Warning: include_once(/home/windowvi/public_html/VistaBlog/wp-content/plugins/wp-affiliate-pro.php) [function.include-once]: failed to open stream: Permission denied in /home/windowvi/public_html/VistaBlog/wp-settings.php on line 215

Warning: include_once() [function.include]: Failed opening '/home/windowvi/public_html/VistaBlog/wp-content/plugins/wp-affiliate-pro.php' for inclusion (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/windowvi/public_html/VistaBlog/wp-settings.php on line 215
Windows Vista Repair | Vista and XP repair guides - Part 2

Windows Vista Blog

Windows Vista Repair and Resource site

How to remove XJR Antivirus

XJR Antivirus is a malicious anti-spyware application that has been cloned from Your Protection, and tries to trick users into purchasing its license. This malicious application reaches the user’s computer via Trojans that get downloaded from malicious websites. Once established on the user’s system, XJR Antivirus loads itself as a startup service at boot time. XJR Antivirus proceeds to perform a large number of fake security scans on the system, returning results that state that the computer is dangerously infected with a number of non-existent viruses. It also generates fake warning pop-ups from the Windows taskbar. Finally XJR Antivirus urges the user to purchase a license to the ‘full’ version of the software, claiming that the currently installed ‘trial’ version is incapable of cleaning the detected false ‘threats’. However, all users should be aware that this is a trick aimed at swindling their money, as no version of XJR Antivirus can scan or clean any computer.

XJR Antivirus

The following chapters will show you how to remove XJR Antivirus. This requires the stopping of processes, unregistering of DLL files, deletion of files and folders and the removal of registry entries.

File Removal Procedures

The first step you need to take in order to remove XJR Antivirus is to stop the following processes:

  • alggui.exe
  • svchost.exe
  • wpp.exe
  • XJR Antivirus.exe

Next, it is necessary to unregister the following DLL which is associated with XJR Antivirus:

  • adc_w32.dll

As the next step in XJR Antivirus removal you must delete the following files and folders:

  • %UserProfile%\Desktop\XJR Antivirus.lnk
  • %UserProfile%\Local Settings\Temp\win1.tmp
  • %UserProfile%\Local Settings\Temp\win2.tmp
  • %UserProfile%\Start Menu\Programs\XJR Antivirus
  • %UserProfile%\Start Menu\Programs\XJR Antivirus\XJR Antivirus.lnk
  • C:\Program Files\adc_w32.dll
  • C:\Program Files\alggui.exe
  • C:\Program Files\nuar.old
  • C:\Program Files\skynet.dat
  • C:\Program Files\svchost.exe
  • C:\Program Files\wp3.dat
  • C:\Program Files\wp4.dat
  • C:\Program Files\wpp.exe
  • C:\Program Files\XJR Antivirus
  • C:\Program Files\XJR Antivirus\XJR Antivirus.exe

Once the above steps have been completed, XJR Antivirus no longer resides on your file system. In order to make sure of this aspect as well as in order to certify that there are no additional infections present on the PC it is recommended to conduct a full system scan using genuine antivirus software such as Spyware Doctor with Antivirus.

Registry Removal Procedures

In order to completely remove XJR Antivirus, it is necessary to remove the following keys and settings from the Windows Registry:

  • HKEY_CURRENT_USER\Software\XJR Antivirus
  • HKEY_CLASSES_ROOT\CLSID\149256D5-E103-4523-BB43-2CFB066839D6
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\149256D5-E103-4523-BB43-2CFB066839D6
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AdbUpd

Now it is safe to say that XJR Antivirus has been completely removed from your computer.

Conclusion

Even though an inexperienced computer user may have full knowledge on how to remove XJR Antivirus, it is not recommended that they attempt it as any mistake made during removal could cause damage to the system. Therefore inexperienced users are advised to make use of a web-based malware scanning/cleaning service such as www.onlinecomputerrepair.org or legitimate antivirus software such as Spyware Doctor with Antivirus in order to properly remove XJR Antivirus.

