Wednesday, September 17, 2008

How to manually remove XP Antivirus 2008

SUMMARY
Antivirus 2008 is counterfeit anti-virus software. Antivirus 2008 usually installed itself onto your PC without your permission, through Trojan and virus. Antivirus 2008 will display fake system alerts or fake security alerts to trick user to buy the Paid Version of Antivirus 2008 (You could get Antivirus 2008 by opening an infected message in myspace or installing infected or fake video codec from video sharing websites.)
Step 1:- Stop unwanted process running in background.
Click Start then Run and type taskmgr.exe.
Click on Process tab in Task Manager and locate the following Image name(s).
rhccu2j0ejd.exe
lphc9u2j0ejde.exe
Antvrs.exe
AntvrsInstall.exe
AntvrsInstall[1].exe
Win Antivirus 2008.exe
av2008xp.exe
Highlight the Image name and Click End Process to stop.
Close the Task Manager.
Step 2:- Delete the suspicious file(s) or folder(s) from the computer
Click on Start and Run, type system, press Enter.
Locate the following file(s) and Delete.
lphc9u2j0ejde.exe
blphc9u2j0ejde.scr
Click on Start and Run, type C:\Program Files, press Enter.
Locate the following folder and Delete.
rhc75dj0e1an
Close the Window.
Step 3:- Uninstall the Suspicious program from the computer.
Click on Start and Run, type appwiz.cpl, press Enter.
Locate Antivirus XP 2008 in Add and Remove Program.
Click on Remove (Uninstall) button.
Close Add or Remove program.
Restart the computer.
Step 4:- Manual Removal of suspicious entries from Registry.CAUTION: Changing the Registry incorrectly could cause your comuter to stop working. Please make sure to create backup of registry or create system point before proceeding.
Click Start, Click run and type regedit.
Create a registry backup.Note: Some of these Registry keys and values may be random.
Locate the following registry keys, right click and Delete. HKEY_LOCAL_MACHINE\SOFTWARE\rhcnkrj0etfg HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\rhcnkrj0etfgHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion 'rhcnkrj0etfg'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform 'AntivirXP08'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 'SMrhcnkrj0etfg'
Restart the computer.

No comments: