AV Protection 2012 can be removed by stopping all the processes with random name and name which contain "AV Protection 2012". Then the user has to remove the files of the processes. Finally, the registry settings have to be restored by removing the registry keys stated below.
AV Protection 2012 should be removed immediately!
AV Protection 2012 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe
svhostu.exe
Delete Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\AV Protection 2012
Remove Folders and Files
%UserProfile%\Application Data\Microsoft\[random].exe
%UserProfile%\Application Data\[random].exe
%ALLUserProfile%\Application Data\Microsoft\[random].exe
%ALLUserProfile%\Application Data\[random].exe
%AppData%\ldr.ini
%AppData%\[random]\AV Protection 2012.ico
%AppData%\svhostu.exe
AV Protection 2012 should be removed immediately!
AV Protection 2012 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe
svhostu.exe
Delete Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\AV Protection 2012
Remove Folders and Files
%UserProfile%\Application Data\Microsoft\[random].exe
%UserProfile%\Application Data\[random].exe
%ALLUserProfile%\Application Data\Microsoft\[random].exe
%ALLUserProfile%\Application Data\[random].exe
%AppData%\ldr.ini
%AppData%\[random]\AV Protection 2012.ico
%AppData%\svhostu.exe
No comments:
Post a Comment