Friday, September 10, 2010

Remove Antispy SafeGuard That Provokes to Delete Legit Entries

Antispy SafeGuard is usually uploaded by the victims of the scam, which are lured into self-infection due to trojan efforts. The trojan has several alerts to popup, all entitled Microsoft Security Essentials Alert. Unnamed trojan is allegedly detected by Fake Microsoft Security Essentials, according to this alert, and Antispy SafeGuard is one of five programs recommended to delete the trojan. The trojan is a hoax aimed to lure users into uploading fake antispyware. Antispy SafeGuard removal is to be performed together with trojan removal or else the fake alert will start bothering you again.
When the adware promoted in the fake alert is installed, it will list existing files in its scan results table. The point is that those files are, in their majority, valuable and 100% safe entries. Get rid of Antispy SafeGuard and other parasites instead of harming useful software as the adware wants you to do. This link provides relevant verified free scanner to detect rogue antispyware and other types of infection and remove the detected threats upon receiving user’s agreement.

Antispy SafeGuard screenshot:

Antispy SafeGuard Removal Tool:

Antispy SafeGuard manual removal guide:
Delete Antispy SafeGuard files:
%UserProfile%\Application Data\PAV\
%UserProfile%\Application Data\antispy.exe
%UserProfile%\Application Data\defender.exe
%UserProfile%\Application Data\tmp.exe
%UserProfile%\Application Data\exe.exe
Delete Antispy SafeGuard registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnPostRedirect" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "tmp"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "SelfdelNT"
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = "%UserProfile%\Application Data\antispy.exe"

No comments: