An automatic removal tool will try and remove it automatically. If you know how to workaround regedit then you could manually remove the registry values that is listed on that page.
Printable View
okay i'm completely lost lol. i've got an automatic removal tool doing a full scan now, and i don't know what regedit is, but i used the exefix thing and nothing has happened
Regedit aka Registry Editor; This page tells you how to use it.
http://www.2-spyware.com/news/post226.html
Then the registry values for the fake anti-virus is on:
http://www.2-spyware.com/remove-win-...virus-pro.html
Note: I've never used this site, just using it as you linked it.
i seee thank you i'll have to try it tomorrow probably as i'm going to my dads now and there will be no other computers available there but hopefully the automatic removal tool will be able to help a bit, thanks for the help
This solution probably isn't what you want to hear but its probably the best option:
Backup your documents, format your hard drive, reinstall Windows and finally move all your documents back over. That is the only way you can make sure your computer is virus/spyware free since you don't know how far into the system this virus has manifested itself.
Also can I suggest using Microsoft Security Essentials if you do manage to reinstall Windows.
Download software called ComboFix. Rename the file something like "arjiajfjeifj", restart your computer and run it without any other programs running on your computer. It may take a couple of tries for it to work, namely keep trying to delete rom.exe from your task manager, but ComboFix will sort it out. Once that's done, use Malware Bytes and it should work.
wait call which file arerefuae ? the combofix program file?
Yes. You must change the filename of ComboFix to something totally random or the virus you've got will pick up on it. That's why Malwarebytes won't work, even if you change the name. It jus so happens that ComboFix is lesser known and can get past the 'defences'.
okay thanks a lot. one last thing, how do i know if it's "worked", like what's it supposed to do ?