video came in super handy. Thanks so much! A couple last questions:

Is the Antivirus Studio 2010 virus malicious in the sense that it actually sends out my info from the computer elsewhere? Should I worry about anything having been released to the jerk who created the virus? (I didn’t put any credit card info into the virus, nor did I )

Also, is the free version of McAffe enough to prevent these sorts of viruses? Obviously not, if it let this through, but is it necessary to pay their huge rates for computer protection? I used the malwarebytes, but it didn’t remove everything until I removed it manually (using your video).

Fantastic walkthrough. I am really impressed with the clarity of the instruction. Fixed my computer. Thanks

Glad we were able to help you out.

took me two tries ,
dll file didn’t show itself till the second time through.
Currently running the virus protection program that let AntiVirous Studio 2010 in in the first place. I fugure, can’t hurt.
I’d like to …?. switch to ..?. add… spyware doctor. But have really messed up some of my old computers adding and even upgrading virus protection.
What procedure do you recommend?

What is the old client you are using?

If you would like to switch over to the SDA client you will first want to uninstall your current software program via the ADD/Remove Programs feature in Windows. You can do this by hitting the Windows start button and selecting Control Panel then going into the ADD/Remove Programs section and selecting the software you would like to uninstall. After that go ahead and download and install the new security client.

Thanks for the info on how to remove Antivirus Studio 2010.

I was able to remove it with your advice, PLUS some additional sleuthing for some new files they seem to have now (Oct 2010). I could not find any file named Loader or similar, but using your instructions on Task Manager and MSCONFIG found what appears to be new names/locations for these things in the …\AppData\Roaming..
…\MSA\bbaka15.exe
…\Zaupy\Ziba.exe
…\OLUZQ\fyva.tmp, fyva.yrn

You might want to check for update.

Those traces are actually different then this virus. Like most people you are infected with more then one thing and that is why we recommend running the full scan with Spyware Doctor with Antivirus

ensure the client is fully updated and run the FULL scan not just the inteli scan. You may also want to scan with Malwarebytes to ensure the infection if fully gone.

I bet a root kit is re-installing this threat. Doing full scans with both the above should sort this out.

Thank you! Thank you! Thank you!

Antivirus Studio 2010 hijacked my laptop last night, and I jumped on the other computer to google the solution. I spent HOURS during the night to try other sites’ advice but non of them worked. I already had Malwarebytes in my laptop but it was not removing the annoying stuff.
Being desperate, I started changing the keyword for search and finally arrived on your site. Voila! Your video was easy to follow and fantastic! The stupid fake security stuff is now gone!
Thank you so very much for your great instruction!!!

You are most welcome. We always try to spend a little cash to get our articles to rank higher in the search engines. We want to make it easy for people to find REAL solutions to these kinds of infections.

I was working through your video guide, following step by step, and tried to reboot after renaming the files, but before checking off the applications in the second step before rebooting. My computer will now just run with a black screen on the monitor, so I can’t get back into it to try this again. Is my computer completely wrecked now or is there someway to get back into it and retrace my steps to do everything correctly before rebooting?

Thanks!

with out knowing what you did exactly it’s hard to recommend a solution.

However if you are getting nothing but a BLANK screen when you turn your computer on then you have an ENTIRLY different issue. You should at least see the bios splash screen. Nothing at all on the monitor after you turn a computer on normally means a hardware issue. Feel free to change your statement if in fact you actually are getting something when you first turn on your computer.

Is this Bonnie Asking? No name placed in the Name section but you replied to her thread so I am guess so.

Q. If I uninstall will I have to block their attemts to update?

A. Uninstall What? Mcaffe or are you refering to deleting the virus?

Q. It’s under a two computer licence, will I need to change both computers?

A. What is under two licences? Are you reffering to installing the SDA client? If so then you install it on both computers using the same registration key.

McAfee
It works well for me , but my husband has had two of these viruses in the past 6 months.