How to remove Win Antispyware Center

Win Antispyware Center is a rogue anti-spyware that aggressively sells itself to users by showing fake threat reports and scan results. Win Antispyware Center gets installed on a user’s computer through fake websites that install a Trojan. Once installed, Win Antispyware Center starts to display fake pop-ups, claiming that the integrity of the system has been compromised due to the presence of dangerous spyware. Its GUI is extremely authentic-looking, and starts conducting fake scans as soon as it is open, flagging legitimate user programs as viruses and spyware. It also tries to convince the user that the currently installed ‘trial’ version is not sufficient to remove these threats, and that the user should pay for ‘activation’ of Win Antispyware Center. It should be noted that the ‘full’ version of Win Antispyware Center, once purchased, has no capability whatsoever to clean your computer and this is a trick that you should never fall for.

AntiSpyware Center

The following sections outline how to remove Win Antispyware Center. In order to delete Win Antispyware Center, you need to stop its processes, delete its files and folders and remove its registry entries.

File Removal Procedures

The first step in the process of Win Antispyware removal is to kill the following process:

  • av.exe

The next step in Win Antispyware Center removal is the deletion of the following files and folders:

  • C:\Program Files\WinAntispywareCenter\
  • C:\Program Files\WinAntispywareCenter\av.exe

After these steps have been completed, your computer’s hard disk no longer contains any instances of Win Antispyware Center. While according to most major antivirus companies it is widely known that rogue security software is distributing as a set of multiple individual components it is recommended to scan the entire PC using legitimate security tools such as Spyware Doctor with Antivirus in order to make sure that there are no additional infections present.

Registry Removal Procedures

File deletion alone is not sufficient to completely remove Win Antispyware Center. The following keys and settings should be removed from the registry for complete Win Antispyware Center removal:

  • HKEY_CURRENT_USER\Software\Classes\secfile
  • HKEY_CURRENT_USER\Software\Win Antispyware Center
  • HKEY_CLASSES_ROOT\secfile
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “C:\Program Files\WinAntispywareCenter\av.exe” /START “%1″ %*
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Win Antispyware Center”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Win Antispyware Center”

Now it is safe to say that your computer is completely safe from Win Antispyware Center.

Conclusion

Even if you have a good knowledge on how to remove Win Antispyware Center, you should not attempt to do it manually if you are an inexperienced computer user. Any mistake made during removal could cause untold damage to the operating system. Therefore it is recommended to use a legitimate antivirus application such as Spyware Doctor with Antivirus or web-based repair service such as www.onlinecomputerrepair.org for safe and complete Win Antispyware Center removal.

How to remove ByteDefender

ByteDefender is a rogue antimalware that uses scare tactics to trick users into paying for its software license. ByteDefender gets installed on the user’s system via Trojans that get downloaded from malicious websites along with fake video/audio codec packs. Once installed, ByteDefender proceeds to perform a large number of fake security scans on the system, generating false reports which state that the computer is under threat from malware. It also generates an endless stream of fake warning pop-ups from the Windows taskbar. Meanwhile, ByteDefender repeatedly requests the user to purchase a license to the ‘full’ version of the software, claiming that the currently installed ‘trial’ version is insufficient to remove all the detected ‘threats’. It enforces this request through its GUI, through pop-ups and through the results of fake scans. However, it is important to note that this is fake software therefore none of its versions are capable of properly scanning or cleaning any system.

Byte Defender

The following sections outline how to remove ByteDefender from your computer if an infection is found. ByteDefender removal involves the stopping of processes, removal of files and folders and the deletion of registry entries.

