Warning Spyware detected on your computer Wallpaper Error Message Removal Instructions

August 22nd, 2008 | by Alex |

“Warning! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer” is a common error message that generated by spywares. Most recently this error message is relating to a rogue antispyware called Antivirus XP 2008. It’s annoying and devastating to the computer users, but none are more catastrophic than putting the privacy and data in risk. Now what? We’ve created a removal instructions to take care of your headache.

You can safely remove “Warning! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer” error message by following our manual removal instructions if you are familiar with regedit and dll files. Please also keep in mind that the infected files can vary from computer to computer since it’s generated randomly. Good luck!

Download SpyHunter* Spyware Detection Utility

Manual Removal Instructions:

Find and Delete these Files:
(Learn how to do this)
%ProgramFiles%\[RANDOM NAME]\MFC71ENU.DLL
%ProgramFiles%\[RANDOM NAME]\msvcp71.dll
%ProgramFiles%\[RANDOM NAME]\msvcr71.dll
%ProgramFiles%\[RANDOM NAME]\shlwapi.dll
%ProgramFiles%\[RANDOM NAME]\wininet.dll
%program_files%\rhc7nsj0e57c\mfc71.dll
%program_files%\rhc7nsj0e57c\mfc71enu.dll
%program_files%\rhc7nsj0e57c\msvcp71.dll
antivirusxp2008installer.exe
rhc7nsj0e57c.exe
%common_desktopdirectory%\antivirus xp 2008.lnk
%common_programs%\antivirus xp 2008.lnk
%common_programs%\antivirus xp 2008\antivirus xp 2008.lnk
%common_programs%\antivirus xp 2008\how to register antivirus xp 2008.lnk
%common_programs%\antivirus xp 2008\license agreement.lnk
%common_programs%\antivirus xp 2008\register antivirus xp 2008.lnk
%common_programs%\antivirus xp 2008\uninstall.lnk
%profile%\application data\microsoft\internet explorer\quick launch\antivirus xp 2008.lnk
%program_files%\rhc7nsj0e57c\database.dat
%program_files%\rhc7nsj0e57c\license.txt
%program_files%\rhc7nsj0e57c\uninstall.exe
%program_files%\rhc7nsj0e57c\msvcr71.dll
%program_files%\rhc7nsj0e57c\rhc7nsj0e57c.exe
%program_files%\rhc7nsj0e57c\rhc7nsj0e57c.exe.local
antivirusxp2008installer.exe
%program_files%\rhc7nsj0e57c\uninstall.exe
%program_files%\rhc7nsj0e57c\rhc7nsj0e57c.exe
%program_files%\rhc7nsj0e57c\mfc71.dll
%program_files%\rhc7nsj0e57c\msvcr71.dll
%program_files%\rhc7nsj0e57c\msvcp71.dll
%program_files%\rhc7nsj0e57c\mfc71enu.dll

Remove Registry Values:
(Learn how to do this)
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c registrationdiscurl
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run smrhc7nsj0e57c
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c registrationurl
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c scandepth
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c scanpriority
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c scansystemonstartup
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c softid
HKEY_USERS\Software\XP antivirus
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run smrhc7nsj0e57c
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\rhc7nsj0e57c
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\rhc7nsj0e57c displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\rhc7nsj0e57c uninstallstring
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c advid
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c automaticallyupdates
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c backgroundscan
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c backgroundscantimeout
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c databaseversion
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c daysinterval
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c domain
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c engineversion
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c guiversion
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c installdir
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c minimizeonstart
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c programversion
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c proxyname
HKEY_LOCAL_MACHINE\software\rhc7nsj0e57c proxyport

Download SpyHunter* Spyware Detection Utility.

bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark


Add this page to Favorite (For Internet Explorer)


*The free version of spyhunter is only a scanner (to detect spyware, trojans and malware on your computer). To use the removal tool you have to purchase the full version.

Disclaimer: All information provided on XP-Vista.com is for informational purposes only. The goal of this site is to educate and help Internet users to remove malwares, manually or through Spyhunter removal software. XP-Vista.com does not endorse or connect to the publishers of malwares. XP-Vista.com makes no representations as to accuracy, completeness, or validity of any information on this site and will not be liable for any errors, omissions, or delays in this information or any losses or damages arising from its use. Comments on this website are the sole responsibility of their writers and the writer will take full responsibility, liability that results from something written in or as a direct result of something written in a comment.

