ContraVirus

Quick ContraVirus Removal

What Is ContraVirus?

ContraVirus is a new breed of Trojan that is infecting individual computers and computer networks from every corner of the world. Its robust software architecture and known sagacity to face even the most hostile conditions have made it extremely dangerous and hazardous for the entire network of computers. ContraVirus is a unique variant of SmitFraud, a rogue application of notorious order! ContraVirus can infect any type of computers irrespective of their security status or the type of operating systems; in fact, ContraVirus can affect almost every type of operating systems including MS operating systems, Linux and Mac OS. ContraVirus may launch all by itself on Windows OS startup, and may cause an excessive number of popup ads that become too difficult to close. ContraVirus will also show blatantly false security alerts to attempt to frighten you into downloading and purchasing the “full-version” of the software for a hefty price of $39.95. ContraVirus is almost similar to VirusBlast, SpySheriff, and MySpyProtector. The host web site www.Contra-Virus.com belongs to Estdomains, Inc., who is also the author and owner responsible for another rogue anti-spyware, AntiVermins.

Consider yourself lucky and fortunate, if your computer system is under your own control and not under ContraVirus’! If you find that your network is under attack from ContraVirus, you will then need to use a good and practical solution to eradicate and prevent this Trojan from completely ruining your computer system. As soon as the infection occurs and when you notice its first visible symptom, just stay calm and do not get excited or unduly worried. Many people get scared to see those flooding pop-ups appearing on their desktop and decide to visit the host web site to purchase the questionable software; unfortunately, they will also download the mean Trojan without their knowledge.

If you want to protect your computer from ContraVirus infection, then the best possible solution is to immediately detect, identify and remove all ContraVirus processes, functions, registry keys, DLLs, and other hazardous ContraVirus related files from your PC.

Removing ContraVirus

Automatic Removal

Follow these steps to remove ContraVirus using XoftSpySE:

1. Download XoftSpySE
2. Click Start > Run. Type "cleanmgr" & hit OK to run disk cleanup.
3. Run XoftSpySE and remove all infections.
4. Reboot your PC.
5. Run XoftSpySE again to verify.
6. If the problem persists then restart your PC in Safe Mode and run XoftSpySE again. To do this, while the computer is rebooting press F8 button repeatedly to open the dialog box. When the boot dialog appears on the screen, use the keyboard arrow to the “Safe Mode” button and press “Enter.” Then run the ParetoLogic XoftSpySE again to remove traces of ContraVirus.

P.S. XoftSpySE was updated on 19th June 2008 (DB v298) to remove the latest variants of ContraVirus.

Manual Removal Procedure

Tip: There are some registry entries and system files in your hard disc that points to the presence of ContraVirus adware. These entries are as follows:

• C:\Program Files\ContraVirus\secieaddin.dll
• C:\Program Files\ContraVirus\ToolBand.dll
• C:\Program Files\ContraVirus\ContraVirus.exe/s

Manual removal involves using the Registry Editor to change, delete or modifying a number of registry values and settings. Remove these ContraVirus processes:
ContraVirus.exe
ContraVirus_Installer[1].exe
ToolBarNotifier.exe
XPuupdate.exe
1759134.exe
AppID\ToolBarNotifier.EXE
Microsoft\Windows\CurrentVersion\App Paths\ContraVirus.exe
C:\Program Files\ContraVirus\uninst.exe
C:\Program Files\ContraVirus\ToolBarNotifier.exe

Delete these ContraVirus DLLs:
C:\Program Files\ContraVirus\cvantispam.dll
C:\Program Files\ContraVirus\DbgHelp.Dll
C:\Program Files\ContraVirus\extension.dll
C:\Program Files\ContraVirus\msvcp71.dll
C:\Program Files\ContraVirus\secieaddin.dll
C:\Program Files\ContraVirus\msvcr71.dll
C:\Program Files\ContraVirus\plugin.dll
C:\Program Files\ContraVirus\Plugins\DesktopManager\DesktopManager.dll
C:\Program Files\ContraVirus\ToolBarNotifierPS.dll
C:\Program Files\ContraVirus\ToolBand.dll
C:\Program Files\ContraVirus\Plugins\StartupEditor\StartupEditor.dll
adpiemonitor.dll
ADPNoSpam.dll
ToolBand.dll
ToolBarNotifierPS.dll

Remove these ContraVirus registry values:
KEY_LOCAL_MACHINE\SOFTWARE\ContraVirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|ContraVirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ContraVirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ContraVirus.exe
2D8C4BF1-05FB-44D2-B6A1-CE7D740FC755
SOFTWARE\Microsoft\Internet Explorer\Toolbar\EA038DDD-0FE0-41f5-BA60-FC3660529E71
AppID\6B677F1F-F86C-4757-BF24-7D865EF20639
1BE8C6A5-A75F-4e33-89C3-18CC58A0B952
61877300-54DB-4746-BA42-03E03A2B269C
99A753C6-E429-46BD-989E-DD4A21CD059D
BCDB97EE-2C5B-4F69-861A-02ABEF4D94E5
63321A5C-D8FE-432C-8D2F-61C0FC264320
F51BC478-D997-4C56-988D-79D9EEAAD1EC
F82FD7D4-2EC8-40B3-A141-DE051C98DCE9
FD4DCB8B-C33A-4E70-A351-6FAB7E1071A4
D7ABE914-B8CF-4602-9145-6BDAAEDA21AA
ToolBarNotifier.Notifier
ToolBarNotifier.Notifier.1
D2C1986A-FBEC-4472-AABF-6D42F08DBC8E
2C02E5FC-7FE3-4122-911F-829314FE9BBC
32BD20FD-41FD-47FB-9BC9-28DCBD7D55D7
6B677F1F-F86C-4757-BF24-7D865EF20639 ContraVirus

Detect and Remove these ContraVirus files:
ContraVirus
ContraVirus 2.0 Website.lnk
Uninstall ContraVirus.lnk
ContraVirus 2.0.lnk
C:\Documents and Settings\Shannon\Start Menu\Programs\ContraVirus\ContraVirus 2.0 Website.lnk
C:\Documents and Settings\Shannon\Start Menu\Programs\ContraVirus\ContraVirus 2.0.lnk
C:\Documents and Settings\Shannon\Start Menu\Programs\ContraVirus\Uninstall ContraVirus.lnk
C:\Program Files\ContraVirus\registry.db
C:\Program Files\ContraVirus\filesNames.db
C:\Program Files\ContraVirus\hosts.db
C:\Program Files\ContraVirus\spywareinfo.db
C:\Program Files\ContraVirus\knownLocations.db
C:\Program Files\ContraVirus\md5.db
C:\Program Files\ContraVirus\activex.db
C:\Program Files\ContraVirus\cookies.db
C:\Program Files\ContraVirus\blacklist.db
C:\Program Files\ContraVirus\config.ini
C:\Program Files\ContraVirus\Languages\English.ini
C:\Program Files\ContraVirus\Languages\Spanish.ini
C:\Program Files\ContraVirus\Plugins\DesktopManager\Languages\English.ini
C:\Program Files\ContraVirus\Plugins\DesktopManager\Languages\Spanish.ini
C:\Program Files\ContraVirus\Plugins\StartupEditor\Languages\Spanish.ini
C:\Program Files\ContraVirus\Plugins\StartupEditor\Languages\English.ini
C:\Program Files\ContraVirus\Logs\activity-05262007-143712.log
C:\Program Files\ContraVirus\ContraVirus.chm
C:\Program Files\ContraVirus\ContraVirus.url
C:\Program Files\ContraVirus\sdebug.log
C:\Program Files\ContraVirus\tips.txt

Get Rid of these ContraVirus folders:
C:\Program Files\ContraVirus
C:\Program Files\ContraVirus\Logs
C:\Program Files\ContraVirus\Plugins
C:\Program Files\ContraVirus\Quarantine
C:\Program Files\ContraVirus\Plugins\DesktopManager
C:\Program Files\ContraVirus\Plugins\StartupEditor
C:\Program Files\ContraVirus\Plugins\DesktopManager\Languages
C:\Program Files\ContraVirus\Plugins\StartupEditor\Languages
C:\Documents and Settings\Shannon\Start Menu\Programs\ContraVirus
C:\Program Files\ContraVirus\Languages