File Removal Procedures

The first step that must be taken in ByteDefender removal is to kill the following processes:

  • ByteDefender.exe
  • Uninstall.exe

The next step in ByteDefender removal is to delete the following files and folders:

Windows XP:

  • c:\Documents and Settings\All Users\Start Menu\Programs\ByteDefender.lnk
  • c:\Program Files\ByteDefender Software
  • c:\Program Files\ByteDefender Software\ByteDefender
  • c:\Program Files\ByteDefender Software\ByteDefender\ByteDefender.exe
  • c:\Program Files\ByteDefender Software\ByteDefender\Uninstall.exe
  • %UserProfile%\Desktop\ByteDefender.lnk

Windows Vista/7:

  • c:\Users\%USER%\Documents\Start Menu\Programs\ByteDefender.lnk
  • c:\Program Files\ByteDefender Software
  • c:\Program Files\ByteDefender Software\ByteDefender
  • c:\Program Files\ByteDefender Software\ByteDefender\ByteDefender.exe
  • c:\Program Files\ByteDefender Software\ByteDefender\Uninstall.exe
  • %UserProfile%\Desktop\ByteDefender.lnk

After the above steps have been completed, all ByteDefender files have been removed from your hard disk. Even if in many cases removing the main executable file and additional data related to ByteDefender will cripple its functionality it is important to know that this type of rogue antivirus software is usually installed on end user PCs by other malicious software. For this reason, it is recommended to carry out a full system scan using genuine antivirus software such as Spyware Doctor with Antivirus.

Registry Removal Procedures

File deletion alone is not sufficient to completely remove ByteDefender. The following keys and settings should be removed from the Windows Registry for complete ByteDefender removal:

  • HKEY_CURRENT_USER\Software\ByteDefender
  • HKEY_LOCAL_MACHINE\SOFTWARE\ByteDefender
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ByteDefender

Now it is safe to say that your computer is completely devoid of anything to do with ByteDefender.

Conclusion

Even though an inexperienced computer user may have full knowledge on how to remove ByteDefender, it is not recommended that they attempt it as any mistake made during removal could cause damage to the system. Therefore inexperienced users are advised to make use of a web-based malware scanning/cleaning service such as www.onlinecomputerrepair.org or legitimate antivirus software such as Spyware Doctor with Antivirus in order to properly remove ByteDefender.

SystemArmor Removal

Belonging to the well-known Wini family of viruses, SystemArmor is a rogue security program that tricks users into purchasing its license. This malicious application reaches the user’s computer via Trojans that get downloaded from malicious websites and along with fake video codec packs which claim to be essential for watching particular videos. Once installed, SystemArmor proceeds to perform endless fake scans on the computer, returning false results which claim that the system is severely infected with dangerous malware. SystemArmor also generates a large number of fake pop-ups from the Windows Taskbar. While all this is going on, SystemArmor repeatedly requests the user to purchase the ‘full’ version of the software, claiming that the ‘trial’ version which is already installed is not sufficient to remove the detected ‘threats’. However, as this is a fake application, there is no way that any of its versions could clean any computer. This site Remove System Armor has all the infos you need to remove this threat from your system.

SystemArmor

If you find a copy of this rogue software on your computer, you should immediately take steps to remove SystemArmor. In order to remove SystemArmor, you need to stop its processes, delete its files and folders and remove its registry entries.

File Removal Procedures

The first step towards SystemArmor removal is to stop the following processes:

  • SystemArmor.exe
  • uninstall.exe

The next step you need to take in order to delete SystemArmor is to remove the following files and folders from your system:

Windows XP:

  • c:\Documents and Settings\All Users\Desktop\SystemArmor.lnk
  • c:\Documents and Settings\All Users\Start Menu\Programs\SystemArmor
  • c:\Documents and Settings\All Users\Start Menu\Programs\SystemArmor\1 SystemArmor.lnk
  • c:\Documents and Settings\All Users\Start Menu\Programs\SystemArmor\2 Homepage.lnk
  • c:\Documents and Settings\All Users\Start Menu\Programs\SystemArmor\3 Uninstall.lnk
  • c:\Program Files\SystemArmor Software\
  • c:\Program Files\SystemArmor Software\SystemArmor\
  • c:\Program Files\SystemArmor Software\SystemArmor\SystemArmor.exe
  • c:\Program Files\SystemArmor Software\SystemArmor\uninstall.exe
  • c:\WINDOWS\system32\
  • %Temp%\

