malwornout Posted December 6, 2011 Author ID:502004 Share Posted December 6, 2011 Various other applications (including mbam.exe) are still hijacked and launch the fake Windows Security Center and XP Security 2012 virus. When I look at task manager, the process that seems to be associated with the virus is oex.exe. Link to post Share on other sites More sharing options...
malwornout Posted December 7, 2011 Author ID:502146 Share Posted December 7, 2011 After a few hours, I now notice that when XP Security 2012 virus launches (as the result of clicking on almost any legitimate application) the associated process in task manager now seems to be fvi.exe. Link to post Share on other sites More sharing options...
Maniac Posted December 7, 2011 ID:502205 Share Posted December 7, 2011 Follow the instructions here:http://www.bleepingcomputer.com/virus-removal/remove-xp-security-2012 Link to post Share on other sites More sharing options...
malwornout Posted December 8, 2011 Author ID:502463 Share Posted December 8, 2011 That link is very helpful, although not without some implementation issues because I have multiple user accounts (admin and non-admin). It appears that my XP Security 2012 problem may be over, but the fix left some of my apps unable to launch. For example, clicking on the shortcut or the exe file for thunderbird has no effect. Any suggestions there? Thanks again. Link to post Share on other sites More sharing options...
Maniac Posted December 9, 2011 ID:502887 Share Posted December 9, 2011 Please download exeHelper (http://www.raktor.net/exeHelper/exeHelper.com) to your desktop.Double-click on exeHelper.com to run the fix.A black window should pop up, press any key to close once the fix is completed.Post the contents of log.txt (Will be created in the directory where you ran exeHelper.com)Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file). Link to post Share on other sites More sharing options...
Staff screen317 Posted December 21, 2011 Staff ID:507662 Share Posted December 21, 2011 Are you still with us? This topic will be closed in a few days if we do not hear back from you. Link to post Share on other sites More sharing options...
Maurice Naggar Posted February 3, 2012 ID:523345 Share Posted February 3, 2012 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts