Virus RemovalIf You Need Expert Help we recommend you hire a Ninja! Ninja's are well trained in the art of virus removal and can remove all threats from your computer right now. See this Computer Repair site or check out www.pcninja.com for live help.

Remove Sysinternals Antivirus

Sysinternals Antivirus is a rogue anti-spyware application that has been directly related to Your PC Protector. Just like the program it is related to, it tries to trick users into paying for a software license. This rogue application gets installed via Trojans that force their way on to the user system through malicious websites. Once installed, Sysinternals Antivirus loads itself as a startup service and proceeds to perform endless scans of the user’s system, handing out fake reports which try to convince the user that the computer is dangerously infected with a number of malware applications. Sysinternals Antivirus also displays a large number of fake warning pop-ups from the Windows taskbar in an attempt to scare users. The aim of all this activity is to push the user into purchasing a license for the so-called ‘full’ version of Sysinternals Antivirus by claiming that the currently installed ‘trial’ version is incapable of cleaning out all the detected ‘threats’. However, it should be kept in mind at all times that Sysinternals Antivirus is simply a fake application that cannot scan or clean your computer under any circumstances.

Sysinternals Antivirus

Sysinternals Antivirus

» Download Sysinternals Antivirus Removal Software

As soon as you detect a copy of this rogue software on your computer, you should initiate the process of Sysinternals Antivirus removal. In order to delete Sysinternals Antivirus, you need to stop its processes, unregister its DLLS, delete its files and folders and remove its registry entries.

Automatic Sysinternals Antivirus Removal

Online Sysinternals Antivirus Removal Service

computer repair

Sysinternals Antivirus Removal ( Manual Removal Procedures )

The first step you need to take in order to remove Sysinternals Antivirus is to stop the following processes: Not all the process may be running.

  • alggui.exe
  • svchost.exe
  • Sysinternals Antivirus.exe
  • dbsinit.exe
  • ccsmn.exe
  • ccsrr.exe

The 2nd step in Sysinternals Antivirus removal is the unregistration of the following DLL files:

  • adc32.dll
  • adc_w32.dll

Next, it is necessary to delete the following files and folders:

Windows XP:

  • c:Program Filesadc_w32.dll
  • c:Program Filesalggui.exe
  • c:Program Filesextra1.dat
  • c:Program Filesextra2.dat
  • c:Program Filesnuar.old
  • c:Program Filesskynet.dat
  • c:Program Filessvchost.exe
  • c:Program Fileswp3.dat
  • c:Program Fileswp4.dat
  • c:Program Filesscdata
  • c:Program Filesscdatadbsinit.exe
  • c:Program Filesscdatawispex.html
  • c:Program Filesscdataimages
  • c:Program Filesscdataimagesi1.gif
  • c:Program Filesscdataimagesi2.gif
  • c:Program Filesscdataimagesi3.gif
  • c:Program Filesscdataimagesj1.gif
  • c:Program Filesscdataimagesj2.gif
  • c:Program Filesscdataimagesj3.gif
  • c:Program Filesscdataimagesjj1.gif
  • c:Program Filesscdataimagesjj2.gif
  • c:Program Filesscdataimagesjj3.gif
  • c:Program Filesscdataimagesl1.gif
  • c:Program Filesscdataimagesl2.gif
  • c:Program Filesscdataimagesl3.gif
  • c:Program Filesscdataimagespix.gif
  • c:Program Filesscdataimagest1.gif
  • c:Program Filesscdataimagest2.gif
  • c:Program FilesscdataimagesThumbs.db
  • c:Program Filesscdataimagesup1.gif
  • c:Program Filesscdataimagesup2.gif
  • c:Program Filesscdataimagesw1.gif
  • c:Program Filesscdataimagesw11.gif
  • c:Program Filesscdataimagesw2.gif
  • c:Program Filesscdataimagesw3.jpg
  • c:Program Filesscdataimagesword.doc
  • c:Program Filesscdataimageswt1.gif
  • c:Program Filesscdataimageswt2.gif
  • c:Program Filesscdataimageswt3.gif
  • c:Program FilesSysinternals Antivirus
  • c:Program FilesSysinternals AntivirusSysinternals Antivirus.exe
  • %UserProfile%Application DataMicrosoftInternet Explorerccsmn.exe
  • %UserProfile%Application DataMicrosoftInternet Explorerccsmn151.acf
  • %UserProfile%Application DataMicrosoftInternet Explorerccsmn151.ltd
  • %UserProfile%Application DataMicrosoftInternet Explorerccsmn151.lti
  • %UserProfile%Application DataMicrosoftInternet Explorerccsmn151_0.acb
  • %UserProfile%Application DataMicrosoftInternet Explorerccsmn151_0.aci
  • %UserProfile%Application DataMicrosoftInternet Explorerccsmn151_0.mt
  • %UserProfile%Application DataMicrosoftInternet Explorerccsrr.exe
  • %UserProfile%Application DataMicrosoftInternet Explorerlleod150
  • %UserProfile%Application DataMicrosoftInternet Explorerwmharun.log
  • %UserProfile%Application DataMicrosoftInternet Explorerwmrun.log
  • %UserProfile%Start MenuProgramsSysinternals Antivirus
  • %UserProfile%Start MenuProgramsSysinternals AntivirusSysinternals Antivirus.lnk

Windows Vista / 7:

