March 15, 2008

How to remove Adware.Superiorads ?

Superiorads Adware removal tips...

1. Disable System Restore (Windows Me/XP)

If you are using Windows XP or Windows ME, You must disable or turn off System Restore before Virus scan because the _Restore folder is protected by default. Antivirus cannot remove virus or any malicious files inside _Restore folder. Windows prevents outside programs,including antivirus programs, from modifying System Restore. The System Restore feature is not designed to detect or scan for virus infections or virus activity.How to disable System Restore ?

2. Update computer anti virus software with latest virus definitions.

3. Backup system registry.

You must backup System registry before editing the registry because it contains information and settings for all the hardware, operating system software, most non-operating system software, users, preferences of the PC, etc. Any wrong changes will lead you to more problems.How to backup Windows Registry ?

4. Restart your system in safe-mode.

An operating system in safe mode will have reduced functionality, but the task of isolating problems is easier because many non-core components are disabled (turned off). An installation that will only boot into its safe mode typically has a major problem, such as disk corruption or the installation of poorly configured software that prevents the operating system from successfully booting into its normal operating mode.How to start your system in safe-mode ?

5. Run a full system virus scan using your updated anti virus program.

6. Delete these values and subkeys added to registry.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"spa_start" = "C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\sprt_ads.dll" DllInit"

Delete the following subkeys .

* HKEY_CURRENT_USER\Software\Microsoft\AdvRemoteDbg

* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{43FC67B6-4C25-4AFD-AE7A-9EF3E4587026}

* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4AD44D3E-7316-4251-B754-9B10EC96AF92}

* HKEY_CLASSES_ROOT\AdSlice.Slice.1

* HKEY_CLASSES_ROOT\AdSlice.Slice

* HKEY_CLASSES_ROOT\CLSID\{43FC67B6-4C25-4afd-AE7A-9EF3E4587026}

* HKEY_CLASSES_ROOT\Interface\{3EB045B6-6669-4E1A-A0A9-95A6DA3C76EA}

* HKEY_CLASSES_ROOT\Interface\{BAEBD083-D541-4883-8E15-8915B15CB7DE}

* HKEY_CLASSES_ROOT\TypeLib\{C49A1A65-4627-4F28-ABE9-E4FB2B558F05}

* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{43FC67B6-4C25-4afd-AE7A-9EF3E4587026}

* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\superiorads

Additional Information.

This adware may creates the following files, Remove these files also.

%UserProfile%\Local Settings\Temp\fupd.exe
%UserProfile%\Local Settings\Temp\gewhk1
%UserProfile%\Local Settings\Temp\s23o
%System%\sprt_ads.dll
%System%\superiorads-uninst.exe

No comments: