I removed some of the files from antivirus xp 2008, but I know some are still on my computer. When i type into a search engine for anything and click a result, it will link to a pop-up that is unrelated to what I was looking for. Also, it will not let me go to some sites, like wikipedia or sites to dowload malware bytes (or something similar.) I already deleted the lphcl[random characters] and rhcg[random characters] files. I was also able to restore my desktop and screensaver. Can anyone help?
Related posts:
5 responses so far ↓
1 ? // Sep 7, 2008
Download and scan with the the following free software in order one by one, delete what ever they find should leave your PC free of infections:
Malwarebytes: http://www.malwarebytes.org/mbam.php
SuperAntispyware: http://www.download.com/SUPERAntiSpyware-Free-Edition/3000-8022_4-10523889.html?cdlPid=10850129
SmitfraudFix: http://siri.geekstogo.com/SmitfraudFix.exe
Avast Anti-Virus: http://www.download.com/Avast-Home-Edition/3000-2239_4-10019223.html?tag=pop.software&cdlPid=10867956
Once you have removed the infections keep Avast and download Comodo Pro firewall, then switch to Firefox 3 if you are browsing with IE this should stop it returning. (links on my profile)
Guide to using SmitfraudFix: http://www.bleepingcomputer.com/forums/topic17258.html
2 Daniel A // Sep 7, 2008
Did you try deleting the registry keys?
HKEY_LOCAL_MACHINE\SOFTWARE\rhcnkrj0etfg
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\rhcnkrj0etfg
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion “rhcnkrj0etfg”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform “AntivirXP08″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “SMrhcnkrj0etfg”
These are all the files that antivirus xp 2008 puts on
C:\WINDOWS\qegbdmwf.dll
C:\WINDOWS\pntqkflv.dll
c:\Program Files\rhcnkrj0etfg
c:\Program Files\rhcnkrj0etfg\database.dat
c:\Program Files\rhcnkrj0etfg\license.txt
c:\Program Files\rhcnkrj0etfg\MFC71.dll
c:\Program Files\rhcnkrj0etfg\MFC71ENU.DLL
c:\Program Files\rhcnkrj0etfg\msvcp71.dll
c:\Program Files\rhcnkrj0etfg\msvcr71.dll
c:\Program Files\rhcnkrj0etfg\rhcnkrj0etfg.exe
c:\Program Files\rhcnkrj0etfg\rhcnkrj0etfg.exe.local
c:\Program Files\rhcnkrj0etfg\rhcnkrj0etfgSkin.dll
c:\Program Files\rhcnkrj0etfg\Uninstall.exe
c:\WINDOWS\system32\pphcjkrj0etfg.exe
c:\Documents and Settings\All Users\Desktop\Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\How to Register Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\License Agreement.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Register Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Uninstall.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus XP 2008.lnk
%UserProfile%\Application Data\rhcnkrj0etfg
%UserProfile%\Application Data\rhcnkrj0etfg\Quarantine
%UserProfile%\Application Data\rhcnkrj0etfg\Quarantine\Autorun
%UserProfile%\Application Data\rhcnkrj0etfg\Quarantine\Autorun\HKCU
%UserProfile%\Application Data\rhcnkrj0etfg\Quarantine\Autorun\HKCU\RunOnce
%UserProfile%\Application Data\rhcnkrj0etfg\Quarantine\Autorun\HKLM
%UserProfile%\Application Data\rhcnkrj0etfg\Quarantine\Autorun\HKLM\RunOnce
%UserProfile%\Application Data\rhcnkrj0etfg\Quarantine\Autorun\StartMenuAllUsers
%UserProfile%\Application Data\rhcnkrj0etfg\Quarantine\Autorun\StartMenuCurrentUser
%UserProfile%\Application Data\rhcnkrj0etfg\Quarantine\BrowserObjects
%UserProfile%\Application Data\rhcnkrj0etfg\Quarantine\Packages
3 Dan S // Sep 7, 2008
i has the same problem, forget about googling it, it wont let you. The best thing to do is uninstall it. Goto Control Panel->add/remove programs.
4 malware_expert // Sep 7, 2008
Antivirus XP 2008 is a suspect anti-spyware application that have a set of features which do not work, and produces false positives which may goad the user into purchasing the application. Antivirus XP 2008 show various pop-up advertisements and fake security messages, which may disturb your work and slow down computer performance. Antivirus XP 2008 is a clone of XP Antivirus fake antispyware. It is recomended to remove Antivirus XP 2008 from your computer.
5 jojoqueeny // Sep 7, 2008
i have to delete all of the antivirus xp 2008 files. I followed this guide the shows you which files and also provides a free tool that does it automaticly without paying any money. http://www.spyware-techie.com/antivirusxp-2008-how-to-remove-antivirus-xp-2008/
Give it a try. What do you have to lose?
Leave a Comment