Remove Riversoft. Description and removal instructions

 
Title: Riversoft

Type: Adware
Severity scale:Riversoft severity is 29  (29 / 100)
 
Riversoft is an adware program that displays commercial pop-up advertisements while you surf the Internet. The parasite doesn't spread and must be manually installed. It may arrive with some ad-supported software. Once executed, Riversoft creates a directory, drops its files there and modifies the Windows registry in order to register itself as an Internet Explorer add-on.


Riversoft properties:
• Shows commercial adverts
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Riversoft removal:

remover for Riversoft

Riversoft manual removal:

Kill processes:
x0ff0n.exe
Delete registry values:
HKEY_CLASSES_ROOT\csa.accel
HKEY_CLASSES_ROOT\csa.accel.1
HKEY_CLASSES_ROOT\x0ff.Xbrowse
HKEY_CLASSES_ROOT\x0ff.Xbrowse.1
HKEY_CLASSES_ROOT\x2ff.Xbrowse
HKEY_CLASSES_ROOT\x2ff.Xbrowse.1
HKEY_CLASSES_ROOT\AppID\csa.DLL
HKEY_CLASSES_ROOT\AppID\x0ff.DLL
HKEY_CLASSES_ROOT\AppID\x2ff.DLL
HKEY_CLASSES_ROOT\AppID\{CCB76C32-C755-4859-B195-73DB23D55AC4}
HKEY_CLASSES_ROOT\AppID\{D137514C-FFFA-492A-933B-D29145B7A468}
HKEY_CLASSES_ROOT\AppID\{D1BB73A7-5D35-48C9-94C0-D0BD624B0F5D}
HKEY_CLASSES_ROOT\CLSID\{ABD45F35-2E4C-44C0-A075-6EF1DE75398E}
HKEY_CLASSES_ROOT\CLSID\{AC109D01-32D6-4EB5-8300-D3C5EBAC7C83}
HKEY_CLASSES_ROOT\CLSID\{D319662B-D5BF-4538-ADF3-8D3E36362608}
HKEY_CLASSES_ROOT\Interface\{248D0792-644C-403B-8525-AA2877603204}
HKEY_CLASSES_ROOT\Interface\{B0C5E55E-53DF-4966-90A0-912D34CB64A7}
HKEY_CLASSES_ROOT\Interface\{F1EA6966-79FB-47FA-AB97-8ED1A8D89DE4}
HKEY_CLASSES_ROOT\TypeLib\{1D1A0231-322A-4024-A282-697bF547970E}
HKEY_CLASSES_ROOT\TypeLib\{F81F7F91-8BA8-47DD-80FE-A262A4C8A985}
HKEY_CLASSES_ROOT\TypeLib\{FEC81DDE-1320-4027-8D1D-72753D27B4F3}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AC109D01-32D6-4EB5-8300-D3C5EBAC7C83}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper {D319662B-D5BF-4538-ADF3-8D3E36362608}
Delete files:
x0ff0n.exe, x0ff.dll, x2ff.dll, csa.dll, x2ff.inf, x0ff.cab
Delete directories:
C:\Documents and Settings\All Users\Application Data\x0ff

Other programs to remove Riversoft:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 29/07/05
Information updated: 29/07/05

Additional resources related to Riversoft:

Attention: If you know or you have a website or page about Riversoft removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Riversoft parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: