Got infected w/ malware: Antivirus XP
Posted on 2010-03-25
Don't know how, but I got infected w/ a malware program masquerading as an antivirus program. It's called Antivirus XP and mimics the native Windows Security center, and AVG. I probably have the newest version of this malicious crap.
I couldn't launch any apps because it would always bring up that stupid app. I looked in my registry and there was were two entries in
(Default) "C:\Documents and Settings\Gene\Local Settings\Application Data\ave.exe" /START "%1" %*
IsolatedCommand "%1" %*
I didn't know whether the .exe entry was changed or added, so I renamed it to ".exeX". After that I was able to launch applications. However, the bad entry remains in my registry, just renamed.
I did some searching and a program called MalwareBytes was recommended. However, when launched it doesn't update properly, just hanging. I do have internet access on this machine, so that's not the problem. So the program didn't work for me.
My concern is that if I reboot, it could start up again. I don't know which files to delete, or which entries in msconfig or whereever. Before deleting the registry entry, I searched for ave.exe and could only find it as ave.exe****.pf (the **** were some numbers). However, the program still launched.
How can I delete this crap for good??