Help - Infected with 'XP Security 2012' Virus

AirCooledHeaven

Hi, can anyone help me to remove 'XP Security 2012' virus from my desktop PC which has popped up after browsing tripadvisor. It blocks any attempt to open malwarebytes and spybot and windows update. I managed to run AVG from the right click context menu but it 'found' nothing. If I try to open firefox I get a fake firefox page telling me that internet access is unsafe at this time. Alongfside all the other pop up boxes, balloon messages, and task bar notifications that I'm in imminent danger if I don't 'upgrade' XP Security 2012. This virus seems to be connected to a process called qul.exe. If I kill this all the doom messages disappear, but if I try and open anything the process comes back again. Any help will be appreciated. I'm writing this from a clean laptop so still have internet access if something needs downloading. Thanks

TakeThis

Reboot, hit F8 and choose Safe Mode with Networking and run Malwarebytes from there or try Hitman Pro in Force Breach Mode.

Hitman Pro:

If you are running a 32 bit OS, download and save Hitman Pro to your Desktop(or USB drive if necessary).

For 64bit OSes, click here

Once saved, hold down the Ctrl key situated on the left of the keyboard whilst double clicking on the Hitman Pro .exe file in order to start the program. Then follow the simple instructions.

Here is a video guide:

http://www.youtube.com/watch?v=m6eRWTv2STk&feature=player_embedded

GunJack

or alternatively,

http://www.bleepingcomputer.com/virus-removal/remove-xp-internet-security-2012


note the possible bundling with tdss rootkit

AirCooledHeaven

Thanks for your help, I've now eradicated this pernicious malware

Also sticking a useful link here in case anyone searches this forum with the same problem in the future:

Remove XP Security 2012 virus/malware

http://youtu.be/VBaKclpbNs8