[GUIDE] How to remove XP Antispyware 2012 (MANUAL/Malwarebytes)

[puupaakissa]

Holy... 15K views! That... is.... ALOT.... to me, of course! Keep those views coming! And likes! I again hope that everyone who watched this video, got this nasty malware removed succesfully! New videos coming soon, so just wait..! :D Bye! And thank you again!

[BIGNI24]

Just type this code 3425-814615-3990

[puupaakissa]

@BIGNI24 Oh wow! Thank You! May I use your code in my miniguide (check out description)? With your channel with it? + Subscribed :D

[MegaNarutofan12345]

@puupaakissa nvm i deleted the virus thank you though

[sebastianzx6r]

Why do all these videos about this removal of the xp anitspyware have music blaring all the time? I don't know if it's some coincidence, but damn.

[puupaakissa]

@sebastianzx6r Eh, you don't like the music? Well, some do, some don't. But if you don't like the music, use mute button :) @Kegrath No problem, man! @jhulsz Go to C:\Program Files\Malwarebytes' Anti-Malware\ and rename mbam.exe to mbam.com. Then open it. It should work ;)

[Kegrath]

Thanks for this! Gutted the fucker - with your help, of course.

[jhulsz]

I did the reg edit part but when i open the malwarebytes' it asks me to select a program to open it with? what do i do?

[puupaakissa]

Hey guys, little update... First off, thanks for 10K views, and I hope this guide helped almost everyone who watched this video!

Okay, so, I found the nastier version of this rogue. Its interface is much different compared to this rogue's. It is.. little bit harder to remove, but, I am planning to do removal video of it, too. Just wait and see :-)

[liord0813]

@puupaakissa when could it be? because i cant see the exe that you are talking about.. please help me.. i need to delete this annoying virus!! thank you btw :D

[puupaakissa]

@MONTALVORECORDS Is it just me or are you americans really always so fucking dumb? Your comment makes me think you really are... Removing this rogue is really fucking simple. But you stupid bunch of childish idiot americans clearly do not know anything, so you just come and say that I am nerd? Gosh, just grow up. Face that you don't know anything and that I just know things better than you do. So stop acting like 3 year old idiot and grow up. + Blocked. Have a good time, ''ganstakid''.

[Tinuviel451]

@puupaakissa Ok, clearly this guy really pissed you off and I hope he doesn't bother you again. However, please do not put down all Americans for one guy's moronic comments. Granted there are stupid Americans, very stupid Americans, but we aren't all ignorant morons who constantly insult non-Americans or brag about how great our country is. Making blanket statements about a whole group just stirs up more trolls on the internet.

[puupaakissa]

@Tinuviel451 If you feel like you are not stupid American, you are not then :) I respect that, but when I say ''Why you all americans are so stupid'' I mean only those stupid americans, really :D So don't get me wrong ;) @MegaNarutofan12345 Good job! @liord0813 I am planning on making updated video. As you can see, this is like... 6 months ago... I do the video when I have some time, currently I have to do some Team PublicNull stuff (for more information = my channel). It is coming soon, though

[kold148]

i have the virus but i dont see a folder like the one you saw? any help?

[puupaakissa]

@kold148 Hi!

Did you follow all the steps? There is a link in the description about how to show your hidden files and folders.

Or if you already did that, there might be nastier version of this rogue, out there. I cannot help you with it.

[puupaakissa]

Holy shit guys! Thank you for over 5k views! Thank you so much! I will keep making rogue removing videos as soon as I can, because I currently don't have VMware installed! :)

[amoom0]

I know you're trying to be helpful and with 15 thumbs-up I guess you are to some people. But some sober narration instead of death metal which makes it impossible to concentrate would have worked a whole lot better for me. Got nothing from your video.

[puupaakissa]

@amoom0 Hey! Theres a mute button. Does not work? Blame YouTube. Its my video, you are the watcher of the video. So use the damn mute button. And deal with it.

[scotman55]

@puupaakissa The man has a point. It's your video.

[papapanielxD]

what do you mean by "Now, go to HKEY_CLASSES_ROOT\.exe and delete everything EXCEPT PersistentHandler!"

LIKE everything in HKEY_CLASSES_ROOT lost you right there i have no idea what you're talking about

[puupaakissa]

@papapanielxD Its like ''Go to C:\Directory\Example and delete everything inside of that directory, except PersistentHandler file", but just in registry editing. Windows Registry is like bunch of directories and files inside of them.

