Removal Tool: Remove Fake Antivirus. (Download it here.)
Removal Guide
Kill Process
(How to kill a process effectively?)
av.exe
Delete Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
HKEY_CLASSES_ROOT\secfile\shell\open\command
HKEY_CLASSES_ROOT\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
Remove Folders and Files
%Documents and Settings%\[UserName]\Application Data\WRblt8464P
%Documents and Settings%\[UserName]\Application Data\av.exe
Removal Guide
Kill Process
(How to kill a process effectively?)
av.exe
Delete Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
HKEY_CLASSES_ROOT\secfile\shell\open\command
HKEY_CLASSES_ROOT\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
Remove Folders and Files
%Documents and Settings%\[UserName]\Application Data\WRblt8464P
%Documents and Settings%\[UserName]\Application Data\av.exe