Realphx/Talkstocks AIM Virus Removal
UPDATE: The new variant of this virus has now changed to show the following link:
"http://www.clicknewsnewnet.net/news/articles/12.htm" leading to www.surfonbeach.com
The AIMFix removal tool works on this variant as well.
"Whoa....look what I found, click here"
or
"I can't believe I found 'yourScreenName' Picture here"
or
"Happy Holidays Everyone!! New Years 2003 Partayy!"
or
"The time is here, the time is now. yourscreenname's JOURNAL I came, I saw, I conquered."
If this appeared in your profile and you can'tget rid of it, you are infected with a virus. Read on for removal instructions.
IMPORTANT:If you are seeing many other effects like "adult links" and extra toolbars in your Internet Explorer, the virus has also installed other programs called spyware and adware. To remove them download and run Spybot AND Ad-Aware then update and run a full system scan with each. For help using these programs, click Here
**REMOVAL TOOL DOWNLOAD**
To download the fix click HERE.
If the removal tool fails for you, please attempt to boot your computer into "Safe Mode" and run the tool again. For instructions on getting into Safe Mode click HERE.
There are absolutely no guarantees offered by the author, you use the fix at your own risk
IF YOUR HOMEPAGE WAS RESET:
Click here to reset it to www.google.com
IF THE REMOVAL TOOL ABOVE FAILS:
1)First, did you try the removal tool?
2)If the removal tool fails for you, please attempt to boot your computer into "Safe Mode" and run the tool again. For instructions on getting into Safe Mode click HERE.
3) Press the CTRL ALT and DEL keys at the same time to bring up the task manager. (If on Windows XP/2000, use CTRL SHIFT ESC)
4) Click on the processes tab (windows 2000/XP only), and find "b.exe" or "av.exe" and kill the process.
5) Go to C:\Windows and delete "b.exe" and "bbb.exe" or "av.exe" (If you are unsure where this is, go to "My Computer", then click on "Local Disk C:" and then open the folder called "Windows" or "Winnt" (if you are on Windows 2000)
6) (Windows 98/XP only) Click Start, then click on Run, type in "Msconfig" in the box and press ENTER
When the box comes up, click on the "startup" tab and look for "b.exe" or "av.exe" listed (probably labeled as "antivirus") then uncheck the box on the left of it.
7) Finally, do not forget to remove the link from your profile.
IMPORTANT: If you are seeing many other effects like "adult links" and extra toolbars in your Internet Explorer, the virus has also installed other programs called spyware and adware. To remove them download and run Spybot AND Ad-Aware then update and run a full system scan with each.For help using these programs, click Here
LEGAL STUFF: I am not affiliated with the makers of this virus in any way, nor am I affiliated with any anti-virus company. I merely provide this as a service for those who have been infected. I take no responsibility for any damage done by the virus or by those incorrectly following these removal steps, or those using my removal tools