Okay? :)

[papapanielxD]

@puupaakissa it still doesn't work :( it wont let me download anything

man this is a big problem

[puupaakissa]

@papapanielxD I am sorry, but you might have nastier version of this rogue. So this guide does not work for you. I am trying to investigate other types of rogues too, but currently your only solution is to find another guide. ;(

[puupaakissa]

@papapanielxD Sorry, I meant like ''PersistentHandler directory'', not ''PersistentHandler file'' :D

[MegaNarutofan12345]

@puupaakissa yea i use xp and i did search all the folders but its not in any of them it pops up in task manager and when i try finding it through the path it tells me it takes i dont have the folder its hiding in.

like itll be in documents and settings, alex, and local settings but i dont have a local settings folder i even searched for it and the search results said that the folder dosent exist

[puupaakissa]

@MegaNarutofan12345 Look,

Check out the description and click the first two links.

[pkleiss]

I had additional problems with this virus after following your video in that I still could not run EXE files AND my Internet connection was not working. It seems that variances with this virus can also delete the ADF (Ancillary Function Driver for WinSock - which supports all TCP/IP functionality for Windows) Registry keys. Read below to see how I fixed these two issues.

[pkleiss]

Here are some extra things you can try:

If you still can't run EXE files, try restoring your registry. Windows makes backups of it all the time. You just have to go to your Windows\System32\Restore folder and do that same renaming trick. Make a copy of "RSTRUI.EXE" and rename it "RSTRUI.COM" then run it and choose the most recent restore point from prior to getting the virus. This will fix your EXE AND broken Internet problems as well (if the ADF service was also deleted from the registry).

[pkleiss]

@pkleiss

An additional note: I was also able to make a copy of the Malware Bytes executable (mbam.exe) and rename it to mbam.com. This too worked and I was able to clean the infected files even though I could not run any EXE files. Then I restored my registry as described above and all was well. However, the first thing I did was follow the excellent video by puupaakissa!

[puupaakissa]

@pkleiss That is pretty nice. Yes, but I wanted to remove it mostly in Manual way. Like registry changing and let the MBAM do the rest. But, that works too! I can add your comment to the description as ''miniguide'', if you give me your permission :) Of course I put link to your channel.

[pkleiss]

@puupaakissa

Of course you have my permission. IMO we are all in this together when it comes to nasty hijacking malware.

I also figured out why this new variation is keeping the EXE files from working. The .exe keys have had their default field changed from 'exefile" to something else. In my case the key value was "ah". I suspect that if you rebuilt the .exe key with the correct descriptor (exefile) then the registry edit would fix the EXE problem once again.

[puupaakissa]

@pkleiss Yup. Rogues update. Thats not new, but they always update to nastier version. Thats a very bad thing :/

[pkleiss]

Hey Man! I got this wicked virus twice within a month. The first time I followed your video and the virus was expelled most expeditiously (thank you). Then I got it again last night - serves me right for trying to lookup the lyrics to Bassnectar's "Cozza Frenzy."

There seems to be some variances to the virus and the second iteration of it didn't get vanquished as readily as the first.

[xXxDeej]

Hey man. Laptop got this crap and I found your video to be the most helpful. But, I still cant open exe files. I followed you guide to a tee.. only thing i did different is I ran malwarebytes before once and deleted infected files through the mwbyes program then I did the registry stuff. Would that mess things up? I also ran it after but nothing came up then. Look for help on getting my exe files back in order.

[xXxDeej]

@xXxDeej Hey man, just posting again to tell you I figured it out. I found a registry fix solution online! Thanks for the rest of the help!

[puupaakissa]

@xXxDeej No problem!

[DarkDragoon0]

Thank you so much for this video. I recently got my laptop back to find out it had windows antivirus xp 2012 on it. After awhile of searching on my desktop for a solution I came across your video and it cleared right up. SO THANK YOU MAN!!!

[puupaakissa]

@DarkDragoon0 No, thank you for your comment :-)

[ForsakenReaperr]

I got lost at the "reggit" part WTF is going on there?

[femtau]

i did everything and my computer's still messed up :/

[puupaakissa]

@femtau Another rogue, maybe? Another Operating System, maybe? Maybe you have more viruses in your computer?

