Xp security fake virus help please.

[xryckaxx]

hello every 1 i need help deleting xp security fake virus it so annyoing. i cant enter most of antivirus sites. and i cant enter malwarebytes.org. i am using proxy now. i dled the malwarebytes setup and tried to remove by this guide: http://forums.malwarebytes.org/index.php?s...amp;#entry35969 but i cant find TDSSserv.sys i cant install anything please help . i have old version of malware bytes but i cant run there is weird start button: http://yfrog.com/3zweirdup

when i click it i can scan. it finds only 4 viruses.

Registry Values Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\syncman (Trojan.FakeAlert.H) -> No action taken.

Files Infected:

c:\WINDOWS\system32\wuaucldt.exe (Trojan.FakeAlert.H) -> No action taken.

[noknojon]

Hi -

I am not sure we have a Self Help Item for this particular infection but you can look in this area to see if there is one that matches yours -

But as we don't work on Malware removal or diagnostics in the general forums you can follow these instructions for expert help -

Please print out, read, and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post - Please be patient as our experts are very busy at this time and will get to you as soon as they can -

Please use the ADD REPLY Tab when responding to the experts -

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

Thank You -

[xryckaxx]

Thanks but fixed. Downloaded spyware doctor. now i can enter all sites and everything is working.

[AdvancedSetup]

We fully remove that fake installer. Your logs show you did not have the program remove it. You also need to update to the latest rules and MBAM would have easily removed it.