Thursday, April 15, 2010

Virus Protector Removal GuideVirus Protector Removal Guide

Virus Protector Removal Guide
Virus Protector is a dangerous program that is designed to trick computer users out of money. Virus Protector, after installed, uses aggressive techniques to make users believe that they need to purchase a full version of Virus Protector to remove detected threats. Not only does Virus Protector not have the ability to detect threats, it cannot remove them either. VirusProtector should never be used for the removal of computer parasites. It is recommended that Virus Protector be removed with a reputable spyware detection tool.

Removal Guide
Kill Process
(How to kill a process effectively?)
anpf56mn5.exe
setup.exe (MD5: 28a8737b03cc2f14723755ea8f4d6941)
[random].exe

Unregister DLL files
[random].dll

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Virus Protector"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows "LoadAppInit_DLLs" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows "AppInit_DLLs" = ".dll"

Remove Folders and Files
%UserProfile%\Application Data\[random].exe
%UserProfile%\Application Data\[random].dll
%UserProfile%\Local Settings\Temp\[random].exe
%UserProfile%\Local Settings\Temp\[random].dll
%Program Files%\Internet Explorer\[random].exe
%Program Files%\Internet Explorer\[random].dll
%windir%\[random].exe %windir%\[random].dll
%windir%\system32\[random].exe
%windir%\system32\[random].dll
%windir%\system32\drivers\[random].exe
%windir%\system32\drivers\[random].dll

No comments:

Post a Comment