Windows XP 2012 antivirus virus, help!?

July 8, 2011 at 05:18:28
Specs: Windows XP

I somehow picked up this "Windows XP antivirus" virus. it claims that i have a bunch of viruses and asks me if i want to remove them. when i do click to remove them it just prompts me to a sight where it expects payment, it pops up about every 10 minutes and it is now preventing me from installing any spyware or malware antivirus packages. As soon as i click on the download and it prompts me to click "run" then after i have clicked "run" then a warning pop up comes onto my screen saying: "This file does not have a program associated with performing this action. create an association in the folder options control panel" this same message pops up when i try to open anything besides folders. i don't know how i got Mozilla open. luck i guess.
But please help. this virus is preventing me from doing just about anything on my pc. When i do scan with avast, avast doesn't find the virus.
i need some advice.
many thanks

See More: Windows XP 2012 antivirus virus, help!?

July 8, 2011 at 17:26:41

Try the following:

If you are having problems running programs, the infection may have changed settings on your computer so that, when you launch an executable, it will launch the infection rather than the program.

From a clean computer, please download the following Registry file and save it to a USB flash drive, or to removable media (CD/DVD, external Drive)


Plug in the USB flash drive (or removable device) into the infected computer and open the drive letter associated with it.

Double-click on the FixNCR.reg file

If prompted, allow it to merge to your Registry.

Now, download one of these files: iExplore.exe or eXplorer.exe. They are renamed copies of RKill:

Save the file selected to the Desktop, and double-click on it.

If you get a message that RKill is an infection, just ignore it. If you run into infections warnings to close RKill, leave the warning on the screen and run RKill again.

If you encounter problems running RKill, download another renamed version of RKill from its download page.

Do not reboot your computer after running Rkill!

Next, download Malwarebytes’ Anti-Malware (black button with green and white icon) Save to the Desktop:

Double-click mbam-setup.exe and follow the prompts to install the program. (For Vista/Windows 7, select: Run as Administrator)

Run Malwarfebytes’ AntiMalware and update the program.
Once updated, select Perform Full Scan and click the scan button.

When the scan finishes, click OK in the message box, and you will see the results of the scan.

Click <Remove Selected

When Malwarebytes finishes, you may be prompted to reboot. If so, reboot.

Please post the Malwarebytes log in your reply, and we will determine if any further action is necessary.

Retired - Doin' Dis, Dat, and slapping malware.

Report •
Related Solutions

Ask Question