ExpertAntivirus Manual Removal: ExpertAntivirus Removal Instructions

ExpertAntivirus Manual Removal Instructions

WARNING:
This ExpertAntivirus manual removal process requires good computer skills, manipulations with Windows registry may cause system crash.
Don’t forget to make system and registry backup before this operations.
We cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. We decline any responsabilaty, Use this manual removal at your own risk.

We highly recommend you to download our Recommended Automatic Spyware Remover.

To manually remove ExpertAntivirus, follow the steps below:

1. Find and Remove the following ExpertAntivirus Processes:

ExpertAntivirus.exe

How to Stop malicious Processes

2. Find and Remove the following ExpertAntivirus files and folders:

activex.db
blacklist.db
cookies.db
DbgHelp.Dll
ExpertAntivirus v4.1 Un-Installer.lnk
ExpertAntivirus v4.1 Website.lnk
ExpertAntivirus v4.1.lnk
ExpertAntivirus.url
ext32inc.dll
extension.dll
filesNames.db
hosts.db
knownLocations.db
Languages\English.ini
Logs\shield_activity-05012007-114307.log
md5.db
msvcp71.dll
msvcr71.dll
plugin.dll
\ExpertAntivirus\Plugins\DesktopManager\DesktopManager.dll
\ExpertAntivirus\Plugins\DesktopManager\Languages\English.ini
\ExpertAntivirus\Plugins\DesktopManager\Languages\Spanish.ini
\ExpertAntivirus\Plugins\StartupEditor\Languages\English.ini
\ExpertAntivirus\Plugins\StartupEditor\Languages\Spanish.ini
\ExpertAntivirus\Plugins\StartupEditor\StartupEditor.dll
registry.db
regsvr32.exe
sdebug.log
settings.ini
SpamBlocker.dll
spywareinfo.db
tips.txt
uninst.exe
wincom137.dll

