Severity scale  
  (72/100)

Red Cross Antivirus. How to Remove? (Uninstall Guide)

removal by - -   Also known as RedCross Antivirus, RedCrossAntivirus | Type: Rogue Antispyware
12
Red Cross Antivirus is a rogue antivirus program that reports false system security threats to make you think that your computer is infected. Recently, this rogue program is being distributed through the use of the fake Microsoft Security Essentials Alert Trojan. Red Cross Antivirus is a typical rogue program just like Peak Protection 2010, Pest Detector 4.1, Major Defense Kit or AntiSpy Safeguard. Once installed, it will pretend to scan your computer and after that it will list numerous infections that supposedly can delete your important files or steal your sensitive information. Don't worry, the scan results are false. You can safely ignore them. This also applies for fake RedCross Antivirus security warnings and pop-ups. Some of those fake alerts will state that your computer is under attack from a remote computer and that the RedCrossAntivirus has blocked a remote login attempt to your computer. Please don't purchase this bogus program. Instead, please use our removal instructions below to remove Red Cross Antivirus from your computer either manually or with an automatic removal tool.

While Red Cross Antivirus is running, it will also block legitimate programs and security related websites. It will probably block Task Manager and Registry Editor too. Also note that you should use system restore to remove this virus. Of course, it might be an option, but usually rogue programs infect system restore points as well. If you find that your computer is infected with Red Cross Antivirus malware please uninstall it from the system upon detection. If you have already purchased the rogue program then please contact your credit card company and dispute the charges. We strongly recommend you to use an automatic removal tool to remove the rogue program and any related malware from the computer. Related files: tmp.exe

Red Cross Antivirus properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
Reimage - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Red Cross Antivirus. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall Red Cross Antivirus. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
STOPzilla
Tested and Confirmed! STOPzilla removes Red Cross Antivirus (2010-08-23 06:37:20)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Red Cross Antivirus (2010-08-23 06:37:20)
Plumbytes
We are testing Plumbytes's efficiency (2011-07-11 13:07)
Hitman Pro
STOPzilla
Tested and Confirmed! STOPzilla removes Red Cross Antivirus (2010-08-23 06:37:20)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Red Cross Antivirus (2010-08-23 06:37:20)
Webroot SecureAnywhere AntiVirus
Red Cross Antivirus screenshot
Red Cross Antivirus snapshot

Red Cross Antivirus manual removal

Kill processes:
antispy.exe
defender.exe
tmp.exe
Delete registry values:
HKEY_CURRENT_USER\Software\PAV
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnPostRedirect" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "tmp"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "SelfdelNT"
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%UserProfile%\Application Data\antispy.exe"
Delete files:
%UserProfile%\\Application Data\\antispy.exe
%UserProfile%\\Application Data\\defender.exe
%UserProfile%\\Application Data\\tmp.exe
%UserProfile%\\Local Settings\\Temp\\kjkkklklj.bat
Delete directories:
%UserProfile%\Application Data\PAV\

Information updated:

Comments on Red Cross Antivirus

0
0
CHRIS
FOR THOSE OF YOU WITH THIS RED CROSS ANTIVIRUS. THOUGH REMOVAL IS POSSIBLE IT WOULD BE BETTER FOR YOU TO FORMAT THE HARD DRIVE AND REINSTALL THE SYSTEM TO FACTORY ORIGINAL SETTINGS. THINGS I HAVE NOTICES IS THAT IN REGULAR OR SAFEMODE THIS ROGUE PROGRAM DISABLES REGISTRY EDITOR AND TASK MANAGER. IT COMES UP AND WONT LET YOU GET PAST ITS MAIN SCREEN. YOU HAVE TO TAKE THE HARD DRIVE OUT, HOOK IT UP TO ANOTHER COMPUTER AS A SLAVE DRIVE AND THEN RUN SCANS ON THAT DRIVE TO REMOVE ANYTHING THE SCAN FINDS. THEN YOU HAVE TO USE rkill TO STOP THE PROCESSES THAT ITS RUNNING TO REGAIN ACCESS TO TASK MANAGER AND REGISTRY EDITOR. THE POINT IS, IT IS BETTER AND LESS TIME CONSUMING TO JUST WIPE THE DRIVE CLEAN AND START OVER.
0
0
<Guest>
i want to remove thered cross antivirus off my computer thank you

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)