February 3, 2011

How to remove “Warning! Virus/Attack detected” Pop up manually


How to remove “Warning! Virus/Attack detected” Pop up manually


Warning! Virus detected is determined by Tee Support Labs as fake security alert which release by Smart Security. Warning! Virus/Attack detected” alert is simply a sign of your computer being infected with the nasty rogue anti-spyware called General Antivirus. The fake program spreads via trojan and imitates fictitious security issues





Here is a small tutorial for removing  “Warning! Virus/Attack detected” Pop up.



Delete “Warning! Virus/Attack detected” Pop up corrupt files:

%Documents and Settings%\All Users\Desktop\General Antivirus.lnk
%Documents and Settings%\All Users\Start Menu\Programs\General Antivirus
%Documents and Settings%\All Users\Start Menu\Programs\General Antivirus\General Antivirus Home Page.lnk
%Documents and Settings%\All Users\Start Menu\Programs\General Antivirus\General Antivirus.lnk
%Documents and Settings%\All Users\Start Menu\Programs\General Antivirus\Purchase License.lnk
%UserProfile%\Application Data\General Antivirus
%UserProfile%\Application Data\General Antivirus\settings.ini
%UserProfile%\Application Data\General Antivirus\uill.ini
%UserProfile%\Application Data\General Antivirus\unins000.exe
%UserProfile%\Application Data\General Antivirus\Uninstall General Antivirus.lnk
%UserProfile%\Application Data\General Antivirus\db
%UserProfile%\Application Data\General Antivirus\db\config.cfg
%UserProfile%\Application Data\General Antivirus\db\Timeout.inf
%UserProfile%\Application Data\General Antivirus\db\Urls.inf
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\General Antivirus.lnk
%UserProfile%\Application Data\Microsoft\Windows\winlogon.exe
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
%UserProfile%\2saSddPYaWAasRsE-thief.jpg
%Program Files%\Common Files\file.exe
%Program Files%\Common Files\GeneralAntivirus.exe
%Program Files%\General Antivirus
%Program Files%\General Antivirus\activate.ico
%Program Files%\General Antivirus\Explorer.ico
%Program Files%\General Antivirus\GenAvir.exe
%Program Files%\General Antivirus\unins000.dat
%Program Files%\General Antivirus\uninstall.ico
%Program Files%\General Antivirus\working.log
%Program Files%\General Antivirus\db
%Program Files%\General Antivirus\db\DBInfo.ver
%Program Files%\General Antivirus\db\ga090122.db
%Program Files%\General Antivirus\Languages
%WINDOWS%\system32\log.txt

Remove “Warning! Virus/Attack detected” Pop up associated registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\General Antivirus_is1
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ITGRDENGINE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ITGrdEngine
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “ParameterName”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “prob”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “prob1″
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “prob2″
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “probRedir”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “subscriber”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “uid”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run “iv”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “General Antivirus”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Microsoft Windows logon process”

Note: Manual removal of “Warning! Virus/Attack detected” Pop up is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage

1 comments:

Hi thеre, You've done an excellent job. I'll dеfinitely dіgg it and personallу recommend to mу frіenԁs.
I am ѕure they will be bеnefited from thіs ωеb site.


Vіsit my weblog ... payday loans

Post a Comment

Related Posts Plugin for WordPress, Blogger...

Search This Blog

Followers

Categories

Twitter Delicious Facebook Digg Stumbleupon Favorites More