Remove XP Antivirus 2008 2009 2010 2011 and other Malware
Well for starters, Get MalwareBytes to remove it.
http://www.filehippo.com/download_malwa ... i_malware/Boot into safe mode (F8 on system startup untill you get the option for "Safe mode with Networking")
Install and UPDATE, and then run a full scan
If it doesn't work, Try this.
First of all, Turn off System Restore.
Check to see if it is in your add/remove Programs, Un-install if you do.
Run SmitFraudFix
http://siri.urz.free.fr/Fix/SmitfraudFix.exe Here's how.
Double-click SmitfraudFix.exe
Select 1 and hit Enter to create a report of the infected files. The report can be found at the root of the system drive, usually at C:\rapport.txt
Clean:
Reboot your computer in Safe Mode (before the Windows icon appears, tap the F8 key continually)
Double-click SmitfraudFix.exe
Select 2 and hit Enter to delete infect files.
You will be prompted: Do you want to clean the registry ? answer Y (yes) and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection.
The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found): Replace infected file ? answer Y (yes) and hit Enter to restore a clean file.
A reboot may be needed to finish the cleaning process. The report can be found at the root of the system drive, usually at C:\rapport.txt
Optional:
To restore Trusted and Restricted site zone, select 3 and hit Enter.
You will be prompted: Restore Trusted Zone ? answer Y (yes) and hit Enter to delete trusted zone.
Go to c:\program files and check for Dir's called winantivirus 2008, OR antivirus 2008, OR antivirus, or Vav or Uav or something like habdfk294kdl.
If you find them DELETE them
Also this does alot in your Registry. So
Start-run-regedit. HKEY_CURRENT_USER-Software-Microsoft-windows-currentVersion-Policies-Explorer In there you should right click on NoDriveTypeAutorun and modify it to 91. Anything else in there should be 0. Then check System dir as well and make sure they are 0 as well.
Dial a Fix will help with this.
http://www.majorgeeks.com/download4899.htmlNow run Ccleaner,
http://www.filehippo.com and check whats starting with your PC, Run ccleaner-tools-startup and check antivirus 2008 isn't going to startup there.
Finally for good measure. Run Spy-Bot search and destroy