If I uninstall will I have to block their attemts to update?
It’s under a two computer licence, will I need to change both computers?

Thank you so much.

thanks you for the help…. great to know that there are still good people willing to help with these type of issues

I run a business and i have several computers.
Two are still on XP 2 and one is infected with this trojan.
I have followed all the instruction but cannot locate the load.exe. In msconfig I unchecked the antivirus studio 2010 and helpers but none seem to show the load.exe. XP does not show the entire link link Windows 7. How can I trace each one of thes files listed in the msconfig to see which one is actually the load.exe without disabling the wrong one.
thanks

Most likely the load.exe file is in a temp directory. My advise is to run a full scan using the SDA client to locate it.

Other than that. In the start-up tab of MSconfig. You will see several Tab level Categories on top. Startup items, Maker, Command, Location. Just click on the vertical line under the location menu and move it out like you would in Excel to see the FULL file path. It may also be listed in the Command category. Play around with it a but and you should be able to get it. You seem to be so close right now already.

The SDA client shows the FULL path of the file. Just browse to that file and delete it.

I would also go ahead and uncheck the files you found under start-up and reboot. The file paths are also clearly shown in the stat-up menu as well. You may have to move the bars around to see the full path.

Your traces will be different than the ones shown. Threats mutate and take on many different file names. The load.exe is just an example from our testings and the most common trace we have been finding.

Let us know the full file paths and file names when you locate them.

Thanks

I cannot locate the file that is notated in the mscofig start up tab that should be the “load.exe” file you mentioned. The file is named… “m9uov2wsudwp” and under the “Command” heading it is… Users\Rick\AppData\Local\Temp\svchost.exe…. and under “Location” heading is…HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ……

When I go to the location path noted in the “Command” heading the final part.. \svchost.exe is not in the \Temp folder.

And after running a scan in the Spy Doctor with Antivirus…. it also states that this file is part of a virus…

So…. how can I locate it and delete it?

Thanx

RC

What if I can’t reboot my computer? I lost my disc and I cant delete my files, they are very important. Is there anyway I can transfer my files onto a USB?

Q. What if I can’t reboot my Computer?

A. Not 100% clear what you are saying. I take it you mean your computer fails to load up Windows? If this is so are you able to boot into safe mode and run a system restore? That would be my first suggestion.

Regardless you can backup your data in several different ways. One thing you can do is put the hard drive in another computer and back it up that way. You could try to boot into safe mode and copy the data over to a External hard drive.

Let us know more details about what your computer is doing and the OS and we may be able to offer more advice.

This is great help in walking through the steps to remove the Studio 2010 virus. The instructions are very clear. The only place I struggled is with removing the second set of registry entries (under Windows/explorers) since I saw more than 2 entries there. Other than that this is truly a blessing for people like me to have this help. Thank you!

As stated in the guide we recommend you download Spyware Doctor with Antivirus. While the free trial will not remove threats. The free 30 day protection will stop the virus from re-installing. The scan will show you ALL the traces of this threat. Then you can manually delete all the files the program finds.

Very simple to do.

We followed your directions…seems to have worked, but the files are still in the program list (add/remove), the windows program list, the startup list (as unchecked – but still there)….how do we do a clean-out of these references? Most of the registry lines were not there, we did remove the main folder, but the others did not exist.

How do get rid of everything

Thanks to your instructions, someone like me, who knows little about computers, I removed AV Studio 2010 all by myself! Is there a program that can protect against malware downloading when simply surfing/researching?

For protection you need a live security client. as you can tell from the removal guide we recommend Spyware Doctor with Antivirus. It will block all drive by download attempts and will not allow software like this to install.

The above program also has something called Browser Defender that comes with the security client. This program will pre-check the web page before it loads to see if it’s safe. It works rather well. Also in Google when you do a search for items while doing re-search, you will see a shield next to all urls that are safe and a warning on others to show if they are bad urls.

