View Single Post
Old 08-08-2010, 06:41 PM #13
Shasown's Avatar
Shasown Shasown is offline
Account Vacant
 
Join Date: Jul 2009
Location: In my house.
Posts: 9,351
Shasown Shasown is offline
Account Vacant
Shasown's Avatar
 
Join Date: Jul 2009
Location: In my house.
Posts: 9,351
Default

Using system restore will not remove the virus

Keep a browser window open, then press control alt delete, - tak manager go into active process and stop the process if you can see it (antivirus.exe or similar) right click on it and choose stop process tree

Once you have stopped it in your browser open

http://housecall.trendmicro.com/uk/

Download the housecall files then run it, if you are unable to run it then try this manual removal guide.


Stop Antivirus XP Pro 2009 Processes:

antivirusxppro2009.exe
AntivirusXP.exe

Find and Delete Antivirus XP Pro 2009 Files:

antivirusXPpro2009.exe
c:\Program Files\AntivirusXP
c:\Program Files\AntivirusXP\AntivirusXP.exe
c:\Program Files\AntivirusXP\Infected
c:\Program Files\AntivirusXP\Suspicious
Your Profile \Desktop\AntivirusXP.lnk
Your Profile \Start Menu\Programs\AntivirusXP
Your profile \Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusXP.lnk
Your Profile \Start Menu\Programs\AntivirusXP\AntivirusXP.lnk
programs \AntivirusXPPro2009\AntivirusXPPro2009.lnk
programs \AntivirusXPPro2009\uninstall.lnk
programs \AntivirusXPPro2009\AntivirusXPPro2009.exe
programs \AntivirusXPPro2009\uninstall.exe
desktop \AntivirusXPPro2009.lnk

Obviously you will have to find the correct locations for your computer for the above files. After you have removed them try to connect to the net and run hosecall from trend.

If you still cant get into housecall and know how to use regedit then follow the list below. If not go back into task manager and send me a pm with all the processes listed in it.

Remove Antivirus XP Pro 2009 Registry Values:
(Learn how to do this)
HKEY_LOCAL_MACHINE\software\AntivirusXPPro2009
HKEY_LOCAL_MACHINE\software\AntivirusXPPro2009 info
HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\run Antivirus XP Pro 2009
Shasown is offline   Reply With QuoteReply With Quote