XP Anti-Spyware 2011, Vista Security 2011, Win 7 Internet Security 2011 Removal Guide
Option 1.
You can register by entering the following serial code 1147-175591-6550 (manual registration)
Then download and run Malwarebytes' Antimalware
Option 2.
When this particular rogue is installed, it will install itself as a variety of different program
names, with each having their own graphical user interface depending on the version of Windows
that the computer is running. When installed, this rogue pretends to be a security update for
Windows installed via Automatic Updates.
It is possible that the infection you are trying to remove will not allow you to download files
on the infected computer. If this is the case, then you will need to download the files on another
computer and then transfer them to the infected computer. You can
transfer the files via a CD/DVD, external drive, or USB flash drive.
This infection changes settings on your computer so that when you launch an executable, a file
ending with .exe, it will instead launch the infection rather than the desired program. To fix
this you must first download a Registry file that will fix these changes. From a clean computer,
please download the following file and save it to a removable media such as a CD/DVD,
external Drive, or USB flash drive
FixNCR.reg-http://download.bleepingcomputer.com/reg/FixNCR.reg
Now you must first end the processes that belong to XP Anti-Virus 2011, Vista Total Security 2011,
and Win 7 Home Security and clean up some Registry settings so they do not interfere with the
cleaning procedure. To do this, please download RKill to your desktop from the following link.
Rkill – What it does and What it Doesn’t – A brief introduction to the program
http://www.bleepingcomputer.com/forums/topic308364.html
#1. do not turn off computer until after running Malwarebytes’ when using rkill or the process
will have started again and you will have to start over.
#2.Vista and Windows 7 users, right click and click run as administrator.
#3. Keep running Rkill until no malicious processes are detected
Download ATF For cleaning of Temp Files & the Java cache
http://www.atribune.org/index.php?option=com_content&task=view&id=25&Itemid=25
Download Malwarebytes' Anti-Malware, or MBAM, from the following location and save it to your desktop:
http://www.bleepingcomputer.com/download/anti-virus/malwarebytes-anti-malware
# Double-click mbam-setup.exe and follow the prompts to install the program.
# At the end, be sure a checkmark is placed next to the following:
* Update Malwarebytes’ Anti-Malware
* Launch Malwarebytes’ Anti-Malware
# Then click Finish.
# If an update is found, it will download and install the latest version.
# Once the program has loaded, select Perform FULL scan, then click Scan.
# When the scan is complete, click OK, then Show Results to view the results.
# Be sure that everything is checked, and click Remove Selected.
# If it asks for a Restart DO SO, Very Important
Malwarebytes’ Tutorial
http://www.bleepingcomputer.com/virus-removal/how-to-use-malwarebytes-anti-malware-tutorial
Malwarebytes’ Video Tutorials
http://www.youtube.com/user/Malwarebytes?feature=mhum#p/u/1/xSHw-LItYmE
=====For those having trouble running Malwarebytes Anti-Malware=====
http://www.bleepingcomputer.com/forums/topic267354.html
Now please download SUPERAntiSpyware
http://www.superantispyware.com/
SUPERAntiSpyware Tutorial
http://www.bleepingcomputer.com/virus-removal/how-to-use-superantispyware-tutorial
Now run ESET Online Scanner as a clean-up scan to remove any leftover's
http://www.eset.com/us/online-scanner