tojan fake

[paul62]

Can anyone tell me how to manually remove trojan fake av from windows xp pro I am not having much luck. I have installed norton antivirus 2012, and ad aware anti virus , and am not having any luck. I do not have access to a restore disk because for some reason my oem number that I have is not working on the disk I have. How could I manually remove this virus and verify that it is gone?

[Ferrit]

You can go here
http://www.northernaurora.com/topic/1276-im-infected/
That should guide you through getting cleaned up.
Here are some bootable cleanup tools as well
http://www.northernaurora.com/page/a...e-cds-list-r72

[landerio]

Hi Paul62,

You are suggested to enter your os in "Safe Mode with Network". Restart your computer, then press F8, select "safe mode with network", then update your security software before scanning and removing trojans.

Another solution: If you have a WinPE, you can enter your system with that, then you will be able to remove these infected files manually.

[paul62]

I have been doing all of those steps and it still locks up. What is a WinPE and how do I find that?

[landerio]

What's WinPE: http://technet.microsoft.com/en-us/l...(v=ws.10).aspx

BartPE: http://www.nu2.nu/pebuilder/

More Other WinPEs: http://en.wikipedia.org/wiki/Windows...on_Environment (see also section)

[Ferrit]

OK this is what you need too do
Step 1 Go download Combofix on another computer and put it on a usb memory stick
Step 2 Boot the infected computer to Safe Mode With Networking
Step 3 Insert the usb memory stick and run Combofix, nothing else just let combofix run till it stops.
Step 4 Turn off System Restore and let it delete all of the system restore points.
Step 5 Before rebooting download Malwarebytes so you have it saved on the computer.
Step 6 Reboot install malwarebytes,update it and then do a "FULL" scan. Delete whatever it finds