XP Antivirus pro 2010 Malware
My other laptop got infected by this notorious malware -- it pops up frequently to "warm" me and basically stop the normal functions. I have tried to use downloaded tools including SPDOC and Spyware Doctor.. but none worked. The situation is pretty bad: Regedit is disabled – I cannot perform the manual procedures to remove the malwares; System and hidden files cannot be made displayed – I cannot backup the files in settings and documents for a possible system reinstallAny suggestions will be appreciatedTed1 person needs an answerI do too
February 20th, 2010 6:07pm

Please see How to remove XP Antivirus 2008, XP Antivirus 2009, and XPAntiVirus (Removal Instructions) at BleepingComputer.com . If you can't download the removal programs that it uses on your computer, download them on another computer and copy them to yours.Boulder Computer Maven Microsoft Most Valuable Professional
Free Windows Admin Tool Kit Click here and download it now
February 21st, 2010 12:28pm

Try these steps :-****Once you remove the virus, exe files will not work****Before starting troubleshooting, have the following text copied into a notepad :-------Start --------Do not copy this line, copy starting next line ----------------Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\.exe]@="exefile""Content Type"="application/x-msdownload" [HKEY_CLASSES_ROOT\.exe\PersistentHandler]@="{098f2470-bae0-11cd-b579-08002b30bfeb}" [HKEY_CLASSES_ROOT\exefile]@="Application""EditFlags"=hex:38,07,00,00"TileInfo"="prop:FileDescription;Company;FileVersion""InfoTip"="prop:FileDescription;Company;FileVersion;Create;Size" [HKEY_CLASSES_ROOT\exefile\DefaultIcon]@="%1" [HKEY_CLASSES_ROOT\exefile\shell] [HKEY_CLASSES_ROOT\exefile\shell\open]"EditFlags"=hex:00,00,00,00 [HKEY_CLASSES_ROOT\exefile\shell\open\command]@="\"%1\" %*" [HKEY_CLASSES_ROOT\exefile\shell\runas] [HKEY_CLASSES_ROOT\exefile\shell\runas\command]@="\"%1\" %*" [HKEY_CLASSES_ROOT\exefile\shellex] [HKEY_CLASSES_ROOT\exefile\shellex\DropHandler]@="{86C86720-42A0-1069-A2E8-08002B30309D}" [HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers] [HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\PEAnalyser]@="{09A63660-16F9-11d0-B1DF-004F56001CA7}" [HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\PifProps]@="{86F19A00-42A0-1069-A2E9-08002B30309D}" [HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\ShimLayer Property Page]@="{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}" -----------End--------------Do not copy this line. Copy till the end of previous line---------------1. Boot the computer in safe mode with networking- Usually by tapping F8 when the computer boots up2. Open My Computer, Click on tools and then folder options.3. Select - "Show hidden files and folders" - Uncheck "Hide protected operating system files"4. Apply and then OKFor XP :- 5. Navigate to C:\Documents and Settings\%userprofile%\Local Settings\Application Data6. Look for either of the following files :-- av.exe - msascui.exe7. Once you find the above file, open task manager(Ctrl+Shift+Esc) and kill the process with the same name8. Delete the file from the above folder****Once you remove the above file, exe files will not work. Hence open IE/Any browser already open and minimised****9. Now open the notepad file saved on your desktop earlier10. Click on file-> save as - Select file type as all files - Name the file as fix.reg - Encoding should be Unicode11. Run that file, it will edit the registry accordingly 12. Now restart the computer in normal mode and see if everything is working fine. - Mareechan
March 10th, 2010 6:15pm

Bay777,Which or whose name are you pertaining to?
Free Windows Admin Tool Kit Click here and download it now
June 6th, 2010 5:04am

You should use Avira personal, you can download from avira.com. Its free,dependable and strong anti-virus,and anti-spyware, registration is optional.Keep it up to date and scan your computer once a week at least,and get a free registry cleaner to optimise your pc.Please mark as answer and vote as helpful if this is the answer.TQ.
November 13th, 2010 1:35pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics