XP Defender Pro - actually spyware? help!

Browntoa

londonman81 wrote: »

Still no joy from this - and why would the USB stick method work as I still have to install it onto the machine....

superantispwyware downloads with a random filename onto the usb , theres a good chance that it will run as then infection tends to stop the popular names for spyware programs

Linbox

londonman81 wrote: »

When I try to install Malwarebytes, it doesn't run.....lietrally does nothing after I click on the 'Run' option after double-clicking the downloaded file.

Doesn't sound healthy...any clues?

Down load both FixExe.reg and mbam-setup.exe
double click FixExe.reg and allow to run then run mbam-setup.exe and update, do a full scan.

Still no luck rename mbam-setup.exe to mbam-setup.com and then double click on it to run.

The virus is disabling the EXE extension, when you rename it it will run.

Linbox

The malwarebytes solution does work, I had to clean my sons pc last week.
Mcafeestinger is also supposed to get rid of this type of problem YMMV

aliEnRIK

Linbox wrote: »

Down load both FixExe.reg

Cheers for that

dave11thnun

londonman: I just got rid of this XP defender pro on my computer, was REALLY scary as I thought initially there was a genuine problem! And I'm quite confident with computers!

What I did was follow instructions on this site: http://www.myantispyware.com/2010/01/28/how-to-remove-xp-internet-security-2010-xp-guardian-antivirus-xp-2010/

Open up notepad and copy and paste the following:


Windows Registry Editor Version 5.00
[-HKEY_CURRENT_USER\Software\Classes\.exe]
[-HKEY_CURRENT_USER\Software\Classes\secfile]
[-HKEY_CLASSES_ROOT\secfile]
[-HKEY_CLASSES_ROOT\.exe\shell\open\command]
[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"
[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"




Click file, save as, and change the name to "fix.reg" then change the save as type to "all files" save this on your desktop so its easy to find.

Close notepad and find fix.reg on your desktop, double click it to open and then click yes. When it has finished, restart your computer and hey presto it has stopped popping up all the time telling me my computer is infected, someone is watching my every move etc etc..

hope this helps!