Windows Vista/7:

  • c:\%USER%\Desktop\SystemArmor.lnk
  • c:\%USER%\Start Menu\Programs\SystemArmor
  • c:\%USER%\Start Menu\Programs\SystemArmor\1 SystemArmor.lnk
  • c:\%USER%\Start Menu\Programs\SystemArmor\2 Homepage.lnk
  • c:\%USER%\\Start Menu\Programs\SystemArmor\3 Uninstall.lnk
  • c:\Program Files\SystemArmor Software\
  • c:\Program Files\SystemArmor Software\SystemArmor\
  • c:\Program Files\SystemArmor Software\SystemArmor\SystemArmor.exe
  • c:\Program Files\SystemArmor Software\SystemArmor\uninstall.exe
  • c:\WINDOWS\system32\
  • %Temp%\

Now it is safe to say that SystemArmor no longer resides within your file system. However, even if the manual procedures have been followed, it is best recommended to scan the entire PC using genuine antivirus software such as Spyware Doctor with Antivirus in order to make sure that there are no components left behind or additional infections.

Registry Removal Procedures

File removal alone is not sufficient to properly remove SystemArmor. It is required to delete the following keys and settings for complete SystemArmor removal:

  • HKEY_CURRENT_USER\Software\SystemArmor
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemArmor
  • HKEY_LOCAL_MACHINE\SOFTWARE\SystemArmor
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “SystemArmor”

Now your computer is completely safe from SystemArmor.

Conclusion

Manual SystemArmor removal is not recommended for inexperienced users as any wrong move on the part of the user during removal could cause damage to the operating system. Therefore inexperienced users are requested to make use of a web-based cleaning service such as www.onlinecomputerrepair.org or a legitimate antivirus application such as Spyware Doctor with Antivirus for proper and complete SystemArmor removal.

Live Security Suite Removal

Live Security Suite is a dangerous fake anti-malware application that appears as a legitimate malware removal tool in an attempt to swindle users of their money. This rogue software is related to the well-known Live Enterprise Suite, which is also a malicious application. Live Security Suite reaches users systems via Trojans that get downloaded from malicious websites. Once installed, Live Security Suite loads up as a start-up application and launches into a series of fake malware scans, generating endless reports of a large amount of malicious activity being detected on the user’s system. Fake pop-ups are also generated from the Windows Taskbar, warning of malware that does not exist. The aim of all these fake warnings is to scare the user into purchasing a license for the ‘full’ version of Live Security Suite by claiming that the currently installed ‘trial’ version cannot fully clean the detected ‘threats’. However, the so-called ‘full’ version is just as incapable of scanning or cleaning the user’s system as the ‘trial’ version is. Check here Live Security Suite to get all the infos you need to remove this threat from your PC.

Live Security Suite

Once you detect the malicious activity described above, it suggests an infection of Live Security Suite. You should take immediate measures to remove this rogue program. In order to remove Live Security Suite, you need to stop its processes, delete its files and folders and remove its registry entries.

