System Tool Removal Guide

System Tool is a fake antivirus program that cannot detect and remove any malware. Once System Tool is installed in the computer, it will configure itself to start automatically when Windows boot. After that, System Tool will scan some files in the computer and WILL SURELY display fake warning that the computer is infected by many malware. System Tool will urge the user to register System Tool by purchasing the full version of System Tool so that to remove the malwares. Actually, System Tool cannot detect and remove any malware. System Tool just want to cheat the money of the user only.

System Tool provide fake features such as System Scan, Protection, Privacy, full real-time protection with System Tool etc. All of these cannot function at all. It scares the user by showing that there are many malwares in the computer such as Dialer.Trafficjam.a, Win32.Delbot.Ai, Win32.PerFiler, Trojan-Downloader.VBS.Small.dc, Win32.Spamta.KG.worm and so on. Don't be afraid, all of them is a lie. Your computer is clean.

System Tool should be removed immediately!

System Tool Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"

Remove Folders and Files
%ALLUSERSPROFILE%\Application Data\[random]

[random] mean words formed by random alphabets such as "fklasjsdfk", "fdkjiu289", "dj328ufdkj" etc.

Read more »

ThinkPoint Removal Guide

ThinkPoint is a fake antivirus program that cannot detect and remove any malware. However, once ThinkPoint is installed in the computer, it WILL SURELY state that the computer has been infected by malwares and ask the user to purchase the full version of ThinkPoint. ThinkPoint is part of Microsoft Security Essential infection. Do not ever purchase ThinkPoint as it cannot detect and remove any malware. ThinkPoint will start automatically when Windows boot. Then ThinkPoint will states that it is a World's leading security solution. Actually, ThinkPoint cannot protect any computer from malwares.

ThinkPoint provide fake features such as Quick Scan, Full Scan and Firewall. It scares the user that the %ProgramFiles%\Messenger\msmsgs.exe is infected with Trojan.Horse.Win32.PAV.64.a. Don't be cheated as the file is clean. It disable Windows Task Manager and stop other legitimate antivirus program from protecting the computer.

ThinkPoint should be removed immediately!

ThinkPoint Removal Guide
Kill Process
(How to kill a process effectively?)
hotfix.exe

Delete Registry
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = %AppData%\hotfix.exe

Remove Folders and Files
%UserProfile%\Application Data\completescan
%UserProfile%\Application Data\hotfix.exe
%UserProfile%\Application Data\install

Read more »

AntiVirus Solution 2010 Removal Guide

AntiVirus Solution 2010 is a fake antivirus program that just cheat the user that the computer is infected by malwares and urge the user to purchase the full version of AntiVirus Solution 2010. When AntiVirus Solution 2010 is installed in the computer accidentally, it will start automatically when Windows boot. Then AntiVirus Solution 2010 will scan the computer and WILL SURELY show shat the computer had been infected by malwares. However, the user can only remove the malwares by activating the program by purchasing the full version of AntiVirus Solution 2010. In fact, the full version of AntiVirus Solution 2010 cannot detect and remove any malware. AntiVirus Solution 2010 cannot detect any malware. Do not be cheated by AntiVirus Solution 2010.

AntiVirus Solution 2010 provide fake features like Auto Protection, System Scan and Firewall. None of them can really protect the computer from malware. It scares the users by stating that there are many malwares in the computer such as Adware Win32/Wheerphee, Worm Win32/Rescue.B and so on.

AntiVirus Solution 2010 should be removed immediately!