Thank you. Yes, I want to download SpywareDocter with Antivirus 2010, but this is my confusion: my McAfee expires in Jan 2011 (which clearly didn’t block the big bad rogue AntiVirusStudio2010. If I download SywareDoctor w/Antivirus now, do I disable McAfee? or do they work side by side? On firewalls: aren’t we supposed to have only 1 firewall? and these 2 programs have their own firewalls, right? Or, do I uninstall McAfee and use SpywareDoctor by itself? And I want to download Malwarebytes, but should I only run it occasionally? This is where I get so confused. I worry about conflicts betw programs. I wasn’t kidding when I said I didn’t know much. . .Jacob, you are a jewel!

Thank you,
this worked to remove the virus. However, I cannot get onto the internet now…
any ideas of how this could be related..?

Yes the proxy needs to be turned off. Do a search for Proxy re-set on the site or just read the manual guide / video under the How To Guides section.

You do not want 2 live security clients.

If you want the SDA client you should first remove Mcafee from your computer.

No the SDA client does not have a firewall nor does the regualr Mcafee antivirus client. Generally only the Security Suites will have a firewall included. However Windows already has a default firewall that works perfectly fine. There is no real need for a different one for most people.

The free version of malwarebytes and SDA work very well together. That is the setup on my personal computers. I scan once a month with the Malwarebytes client just to double check things. I use the SDA client for every day protection.

Hope that clears things up. If not just re-ask your questions.

Hi, this Trojan came up on my teenagers computer. It was then purchased by him unbeknownst to me. I imagine this is definitely lost money and very possibly more lost money if they can access the remaining money on the credit card. But because it was then installed, does this mean it will be harder to remove?
You’re advice would be appreciated.
Thanks,

If anything the threat is easier to remove if you paid for it. Other programs normally run when this program is purchased. Follow or guide or just use real antivirus software like the SDA client we recommend to remove this threat.

I suggest you read the “What to do if you paid for a fake security client” article from the “Great Articles and Advice” section on top. It’s rather easy to get your money back by just claiming fraud.

HI I’ve followed your instructions and some others on the Web but I just can’t seem to locate the Load.exe file, So I delete everything while in safe mode then reboot only for the whole thing to have started again.

I can’t get the SDscanner to run – any advice would be great

Cheers

You should be able to install the SDA scanner in Safe Mode with Networking and then run the program to help locate were this threat is.

Other than that you can go to the Windows Start button and in the run / search box type msconfig . Than select the startup tab and look for the Load.exe file. Next to it should be the file path location. See if that works for you.

Worst case you will have to call on an expert to remove the threat for you. http://www.onlinecomputerrepair.org is a good solution.

i have antivirus studio 2010 trial version and the computer is asking for a unistall key to remove the remaining files is there such ?

The uninstall key would be the registration key. There is such a thing if you were to purchase the fake security client. This is how these rogue security clients operate and why we have written a manual removal guide to show you how to remove this client.

Thank you Sir Jacob for that video on how to delete the AntiVirus Studio 2010. It was a big help. Now that I have successful deleted it, there will be no more annoying pop-ups on my computer. Thank you again ^_^ God Bless

THANK YOU. A really GREAT help!!!! God Bless!!!

I think I got it thanks to your help. If only viruses squeeled as you removed them, it would be very satisfying.
What I think was the load file was in a folder named MSA.
I’ve got an additional question, if I may; I did a search for “Antivirus Studio 2010″ and related strings on the Registry and found a couple of other references to it that weren’t in your list; I presume there’s no harm in deleting those?
Thanks again,
Tony, Edinburgh, UK

Should not be any harm in removing those traces. It also should not matter if they are removed or not. Won’t slow your computer down or cause any issues.

Always backup your registry first.

can antivirus studio 2010 forge email accounts or anything of that sort

No it can not. However you can have a trojan or another virus installed that can. That is why we always tell people to run a full scan with Spyware Doctor with Antivirus to ensure you have no other infections.