
02-10-2012 02:22 AM
How do I clean/remove this sucker on a Windows 7 computer?
TROJ_FAKEAV.HPX - also known as 'Internet Security 2012'
I have a Trend Micro Internet Security Client Agent running on this computer but altough this one came trough.
Solved! Go to Solution.
02-10-2012 02:36 AM
Welcome aboard! ![]()
Please download Malwarebytes' Anti-Malware from Here
Double Click mbam-setup.exe to install the application.
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.
NEXT
•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
•Click the
button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
•Check ![]()
•Click the
button.
•Accept any security warnings from your browser.
•Check ![]()
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push ![]()
•Push
, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the
button.
•Push ![]()
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt
02-10-2012 03:21 AM - edited 02-10-2012 03:24 AM
Thanks - I will try this.
Should System Protection on the computer be turned off first and should I run Malwarebytes as Administrator instead of double clicking on it?
02-10-2012 07:51 AM - edited 02-10-2012 07:52 AM
Run or double click doesnt make a difference...
no action needs to be taken on system protection.
02-10-2012 07:59 AM
Ok - thanks
I have done what you suggested. Found som warnings and removed the files. I´m not sure if those warnings were related to TROJ_FAKEAV.HPX but I hope so...
How do I know that I have removed that particular trojan (the log didn´t refere to that spesific file name) ?
02-10-2012 08:01 AM
Please run malwarebytes and ESET and attach the logs...
02-10-2012 08:15 AM - edited 02-10-2012 08:16 AM
The logs are attached.
I did run FakeAV Remover earlier to day so that log is also attached. ESET didn't find anything so I don't have this log.
02-10-2012 08:19 AM
Well,
subject to no further problems?
your computer is clean.
Now let me do some tune-ups.
Mark this topic as solved...use the options tab of your topic to do so.Select the reply which u think is the solution to your problem..and click on the options tab of that particular reply and select mark as solution.
Remove combofix

For the first run I would recommend a boot defrag and disk check
Download and run Puran Disc Defragmenter
u may use this tool to keep junk temp files away:
http://www.piriform.com/ccleaner/download
Malwarebytes. Update and run it today also i recommend to run it weekly to keep your system clean
Download and install FileHippo update checker and run it monthly it will show you which programmes on your system need updating and give a download link
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version of Java components and upgrade the application.
Upgrading Java:
To manually create a new Restore Point
Now we can purge the infected ones
It is critical to have both a firewall and anti virus to protect your system and to keep them updated.
To keep your operating system up to date visit
To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place ?
Stay Safe! 
02-10-2012 08:36 AM
Ha, ha, ha, you're the best, malwarekiller! Thanks a lot! ![]()
My computer couldn't detect Combofix so that one is probably long gone?
I've updated both java and Windows for a few minutes ago.
I also have both firewall AND anti viruse (Trend Micro Client/Server Security Agent) for protection...
So I will now run defrag and check disk, create a new restore point and at last follow your steps to purge the infected ones.
Right?
02-10-2012 08:40 AM - edited 02-10-2012 08:41 AM
u should never run tools like combofix unless suggested...u can continue with my recommended precaution steps now.
Glad i could help u!
Copyright (c) 1989-2012 Trend Micro Incorporated. All rights reserved.
