Any ideas of how to get rid of "XP Internet Security 2012" very real looking virus?

[gbeckler]

I just got a virus that looks quite real, but doesn't offer any ways to do anything except buy the product.  I just scanned with McAfee and didn't find anything.  Can McAfee remove it?  I did a quick Internet search and found some removal methods, but not willing to go and change registry etc.  See attached file for a screen view of one of the annoying popups.

[exbrit · Accepted solution]

Moved this to Malware Discussions > Home User Assistance.

This nuisance belongs to the fake anti-malware category which fool most regular antivirus engines and  there are numerous removal methods on the web, the best one is right here: http://www.bleepingcomputer.com/virus-removal/remove-win-7-antispyware-2012

It covers several fake pests with similar names.

Scroll down the page as the first links are all adverts that help pay for their excellent website.

Message was edited by: Ex_Brit on 11/06/11 9:24:33 EDT AM

[sirvemup]

I was having the same problems with my pc, Ex_Brit's solution using the bleepingcomputer link really worked.

Thanks Brit, my pc is running problem free.

[exbrit]

You're welcome.

[techrumy]

Also, here's a slightly different approach on XP Internet Security 2012 removal procedure in case you don't have another computer to download the files requested in the removal guide mentioned above:

http://deletemalware.blogspot.com/2011/06/remove-xp-antispyware-2012-xp-internet.html

Good luck!

[newjack]

You could also try safe mode with networking.

[rmatzke]

Followed instructions but registration key does not work, says it is an invalid key.

[clindahl]

I see how to successfully remove this - my question is does Mcafee Scan Engine identify the malware as it is downloaded and / or written to the disk?

[exbrit]

No.  None of the major antivirus engines do a very good job at detecting any of these fake antimalware pests unfortunately but they are working on it, hence we recommend other specialist tools such as Malwarebytes Free (not Pro) which can be installed, updated and run all in 'Safe Mode with Networking' - that method usually works.

Message was edited by: Ex_Brit on 16/06/11 9:07:15 EDT AM

[gbeckler]

Thanks!  Solved the problem.  I had to use another computer to get to your answer and download the files needed (hadn't seen your more recent answer about opening in safemode with networking).  The problem went on for about a week and everyday it spread through the computer (eventually making it impossible to go to any site with any browser).  Thanks again - solved a major headache.