My cousin got that winantivirus 2009 from Facebook. I went to remove it with Malwarebytes and it found it in the registry >Root> And the .exe portion. It deleted the bad .exe that was related to the virus, being that every time you tried to run something, it would ask to run iexplore.exe. Well since the virus was removed, now the Run As dialogue pops up every time she tries to run something. I restored the .exe section that malwarebytes removed, however nothing helped. I cannot run system restore, or anything like that, i did other scans from Avg and kaspersky, nothing was found. Is there a way to fix this mess? It keeps asking for the administrator account, and shes the admin. Im trying to avoid reformatting. She is using Windows XP Pro SP3 (All updates were downloaded)
Here is an image of what I mean.
Edited by hamluis, 27 November 2010 - 02:02 PM.
Moved from XP forum to Am I Infected ~ Hamluis.