How to find and delete harmful files

3. Find and Remove the following ExpertAntivirus files and folders:

HKEY_LOCAL_MACHINE\SOFTWARE\ExpertAntivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ExpertAntivirus.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ExpertAntivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run\ExpertAntivirus
HKEY_CLASSES_ROOT\ad-protect.server
HKEY_CLASSES_ROOT\ad-protect.server.1
HKEY_CLASSES_ROOT\ad-protect.server.1\clsid
HKEY_CLASSES_ROOT\ad-protect.server\clsid
HKEY_CLASSES_ROOT\ad-protect.server\curver
HKEY_CLASSES_ROOT\appid\{9da1990b-9bca-4c80-aefb-11a40fa849f9}
HKEY_CLASSES_ROOT\appid\{c628512d-a058-4bd4-b47b-b036f45fa02b}
HKEY_CLASSES_ROOT\appid\ad-protect.exe
HKEY_CLASSES_ROOT\appid\spamdet.dll
HKEY_CLASSES_ROOT\clsid\{16dd131d-c09f-4f83-a1e7-a2cf506ea27c}
HKEY_CLASSES_ROOT\clsid\{16dd131d-c09f-4f83-a1e7-a2cf506ea27c}\inprocserver32
HKEY_CLASSES_ROOT\clsid\{16dd131d-c09f-4f83-a1e7-a2cf506ea27c}\inprocserver32 threadingmodel
HKEY_CLASSES_ROOT\clsid\{16dd131d-c09f-4f83-a1e7-a2cf506ea27c}\progid
HKEY_CLASSES_ROOT\clsid\{16dd131d-c09f-4f83-a1e7-a2cf506ea27c}\programmable
HKEY_CLASSES_ROOT\clsid\{16dd131d-c09f-4f83-a1e7-a2cf506ea27c}\typelib
HKEY_CLASSES_ROOT\clsid\{16dd131d-c09f-4f83-a1e7-a2cf506ea27c}\versionindependentprogid
HKEY_CLASSES_ROOT\clsid\{69ebf0db-f6b5-4479-8352-aa632f522d34}
HKEY_CLASSES_ROOT\clsid\{69ebf0db-f6b5-4479-8352-aa632f522d34} appid
HKEY_CLASSES_ROOT\clsid\{69ebf0db-f6b5-4479-8352-aa632f522d34}\inprocserver32
HKEY_CLASSES_ROOT\clsid\{69ebf0db-f6b5-4479-8352-aa632f522d34}\inprocserver32 threadingmodel
HKEY_CLASSES_ROOT\clsid\{69ebf0db-f6b5-4479-8352-aa632f522d34}\progid
HKEY_CLASSES_ROOT\clsid\{69ebf0db-f6b5-4479-8352-aa632f522d34}\typelib
HKEY_CLASSES_ROOT\clsid\{69ebf0db-f6b5-4479-8352-aa632f522d34}\versionindependentprogid
HKEY_CLASSES_ROOT\clsid\{7c1530bd-16b0-41a9-b428-17ee8cbd3e06}
HKEY_CLASSES_ROOT\clsid\{7c1530bd-16b0-41a9-b428-17ee8cbd3e06}\inprocserver32
HKEY_CLASSES_ROOT\clsid\{7c1530bd-16b0-41a9-b428-17ee8cbd3e06}\inprocserver32 threadingmodel
HKEY_CLASSES_ROOT\clsid\{9ec61371-c3b9-fcc1-ee6f-2e4e8d12dffc}
HKEY_CLASSES_ROOT\clsid\{9ec61371-c3b9-fcc1-ee6f-2e4e8d12dffc}\dnfbnodurd
HKEY_CLASSES_ROOT\clsid\{9ec61371-c3b9-fcc1-ee6f-2e4e8d12dffc}\egfzaihulvy
HKEY_CLASSES_ROOT\clsid\{9ec61371-c3b9-fcc1-ee6f-2e4e8d12dffc}\inprocserver32
HKEY_CLASSES_ROOT\clsid\{9ec61371-c3b9-fcc1-ee6f-2e4e8d12dffc}\inprocserver32 threadingmodel
HKEY_CLASSES_ROOT\clsid\{9ec61371-c3b9-fcc1-ee6f-2e4e8d12dffc}\ivlpksrbphl
HKEY_CLASSES_ROOT\clsid\{9ec61371-c3b9-fcc1-ee6f-2e4e8d12dffc}\kdtpziaxhqfxr
HKEY_CLASSES_ROOT\clsid\{9ec61371-c3b9-fcc1-ee6f-2e4e8d12dffc}\lqjnfgzf
HKEY_CLASSES_ROOT\clsid\{9ec61371-c3b9-fcc1-ee6f-2e4e8d12dffc}\nxqqbovfiy
HKEY_CLASSES_ROOT\clsid\{9ec61371-c3b9-fcc1-ee6f-2e4e8d12dffc}\okdhfuocc
HKEY_CLASSES_ROOT\clsid\{9ec61371-c3b9-fcc1-ee6f-2e4e8d12dffc}\tbdzrcaryk
HKEY_CLASSES_ROOT\clsid\{d7abe914-b8cf-4602-9145-6bdaaeda21aa}
HKEY_CLASSES_ROOT\clsid\{d7abe914-b8cf-4602-9145-6bdaaeda21aa}\localserver32
HKEY_CLASSES_ROOT\clsid\{d7abe914-b8cf-4602-9145-6bdaaeda21aa}\progid
HKEY_CLASSES_ROOT\clsid\{d7abe914-b8cf-4602-9145-6bdaaeda21aa}\programmable
HKEY_CLASSES_ROOT\clsid\{d7abe914-b8cf-4602-9145-6bdaaeda21aa}\typelib
