Removal Tool: Remove Fake Antivirus. (Download it here.)
Removal Guide
Kill Process
(How to kill a process effectively?)
av.exe
Delete Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
HKEY_CLASSES_ROOT\secfile\shell\open\command
HKEY_CLASSES_ROOT\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
Remove Folders and Files
%Documents and Settings%\[UserName]\Application Data\WRblt8464P
%Documents and Settings%\[UserName]\Application Data\av.exe
Removal Guide
Kill Process
(How to kill a process effectively?)
av.exe
Delete Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
HKEY_CLASSES_ROOT\secfile\shell\open\command
HKEY_CLASSES_ROOT\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
Remove Folders and Files
%Documents and Settings%\[UserName]\Application Data\WRblt8464P
%Documents and Settings%\[UserName]\Application Data\av.exe
2 comments:
I wanted to thank you for this interesting I definitely loved every little bit of it. I have you bookmarked your web site to check out the latest stuff you post.
help
thanks 4 all...
Post a Comment