Win 7 Fake Anti-Virus HEELP

[xxMATTGxx]

An automatic removal tool will try and remove it automatically. If you know how to workaround regedit then you could manually remove the registry values that is listed on that page.

yeep, with networking :/ shall i try a different one?

---------- Post added 22-04-2011 at 04:46 PM ----------

this site (http://www.2-spyware.com/remove-win-...virus-pro.html) says to download this 'exefig.reg' thing they have and then use an automatic removal tool to install spyware doctor (though that didn't help at all last time) - what's an automatic removal tool?

[Judas]

okay i'm completely lost lol. i've got an automatic removal tool doing a full scan now, and i don't know what regedit is, but i used the exefix thing and nothing has happened

[xxMATTGxx]

okay i'm completely lost lol. i've got an automatic removal tool doing a full scan now, and i don't know what regedit is, but i used the exefix thing and nothing has happened

Regedit aka Registry Editor; This page tells you how to use it.

http://www.2-spyware.com/news/post226.html

Then the registry values for the fake anti-virus is on:

http://www.2-spyware.com/remove-win-...virus-pro.html


Note: I've never used this site, just using it as you linked it.

[Judas]

i seee thank you i'll have to try it tomorrow probably as i'm going to my dads now and there will be no other computers available there but hopefully the automatic removal tool will be able to help a bit, thanks for the help

[Flisker]

This solution probably isn't what you want to hear but its probably the best option:

Backup your documents, format your hard drive, reinstall Windows and finally move all your documents back over. That is the only way you can make sure your computer is virus/spyware free since you don't know how far into the system this virus has manifested itself.

Also can I suggest using Microsoft Security Essentials if you do manage to reinstall Windows.

[Judas]

This solution probably isn't what you want to hear but its probably the best option:

Backup your documents, format your hard drive, reinstall Windows and finally move all your documents back over. That is the only way you can make sure your computer is virus/spyware free since you don't know how far into the system this virus has manifested itself.

Also can I suggest using Microsoft Security Essentials if you do manage to reinstall Windows.

ohhh dear that sounds very time consuming and confusing LOL i'll use it as a last resort if nothing else works thanks for the help

[Misawa]

Download software called ComboFix. Rename the file something like "arjiajfjeifj", restart your computer and run it without any other programs running on your computer. It may take a couple of tries for it to work, namely keep trying to delete rom.exe from your task manager, but ComboFix will sort it out. Once that's done, use Malware Bytes and it should work.

[Judas]

wait call which file arerefuae ? the combofix program file?

[Misawa]

Yes. You must change the filename of ComboFix to something totally random or the virus you've got will pick up on it. That's why Malwarebytes won't work, even if you change the name. It jus so happens that ComboFix is lesser known and can get past the 'defences'.

[Judas]

okay thanks a lot. one last thing, how do i know if it's "worked", like what's it supposed to do ?