HKEY_CLASSES_ROOT\clsid\{d7abe914-b8cf-4602-9145-6bdaaeda21aa}\versionindependentprogid
HKEY_CLASSES_ROOT\expertantivirus.addin
HKEY_CLASSES_ROOT\expertantivirus.addin.1
HKEY_CLASSES_ROOT\expertantivirus.addin.1\clsid
HKEY_CLASSES_ROOT\expertantivirus.addin\clsid
HKEY_CLASSES_ROOT\expertantivirus.addin\curver
HKEY_CLASSES_ROOT\interface\{214345b8-bb69-498d-a168-29f58f15d806}
HKEY_CLASSES_ROOT\interface\{214345b8-bb69-498d-a168-29f58f15d806}\proxystubclsid
HKEY_CLASSES_ROOT\interface\{214345b8-bb69-498d-a168-29f58f15d806}\proxystubclsid32
HKEY_CLASSES_ROOT\interface\{214345b8-bb69-498d-a168-29f58f15d806}\typelib
HKEY_CLASSES_ROOT\interface\{3e67e9dc-7294-44c3-bc99-ea6e29e74076}
HKEY_CLASSES_ROOT\interface\{3e67e9dc-7294-44c3-bc99-ea6e29e74076}\nummethods
HKEY_CLASSES_ROOT\interface\{3e67e9dc-7294-44c3-bc99-ea6e29e74076}\proxystubclsid32
HKEY_CLASSES_ROOT\interface\{7c1530bd-16b0-41a9-b428-17ee8cbd3e06}
HKEY_CLASSES_ROOT\interface\{7c1530bd-16b0-41a9-b428-17ee8cbd3e06}\nummethods
HKEY_CLASSES_ROOT\interface\{7c1530bd-16b0-41a9-b428-17ee8cbd3e06}\proxystubclsid32
HKEY_CLASSES_ROOT\interface\{d59b2dd5-0609-4bdc-ab47-a9a28abc482a}
HKEY_CLASSES_ROOT\interface\{d59b2dd5-0609-4bdc-ab47-a9a28abc482a}\nummethods
HKEY_CLASSES_ROOT\interface\{d59b2dd5-0609-4bdc-ab47-a9a28abc482a}\proxystubclsid32
HKEY_CLASSES_ROOT\interface\{f82fd7d4-2ec8-40b3-a141-de051c98dce9}
HKEY_CLASSES_ROOT\interface\{f82fd7d4-2ec8-40b3-a141-de051c98dce9}\proxystubclsid
HKEY_CLASSES_ROOT\interface\{f82fd7d4-2ec8-40b3-a141-de051c98dce9}\proxystubclsid32
HKEY_CLASSES_ROOT\interface\{f82fd7d4-2ec8-40b3-a141-de051c98dce9}\typelib
HKEY_CLASSES_ROOT\spamdet.spamdetector
HKEY_CLASSES_ROOT\spamdet.spamdetector.1
HKEY_CLASSES_ROOT\spamdet.spamdetector.1\clsid
HKEY_CLASSES_ROOT\spamdet.spamdetector\clsid
HKEY_CLASSES_ROOT\spamdet.spamdetector\curver
HKEY_CLASSES_ROOT\typelib\{b60f5afa-edd2-417d-a438-57f3ebd9e639}
HKEY_CLASSES_ROOT\typelib\{b60f5afa-edd2-417d-a438-57f3ebd9e639}\1.0
HKEY_CLASSES_ROOT\typelib\{b60f5afa-edd2-417d-a438-57f3ebd9e639}\1.0\0
HKEY_CLASSES_ROOT\typelib\{b60f5afa-edd2-417d-a438-57f3ebd9e639}\1.0\0\win32
HKEY_CLASSES_ROOT\typelib\{b60f5afa-edd2-417d-a438-57f3ebd9e639}\1.0\flags
HKEY_CLASSES_ROOT\typelib\{b60f5afa-edd2-417d-a438-57f3ebd9e639}\1.0\helpdir
HKEY_CLASSES_ROOT\typelib\{dfcda823-80c5-4f55-b328-7efd4afbd9a0}
HKEY_CLASSES_ROOT\typelib\{dfcda823-80c5-4f55-b328-7efd4afbd9a0}\1.0
HKEY_CLASSES_ROOT\typelib\{dfcda823-80c5-4f55-b328-7efd4afbd9a0}\1.0\0
HKEY_CLASSES_ROOT\typelib\{dfcda823-80c5-4f55-b328-7efd4afbd9a0}\1.0\0\win32
HKEY_CLASSES_ROOT\typelib\{dfcda823-80c5-4f55-b328-7efd4afbd9a0}\1.0\flags
HKEY_CLASSES_ROOT\typelib\{dfcda823-80c5-4f55-b328-7efd4afbd9a0}\1.0\helpdir

How to find and remove malicious Registry entries

Recommendation:

Wrong manual removing process can cause irreparable and serious damage to your computer operating system. You may need the use of a powerful anti-spyware utility such as our Recommended Automatic Spyware Remover to get rid of ExpertAntivirus, to completely clean your computer of any invasive threat and to keep it protected from future spyware infections.

Spread the Word

ExpertAntivirus Manual Removal

ExpertAntivirus Manual Removal Instructions

Recommendation:

Stay Up To Date