Computing.Net > Forums > Security and Virus > AntivirXP08 HELP!!!

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

AntivirXP08 HELP!!!

Reply to Message Icon

Name: chris6
Date: September 5, 2008 at 20:55:05 Pacific
OS: microsoft windows xp pro
CPU/Ram: 2800mhz
Product: HP/a645w
Comment:

Hello, I have read numerous forums and have tried everything that I can possibly figure out to get this virus off my computer. I do know that I can not install any scanners you have recommended and I have added everything to my trusted sites to do so. The virus is blocking me from doing anything and I need HELP!!! I'm an idiot when it comes to this and I need exact instructions on what to do! Thank you so much!



Sponsored Link
Ads by Google

Response Number 1
Name: stevem5000
Date: September 5, 2008 at 21:21:56 Pacific
Reply:

There are a number of variations of this pox...
There are several methodes to fight this sucker, this one works for me most of the time...

First go to www.malwarebytes.org and download
Malwarebytes Anti Malware...it's free...

Install it, update it and run it without changing any settings...reboot...go into safe mode and run it again...

Then go to www.superantispyware.com and download their trial version for personal use...

Install it, and update it...reboot into safe mode and run the scan...reboot...

Then go to www.kaspersky.com and download the trial version of Kaspersky Antivirus...install it, update it and do a full scan...

IF, and I say IF...your particular smit fraud can be removed with conventional utilities, this process should do it...

I support a lot of home user computers, and I have seen a number of variations of these buggers and the process above works for me most, but not all of the time...I cleaned 5 out of 7 computers this week with variations of this bugger...

good luck...


0

Response Number 2
Name: chris6
Date: September 6, 2008 at 09:41:50 Pacific
Reply:

Hello again...
I understand what you are telling me but I CANNOT D-load anything...the virus has blocked me from d-loading any thing...Most of the time it wont even pull the page up if it has to do with any kind of remover...And if I save a file and then try to run it it says its not a proper Win32 file, and Ive tried countless ways to do so! Im almost to the point of beating this thing with a sledge hammer...lol! Anything you can tell help me with would be greatly appreciated!


0

Response Number 3
Name: jabuck
Date: September 6, 2008 at 12:14:06 Pacific
Reply:

Try may stun it long enough to run Malwarebytes.

Create the Fix.reg file from the second paragraph and place it on your desktop but don't run it yet.

Go to start>run>type in "notepad" with out the quotes>ok.Click file>new> then copy and paste the following text into a new file(just the part between the lines):
_____________________________________
@echo off
attrib -r -h -s C:\WINDOWS\qegbdmwf.dll
del C:\WINDOWS\qegbdmwf.dll
attrib -r -h -s C:\WINDOWS\pntqkflv.dll
del C:\WINDOWS\pntqkflv.dll
attrib -r -h -s c:\Program Files\rhcnkrj0etfg
del c:\Program Files\rhcnkrj0etfg
attrib -r -h -s c:\WINDOWS\system32\pphcjkrj0etfg.exe
del c:\WINDOWS\system32\pphcjkrj0etfg.exe
attrib -r -h -s c:\Documents and Settings\All Users\Desktop\Antivirus XP 2008.lnk
del c:\Documents and Settings\All Users\Desktop\Antivirus XP 2008.lnk
attrib -r -h -s c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008
del c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008
attrib -r -h -s c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008.lnk
del c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008.lnk
attrib -r -h -s c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Antivirus XP 2008.lnk
del c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Antivirus XP 2008.lnk
attrib -r -h -s c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\How to Register Antivirus XP 2008.lnk
del c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\How to Register Antivirus XP 2008.lnk
attrib -r -h -s c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\License Agreement.lnk
del c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\License Agreement.lnk
attrib -r -h -s c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Register Antivirus XP 2008.lnk
del c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Register Antivirus XP 2008.lnk
attrib -r -h -s c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Uninstall.lnk
del c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Uninstall.lnk
del remove.bat
exit
__________________________________
Save the file to the desktop as remove.bat and make sure the "Save as Type" field says "All Files". Then please go to the desktop and double-click on remove.bat. Allow to run.

You should have the Fix.reg file below created and on your desktop... Double click it then click yes to merge. A run Malware bytes as soon as possible.


Open notepad (Start Menu > Run > Type notepad and press "ok".

Copy and paste everything into notepad between the x's making regedit4 the top line.
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
REGEDIT4
[-HKEY_LOCAL_MACHINE\SOFTWARE\rhcnkrj0etfg]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\rhcnkrj0etfg]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion "rhcnkrj0etfg"]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform "AntivirXP08"]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SMrhcnkrj0etfg"]

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Go to File on the top bar and choose" Save As", Change the "Save As Type" to All Files, Name it Fix.reg then save it to your desktop.

Double click Fix.reg (or right click and choose Merge) and it will ask if you want to merge the contents into the registry, choose Yes.

Please download Malwarebytes' Anti-Malware from one of these sites:

MalwareBytes1

MalwareBytes2

1. Double Click mbam-setup.exe to install the application.
2. Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
3. If an update is found, it will download and install the latest version.
4. Once the program has loaded, select "Perform Quick Scan", then click Scan. The scan may take some time to finish,so please be patient.
5. When the scan is complete, click OK, then Show Results to view the results.
6. Make sure that everything found is checked, and click Remove Selected.
7. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.
8. The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
9. Copy&Paste the entire report in your next reply.


0

Response Number 4
Name: chris6
Date: September 7, 2008 at 19:12:12 Pacific
Reply:

Thanks "jabuck" but it wont even let me create the files you have pointed out! I followed step by step and it did let me save them but then I can not find them anywhere...You think maybe it would be easier to just wipe the pc clean?


0

Response Number 5
Name: jabuck
Date: September 8, 2008 at 19:30:59 Pacific
Reply:

Those files should run even with active malware.

If you want to try them again and need some extra help me know.


0

Related Posts

See More



Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: AntivirXP08 HELP!!!

how can I delete AntivirXP08 www.computing.net/answers/security/how-can-i-delete-antivirxp08/22986.html

How to Delete Stubborn Antivirxp08 www.computing.net/answers/security/how-to-delete-stubborn-antivirxp08/23018.html

Antivirxp08 removal...need help www.computing.net/answers/security/antivirxp08-removalneed-help-/23027.html