i have a fake virus program on my computer saying i have 30 viruses on my computer?

[Kuttus]

Removal Instruction for Win 7 Internet Security 2012 / Win 7 Home Security 2012./ Win 7 Anti Virus / Windows 7 Security 2012

http://123seminarsonly.com/Tips/007/Win-...-2012.html

Kill the following Processes from the Task Manager

[random.exe] (ex: hcy.exe, xjw.exe, jie.exe)

Delete the following Infected files:

C:\users\<user name>\appdata\local\[random].exe

Delete the following Registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\1311663257



Delete all entries except [ “%1” %* ] in the below locations :



HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” =

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\com​mand\""

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\co​mmand\""

HKEY_USERS\S-1-5-21-393598541-1170550020-13146906-1001\SOFTWARE\Classes\.exe\shell\open\command\""



Delete all entries of the infected file only.

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\com​mand "(Default)" = '"%LocalAppData%\kdn.exe" -a "C:\Program

Files\Mozilla Firefox\firefox.exe"'
Delete only : '"%LocalAppData%\kdn.exe" -a Keep "C:\Program Files\Mozilla Firefox\firefox.exe"'


HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode​\command "(Default)" = '"%LocalAppData%\kdn.exe" -a

"C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode'
Delete only : '"%LocalAppData%\kdn.exe" -a Keep "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode'


HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\co​mmand "(Default)" = '"%LocalAppData%\kdn.exe" -a "C:\Program

Files\Internet Explorer\iexplore.exe"'
Delete only : '"%LocalAppData%\kdn.exe" -a Keep "C:\Program Files\Internet Explorer\iexplore.exe"'

- Delete Temp / Prefetch

- Reset the IE web settings

- Run the disk cleanup

- Disable the System Restore, Reboot the PC

- Enable the System Restore and make sure system is stable with no popup and symptoms of infection.


http://www.easy2resolve.com/software-iss...-2011-2012