Windows XP Repair - Fake AV Removal Guide

The "Windows XP Repair" Fake AV hides all files and folders, and brings all the shortcuts in a some folder.

So that would find anything on your computer to show hidden files and folders.
To do this, open My Computer. In the menu click Tools - Folder Options.

Click the tab View. Scroll to the "Show hidden files and folders", select this option and click OK.

Now you can see the files and folders that were hidden in a consequence of virus infection.


Now again run My Computer and type in the address bar website trojan-killer.net and press Enter.

On this site you will need to download Trojan-Killer.


Run and install it.

Upon completion of installation, select Launch GridinSoft Trojan Killer and click Finish.

When the Trojan Killer will look on your computer you will see a full list of detected malware.
Press the Remove Selected to remove them.

Files created:

C:\Documents and Settings\All Users\Application Data\HCPnpjMsSrIRBiL.exe
C:\Documents and Settings\All Users\Application Data\14147364.exe
C:\Documents and Settings\<UserName>\Start Menu\Programs\Windows XP Repair\Windows XP Repair.lnk
C:\Documents and Settings\<UserName>\Start Menu\Programs\Windows XP Repair\Uninstall Windows XP Repair.lnk
C:\Documents and Settings\<UserName>\Desktop\Windows XP Repair.lnk



Registry key created:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"HCPnpjMsSrIRBiL"="C:\Documents and Settings\All Users\Application Data\HCPnpjMsSrIRBiL.exe"




Also I recommend you to read this guides:
General information about viruses and trojans
How to kill process from memory
How to remove programs from startup
How to define malicious program or not