AntiVirus Solution 2010 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe
uninstall.exe
AntiVirus Solution 2010.exe
securitycenter.exe
securityhelper.exe
backd-efq.exe
cunifuc.exe
dc_3.exe
dd10×10.exe
ddhelp.exe
destroyer.exe
fadz43.exe
fe.exe
format.exe
hardwh.exe
kock.exe
safe.exe
snowif.exe
sycre.exe
test.exe
timem.exe
w32-reno-c.exe
wined.exe
winlogoff.exe
%Temp%\02c9c3c35bdx5.exe
%Temp%\17dkf.exe
%Temp%\1iowieoo.exe
%Temp%\2010yo.exe
%Temp%\472a10e2ebxd9.exe
%Temp%\56493.exe
%Temp%\8gmsed-bd.exe
%Temp%\a75wef8e0e7.exe
%Temp%\ae0965a7157cd.exe
%Temp%\al3erfa3.exe
%Temp%\aler3fa.exe
%Temp%\alerfa.exe
%Temp%\alerfa2.exe
%Temp%\alerfa322.exe
%Temp%\aqfitrlxi2.exe
%Temp%\backd-efq.exe
%Temp%\brdss.exe
%Temp%\bzqa43d.exe
%Temp%\cffd4.exe
%Temp%\cosock.exe
%Temp%\cowceb.exe
%Temp%\cunifuc.exe
%Temp%\dc_3.exe
%Temp%\dd10x10.exe
%Temp%\ddhelp.exe
%Temp%\ddoll3342.exe
%Temp%\destroyer.exe
%Temp%\dkfjd93.exe
%Temp%\ds7hw.exe
%Temp%\dwl_bqz.exe
%Temp%\eelnvd13.exe
%Temp%\eephilpe.exe
%Temp%\exppdf_w.exe
%Temp%\fadz43.exe
%Temp%\fe.exe
%Temp%\format.exe
%Temp%\g_dx234.exe
%Temp%\gedx_ae09.exe
%Temp%\gpdfsws_bbg.exe
%Temp%\gpupz2a.exe
%Temp%\hardwh.exe
%Temp%\hhbboll_2.exe
%Temp%\hiphop.exe
%Temp%\hjkgfddd.exe
%Temp%\hodeme.exe
%Temp%\htfad4.exe
%Temp%\hvipws9.exe
%Temp%\jdhellwo3.exe
%Temp%\jofcdks.exe
%Temp%\kgn.exe
%Temp%\kilslmd.exex
%Temp%\kjdh_gf_jjdhgd.exe
%Temp%\kjh102k3.exe
%Temp%\kn.a.exe
%Temp%\kock.exe
%Temp%\ljts-23.exe
%Temp%\lkhgg_ea.exe
%Temp%\lols.exe
%Temp%\lorsk.exe
%Temp%\ploper.exe
%Temp%\poertd.exe
%Temp%\ppddfcfux.exxe
%Temp%\pswwg3c.exe
%Temp%\puzpup.exe
%Temp%\qwedvor.exe
%Temp%\qwklrvjhqlkj.exe
%Temp%\r0life.exe
%Temp%\rator.exe
%Temp%\rsrtd12.exe
%Temp%\rtfme.exe
%Temp%\safe.exe
%Temp%\snowif.exe
%Temp%\sycre.exe
%Temp%\test.exe
%Temp%\timem.exe
%Temp%\w32-reno-c.exe
%Temp%\warsddd_w.exe
%Temp%\wefgetn_00.exe
%Temp%\wergfq.exe
%Temp%\wined.exe
%Temp%\winlogoff.exe
%Temp%\wqefqw7e.exe
%Temp%\wrcud12.exe
%Temp%\wrfwe_di.exe
%Temp%\wwautrsd.exe
%Temp%\wwwsssgen.exe

Delete Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "AntiVirus Solution 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_LOCAL_MACHINE\SOFTWARE\AntiVirus Solution 2010
HKEY_CURRENT_USER\Software\AntiVirus Solution 2010
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\AntiVirus Solution 2010
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "2kowmeuswvw3"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AntiVirus Solution 2010"

Remove Folders and Files
%WINDOWS%\system32\[random].exe
%Program Files%\AntiVirus Studio 2010
%Program Files%\Desktop Security 2010
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiVirus Solution 2010.lnk
%Documents and Settings%\All Users\Start Menu\Programs\AntiVirus Solution 2010
%UserProfile%\Application Data\AntiVirus Solution 2010
%UserProfile%\Start Menu\Programs\AntiVirus Solution 2010

Read more »