AntivirusBEST, also known as
Antivirus BEST, is a rogue anti-spyware program that installs in your computer system with the help of a Trojan, possibly the popular Trojan Zlob. You may have also downloaded AntivirusBEST from a rogue website, such as Antivirus-Best.com, thinking it would remove your infections.
Removal Tool:
Remove Fake Antivirus. (Download it
here.)
AntivirusBEST, Antivirus BEST Removal GuideKill Process(
How to kill a process effectively?)
abest.exe
svchost.exe
installer.exe
Unregister DLLqwprotect.dll
Delete Registry296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD
44B2C9F5-608D-46de-82E1-26C5BCB85193
684A7904-2593-4BBE-A90E-CDAF2AC606AE
AppID\296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD
HKEY_CLASSES_ROOT\AppID\{296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD}
HKEY_CLASSES_ROOT\AppID\{296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD}
HKEY_CLASSES_ROOT\AppID\QWProtect.dll
HKEY_CLASSES_ROOT\CLSID\{44B2C9F5-608D-46de-82E1-26C5BCB85193}
HKEY_CLASSES_ROOT\Interface\{296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD}
HKEY_CLASSES_ROOT\qwprotect.qwprotectbho
HKEY_CLASSES_ROOT\qwprotect.qwprotectbho.1
HKEY_CLASSES_ROOT\TypeLib\{684A7904-2593-4BBE-A90E-CDAF2AC606AE}
HKEY_CURRENT_USER\Software\ABEST\ABEST
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{44b2c9f5-608d-46de-82e1-26c5bcb85193}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{44B2C9F5-608D-46de-82E1-26C5BCB85193}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "AntivirusBEST"
Remove Folders%AllUsersProfile%\Start Menu\Programs\AntivirusBEST
C:\Documents and Settings\All Users\Application Data\AB
c:\Documents and Settings\All Users\Desktop\AntivirusBEST.lnk