Severity scale:  
  (29/100)

Riversoft. How to remove? (Uninstall guide)

removal by Jake Doevan - - | Type: Adware
12

Riversoft is an adware program that displays commercial pop-up advertisements while you surf the Internet. The parasite doesn’t spread and must be manually installed. It may arrive with some ad-supported software. Once executed, Riversoft creates a directory, drops its files there and modifies the Windows registry in order to register itself as an Internet Explorer add-on.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Riversoft you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Riversoft. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Riversoft (2005-07-29)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing Riversoft (2005-07-29)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Riversoft (2005-07-29)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing Riversoft (2005-07-29)

Riversoft manual removal:

Kill processes:
x0ff0n.exe

Delete registry values:
HKEY_CLASSES_ROOTcsa.accel

HKEY_CLASSES_ROOTcsa.accel.1

HKEY_CLASSES_ROOTx0ff.Xbrowse

HKEY_CLASSES_ROOTx0ff.Xbrowse.1

HKEY_CLASSES_ROOTx2ff.Xbrowse

HKEY_CLASSES_ROOTx2ff.Xbrowse.1

HKEY_CLASSES_ROOTAppIDcsa.DLL

HKEY_CLASSES_ROOTAppIDx0ff.DLL

HKEY_CLASSES_ROOTAppIDx2ff.DLL

HKEY_CLASSES_ROOTAppID{CCB76C32-C755-4859-B195-73DB23D55AC4}

HKEY_CLASSES_ROOTAppID{D137514C-FFFA-492A-933B-D29145B7A468}

HKEY_CLASSES_ROOTAppID{D1BB73A7-5D35-48C9-94C0-D0BD624B0F5D}

HKEY_CLASSES_ROOTCLSID{ABD45F35-2E4C-44C0-A075-6EF1DE75398E}

HKEY_CLASSES_ROOTCLSID{AC109D01-32D6-4EB5-8300-D3C5EBAC7C83}

HKEY_CLASSES_ROOTCLSID{D319662B-D5BF-4538-ADF3-8D3E36362608}

HKEY_CLASSES_ROOTInterface{248D0792-644C-403B-8525-AA2877603204}

HKEY_CLASSES_ROOTInterface{B0C5E55E-53DF-4966-90A0-912D34CB64A7}

HKEY_CLASSES_ROOTInterface{F1EA6966-79FB-47FA-AB97-8ED1A8D89DE4}

HKEY_CLASSES_ROOTTypeLib{1D1A0231-322A-4024-A282-697bF547970E}

HKEY_CLASSES_ROOTTypeLib{F81F7F91-8BA8-47DD-80FE-A262A4C8A985}

HKEY_CLASSES_ROOTTypeLib{FEC81DDE-1320-4027-8D1D-72753D27B4F3}

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{AC109D01-32D6-4EB5-8300-D3C5EBAC7C83}

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper {D319662B-D5BF-4538-ADF3-8D3E36362608}

Delete files:
x0ff0n.exe,x0ff.dll,x2ff.dll,csa.dll,x2ff.inf,x0ff.cab

Delete directories:
C:Documents and SettingsAll UsersApplication Datax0ff