  • c:Program Filesadc_w32.dll
  • c:Program Filesalggui.exe
  • c:Program Filesextra1.dat
  • c:Program Filesextra2.dat
  • c:Program Filesnuar.old
  • c:Program Filesskynet.dat
  • c:Program Filessvchost.exe
  • c:Program Fileswp3.dat
  • c:Program Fileswp4.dat
  • c:Program Filesscdata
  • c:Program Filesscdatadbsinit.exe
  • c:Program Filesscdatawispex.html
  • c:Program Filesscdataimages
  • c:Program Filesscdataimagesi1.gif
  • c:Program Filesscdataimagesi2.gif
  • c:Program Filesscdataimagesi3.gif
  • c:Program Filesscdataimagesj1.gif
  • c:Program Filesscdataimagesj2.gif
  • c:Program Filesscdataimagesj3.gif
  • c:Program Filesscdataimagesjj1.gif
  • c:Program Filesscdataimagesjj2.gif
  • c:Program Filesscdataimagesjj3.gif
  • c:Program Filesscdataimagesl1.gif
  • c:Program Filesscdataimagesl2.gif
  • c:Program Filesscdataimagesl3.gif
  • c:Program Filesscdataimagespix.gif
  • c:Program Filesscdataimagest1.gif
  • c:Program Filesscdataimagest2.gif
  • c:Program FilesscdataimagesThumbs.db
  • c:Program Filesscdataimagesup1.gif
  • c:Program Filesscdataimagesup2.gif
  • c:Program Filesscdataimagesw1.gif
  • c:Program Filesscdataimagesw11.gif
  • c:Program Filesscdataimagesw2.gif
  • c:Program Filesscdataimagesw3.jpg
  • c:Program Filesscdataimagesword.doc
  • c:Program Filesscdataimageswt1.gif
  • c:Program Filesscdataimageswt2.gif
  • c:Program Filesscdataimageswt3.gif
  • c:Program FilesSysinternals Antivirus
  • c:Program FilesSysinternals AntivirusSysinternals Antivirus.exe
  • %UserProfile%AppDataMicrosoftInternet Explorerccsmn.exe
  • %UserProfile% AppData MicrosoftInternet Explorerccsmn151.acf
  • %UserProfile% AppData MicrosoftInternet Explorerccsmn151.ltd
  • %UserProfile% AppData MicrosoftInternet Explorerccsmn151.lti
  • %UserProfile% AppData MicrosoftInternet Explorerccsmn151_0.acb
  • %UserProfile% AppData MicrosoftInternet Explorerccsmn151_0.aci
  • %UserProfile% AppData MicrosoftInternet Explorerccsmn151_0.mt
  • %UserProfile%Application DataMicrosoftInternet Explorerccsrr.exe
  • %UserProfile AppData MicrosoftInternet Explorerlleod150
  • %UserProfile% AppData MicrosoftInternet Explorerwmharun.log
  • %UserProfile% AppData MicrosoftInternet Explorerwmrun.log
  • %UserProfile%Start MenuProgramsSysinternals Antivirus
  • %UserProfile%Start MenuProgramsSysinternals AntivirusSysinternals Antivirus.lnk

To ensure you have found all traces be sure to run a full scan using Spyware Doctor with Antivirus.

If you find this threat too hard to remove yourself and need an expert we recommend www.pcninja.com . They charge far less than others and are great at what they do.

Sysinternals Antivirus Removal of Registry Items

File deletion alone is not sufficient to completely remove Sysinternals Antivirus. The following keys and settings should be removed from the registry for complete Sysinternals Antivirus removal:

  • HKCUSoftwareSysinternals Antivirus
  • HKCRCLSID{77DC0Baa-3235-4ba9-8BE8-aa9EB678FA02}
  • HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{77DC0Baa-3235-4ba9-8BE8-aa9EB678FA02}
  • HKLMSYSTEMCurrentControlSetServicesAdbUpdHKEY_CURRENT_USERSoftwareSysinternals AntivirusHKEY_CLASSES_ROOTCLSID{149256D5-E103-4523-BB43-2CFB066839D6}
  • HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{149256D5-E103-4523-BB43-2CFB066839D6}
  • HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesAdbUpdHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "novavapp"
  • HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "novavappr"

Remove Sysinternals Antivirus Directories:

  • %UserProfile%Start MenuProgramsSysinternals Antivirus or %UserProfile%Start MenuProgramsSysinternals Antivirus
  • c:Program Filesscdata

Conclusion

It is not recommended for inexperienced users to try and manually remove Sysinternals Antivirus, as any wrong move on your part could damage your system permanently. Unless you are an experienced computer user, the best way to remove Sysinternals Antivirus is to use a web-based virus scanning/cleaning service such as www.pcninja.com or legitimate antivirus software such as Spyware Doctor with Antivirus. This will ensure safe and efficient Sysinternals Antivirus removal.

Related Article Keywords: Sysinternals Antivirus, Remove Sysinternals Antivirus, Sysinternals Antivirus Removal, How to Remove Sysinternals Antivirus, Delete Sysinternals Antivirus

VN:F [1.9.10_1130]
Rating: 0.0/10 (0 votes cast)
VN:F [1.9.10_1130]
Rating: 0 (from 0 votes)
  • technical admin

    What software did you purchase?

    I would recommend you take advantage of free support from the maker of the product that you purchased.

    If it was the SDA client then run a FUll scan in safe mode after you have ensured the product is updated. In our testings this client did fully work for us.

    Report back if it does not work.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    Not working after I have pressed fix it and purchased software I need help

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
RemoveVirus.org cannot be held liable for any damages that may occur from using our community virus removal guides. Viruses cause damage and unless you know what you are doing you may loose your data. We strongly suggest you backup your data before you attempt to remove any virus. Each product or service is a trademark of their respective company. We do make a commission off of each product we recommend. This is how removevirus.org is able to keep writing our virus removal guides. All Free based antivirus scanners recommended on this site are limited. This means they may not be fully functional and limited in use. A free trial scan allows you to see if that security client can pick up the virus you are infected with.