Saturday, May 22, 2010

XJR Antivirus Removal GuideXJR Antivirus Removal Guide

XJR Antivirus Removal Guide
XJR Antivirus is a fake antivirus. XJR Antivirus infected your computer through a malicious website or Trojan. XJR Antivirus scan the whole infected computer without any notice. After finish scanning, XJR Antivirus shows false result that there are a lot of malware infections found on the computer. Moreover, the users of the infected computer will receive several warning alerts trying to force the users to purchase the fake full version of XJR Antivirus.

XJR Antivirus always shows your system security status is at risk and your windows is in danger! It also states that your files are infected by Trojans such as Email-Worm.Win32.Meronda.a with alert: High! When you press the button "Remove Threats", it will ask you to register the product.

XJR Antivirus should be removed immediately!


Removal Guide
Kill Process
(How to kill a process effectively?)
XJR Antivirus.exe
alggui.exe
wpp.exe
%Program Files%\svchost.exe

Unregister DLL files
%Program Files%\adc_w32.dll

Delete Registry
HKEY_CURRENT_USER\Software\XJR Antivirus
HKEY_CLASSES_ROOT\CLSID\{149256D5-E103-4523-BB43-2CFB066839D6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{149256D5-E103-4523-BB43-2CFB066839D6}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AdbUpd

Remove Folders and Files
%UserProfile%\Desktop\XJR Antivirus.lnk
%UserProfile%\Local Settings\Temp\win1.tmp
%UserProfile%\Local Settings\Temp\win2.tmp
%UserProfile%\Start Menu\Programs\XJR Antivirus
%Program Files%\alggui.exe
%Program Files%\nuar.old
%Program Files%\skynet.dat
%Program Files%\svchost.exe
%Program Files%\wp3.dat
%Program Files%\wp4.dat
%Program Files%\wpp.exe
%Program Files%\XJR Antivirus

No comments:

Post a Comment