Is XP Anti-virus legit?

At work, one of my colleagues has a program that will not remove from his computer called XP Anti-Virus 2.4.

He does not know when it installed, and when he used Add/Remove Programs (XP Pro) to remove it, it left and the came back.

When he clicks on it a window opens that shows a lot of system looking stuff, and a bunch of them say "trojan. "

So is this a legit program, or is it something that has sneaked in?

Thanks in advance,
Rick

 

Here is the fix for this:

http://www.bleepingcomputer.com/forums/topic111715.html

You will need HiJackThis to complete this process so go here:

http://windowsbbs.com/announcement.php?f=41

Read and understand then do the process above.

Then Download Xclean_micro
http://www.xblock.com/download/xclean_micro.exe
Boot to safe mode and run it. Delete all it finds, decline to reboot on each item found, reboot after it finishes.

You should have Spybot and Adaware and run them.

After rebooting Run HJT and Deckards open a new thread in the Removing Spyware & Viruses forum and paste all logs and they will check deeper as you likly have more issues.

Reference this thread and tell them what you have done

Mike

 

Excelent removal instructions in the link posted by Evan.

But I would not install Spyhunter, it is not really a rougue itself it is just a weak program.

see: http://www.adwarereport.com/mt/archives/spy_hunter_review.php

Mike

 

An FYI< 411 is just an affiliate for SpyHunter, best to stay away from their sites and any linked to them.

They run around spamming their pages every place they can get a away with it.

 

I will be away traveling for the next week beginning tomorrow Tuesday after 3 PM.

Just checking is this issue resolved?

Mike

 

Mike, I don't know. I'll ask when I get to the office after lunch today.

 

Following up, I don't do the IT work in the company, but I do occasionally do some work on individual computers when the IT guy is up to his eyeballs in stuff.

The user said the IT guy spent some time with it, and I looked in on the particular desktop and the XP AV was not popping up. So I believe it has been cleaned up. The next time I can hem the guy up I'll make sure.

Thanks to all for the help!