  1. 61 Responses to “Warning Spyware detected on your computer Wallpaper Error Message Removal Instructions”

  2. By vedant on May 18, 2008 | Reply

    i deleted the ie antivirus files
    but the error message that “your sysyem is infected…pls download antivirus…” keeps coming.
    even though i have mc afee
    i cud not find the process in the windows task manager
    pls help

  3. By Sushil on Jul 9, 2008 | Reply

    When I try to login to the system it logs out immediately showing the above message.

  4. By Fix it manually on Jul 10, 2008 | Reply

    Sophos, SpyHunter, Spybot, etc did not find/fix it. Here is how to do this manually.

    1. Directory list C:\WINDOWS\system32 and sort by date to look for files created since the infection began. In my case there were three suspicious ones:-
    blphcv76j0e76a.scr
    lphcv76j0e76a.exe
    phcv76j0e76a.bmp
    Notice that part of the name is common to all of them (cv76j0e76a). Delete these files.

    2. Run msconfig, click on the startup tab and untick the startup for the virus .exe file (in my case lphcv76j0e76a.exe)

    3. Restart your computer.

    4. Check that the virus files above have not come back. You may also need to reset the wallpaper in Control Panel Display settings.
    5. Run regedit and search for items containing the “common” name (cv76j0e76a). You should find at least two (the screensaver and the startup register). Delete the items found from the registry.

    6. Restart your computer again.

    7. Check that virus has gone, then create a System Restore point using the options in “Help and Support”

    8. Job done!

  5. By Robbie on Jul 10, 2008 | Reply

    Hey,
    I tried what you said, FIX IT MANUALLY, but it did not seem to work, I also could not find any of the files in regedit.
    I was able to delete the 3 files from the system32 folder and they are not coming back. I also was able to uncheck the box in msconfig but when I hit apply, it gives me an error message stating “An Access Denied error returned while attempting to change a service. You man need to log on using an Administrator account to make the specified changes.” even though I am logged in to an Administrator account.

    I got the message of the desktop background, but I am still not able to change the background.

    Also, my Windows update got switched off and I can’t put it back on. It does not change when i hit the turn on button! Another thing is that when i start up with no internet connection it keeps asking me if i want to work offline or try again to connect to the internet, i believe its the exact message you get when you try to browse in IE when you don’t have an Internet connection!

    Let me know any suggestions!

  6. By elaine on Jul 17, 2008 | Reply

    i followed the manual directions that “fix it manually” said— and it worked! at first i could not delete the files from system32 but you have to use it to recognize which ones are the viruses, then go to windows task manager, end those processes that you’ve just recognized, and THEN delete them from system 32. thank you so much!!

  7. By Dave Pehling on Jul 17, 2008 | Reply

    I used the above manual fix and it seems to be working (THANKS SO MUCH FOR A RELATIVELY EASY FIX!!!). The registry files MAY be difficult to find with REGEDIT unless you use the exact names of the files you deleted from the SYSTEM 32 folder. I only found one so I may still have some hunting to do.

    The malware also disabled my Internet connection so I had to manually enable it thru the Control Panel.

    Also remember to delete the program from the Program Files folder. It will be named similar to the file names that were deleted from the System 32 folder.

  8. By Yong Yang on Jul 23, 2008 | Reply

    The manual procedure works well!!! To find all the related entries in registry files, you can search the common substring “phc” and find all entries in the register files. I deleted all of them. Make sure that the entry is related to the suspicious files before you delete it.

    Thanks a lot!!!!

  9. By Chris on Jul 23, 2008 | Reply

    Hi this did not work for me, i found none of the files suggest to be the problem. I the symtoms of my laptop include the message “Warning! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer” and if left alone for five minutes or more restarts and the famous blue screen appears, with a different message each time. Help please.

  10. By DontNeedMyName on Jul 25, 2008 | Reply

    Lol guys ty im jus stying the manual thing now but i dont think il succed cuz im a litle noob at those things and im not english neightr so… hope il make it… Ty anyways

  11. By Selva on Jul 31, 2008 | Reply

    I too got the same problem. The manual steps worked for me. To identify what are all the virus file , you can just see .bmp file in system32 , it will have same wallpaper. With this file name you can mark other files too..

  12. By G Chang on Aug 6, 2008 | Reply

    The manual procedure worked for me! Thank you so much. I just want to add, for the benefit of beginning computer users, when it says to run msconfig or regedit, it means to do Start > Run and then type in the command name. When it says to search, to type Ctrl-F and enter the search string.

  13. By Dylan on Aug 12, 2008 | Reply

    I am following the path that “fix it manually” sent in July, but it is not letting me delete the files. It is telling me that Access is Denied. Make sure the disck is not full or write-protected and that the file is not currently in use.

    Any thoughts?

  14. By Dan G on Aug 14, 2008 | Reply

    I had just read this but haven’t tried it yet.
    If you are having problem deleting .dll file,
    change it from .dll to .doc, then move it to
    the desktop. After restarting computer, you should be able to delete it.

  15. By basheer on Aug 19, 2008 | Reply

    Great help! It worked for me.

    Thanks a lot

  16. By JBL on Aug 19, 2008 | Reply

    It worked for me according to “Fix it manually”. However, when open the display properties I now only have three tabs (Themes, Appearance, Settings) and I used to have more like Screen Saver. Any idea how to get that back to working again?
    Thanks for the help.

  17. By Brandon on Aug 19, 2008 | Reply

    If you are getting the error saying that it is write protected what you need to do is change your wallpaper by finding an image online and right clicking then selecting “set image as desktop background”. Then for the ctrl-alt-delete and find the .exe under processes and end task.

    I did the manual fix too and it seemed to work. Except I do not have the screensaver or wallpaper tabs.

    Where did you you guys catch the virus. I got mine of Stumble upon.

  18. By Ben on Aug 20, 2008 | Reply

    Hey guys i’m not very good with computers so i really need your help here

    I searched for the following files in my local hard drive but failed to find any of them

    tsokru.dll
    wsorad.dll
    tsokre.dll
    tokru.dll
    tonsakru.dll
    podnru.dll
    poply.dll
    tonsadnre.dll
    kol.dll
    zsol.dll
    cfgbkenud.dll

    what should i do? help please

  19. By Scotty on Aug 20, 2008 | Reply

    “Except I do not have the screensaver or wallpaper tabs”
    Neither do I. Does anybody know how to get them back? Help us please!

  20. By Jay on Aug 21, 2008 | Reply

    Thank you!!! Especially to Fix it manually and to Elaine- The common file I found was cv64j0e and the virus is now gone!
    BUT
    one problem I’m still having that I didn’t see anybody else mention is that I have to re-enable my firewall every time I reboot. It was first disabled when the virus was picked up- I think from a malicious web page- and I got a window telling me an svchost file wanted access and then it tried downloading some antivirus software and a baloon warning me I had no firewall protection. I was able to enable the firewall again but ever since then it disables whenever I log off. Any suggestions? Thanks in advance for your help!!!!!
    Jay

  21. By Jay on Aug 21, 2008 | Reply

    I just realized I am having the same problems as JBL and Scotty- the Screen Saver and Wallpaper tabs are gone! What do I do?
    Jay

  22. By Jay on Aug 21, 2008 | Reply

    Hi all- I was able to restore the missing tabs following these instruction I found:
    You can also restore these settings by going to: Start > Run > gpedit.msc > OK > User Configuration > Administrative Templates > Control Panel > Display. Disable anything that says “Hide…”.

    Thanks to MorfiusX on hardforum.com!

  23. By Dick on Aug 22, 2008 | Reply

    I followed your instructions. 5 hours! The warning error is gone. I now feel like a genius!! Thank you thank you!

  24. By Madman on Aug 22, 2008 | Reply

    I got this wallpaper “warning! spyware detected on your computer”. I can’t seem to do anything. I clicked on “X” and no responses. I right-click desktop and change desktop background and it was disabled. I am very upset now. Please offer advises.

  25. By Ann A on Aug 22, 2008 | Reply

    Jay,
    You’re wonderful! Followed your instructions and my wallpaper and screensaver are back. I’ve spent all evening cleaning up this stuff and was about to give up when I came here. Thank you!

  26. By timo on Aug 23, 2008 | Reply

    warning! spyware detected error picture stuck in the middle of the screen. everything works fine but the pic is rather annoying. i can’t delete it. :(

  27. By rob on Aug 23, 2008 | Reply

    followed instructions as by fix it manually,excellent.cheers guys!

  28. By Ferny on Aug 23, 2008 | Reply

    txs so much for the help provided…. almost everything is perfect now, except 4 the fact that i couldnt restore my missing tabs following Jay’s instructions coz apparently you need to have WIN WP Pro to run gpedit.msc and I have the Home Edition, so I cant access it and I still dont have my tabs back :( Any help will be really appreciated!

  29. By Ferny on Aug 23, 2008 | Reply

    I just found out how to do it! If any of you ever has the same problem just navigate to

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

    If there is a DWoRD Value such “NoDispScrSavPage” with a data value of 1 this will disable the screen saver tab. Change the value to 0 or delete it to
    see the tab again.

    Good lucK!

  30. By Noop on Aug 24, 2008 | Reply

    Just a quick one, if you have windows XP home edition then you won’t have gpedit.msc.

    Another way to get your wallpaper and screensaver tabs back up is by going to Run and opening regedit, then finding

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

    and then setting the values for NoDispBackgroundPage and NoDispScrSavPage to 0.

  31. By Addict on Aug 24, 2008 | Reply

    Thank you very much Jay ! It worked.
    However, for those with missing tabs and those who experience problems with running gpedit.msc (like me) - just run REGEDIT and go to “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System”

    There should be some data entries like “NoDispScrSavPage” and “NoDispBackground”. Delete it and you’re fine.

  32. By Doug on Aug 24, 2008 | Reply

    Thanks so much for all the advice on the manual removal process. It worked while all the other spyware efforts were failing. You might find the strings unique to different computers. Mine was *cjqsj0e7da*. But it’s all good now. Thanks so much!

  33. By Jessica on Aug 24, 2008 | Reply

    Thank you!! I got rid of the Warning wallpaper thing and restored the display tabs that were missing.

    Now how do I restore my browsers back to normal? I have Firefox3 (used the most), IE7 and Opera. I get a couple error messages when I am trying to use a website (like yahoo mail, I can’t send anything). Anytime I use google and click a link I get redirected to other sites. My browsers are slow too.

    I can’t get the “Antivirus 2008 Removal Instructions” main page to load all the way so I can’t ask questions on that page or read all of the responses :(

  34. By BobS on Aug 24, 2008 | Reply

    I have been infected by this insidious malware, and have partially restored my computer to normal, using the excellent advice provided on this thread by Fix it manually.

    Unfortunately, I have lost the ability to connect to the internet. I have checked the standard network connections, etc. but to no avail. I am using my laptop right now, but am very concerned about the loss of my desktop internet access. Any help on this topic would be greatly appreciated.

    Thanks in advance, BobS

  35. By cal on Aug 24, 2008 | Reply

    Hey guys
    im only young so i was abit iffy about going into the registry but then i thought sod it
    If i do harm i do harm lol
    but thanks to your GREAT instructiong
    I GOT RID OF THE STUPID MESSAGE THINGGG
    YAYYYYY:D
    SORRY LOL IM JUST SO PROUD OF MYSELF:)
    thanks agen

  36. By Ram on Aug 24, 2008 | Reply

    Thanks a lot to all who have posted the comments.
    I could solve the problem by following all your valuable suggestions.

    Thanks once again!

  37. By Bernadette on Aug 24, 2008 | Reply

    OMG, I am having trouble with the start up tab - it disappears quick before I can uncheck anything !!

  38. By Jay on Aug 24, 2008 | Reply

    Ann A. and Addict, just happy to help!
    Ferny, I’m sorry- I didn’t realize it wouldn’t work on the home edition, but thank you and Noop for providing the other solution!
    I’m still having a problem with my firewall disabling everytime I log off or turn off my computer- is anybody else having issues with their firewall?
    Jay

  39. By Cassandra on Aug 24, 2008 | Reply

    A big thank you to Fix it manually. You have succeeded where crappy softwares have failed. Also, a thanks to Jay for providing the info for getting my background and screen saver tabs back :D The three files *phcj47j0ea2l* are history, but I am having the same problem as Jessica. My google links send me to other websites than what I intended, and even when I type in the address, it stops suddenly. Any ideas?