File Removal Procedures

The first step in Live Security Suite removal is to stop the following processes:

  • LiveSS.exe
  • services.exe

The next step in Live Security Suite removal is the deletion of the following files and folders:

Windows XP:

  • c:\Documents and Settings\All Users\Desktop\Live Security Suite.lnk
  • c:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite
  • c:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite\Live Security Suite Home Page.lnk
  • c:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite\Live Security Suite.lnk
  • c:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite\Purchase Licence.lnk
  • c:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite\Purchase License.lnk
  • c:\Program Files\Live Security Suite
  • c:\Program Files\Live Security Suite\activate.ico
  • c:\Program Files\Live Security Suite\Explorer.ico
  • c:\Program Files\Live Security Suite\LiveSS.exe
  • c:\Program Files\Live Security Suite\unins000.dat
  • c:\Program Files\Live Security Suite\uninstall.ico
  • c:\Program Files\Live Security Suite\working.log
  • c:\Program Files\Live Security Suite\db
  • c:\Program Files\Live Security Suite\db\DBInfo.ver
  • c:\Program Files\Live Security Suite\db\ia080614.db
  • c:\Program Files\Live Security Suite\db\lists.ini
  • c:\Program Files\Live Security Suite\db\WMILib.dll
  • c:\Program Files\Live Security Suite\Languages
  • %UserProfile%\Application Data\Live Security Suite
  • %UserProfile%\Application Data\Live Security Suite\settings.ini
  • %UserProfile%\Application Data\Live Security Suite\uill.ini
  • %UserProfile%\Application Data\Live Security Suite\unins000.exe
  • %UserProfile%\Application Data\Live Security Suite\Uninstall Live Security Suite.lnk
  • %UserProfile%\Application Data\Live Security Suite\db
  • %UserProfile%\Application Data\Live Security Suite\db\config.cfg
  • %UserProfile%\Application Data\Live Security Suite\db\Timeout.inf
  • %UserProfile%\Application Data\Live Security Suite\db\Urls.inf
  • %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Live Security Suite.lnk
  • %UserProfile%\Desktop\Live Security Suite.lnk
  • %UserProfile%\Desktop\LiveSS.exe.txt
  • %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
  • %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
  • %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe

Windows Vista/7:

  • c:\%USER%\My Documents\Desktop\Live Security Suite.lnk
  • c:\%USER%\Start Menu\Programs\Live Security Suite
  • c:\%USER%\Start Menu\Programs\Live Security Suite\Live Security Suite Home Page.lnk
  • c:\%USER%\Start Menu\Programs\Live Security Suite\Live Security Suite.lnk
  • c:\ :\%USER%\Start Menu\Programs\Live Security Suite\Purchase Licence.lnk
  • c:\ :\%USER%\Start Menu\Programs\Live Security Suite\Purchase License.lnk
  • c:\Program Files\Live Security Suite
  • c:\Program Files\Live Security Suite\activate.ico
  • c:\Program Files\Live Security Suite\Explorer.ico
  • c:\Program Files\Live Security Suite\LiveSS.exe
  • c:\Program Files\Live Security Suite\unins000.dat
  • c:\Program Files\Live Security Suite\uninstall.ico
  • c:\Program Files\Live Security Suite\working.log
  • c:\Program Files\Live Security Suite\db
  • c:\Program Files\Live Security Suite\db\DBInfo.ver
  • c:\Program Files\Live Security Suite\db\ia080614.db
  • c:\Program Files\Live Security Suite\db\lists.ini
  • c:\Program Files\Live Security Suite\db\WMILib.dll
  • c:\Program Files\Live Security Suite\Languages
  • %UserProfile%\Application Data\Live Security Suite
  • %UserProfile%\Application Data\Live Security Suite\settings.ini
  • %UserProfile%\Application Data\Live Security Suite\uill.ini
  • %UserProfile%\Application Data\Live Security Suite\unins000.exe
  • %UserProfile%\Application Data\Live Security Suite\Uninstall Live Security Suite.lnk
  • %UserProfile%\Application Data\Live Security Suite\db
  • %UserProfile%\Application Data\Live Security Suite\db\config.cfg
  • %UserProfile%\Application Data\Live Security Suite\db\Timeout.inf
  • %UserProfile%\Application Data\Live Security Suite\db\Urls.inf
  • %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Live Security Suite.lnk
  • %UserProfile%\Desktop\Live Security Suite.lnk
  • %UserProfile%\Desktop\LiveSS.exe.txt
  • %UserProfile%\Local Settings\AppData\Microsoft\Internet Explorer\iGSh.png
  • %UserProfile%\Local Settings\AppData\Microsoft\Internet Explorer\iMSh.png
  • %UserProfile%\Local Settings\AppData\Microsoft\Internet Explorer\iPSh.png
  • %UserProfile%\Local Settings\AppData\Microsoft\Windows\pguard.ini
  • %UserProfile%\Local Settings\AppData\Microsoft\Windows\services.exe

After the above steps have been completed, Live Security Suite no longer resides on your hard disk.

Registry Removal Procedures

Removal of files and folders alone is not sufficient to completely delete Live Security Suite. The following registry keys and settings should also be deleted for complete Live Security Suite removal:

  • HKEY_CURRENT_USER\Software\Live Security Suite
  • HKEY_LOCAL_MACHINE\SOFTWARE\Live Security Suite
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Live Security Suite_is1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
  • HKEY_CURRENT_USER\Software\Microsoft\FTP “SearchDir” = “C:\Program Files\Live Security Suite\”
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS” = “http://gen-avpay.com/choose/?productid=GENAV3&uid=0&machineid=c3f92274b4b15694ae2311bd2316c727″
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “uniname” = “Live Security Suite_is1″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Live Security Suite”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AVPath” = “\\.\root\SecurityCenter:AntiVirusProduct.instanceGuid=”653E64F8-62B6-4F96-B22D-4FFC6E44130E””
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent “URLSS[2.0.3.0]”

CHANGE THESE KEYS TO 1:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallDisableNotify” = “0”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirstRunDisabled” = “0”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “UpdatesDisableNotify” = “0”

Conclusion

Manual Live Security Suite removal is not recommended for inexperienced users as one wrong move during the process could cause irreversible damage to your operating system. Therefore the best course of action to take would be to use a web-based repair service such as www.onlinecomputerrepair.org or a legitimate antivirus program such as Spyware Doctor with Antivirus to ensure that Live Security Suite removal is done in a safe and efficient manner.

RST Antivirus 2010 Removal

Among the many rogue security applications available today, RST Antivirus 2010 is a most potent and dangerous one. It uses scare tactics to push users into purchasing a license for the full version of the malware. RST Antivirus 2010 gets installed on user systems via Trojans that get downloaded from malicious websites that promote fake online antivirus engines. Once installed, RST Antivirus 2010 loads at startup and disables essential Windows services such as Task Manager and Registry Editor. As these measures are taken to prohibit the user from manual RST Antivirus 2010 removal, you should restart your computer in Safe Mode before you attempt to do so. RST Antivirus 2010 loads up as a startup application and launches into a series of fake malware scans, generating endless reports of a large amount of malicious activity being detected on the user’s system. Fake pop-ups are also generated from the Windows Taskbar, warning of malware that does not exist. The aim of all these fake warnings is to scare the user into purchasing a license for the ‘full’ version of RST Antivirus 2010 by claiming that the currently installed ‘trial’ version cannot fully clean the detected ‘threats’. However, the so-called ‘full’ version is just as incapable of scanning or cleaning the user’s system as the ‘trial’ version is. Here Remove RST Antivirus you will find all the infos to remove this virus from your PC.

RST Antivirus 2010

As soon as you detect that RST Antivirus 2010 is functioning on your system, you should take steps to initiate RST Antivirus 2010 removal. In order to accomplish this, you need to stop its running processes, unregister its DLL files, delete its files and folders and remove its registry entries.

