Removal instructions for XJR Anti-Spyware , a fake / rogue anti-spyware

XJR Anti-Spyware is a fake / rogue anti-spyware program.


I suggest you print this out before stating the removal.

First:

Start Task Manager
To start Task Manager, take any of the following actions:
Press CTRL+ALT+DELETE, and then click Task Manager.
Press CTRL+SHIFT+ESC.

End the process, if listed, for:
XJR Antivirus.exe
svchost.exe


Next:
Launch Notepad (Start>All Programs>Accessories), and copy/paste all the Quoted REGEDIT below to it. Don't forget to include REGEDIT4.
Save in: Desktop
File Name: fixme.reg
Save as Type: All files
Click: Save

REGEDIT4

[-HKEY_CURRENT_USERSoftwareXJR Antivirus]
[-HKEY_CLASSES_ROOTCLSID{149256D5-E103-4523-BB43-2CFB066839D6}]
[-HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{149256D5-E103-4523-BB43-2CFB066839D6}]
[-HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesAdbUpd]

On the desktop, doubleclick fix.reg and allow it to run. Let it merge.


Next:
1.Click Start > Settings > Control Panel.
2.Next, open Add/Remove Programs and remove if listed:
XJR Antivirus



Next:
Delete these Files if listed:

C:\Program Files\XJR Antivirus\XJR Antivirus.exe
C:\Program Files\adc_w32.dll
C:\Program Files\alggui.exe
C:\Program Files\nuar.old
C:\Program Files\skynet.dat
C:\Program Files\svchost.exe <–Only from this location
C:\Program Files\wp3.dat
C:\Program Files\wp4.dat
C:\Documents and Settings\[Every Username]\Desktop\XJR Antivirus.LNK


Next:
Delete these Folders if listed:

C:\%UserProfile%\Start MenuPrograms\XJR Antivirus
C:\Program Files\XJR Antivirus
C:\Program Files\scdata


Reboot and the infection should be removed.

If you still need help Start a new topic:

Start a [external image: Posted Image] in Spyware / Malware / Virus Removal Forum