av fox has taken over my computer

[adunkelman]

av fox has taken over my computer & holding hostage requiring me to buy the program. Ine the meatime it is delivering PORN sites!

Has anyone had this problem? any solution???

ardu

[adunkelman]

Mision accomplished....found teh .exe file & neutralized!

[rdze57]

which file?

Location and name would be great.

I seem to have the same infection...

Thanks!

[EINSTEIN_007]

The files you need to delete are listed below:

%Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string].exe

The registry entries you need to delete:

HKEY_CURRENT_USER\Software\AvSuite

HKEY_LOCAL_MACHINE\Software\AvSuite

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” =”1″

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = ““

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555″

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1″

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random string]“

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random string]“