How to Get Rid of the Inf/Autorun Virus

Fake anti-virus programs are deigned to steal your money.

Fake anti-virus programs flood your computer with pop-up advertisements telling you that your computer is infected with various viruses. The purpose of this is to scare you into purchasing a full version of the fake anti-virus program in order to remove these viruses. INF/Autorun is one of the fake viruses mentioned by fake anti-virus programs, including Antivirus XP 2008. In order to get rid of the INF/Autorun messages, you will need to remove the fake anti-virus program that is generating them.

Instructions

End Processes

1. Press Ctrl + Alt + Delete to open the Task Manager.

2. Click on the "Processes" tab of the Task Manager and then click "Show Processes From All Users."

3. Click on "Image Name" to view the processes alphabetically.

4. End the following processes. To end a process, right click on it and select "End Process."

   "ProgramFiles\[RANDOM NAME]\rhccv9j0e1b1.exe"
   "ProgramFiles\[RANDOM NAME]\Uninstall.exe"
   "System\[RANDOM NAME].exe"

5. Close the Task Manager.

Delete Registry Values

1. Click "Start" and type "regedit" into the "Search Programs and Files" box and press "Enter." The Registry Editor opens.

2. Delete the following registry values from the left pane of the Registry Editor. To delete a registry value, right click on it and select "Delete."

   “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”[RANDOM NAME]” = C:\Program” “Files\[RANDOM NAME]\[RANDOM NAME].exe”
   “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\”AntivirXP08″ = “AntivirXP08″
   “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\[RANDOM NAME]” “HKEY_LOCAL_MACHINE\SOFTWARE\[RANDOM NAME]” “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\[RANDOM NAME]”

3. Close the Registry Editor.

Delete DLLs

1. Click "Start" and type "cmd" into the "Search Programs and Files" box and press "Enter." The Command Prompt opens.

2. Type the following commands into the Command Prompt. Press "Enter" after each command.

   "regsvr32 /u MFC71.dll"
   "regsvr32 /u MFC71ENU.dll"
   "regsvr32 /u msvcp71.dll"
   "regsvr32 /u msvcr71.dll"
   "regsvr32 /u rhccv9j0e1b1.exe.local.dll"

3. Close the Command Prompt.

Delete Files and Directories

1. Click "Start" and then click on the "Search Programs and Files" box.

2. Search for and delete the following files and directories. To delete a file or directory, right click on it and select "Delete."

   “UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus XP 2008.lnk”
   “C:\Documents and Settings\All Users\Desktop\Antivirus XP 2008.lnk”
   “C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Antivirus XP 2008.lnk”
   “C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\How to Register Antivirus XP 2008.lnk”
   “C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\License Agreement.lnk”
   “C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Register Antivirus XP 2008.lnk”
   “C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Uninstall.lnk”
   “C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008.lnk "ProgramFiles\[RANDOM NAME]\database.dat”
   “ProgramFiles\[RANDOM NAME]\license.txt”
   "Program_files\antivirusxp2008"
   "UserProfile\Application Data\[RANDOM NAME]"

3. Restart your computer.

References

• FasterPCCleanClean: How to Remove INF/Autorun