How to remove Trojan.fakeAV!Gen 6 virus

[roshan45]

Hi,

I have a Dell Inspiron 1501 with Windows XP home edition SP 2. I use the Windows firewall and Norton as a security system. I had trouble navigating the internet and I found it odd. I used malawarebyte and I discovered that I had trojan horse in my computer and it has allegedly treated and / or deleted. Then my Norton pop up at exactly 5 minutes saying it has blocked and deleted trojan.fakeAV! Gen6. The trojan is still in the same folder: c:\windows\temp\xxxx.tmp (xxxx is 4 letters at random) I go to the norton site and explain that I do a full scan to remove all of my computer and they explain anything about the registry, but I did not visit there. Norton explains that if the full scan does not work, to roll in safe mode. What to do ?? How to remove Trojan.fakeAV!Gen 6 virus ??

[Simpson]

what operation do you try to do in safe mode? Sometimes repair Windows may resolve the problem of viruses that you possess. You try to start in normal mode to see what happens?

[roshan45]

Initially I wanted to start in Safe Mode to run my antivirus such as Norton advised me on their site. My computer would not start in Safe Mode by pressing F8 or F5, I tried 2 times, I used the msconfig and check the box or BootSafe safeboot. From there, rolling my bios, but my windows would not open. Then I made the repair of windows. Except that since the safeboot box is checked, my computer tries to restart in safe mode, but windows is trying to complete the repair that is not in safe mode. So reboot loop. I know it's complicated, but I do not want to format my computer, So I have tried to configure my USB ports and then pick them up with another computer, put them on a USB drive and install in my computer. I have tried to repair without formatting but nothing has helped ......

[Simpson]

You must then remove the /safeboot: parameter in your boot.ini file.

To do this two ways in your case:
- Or you branch your hard disk on another computer and you manually edit the boot.ini file to remove the entry / safeboot: parameter.
- Let you edit your boot.ini from the Recovery Console.

1. Then you boot from the CD to start the Recovery Console
2. after entering your credentials, you run the command bootcfg / query. (bootcfg to change the configuration of boot.ini)

You should get something like that:
C:\WINDOWS\system32> bootcfg/query

Settings bootloader
-----------------------------------
timeout: 30
default: multi (0) disk (0) rdisk (0) partition (1) \ WINDOWS

Boot Entries
--------------------
ID entry point: 1
Friendly Name: Microsoft Windows XP Professional "
Path: multi (0) disk (0) rdisk (0) partition (1) \ WINDOWS
Options for loading the operating system:/noexecute = optin/fastdetect/safeboot: minimal

3. Note the ID number of the boot entry that interests you (if you're not multiboot, it will be "1"). Note also the option of loading the system.
4. Run the command bootcfg/raw/noexecute = optin/fastdetect" / id 1. (/ ID to 1 according to the results noted above). The / raw allows to rewrite the options in your boot.ini but without the / safeboot. Thus mirroring the load options noted above but without the / safeboot.
5. That's it. You should have said "Operation successful" and safe mode will not run at next startup.