Tuesday, July 08, 2008

Antivirus XP 2008 Manual Removal Instructions

This is how I got rid of Antivirus XP 2008. It is different than the XP Antivirus 2008 most sites refer to.

First you need to stop the program from loading on startup. This is what you do to stop it:

Run msconfig, Go to Startup tab

Uncheck lphc35dj0e1an
Uncheck rhc75dj0e1an

Click apply, then ok, Restart computer

Then you need to delete the main files this program uses. Delete the following files:

C:\program files\rhc75dj0e1an\rhc75dj0e1an.exe

This should remove the program from your system but you probably still have a warning message displayed as your wallpaper in Windows and the virus removed the ability to change the wallpaper or your desktop settings.

To restore ability to change your desktop settings and select a different wallpaper and screen saver do the following:

Start, run

type Gpedit.msc

Navigate to User configuration, Administrative Templates, Control Panel, Display

Right click on Remove Display in Control Panel
Click on Properties and select Disabled

Do the same steps to change the following attributes to disabled:

Hide Desktop Tab
Prevent changing wallpaper
Hide Apperance and Themes tab
Hide Settings tab
Hide Screen Saver tab

You should now be able to use your computer normally and change the wallpaper to something other than the warning message Antivirus XP 2008 set it to.

Went to MalwareBytes.Com and downloaded and scanned with free tool

Also went to filehippo.com and downloaded:
1. CCleaner
2. Spybot Search and Destroy
3. SpywareBlaster

Ran Combofix (This rocks!...but you have to be careful. It is a sharp knife)