PC-Winlive.com Removal Guide

PC-Winlive.com Description

PC-Winlive.com is a malicious website related to the rogue antispyware program XP Antispyware 2010. PC-Winlive.com is the website you will get redirected to when the XP Antispyware 2010 infection takes over your machine. If you click on XP Antispyware 2010 ads you will be urged to purchase a licensed copy of this useless product. Refrain from doing what PC-Winlive.com recommends and remove it using a legitimate antispyware program.

PC-Winlive.com Automatic Detection (Recommended)

Is your PC infected with PC-Winlive.com? To safely & quickly detect PC-Winlive.com, we highly recommend you...

Download SpyHunter's* Malware Scanner.

PC-Winlive.com Manual Removal Instructions

Backup Reminder: Always be sure to back up your PC before making any changes.

Step 1 : Use Windows Task Manager to Remove PC-Winlive.com Processes

Remove the "PC-Winlive.com" processes files:

Read more on How to kill PC-Winlive.com Processes

Step 2 : Use Registry Editor to Remove PC-Winlive.com Registry Values

Locate and delete "PC-Winlive.com" registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*

Step 3 : Detect and Delete Other PC-Winlive.com Files

Remove the "PC-Winlive.com" processes files:

Read more on How to Delete Harmful Files

Site Disclaimer

Publication Date: Fri Mar 05 2010 04:32:48 EST

User Comments

There are no comments posted for this page.

RECOMMENDED

Top Parasite Threats

Recent Parasite Threats

Resources and Tools

Recent Articles

Subscribe To