XP Security Tool 2010

[sidewinder8686]

A friend of mine's computer picked up the scareware XP Security Tool 2010. I think he might have picked up a few others that I haven't found yet. A fix for this scareware has been posted on various websites, which involves editing the registry. However, when I try to do that, I am told that "Registry Editing has been turned off by the administrator." I've tried about 4 ways to get into regedit using ways that were on various websites. Nothing has worked. I attempted to install Hijack This. When the computer is in safe mode, it doesn't begin to install. When the computer is not in safe mode, it begins to install, but freezes before copying files. Also, the computer doesn't always start properly when not in safe mode. About half the time, it freezes before displaying the Windows splash screen. It is a Dell Precision computer running 32 bit Windows XP professional. Every time I try to run an .exe file, it doesn't work and ave.exe appears in the task manager. Thanks in advance.

[NonSuch]

We understand that you are having difficulty running certain programs, including HijackThis. However, in order for us to help you it is necessary that you provide us with a HijackThis log, and it is possible you may be able to trick the malware into letting you do this. First, download HijackThis to a clean computer, then rename it from HijackThis.exe to any other name you want, using an .exe extension, for example... YourLastName.exe. Once you have done that, burn it to a CD (preferable to using a flash drive that may easily become infected) then transfer the renamed file to the infected computer and run a scan, then start a new topic and include your HijackThis log.

If that does not work, try the following:

Download/run Rkill:

Please download Rkill from one of the following links and save to your Desktop:

One, Two,Three or Four

• Double click on Rkill.
• A command window will open then disappear upon completion, this is normal.
• Please leave Rkill on the Desktop until otherwise advised.

Note: If your security software warns about Rkill, please ignore and allow the download to continue.

Next, please follow the guideline at the link below to start a new topic and post your HijackThis log. If you are unable to create and post a HijackThis log, then your only option may be to reformat your computer and reinstall the operating system.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here: >Guideline for posting your HijackThis log<