|
| How to remove RealAV |
|
| Author:RealAV Hits: UpdateTime:2008-3-17 16:07:56 |
|
How to remove RealAV
RealAV removal process
For remove RealAV virus,please clean/delete all RealAV infected files and Delete/Modify any values RealAV added to the registry as following:
Behavior The program must be manually installed.
The program reports false or exaggerated system security threats on the computer.
The user is then prompted to pay for a full license of the application in order to remove the errors.
Installation When the program is executed, it creates the following folder: %UserProfile%\Local Settings\Temp\tmp00000029
It also creates the following files:
- %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\RealAV.lnk
- %UserProfile%\Desktop\RealAV.lnk
- %UserProfile%\Local Settings\Temp\stylrit0.tmp may be replaced with "Threat may create temporary files!"
- %UserProfile%\Local Settings\Temp\tmp00000029tmp00004823\tmp00000001
- %UserProfile%\Start Menu\Programs\RealAV\RealAV.lnk
- %UserProfile%\Start Menu\Programs\RealAV\Uninstall.lnk
- %ProgramFiles%\RealAV\AVCore.dll
- %ProgramFiles%\RealAV\AVCoreFn.dll
- %ProgramFiles%\RealAV\Plugins\aspy_emu.cvd
- %ProgramFiles%\RealAV\Plugins\cevakrnl.ivd
- %ProgramFiles%\RealAV\Plugins\cevakrnl.rvd
- %ProgramFiles%\RealAV\Plugins\ceva_dll.cvd
- %ProgramFiles%\RealAV\Plugins\ceva_emu.cvd
- %ProgramFiles%\RealAV\Plugins\ceva_vfs.cvd
- %ProgramFiles%\RealAV\Plugins\ceva_vfs.ivd
- %ProgramFiles%\RealAV\Plugins\cookie.cvd
- %ProgramFiles%\RealAV\Plugins\cran.cvd
- %ProgramFiles%\RealAV\Plugins\cran.ivd
- %ProgramFiles%\RealAV\Plugins\emalware.cvd
- %ProgramFiles%\RealAV\Plugins\emalware.ivd
- %ProgramFiles%\RealAV\Plugins\e_spyw.cvd
- %ProgramFiles%\RealAV\Plugins\e_spyw.ivd
- %ProgramFiles%\RealAV\Plugins\gvmscripts.cvd
- %ProgramFiles%\RealAV\Plugins\hpe.cvd
- %ProgramFiles%\RealAV\Plugins\java.cvd
- %ProgramFiles%\RealAV\Plugins\mdx_97.cvd
- %ProgramFiles%\RealAV\Plugins\mdx_97.ivd
- %ProgramFiles%\RealAV\Plugins\mdx_w95.cvd
- %ProgramFiles%\RealAV\Plugins\mdx_x95.cvd
- %ProgramFiles%\RealAV\Plugins\mdx_xf.cvd
- %ProgramFiles%\RealAV\Plugins\mobmalware.cvd
- %ProgramFiles%\RealAV\Plugins\na.cvd
- %ProgramFiles%\RealAV\Plugins\nelf.cvd
- %ProgramFiles%\RealAV\Plugins\regarch.cvd
- %ProgramFiles%\RealAV\Plugins\regscan.cvd
- %ProgramFiles%\RealAV\Plugins\rup.cvd
- %ProgramFiles%\RealAV\Plugins\sdx.cvd
- %ProgramFiles%\RealAV\Plugins\sdx.ivd
- %ProgramFiles%\RealAV\Plugins\unpack.cvd
- %ProgramFiles%\RealAV\Plugins\unpack.ivd
- %ProgramFiles%\RealAV\Plugins\update.dat
- %ProgramFiles%\RealAV\Plugins\vb0.dat
- %ProgramFiles%\RealAV\Plugins\vb1.dat
- %ProgramFiles%\RealAV\Plugins\vb2.dat
- %ProgramFiles%\RealAV\Plugins\ve.cvd
- %ProgramFiles%\RealAV\Plugins\ve.ivd
- %ProgramFiles%\RealAV\Plugins\vedata.cvd
- %ProgramFiles%\RealAV\RealAV.exe
- %ProgramFiles%\RealAV\uninstall.exe
Next, the program creates the following registry entry so that it executes whenever Windows starts: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"RealAV = "C:\Program Files\RealAV\RealAV"
It also creates the following registry subkeys:
- HKEY_CURRENT_USER\Software\RealAV
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RealAV
For successful remove RealAV virus,you may also need do as following:
1. Temporarily Disable System Restore .
2. Update the virus definitions. Reboot computer in SafeMode;
3. Delete the IE temp files,some RealAV temp file exisit there.
4.If you failed to remove RealAV,please go to our remove help forum:http://help.antiviruses123.com
|
| End Of The Article How to remove RealAV remove process |
|
Troj/FakeAV-AXU Troj/FakeAV-AXT Troj/Sinowal-M Troj/Sinowal-L Troj/JSRedir-AX Troj/FakeAV-AXQ Troj/FakeAV-AXP Troj/FakeAV-AXR Mal/Banker-M Troj/BredoZp-S Mal/RedNeck-A Mal/Kates-A Mal/Dldr-C Troj/Bredo-BM Trojan.FakeAV!gen20 Mal/ZipMal-F Mal/Vobfus-A Troj/JSRedir-AV Troj/FakeAV-AXN Mal/Spy-F Troj/FakeAV-AWI Troj/FakeAV-AWE Mal/KyLgr-A Troj/FakeAV-AXK Troj/FakeAV-AXJ Mal/Palevo-A Trojan.Digitala Mal/Renocide-B Mal/Scrap-A Mal/Koblu-B Mal/HappJS-A Word2000PasswdRecovery Troj/FakeAV-AXD Troj/FakeAV-AXB Troj/FakeAV-AWV Troj/Small-ENT Troj/FakeAV-AVB Troj/FakeAV-AVG Mal/Monkif-A Mal/Gampass-E
|