A fake anti-spyware program much like many other dangerous rogue security applications propagating throughout the internet today, XJR Antivirus uses fear tactics to induce the user into purchasing a software license. A clone of the notorious rogue anti-malware program Your PC Protector, This virusis heavily promoted online by fake websites which claim to scan the user’s computer and come up with a number of fake threat warnings. These websites urge the user to download a copy of this malware. Once downloaded and installed on the user’s computer, this rogue software immediately establishes itself as a startup application, displaying numerous pop-ups claiming that the user’s computer is heavily infected with various viruses. It then tells the user to purchase the ‘full’ version of XJR Antivirus, claiming that the currently installed ‘trial’ version is incapable of cleaning out the fake ‘threats’. However, it should be noted that the ‘full’ version of this rogue software is no more capable of cleaning out your system than the ‘trial’ version, and under no circumstances should you allow yourself to be tricked into purchasing a license to the rogue software.
XJR Antivirus
» Download XJR Antivirus Removal Software
As soon as you find a copy of this malicious software installed on your computer, you should take steps to delete this threat. Removal involves the stopping of processes, the deregistering of DLL files, the removal of files and folders and the deletion of registry entries.
XJR Antivirus Manual Removal Procedures
The first step you must take in order to delete this is to kill the following processes:
- alggui.exe
- svchost.exe
- wpp.exe
- XJR Antivirus.exe
Next, it is necessary to unregister the following DLL which is associated with this threat:
- adc_w32.dll
As the next step in XJR Antivirus removal you must delete the following files and folders:
- %UserProfile%\Desktop\XJR Antivirus.lnk
- %UserProfile%\Local Settings\Temp\win1.tmp
- %UserProfile%\Local Settings\Temp\win2.tmp
- %UserProfile%\Start Menu\Programs\XJR Antivirus
- %UserProfile%\Start Menu\Programs\XJR Antivirus\XJR Antivirus.lnk
- c:\Program Files\adc_w32.dll
- c:\Program Files\alggui.exe
- c:\Program Files\nuar.old
- c:\Program Files\skynet.dat
- c:\Program Files\svchost.exe
- c:\Program Files\wp3.dat
- c:\Program Files\wp4.dat
- c:\Program Files\wpp.exe
- c:\Program Files\XJR Antivirus
- c:\Program Files\XJR Antivirus\XJR Antivirus.exe
Once the above steps have been completed, XJR Antivirus no longer resides on your file system.
XJR Antivirus Registry Removal Proedures
In order to completely remove XJR Antivirus, it is necessary to remove the following keys and settings from the Windows Registry:
- HKEY_CURRENT_USER\Software\XJR Antivirus
- HKEY_CLASSES_ROOT\CLSID\{149256D5-E103-4523-BB43-2CFB066839D6}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{149256D5-E103-4523-BB43-2CFB066839D6}
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AdbUpd
Now it is safe to say that XJR Antivirus has been completely removed from your computer.
XJR Antivirus Directories:
- c:\Documents and Settings\All Users\Application Data\AV1\
- Vista/Win7 c:\ Users\%USER%\AppData \AV1\
Outside Resources:
http://www.bleepingcomputer.com/virus-removal/remove-xjr-antivirus
Speak Your Mind