Secure Most Provide you most reliable security utilities!
Home Articles File Center Privacy Contact us Links
Now Position: Home > Latest Info > Popwin
Recommended: Free Download RegistryBooster to Check for PC Errors
Popwin Description and Removal Instructions
Information added: 01/03/09 Information updated: 08/03/09
Title: Popwin AKS: Win32/Agent.BA, Virut.CF
Type: Trojan Threat Level:

Popwin Description

Popwin is a Trojan program that attempts to spread through local and removable drives. It displays advertisements and downloads potentially malicious files on to the compromised computer. It downloads from the Internet and executes arbitrary, potentially malicious files. It also changes the Internet Explorer default home page and terminates running antiviruses and security-related programs.

Download Popwin Removal Tool

Popwin Manual Removal Instructions

DISCLAIMER
www.securemost.com is NOT associated, affiliated in any way with Popwin or its creators. The information provided in this page should NOT be mistaken for or construed as an endorsement or a promotion for Popwin. The purpose of the information is to help computer or internet users to detect and remove Popwin by making use of Popwin removal tool or followinging manual removal instructions. To remove completely and maintain your computer's performance, we highly recommend the use of the automatic spyware protection tool to detect and remove Popwin infection and any other potential threats in your machine.

To remove Popwin, please follow the instructions:

  1. Terminate the processes in Task Manager:
    poptwin.exe
    rising.exe
    360EAEC0.exe
     
  2. Click Start > Run. Type REGSVR32 -u %Dll_name%. Then click OK. Replace %Dll_name% with followings:
    popwin.dll
    53B37A00.DLL
     
  3. Click Start > Run. Type REGEDIT. Then click OK. Navigate to the subkeys and delete the values:
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_15964A80
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\15964A80
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_15964A80
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\15964A80
    HKEY_CURRENT_USER\SYSTEM\CurrentControlSet
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{540D8A8B-1C3F-4E32-8132-530F6A502090}\Implemented Categories
    HKEY_CURRENT_USER\Keyboard Layout\Toggle
    HKEY_CURRENT_USER\Software\Microsoft\CTF\Assemblies
    HKEY_CURRENT_USER\Software\Microsoft\CTF\LangBar
    HKEY_CURRENT_USER\Software\Microsoft\CTF\Sapilayr
    HKEY_CURRENT_USER\Software\Microsoft\CTF\TIP
    HKEY_CURRENT_USER\Software\Microsoft\SAPI Layer
    HKEY_CURRENT_USER\Software\Microsoft\Speech
    Registry management is too hard? Download Registry Mechanic, and you will find it too easy!
     
  4. Remove the files mentioned above in Explorer if exist.

Popwin Automatic Removal

Download Popwin Removal Tool

Popwin Removal Tool can automatically remove the Worm. Even if you remove it manually, we recommend you should use Popwin Removal Tool to make sure it's completely removed from your system and will not be reinstalled by itself.

Other programs to remove Popwin

Malwarebytes' Anti-Malware

This Trojan will slow down your computer, use SpeedUpMyPC to update your PC's performance.

Last Emerging Threats


Post Comment



Enter security code:

User Comments
(If you can not see the issued comment, please enable your browser to support javascript and refresh this page.)

Download Free Scanner
What's Popular Recently
Rogue Anti-Spyware  Malwarebytes' Anti-Malware  Counpon & Discount
Perfect Defender  Badware Protector  avast! Professional Edition
Sign up for free up-to-date messages about your PC's security & privacy:
              Email
Confirm email
     Your Name   
Spotmau PowerSuite
This all-in-one suite offers you a complete solution to solve all your computer problems in an easy way. Boot up ANY desktop and laptop; Easily recover/install ALL Windows; Create, delete and format partitions on your hard disk; backup partition table; ...
Kaspersky Internet Security
Internet Security processes all incoming and outgoing data on your computer, including email, Internet traffic and network interaction, without the need for additional security applications ...
BitDefender Internet Security
10% Off BitDefender Products Site-wide. Click here! Manage the security of your home network from a single location. Hourly updates ensure that you are protected against the latest threats without pushing a button ...
FREE Spyware Scan! SpyNoMore
SpyNoMore scans, cleans and blocks spyware as well as any other good anti-spyware product, but with one big advantage, Custom Fix (patent pending). Spyware programs are growing more sophisticated by the day ...
 Anti-Keylogger  Password Pecovery
 Anti-Spam  PC Monitoring
 Anti-Spyware  Personal Firewall
 Anti-Virus  System Tools
 Online Privacy    
Copyright ©2003-2009 SecureMost.com. All other trademarks are the sole property of their respective owners.