Friday, July 3, 2009

AntivirusBEST, Antivirus BEST Removal GuideAntivirusBEST, Antivirus BEST Removal Guide

AntivirusBEST, Antivirus BEST Removal Guide
AntivirusBEST, also known as Antivirus BEST, is a rogue anti-spyware program that installs in your computer system with the help of a Trojan, possibly the popular Trojan Zlob. You may have also downloaded AntivirusBEST from a rogue website, such as Antivirus-Best.com, thinking it would remove your infections.

Removal Tool: Remove Fake Antivirus. (Download it here.)

AntivirusBEST, Antivirus BEST Removal Guide
Kill Process
(How to kill a process effectively?)
abest.exe
svchost.exe
installer.exe

Unregister DLL
qwprotect.dll


Delete Registry
296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD
44B2C9F5-608D-46de-82E1-26C5BCB85193
684A7904-2593-4BBE-A90E-CDAF2AC606AE
AppID\296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD
HKEY_CLASSES_ROOT\AppID\{296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD}
HKEY_CLASSES_ROOT\AppID\{296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD}
HKEY_CLASSES_ROOT\AppID\QWProtect.dll
HKEY_CLASSES_ROOT\CLSID\{44B2C9F5-608D-46de-82E1-26C5BCB85193}
HKEY_CLASSES_ROOT\Interface\{296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD}
HKEY_CLASSES_ROOT\qwprotect.qwprotectbho
HKEY_CLASSES_ROOT\qwprotect.qwprotectbho.1
HKEY_CLASSES_ROOT\TypeLib\{684A7904-2593-4BBE-A90E-CDAF2AC606AE}
HKEY_CURRENT_USER\Software\ABEST\ABEST
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{44b2c9f5-608d-46de-82e1-26c5bcb85193}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{44B2C9F5-608D-46de-82E1-26C5BCB85193}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "AntivirusBEST"

Remove Folders
%AllUsersProfile%\Start Menu\Programs\AntivirusBEST
C:\Documents and Settings\All Users\Application Data\AB
c:\Documents and Settings\All Users\Desktop\AntivirusBEST.lnk

No comments:

Post a Comment