I too have the fake security alert trojan... I've tried most, if not all, the approaches used in the guides/tutorials... I was using the smitRem process in Safe Mode and AdAware identified malware w/ following message
Registry - ROOT: HKLM Path: System\ControlSet001\Control\SafeBoot\Minimal\\ctl_w32.sys
However, AdAware will not quarantine or remove the this file. If this is the problem, how do I get to it ?? Close AdAware and use Regedit ?? Close AdAware and try malwarebytes ?? Or is this a false positive by AdAware.
THANKS very much...