AntiVirXP08 Descriptions:
AntiVirXP08 , also known as Anti Vir XP 08, is one of the latest counterfeit antispyware that devastates the wolrd wide web. AntiVirXP08 is a variant of XP Antivirus or WinAntivirusPro. AntiVirXP08 usually come up after you installed a video codec that come with Trojan, malware and virus. AntiVirXP08 normally generates fake and misleading system popup error messages so end-users will be tricked into purchase AntiVirXP08.
It is very important to remove all the components of of the AntiVirXP08 and all the malware and trojans that it might have come bundle with (such as zlob.trojan, trojan.vundo and Trojan.Downloader). To effectively remove AntiVirXP08, we have created a manual removal instructions which is easy to understand.
Download SpyHunter* Spyware Detection Utility
Manual AntiVirXP08 Removal Instructions:
Unregister AntiVirXP08 DLL Files:
(Learn how to do this)
%ProgramFiles%\[RANDOM NAME]\MFC71.dll
%ProgramFiles%\[RANDOM NAME]\MFC71ENU.DLL
%ProgramFiles%\[RANDOM NAME]\msvcp71.dll
%ProgramFiles%\[RANDOM NAME]\msvcr71.dll
%ProgramFiles%\[RANDOM NAME]\shlwapi.dll
%ProgramFiles%\[RANDOM NAME]\wininet.dll
Stop AntiVirXP08 Processes:
(Learn how to do this)
Antvrs.exe
AntiVirXP08.exe
Find and Delete these AntiVirXP08:
(Learn how to do this)
AntiVirXP08.exe
Uninstall AntiVirXP08.lnk
%ProgramFiles%\[RANDOM NAME]\MFC71.dll
%ProgramFiles%\[RANDOM NAME]\MFC71ENU.DLL
%ProgramFiles%\[RANDOM NAME]\msvcp71.dll
%ProgramFiles%\[RANDOM NAME]\msvcr71.dll
%ProgramFiles%\[RANDOM NAME]\shlwapi.dll
%ProgramFiles%\[RANDOM NAME]\wininet.dll
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus XP 2008.lnk
C:\Documents and Settings\All Users\Desktop\Antivirus XP 2008.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Antivirus XP 2008.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\How to Register Antivirus XP 2008.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\License Agreement.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Register Antivirus XP 2008.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Uninstall.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008.lnk %ProgramFiles%\[RANDOM NAME]\database.dat
Remove AntiVirXP08 Registry Values:
(Learn how to do this)
HKEY_CURRENT_USER\Software\Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”Antivirus” = “%ProgramFiles%\AntiVirXP08\Antvrs.exe”
Download SpyHunter* Spyware Detection Utility
Thanks a million. At first, it took me forever to figure this out. It took me about 5 hours today but I think I finally got this little bugger off my computer. I have been freaking out! I am an online student and couldn’t use adobe or internet at all. This virus was on my computer because my husband and brother went to flickpeek. com and tried to watch saw 4. It did not get downloaded, however, I am not sure how it ended up on here. I am confused about one thing though, what does the RestoreOpenIsSafe thing for? I found it but don’t know what to do. Other than that, once I found the posts you guys left, I figured it out and got it taken care of. The instructions on the top is what I started using. Then, being the blond I should have been born as, I scrolled down and found what Luke and others have said. Thanks a million Luke and all others who have contributed. I didn’t have the luxury of money to buy any program that would knock that out.
I for the life of me can not find the registry files to return my desktop back to normal
Hi all, what a bugger this thing is. Just got attacked last night, not by downloading a video but by simply clicking on a website. (I had googled my business name and saw it come up on a site I didn’t recognize but was titled something reasonable — I clicked over and the antivirxp stuff started up. Evil.)
Luke, thank you so much for your clear instructions — totally on the money and I have all but one thing fixed (more on that in a second).
Meanwhile, for those who are having trouble finding the NoDispBackgroundPage and NoDispScrSavPage: it may be because you need to look in another subfolder. I ended up finding those files on the 4th folder attempt (under My Computer, I have 5 subfolders…). So keep looking. Changing those values fixed the problem immediately for me.
Also, for reference, my two antivirx files *ended* with the values “jj0e713″
Finally, the one problem I am having is that I can no longer get into Internet Explorer. I deleted all the temp files etc. per Luke’s instructions, but every time I try to launch, I get the “IE has encountered a problem and needs to close…” msg. This msg also pops up periodically when I haven’t clicked on IE, which makes me think antivirxp is still running in the background, trying to auto launch somehow?
Has anyone else encountered this? Any fixes to suggest? Thanks!
Luke – probably for you (help much appreciated!)
I removed the “virus” – hopefully it’s gone. However, I haven’t been able to recover from the following damage (this is what I found so far):
1. All restore points were lost – furthermore, unable to create new restore points.
a. Is there a way to “revive” those old restore points?
b. What do I need to do to get system restore to work again?
2. Skype configuration got corrupted – file unreadable.
3. uTorrent list of files and status corrupt – so it cannot really work any longer.
perhaps there are other corrupt files. It is suggesting “chkdsk” – but that may not recover everything correctly.
Any ideas?
Thx.
Tal
Hm. I seem to have a bit of a problem. The virus seems to be responsible for ugly black margins that have appeared on the sides, half an inch or so on both the left and right sides, and half a centimeter or so on the top. They aren’t just on the desktop background, my screen has essentially shrunk. It would be nice to know how to get rid of them. Thank you.
Followed Luke’s August 18, 2008 posts (Many, many Thanks). Look for also, aj0ep4h. Saw three iterations: lphccaj0ep4h, Smrhc9eaj0ep4h, and rhc9eaj0ep4h.
Question: I still see an unexplained Microsoft Visual C++ Redistributable program that was installed ont he date of infection and it cannot be uninstalled. Help??
Haven’t checked back in awhile.. but just wanted to say “You are welcome” to everyone my Aug 18th post helped out!!!
Based on the comments, I guess the file names do rotate. It seems that in all cases there is a consistance factor to the file name convention, just look for it and removal any/all instances of it.
Regards,
Luke
I did above mention all but still my system srestore point not funtion on earlier date pl. some give the idea
I cannot get past Change/Remove stage (step 2) in safe mode. When removing the stinking virus it brings up box that states “uninstall.exe has encountered a problem and needs to close, sorry for inconvienence” Thats been going on for twenty minutes of trying..any other way to remove this *^#+@)!+ ????
I have deleted all the contents I can find of this thing. Although, I still get that annoying pop-up! how to delete? Please,I need help.
thank u really i need it
hi good
Hi Luke…was reading this information tonight but today I spent $139 to get Norton to remove this mess from my computer and to clean it up. I thought it was rather expensive but had many viruses/trojans (or so the window said). Don’t know if calling Norton was right thing to do or not considering what it cost but puter is running great. Any thoughts on this?