WP

here is whats going on. i tryed to log on today and during the load up of UO my computer found a virus named Rozena, so i then moved it to the vault and tryed to reopen my UO but it would not open. Next i deleted UO and reinstalled it. when patching and i get to: Applying patch patch\aos2d_win32_5-0-0a.rtp the UO client stops patching and AVG anti-virus finds the Rozena virus. any thoughts on how to get around this?

Rozena is a trojan so you need to run a scan tool to get it completely off your system.

My first recommendation is always Malwarebytes. Download the free version, update it, and do a full scan. It'll scan everything and may ask to run again after a reboot. Once you get to that part you should have a clean system.

If it's still a problem after that, don't worry -- I've got more tools for you to try!

i ran malwere and it found and removed the virus, then i tryed to patch and it the virus was found again so i ran malwere again and it found nothing. so i deleted all UO from my coumputer after uninstalling it. when i get to applying patch 5.0.0 i get the same virus

This should help, i had the same virus last month. I used www.superantispyware.com. oh yea it is free too.

I feel I must point out that malwarebytes detects and removes malware(adware,spyware,etc) and not viruses and trojans.

The best tools for malware removal are malwarebytes and spybot. For virus removal it's really up to you as long as it's not norton or mcafee. I wouldn't touch those two with a ten foot pole. In cases where an infection has already occured I highly reccomend "housecall" by trendmicro. It's free and requires no install. If you do all the scans and are still having trouble please do let us know. Oh, and we need to know what OS(2000,xp,vista,7) this is.

I own my own company and I literally do this stuff all day every day although most of the time people let their system get so bad it has to be wiped.

P.S. I usually use a linux livecd that has clamav on it to remove the bulk of viruses and malware first, but that may be beyond the average user's skillset. Linux ftw.

im useing xp. im going to try this stuff again ill let you know how it goes.

I underestimated the tenacity of Rozena. I sent Iceing a tool via PM because it isn't one you'd want just anyone running. I've never seen it break anything but man does it work wonders with rootkits. Infections like TDSS or a random driver hook are no match for this guy.

It's a "last chance" automatic removal tool before you have to dive under the hood and fix it manually. I'm still averaging ~ 100 virus removals a month and a wipe & reinstall is usually only 1-2 of those.

the one you send me worked. Thank you guys for all your help. now i just need to get my fake 5.0.6.d patch to work. i keep over patching.

Watch your /patch directory while UO is updating. Make a note of the file name it's using. For example, my install pulls patches named like aos2d_win32_5-0-6.rtp

The patch's file name depends on what CD you originally installed the game from. Just make sure your blank file follows the same convention and it should stop properly.

It took a while but Now im virus free and patched correct!!!!!!!!!!!!!!!!!!!!!!!!!
Thank you again EVERYONE for all your help.