File Removal Procedures

The first step in RST Antivirus 2010 removal is to kill the following processes after seeking them out in the Task Manager:

  • alggui.exe
  • svchost.exe
  • rst antivirus 2010.exe

The next step in RST Antivirus 2010 removal is to unregister the following DLL files:

  • adc32.dll
  • comdlg32.dll
  • dwmapi.dll
  • libclamav.dll
  • oledlg.dll
  • pthreadvc2.dll
  • wininet.dll

Next, it is necessary to delete the following files and folders:

Windows XP:

  • %ProgramFiles%\adc32.dll
  • %ProgramFiles%\alggui.exe
  • %ProgramFiles%\nuar.old
  • %ProgramFiles%\skynet.dat
  • %ProgramFiles%\svchost.exe
  • %ProgramFiles%\wp3.dat
  • %ProgramFiles%\wp4.dat
  • %ProgramFiles%\rst antivirus 2010\rst antivirus 2010.exe
  • %ProgramFiles%\rst antivirus 2010\comdlg32.dll
  • %ProgramFiles%\rst antivirus 2010\dwmapi.dll
  • %ProgramFiles%\rst antivirus 2010\libclamav.dll
  • %ProgramFiles%\rst antivirus 2010\oledlg.dll
  • %ProgramFiles%\rst antivirus 2010\pthreadvc2.dll
  • %ProgramFiles%\rst antivirus 2010\uninstall.bat
  • %ProgramFiles%\rst antivirus 2010\wininet.dll
  • %Programs%\RTS Antivirus 2010.lnk
  • %Desktop%\RTS Antivirus 2010.lnk

Windows Vista/7:

  • %ProgramFiles%\adc32.dll
  • %ProgramFiles%\alggui.exe
  • %ProgramFiles%\nuar.old
  • %ProgramFiles%\skynet.dat
  • %ProgramFiles%\svchost.exe
  • %ProgramFiles%\wp3.dat
  • %ProgramFiles%\wp4.dat
  • %ProgramFiles%\rst antivirus 2010\rst antivirus 2010.exe
  • %ProgramFiles%\rst antivirus 2010\comdlg32.dll
  • %ProgramFiles%\rst antivirus 2010\dwmapi.dll
  • %ProgramFiles%\rst antivirus 2010\libclamav.dll
  • %ProgramFiles%\rst antivirus 2010\oledlg.dll
  • %ProgramFiles%\rst antivirus 2010\pthreadvc2.dll
  • %ProgramFiles%\rst antivirus 2010\uninstall.bat
  • %ProgramFiles%\rst antivirus 2010\wininet.dll
  • %Programs%\RTS Antivirus 2010.lnk
  • %Desktop%\RTS Antivirus 2010.lnk

After the above steps have been completed, RST Antivirus 2010 no longer resides on your hard disk. However, in many cases, it is recommended to scan the entire PC using genuine antivirus software such as Spyware Doctor with Antivirus due to the fact that rogue products such as RST Antivirus 2010 is usually installed with the help of additional malicious software that can lead to further damage of your PC and operating system related files.

Registry Removal Procedures

File and folder deletion alone is not sufficient to completely remove RST Antivirus 2010 from your computer. For complete RST Antivirus 2010 removal, the following registry keys and settings should also be deleted:

  • HKCU\Software\RTS Antivirus 2010
  • HKCR\CLSID\77DC0Baa-3235-4ba9-8BE8-aa9EB678FA02
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\77DC0Baa-3235-4ba9-8BE8-aa9EB678FA02
  • HKLM\SYSTEM\CurrentControlSet\Services\AdbUpd

After this final step has been completed, your computer is completely safe from RST Antivirus 2010. Even if in most cases this is true, proper caution is to be manifested unless the computer has been scanned entirely using a legitimate antivirus solution.

Conclusion

Manual RST Antivirus 2010 removal is not recommended for inexperienced users as one wrong move during the process could cause irreversible damage to your operating system. Therefore the best course of action to take would be to use a web-based repair service such as www.onlinecomputerrepair.org or a legitimate antivirus program such as Spyware Doctor with Antivirus to ensure that RST Antivirus 2010 removal is done in a safe and efficient manner.