help anti virus 2008

[Giggsie]

My brother has just phoned me, he has anti virus 2008 come up on his computer and cannot get rid of it. He cannot close it down or get to any other page it won't even let him close down computer he just had to switch it off at mains. Canna anyone help as what to do to get rid.

[trish432]

I think this question has been asked a few times.
If you put antivirus 2008 into the search box at bottom of page, and tick to search site, you should come up with some answers.
Personally I would reinstall windows, but I have all my drivers and files backed up, so that`s ok for me.
If he has his stuff backed up, it might be the best option, as I don`t think it`s so easy to remove.

[MrBounty]

http://www.bleepingcomputer.com/malware-remova l/remove-win-antivir-antivirus-2008

[trish432]

MrBounty, had a look at the link and doesn`t sound too difficult to remove, but, futricats brother may have difficulty, judging by the way his computer is behaving due to the malware being present.

[Giggsie]

quite right trish he can't get anywhere else except this page of anti virus 2008. He cannot get another web page to change so he can download anything to remove it.
thanks for answering also to Mr Bounty for link.

[squarebear]

Mr Bounty's link is the way I removed it. Firstly though, boot into safe mode and remove a folder called something like "rhpc39l0etc". It's under program files. Antivirus 2008 executes a file under here each time you PC boots.

Good luck! It took me a day to get rid of it after the missus clicked on something like "Your friend has sent you a greeting card".

[squarebear]

I meant to say. Make sure your screen saver is disabled when running the Malware detector in the above link, as Antivirus changes your screen saver to one of its own thus ruining the scan.

Antivirus on my machine removed the screen saver and background tab. If it's done this on your brothers, go to regedit and:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
You may have two settings. One says something like "NoDispScrSavPage" and the other "NoBackground", make sure both of these are set to 0