Title: Red Cross Antivirus

Type: Rogue Antispyware

Remove Red Cross Antivirus. Removal instructions

Also known as: RedCross Antivirus, RedCrossAntivirus

Severity scale:

(72 / 100)

Red Cross Antivirus is a rogue antivirus program that reports false system security threats to make you think that your computer is infected. Recently, this rogue program is being distributed through the use of the fake Microsoft Security Essentials Alert Trojan. Red Cross Antivirus is a typical rogue program just like Peak Protection 2010, Pest Detector 4.1, Major Defense Kit or AntiSpy Safeguard. Once installed, it will pretend to scan your computer and after that it will list numerous infections that supposedly can delete your important files or steal your sensitive information. Don't worry, the scan results are false. You can safely ignore them. This also applies for fake RedCross Antivirus security warnings and pop-ups. Some of those fake alerts will state that your computer is under attack from a remote computer and that the RedCrossAntivirus has blocked a remote login attempt to your computer. Please don't purchase this bogus program. Instead, please use our removal instructions below to remove Red Cross Antivirus from your computer either manually or with an automatic removal tool.

While Red Cross Antivirus is running, it will also block legitimate programs and security related websites. It will probably block Task Manager and Registry Editor too. Also note that you should use system restore to remove this virus. Of course, it might be an option, but usually rogue programs infect system restore points as well. If you find that your computer is infected with Red Cross Antivirus malware please uninstall it from the system upon detection. If you have already purchased the rogue program then please contact your credit card company and dispute the charges. We strongly recommend you to use an automatic removal tool to remove the rogue program and any related malware from the computer.

Related files: antispy.exe, defender.exe, tmp.exe, kjkkklklj.bat

Red Cross Antivirus properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Red Cross Antivirus snapshot:

Automatic Red Cross Antivirus removal:

remover for Red Cross Antivirus

SpyHunter is recommended remover to uninstall Red Cross Antivirus. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of Red Cross Antivirus and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Red Cross Antivirus using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

Tested and Confirmed! STOPzilla removes Red Cross Antivirus (2010-08-23 06:37:20)

Malwarebytes Anti Malware

download | review

Tested and Confirmed! Malwarebytes Anti Malware removes Red Cross Antivirus (2010-08-23 06:37:20)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Red Cross Antivirus (2011-07-11 15:44:24)

XoftSpySE Anti Spyware

download | review

Red Cross Antivirus manual removal:

FORUM:
Discuss Red Cross Antivirus in
spyware removal forum

Kill processes:
antispy.exe defender.exe tmp.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\PAV
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnPostRedirect" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "tmp"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "SelfdelNT"
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%UserProfile%\Application Data\antispy.exe"

HELP:
how to remove registry entries

Delete files:
%UserProfile%\\Application Data\\antispy.exe %UserProfile%\\Application Data\\defender.exe %UserProfile%\\Application Data\\tmp.exe %UserProfile%\\Local Settings\\Temp\\kjkkklklj.bat

HELP:
how to remove harmful files

Delete directories:
%UserProfile%\Application Data\PAV\

Information added: 2010-08-23 06:37:20
Information updated: 2011-07-11 13:07:09

Additional resources related to Red Cross Antivirus:

Attention: If you know or you have a website or page about Red Cross Antivirus removal, feel free to add a link to this list: add url

more resources

<Guest>

i want to remove thered cross antivirus off my computer thank you

Reply »

2010 08 27

CHRIS

FOR THOSE OF YOU WITH THIS RED CROSS ANTIVIRUS. THOUGH REMOVAL IS POSSIBLE IT WOULD BE BETTER FOR YOU TO FORMAT THE HARD DRIVE AND REINSTALL THE SYSTEM TO FACTORY ORIGINAL SETTINGS. THINGS I HAVE NOTICES IS THAT IN REGULAR OR SAFEMODE THIS ROGUE PROGRAM DISABLES REGISTRY EDITOR AND TASK MANAGER. IT COMES UP AND WONT LET YOU GET PAST ITS MAIN SCREEN. YOU HAVE TO TAKE THE HARD DRIVE OUT, HOOK IT UP TO ANOTHER COMPUTER AS A SLAVE DRIVE AND THEN RUN SCANS ON THAT DRIVE TO REMOVE ANYTHING THE SCAN FINDS. THEN YOU HAVE TO USE rkill TO STOP THE PROCESSES THAT ITS RUNNING TO REGAIN ACCESS TO TASK MANAGER AND REGISTRY EDITOR. THE POINT IS, IT IS BETTER AND LESS TIME CONSUMING TO JUST WIPE THE DRIVE CLEAN AND START OVER.

Reply »

2011 07 11

Post Comment:

Attention: Use this form only if you have additional information about Red Cross Antivirus parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.