Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

"Antivirus xp 2010"


  • Please log in to reply
8 replies to this topic

#1 mjbuck

mjbuck

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:01:03 PM

Posted 07 February 2010 - 12:15 PM

We were taken over by "Antivirus XP 2010". Ran a McAfee scan and it was quarantined, but then no .EXE files would open. It would prompt to select which program I wanted to use.
I went to open regedit.exe and of course it would run, so I renamed it regedit.com and took a look at HKEY_CLASSES_ROOT\exefile\shell\open\command and found the correct value data of "%1" %*

I am at a loss as to what to do now. I can download Malwarbytes but can get it going b/c of this problem.

BC AdBot (Login to Remove)

 


#2 Arctic

Arctic

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:03:03 PM

Posted 07 February 2010 - 12:20 PM

instead of duplicating Grinler's tutorial

advice is listed here

http://www.bleepingcomputer.com/virus-remo...irus-vista-2010
I can only help.. If i know what the problem is.

we never have time to do things right, but we always have time to do them again

LAWL

#3 mjbuck

mjbuck
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:01:03 PM

Posted 07 February 2010 - 12:21 PM

thank you. greatly appreciated.

#4 mjbuck

mjbuck
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:01:03 PM

Posted 07 February 2010 - 12:26 PM

the solution sounds great if I could malbyteware to run, but I cannot

#5 Arctic

Arctic

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:03:03 PM

Posted 07 February 2010 - 12:28 PM

Did you use the fixexe.reg?
I can only help.. If i know what the problem is.

we never have time to do things right, but we always have time to do them again

LAWL

#6 mjbuck

mjbuck
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:01:03 PM

Posted 07 February 2010 - 12:55 PM

Thanks for your help. I did get Malbytewar to run using fixexe.reg and no infected objects were found. Back to the drawing board I guess.

#7 Arctic

Arctic

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:03:03 PM

Posted 07 February 2010 - 12:59 PM

If the problem is still persisting.

I'm just following protocol here.

I am at my limits of what i am allowed to recommend on this forum.

I think you may have to create a few logs to be examined by moderators and other experts.

http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/
I can only help.. If i know what the problem is.

we never have time to do things right, but we always have time to do them again

LAWL

#8 mjbuck

mjbuck
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:01:03 PM

Posted 07 February 2010 - 01:01 PM

i will keep at it. again, thank you a lot for your help. i greatly appreciate it.

#9 brigg

brigg

  • Members
  • 457 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:02:03 PM

Posted 27 February 2010 - 09:56 PM

Just wondering if the original poster was able to fix the problem. I have the same problem, running XP.

Am also getting "security error worlm.win32.netsky detected...."
and "attention, system detected a potential hazard (Trojan SPM/LX) on your computer....."

Kansas City Mo area - Central time zone 

Dell D620 Laptop    -   Operating System:  Windows XP Professional 32-bit SP3     -     CPU:  Intel Core Duo T2300E @ 1.66GHz 51 °C     -  Yonah 65nm Technology

RAM:  1.00GB Dual-Channel DDR2 @ 267MHz (4-4-4-12)    -     Motherboard:  Dell Inc. 53 °C     -     Graphics:  Plug and Play Monitor (1280x720@60Hz)
Storage:  74GB SAMSUNG HM080HI (SATA) 36 °C     -     Optical Drives:  TSSTcorp CDRW/DVD TSL462C     -     Audio:  SigmaTel High Definition Audio CODEC
PAE Enabled - Installation Date: 3/20/2009     -     Plug and Play Monitor (1280x720@60Hz)     -     Intel Mobile Intel 945GM Express Chipset Family (Dell)
 




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users