[femtau]

@puupaakissa dunno.. im using XP, and i've tried a ton of removal guides... malware bytes does a full scan and removes everything, tells me to restart, then when i do the xp security 2012 thing still pops up, and i can't open any programs even though i've done the changes in regedit. gahhh

[puupaakissa]

@femtau So eh, you first use Malwarebytes, without removing the .exe file? Or..?

[drag01145]

nvm you know this didnt actually help you do that show hidden files thing but you go to YOUR main person and then go to local settings then application data then totally delete (mines krf.exe but its random) and POOF GONE

[puupaakissa]

@drag01145 and POOF you cannot open any .exe files. Good job. ....

[drag01145]

i dont have local settings?

[MegaNarutofan12345]

so i clicked on documents and settings like in the vid but i dont have an administrative folder like you do the folders i have are "all users", "alex"; and "updatus user" what do i do?

[puupaakissa]

@MegaNarutofan12345 Try them all. You have time, eh? :) Which Operating System are you using? XP? Or are you using other Operating System but you just got similar rogue?

[puupaakissa]

@kwixotic If everyone is in America, like you, I think I might not even want to come there. Because if everyone is there like you, then it's pretty shitty place. Who did grow you, drunken mom?

[puupaakissa]

@kwixotic So you have problem with that I live in finland? Gtfo racist.

And go ahead, Idc what you do with your PC. But downloading another crapware (like spyhunter) is just... idiotic.... And does not help you in any way.

So, gtfo if you don't like this video, Idc a fuck where you live, so is it so big thing to you that I live in finland? Should I live in same country as you, dickhead?

[puupaakissa]

@kwixotic Have you ever seen ''Mute'' button? Morons, like you, should click it.

Make better help video for removing XP Antispyware 2012 and then come back, until that, stfu.

[puupaakissa]

TBH honest guys, first time I saw this rogue, I removed this in about... 5-10 minutes? It's REALLY easy if you just know, what it does and where you can prevent it :)

[0pchan0]

THANK YOU SO MUCH! This worked for me! Very good!

[puupaakissa]

@0pchan0 Thank you :)

[puupaakissa]

@BLiTZinHD So did it work? ;)

[mattgbek1]

I have literally spent 2 days of all my free time trying to rid this bullshit and this maybe the 10th video I watched and this was it. Thanks so much you saved me $110 is what my computer geek store was about to charge me. All you people talking shit you are stupid because this is theee only video that has the effective regedits you need to get this crap off your computer. This is the nastiest rouge I've ever seen. Thanks again bro. Watch this video you WILL get rid of xp2012!!!!

[puupaakissa]

@mattgbek1 No problem. I appreciate your comment :)

[puupaakissa]

@paulinaskitchen1

1. Mute button

2. Your just stupid

3. What the fuck?

4. Theres tons and tons of other guides out there, fucking moron. Go check them out, maybe downloading some crapware helps you more than Malwarebytes' Anti-Malware?

5. GTFO

[GOLDENBULLDOG1998]

why not talk it through music is stupid while trying to figure this junk out.

[puupaakissa]

@GOLDENBULLDOG1998 Theres always mute button, for guys like you!

I don't talk in videos because I have my clan in one game lol, and that mic OR recorder makes my voice like 10 year kid's voice.

[puupaakissa]

GUYS, There IS 720p button! So SWITCH TO HD! Also, watch in fullscreen! With mobile phone, it can be little hard to watch this video, so if you don't have another computer, and your using phone, PLEASE, just please, check out the description and you find ''mini-guide''!

[jdmrxx]

U save my DAY

THANK THANK THANKYOU!!!

[puupaakissa]

@jdmrxx No problem ;p

[jdmrxx]

U save my DAY!!!

[TeamSairio]

eihän tästä saa selvää

[puupaakissa]

@TeamSairio Opiskele ensin vähä tietotekniikkaa & sitte opiskele pistämään 720p ja fullscreen ennenkuin kommentoit mitn...

[puupaakissa]

@TeamSairio Ja sitte jos sulla on huono näkö, hae silmälasit! Ite näen todella hyvin jopa pienetkin raapustukset! Ja sitte, ei kannata istuu 6 metri päästä näytöstä, sillon et ainakaan näe mitään.

[MrFailedz]

1st comment ;o