How To Remove The Security Toolbar 7.1

Amit Chowdhry | Wednesday June 16, 2010 | 525 views| Add a Comment
Categorized under

This is one of the first few articles in a series of Pulse2 articles called How To Guide. If you would like to have a tech question answered, send an e-mail to info@pulse2.com.

The Security Toolbar, known as Security Toolbar 7.1 is one of the most annoying Trojans around right now. It is also known as the smitfraud Trojan and it is known to invade your privacy and attack your computer with pop up windows. To kill off the Security Toolbar 7.1, you have a few options.

Option 1. Use a specific removal software

Use the SmitFraudFix [Link]

Option 2. Use anti-virus software

Spybot Search & Destroy or AdAware. Do full scans with both of them.

Option 3. Remove it Manually

1. Press CTRL+ALT+DEL
2. Click Start Task Manager
3. Click Processes
4. End the following processes:
“tinyproxy.exe”
“isamonitor.exe”
“pmmon.exe”
“pmsngr.exe”
“isamini.exe”
“isamonitor.exe”
“pmmon.exe”
“pmsngr.exe”
“pmuninst.exe”
“iesuninst.exe”

5. After ending the processes. Do a search for the following filenames.
“Video ActiveX Access”
“Security Troubleshooting.lnk”
“Online Security Guide.lnk”
“Online Security Test.url”

6. Lastly Unregister the DLL files associated with the Trojan
a. Type cmd into the search programs and file boxes.
b.Now Type the following commands when the black DOS box pops up.

“regsvr32 /u iesplugin.dll”
“regsvr32 /u isaddon.dll”
“regsvr32 /u dxovx.dll”
“regsvr32 /u vgibz.dll”
“regsvr32 /u khtbpdl.dll”
“regsvr32 /u cfqbw.dll”
“regsvr32 /u fdpzgi.dll”
“regsvr32 /u gusur.dll”

7. Delete the Registry Keys
a. Click the Star Menu
b. Type regedit in the search programs and files box. The Windows Registry Editor will open.
c. Now locate the registry keys below and delete them. To delete it, right click on the file and click on Delete.

“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Messenger Service”
“HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}”
“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper objects\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}”
“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IExplorer Security Plug-in”
“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Explorer Secure Bar”
“HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}”
“HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5574E139-F59C-4bee-9A61-150B0D3A16C7}”
“HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EB}”
“HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6DEEE498-08CC-43F0-BCA0-DBB5A25C9501}”
“HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91}”
“HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}”

Related posts:

  1. GFI LANguard Is The Best Windows Commercial Security Scanner
  2. Kevin Rose: First Order As Digg CEO, Remove Web Toolbar and Unban Sites
  3. BMW 7 Series High Security Has Explosion Protection
  4. Microsoft Surface Used For Super Bowl Security
  5. Microsoft Willing Paying $2.50 Per Toolbar Download Through Affiliate Network


If you loved this post, "Like" us on Facebook!

This website uses IntenseDebate comments, but they are not currently loaded because either your browser doesn't support JavaScript, or they didn't load fast enough.

Copyright 2011 Pulse 2, LLC | About | Privacy Statement