  40. By jenny on Aug 24, 2008 | Reply

    Hey everyone!
    Thank you guys so much for posting all this information!

    I was able to fix my problem by following all of your instructions :]

    I found that weird .bmp file deleted along with other similar named files and the wallpaper went away!

    I also followed the instructions to change the binary digit of the “NoDispBackground” file and my tabs came back.

    THANKS EVERYONE!!!

  41. By Marta on Aug 25, 2008 | Reply

    I have the same problem as Jessica and Cassandra….dont really know what do do. The rest of the problems are now history…

    thank you very much

  42. By yngin on Aug 25, 2008 | Reply

    I have the same problem on my gf’s laptop. I found some suspicious files in system32 and deleted them, along with most of the dlls in the list at the top.

    Now I am trying to start regedit or msconfig (or nearly any other program for that matter), but the spyware won’t let the programs start! How do I work around this?

    Programs that aren’t working include (but is not limited to, I’m sure):
    iexplore.exe
    Spybot Search & Destroy
    Ad-Aware SE
    Screen Settings
    Desktop properties
    Add & Remove Programs
    msconfig
    regedit
    …
    etc

    Any thoughts?

  43. By Inge on Aug 26, 2008 | Reply

    Thanks Fix it manually. But I’ve still got 2 problems.

    I have the same problem with internet. Website’s that don’t open at all, going to other websites than clicked on and on some websites I see only parts.
    An other problem is that I can’t use System Restore points. There are no restore points anymore and I can’t make a new one.
    Can anyone help?

  44. By Dani on Aug 26, 2008 | Reply

    Thanks for the great inforamtion! I got the Antivirus too! With out you guys I would still be dead in the water. I wasnt able to manually fix the problem, however I installed a new firewall and such trough Verizon. Then I followed Ferny’s instructions for the screensaver, wallpaper and viola! I even got my Task manager back! Now I dont need the system restore I think because all pointts have been removed. Why does this have to happen. I lost 2 days on this #$%^&@!###))) thing! Thanks you guys! your the greatest!

  45. By Rick on Aug 26, 2008 | Reply

    I’ve had about 12 PCs come through our service department in the last week with this nasty. I’m able to clean OK, but does anyone know where it is actually contracted from?

    website, activex or just people answering yes to downloading an app from browser?

  46. By Bob on Aug 26, 2008 | Reply

    Thanks, Jay. Nice find!

  47. By Rathd Digvijaysinh on Aug 27, 2008 | Reply

    Thanks yaar, its worked
    I finely ride of this stupid massage.
    simply try to find c://window/system32/phc….. .bmp file and Delete it

  48. By Rajesh Sundaram on Aug 27, 2008 | Reply

    looks like no one has restored the network connection. If anyone had done it, please let everyone know.

    thanks,
    - Rajesh

  49. By joan on Aug 28, 2008 | Reply

    Thanks Fix it manually. But I’ve still got 3 problems.

    I have the same problem with internet. Website’s that don’t open at all, going to other websites than clicked on and on some websites I see only parts.
    Also unable to download any antispyware software, and Windows Update not working
    Please HELP

  50. By Meg Amor on Aug 28, 2008 | Reply

    Thanks so much to Fix it Manually. I had gotten all the other bits but my computer still had the ‘ad’ on the screen and no screensavers etc. And my computer was acting really weird, throwing up a warning black and white code screen that some programs were not working properly, dumping the main page screen etc. Very frustrating. Earlier in the day I had found 2 files I couldn’t delete and went back to find them last night. Fix It Manually had the answer. THANKS.

    I found the lurking files in Search and putting in phc - which seemed to be the common thread. They wouldn’t let me delete them - coming up with the - check this file is not a read only or copy protected etc. I then went to the msconfig file that Fix It said and unchecked them. Then went back to the search, found the phc again and deleted them and emptied the trash immediately.

    Voila!!! All fixed now. THANK YOU!!! :-)

  51. By sam hegarty on Aug 29, 2008 | Reply

    ive got rid of all the popups and stuff it was bringing up but i cant get rid of the stupid wallpaper its hard and the computer is not mine its my mums (im 14) and i dont want to stuff up the registry , i restored the internet connection just by enabling it in network connections again as the malware removes it but i f any one could walk me through the reg edit on msn (sambeast@hotmail.com) i would highly appreciate it thanks sam

  52. By Jeff on Aug 29, 2008 | Reply

    I had all the same problems described here and hopefully have restored everything with the help of all these posts.

    The antivirus XP 2008 versions I had were:
    lphcp5ej0ej1l
    inrhct5ej0ej1l

    The second one was harder to find but doing the searches in all areas for the common #s (5ej0ej1l) helped.

    The help with getting the screensaver back from Nope and Ferny worked as I have the windows XP Home version.

    Thanks to everyone who posted - I wouldn’t of been able to figure this out with out the posts.

  53. By Mary on Aug 30, 2008 | Reply

    Thanks to all of you with the great help. I got this problem and I went through all the steps and they worked. I also have this internet connection problem. I can go to some websites but then I am redirected to somewhere else. for example when I go to digg.com I can see some part of the site but not all or if I go to youtube.com I can not watch any videos. Please help me resolve this problem.
    By the way you guy are great and thanks again :)

  54. By Rocky on Sep 1, 2008 | Reply

    Thank you sooo much Rathd #46. What you said worked.

  55. By Mary on Sep 2, 2008 | Reply

    HELP NEEDED
    Did anyone find out how to fix this internet problem? I can not open some websites and for some websites I see half and half of the page shows as blank page. Please help me with that.

  56. By Jay on Sep 3, 2008 | Reply

    Hi all- just an update-
    I finally got my XP firewall to stay on. I ran Housecall and it found Troj_small in C Windows system32 drivers svchost. I check out properties and what do you know, it was created at the same time my laptop picked up this virus in the first place. At first Housecall couldn’t delete it, so I tried to delete it manually, and couldn’t. So I went to Sart Run msconfig, checked Selective Startup, and rebooted. Ran Housecall only on that folder where the trojan was found- still there, and still won’t delete. Then went to Strt Run regedit HKCU SOFTWARE Microsoft Windows Current Version and once there CTRL+F and typed svc and there it was. Right clicked, deleted, and rebooted. Went back to the folder; still there, but this time I was able to delete it with no resistance.
    I hope I finally got rid of it- no further issues to date. What a nightmare this has been, but thank you to all that have posted and helped me track this down and eliminate it.
    Jay

  57. By Jay on Sep 3, 2008 | Reply

    To Rick-
    I am almost certain my computer became infected via an infected website. I believe it was pissed consumer or something like that. It came up as one of hte results from a yahoo search and when I clicked on it, it stopped loading about halfway, and then I got Security Alerts and that antivirus program was trying to install itself and the my firwall was disabled- what a mess!!!!
    I have since visited that website again and no problems, but that was when it all started.
    Hope that helped…
    Jay

  58. By Kash on Sep 4, 2008 | Reply

    Thanks Alex and Everyone…

  59. By james on Sep 14, 2008 | Reply

    im so glad i found this page. that program almost cost me a $2,000 laptop till i folowed your instructions. thanks to everyone who gave advice on this.

  60. By DAVID on Oct 6, 2008 | Reply

    I HAD THE SAME THING HAPPEN, THE MESSEGE CAME UP ON THE BACKGROUND BUT EVERYTHING SEEMED TO WORK FINE, I RAN AD-AWARE AND TOOK OUT 1300 OR SO FILES. BUT WHEN I RESTART NOW IT ONLY STARTS WITH LAST KNOWN GOOD CONFIGURATION OTHERWISE MY LAPTOP JUST KEEPS RESTARTING ITSELF HELP PLEASE!!!!!

  61. By liz on Oct 7, 2008 | Reply

    The same thing is happening to me how am i suppose to fix it when it won’t stay on for more than 2 minutes.

  62. By Robin on Oct 20, 2008 | Reply

    Thank you all!The problem (virus) was in file blphc1jrj0ev8.I found this file so: Start-Search:( I wroote the dates when i get the virus 2008.10.19-2008.10.20,then typed fragment of the file “phc”.and get blphc1jrj0ev8,it was in C:\-WINDOWS-System32.Then i deleted this file,rastared computer and all problems have left.Thanks for advices !

Post a Comment