How to Remove XP Total Security Microsoft Malware

104 9

    End Processes

    • 1). Press "Ctrl," "Shift" and "Escape" to open the Processes tab of the Windows Task Manager.

    • 2). Right-click "av.exe," and select "End Process."

    • 3). Close the Windows Task Manager.

    Delete Registry Entries

    • 1). Click "Start," type "regedit" into the search field and press "Enter" to open the Windows Registry Editor.

    • 2). Delete each of the following registry entries from the left pane of the Windows Registry Editor right-clicking on the registry entry and selecting "Delete." Be careful to delete only the listed registry entries. Deleting the wrong registry entry can result in serious systemwide errors.

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"

      HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "av.exe /START "iexplore.exe"

      HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "av.exe" /START "firefox.exe" -safe-mode

      HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "av.exe" /START "firefox.exe"

      HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "av.exe" /START "%1" %*

      HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "av.exe" /START "%1" %*

      HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "av.exe" /START "%1" %*

      HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "av.exe" /START "%1" %*

    • 3). Close the Windows Registry Editor.

    Delete Files

    • 1). Click "Start," and type "WRblt8464P" into the search field.

    • 2). Right-click "WRblt8464P" in the result list, and select "Delete."

    • 3). Click "Start" and type "av.exe" into the search field.

    • 4). Right-click "av.exe" in the result list, and select "Delete."

    • 5). Restart your computer.

Source...
Subscribe to our newsletter
Sign up here to get the latest news, updates and special offers delivered directly to your inbox.
You can unsubscribe at any time

Leave A Reply

Your email address will not be published.