How to remove Adware.Renos.B
THREAT NAME
Adware.Renos.B
CLEAN INSTRUCTIONS
1. Restart the system in Safe Mode.
2. Open Windows Explorer, go the the Windows folder (C:\Windows), locate and delete the file xpupdate.
3. Go to Start > Run type regedit and press OK.
4. Locate and delete the following registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, Windows update loader
5. Restart the system and run a full system scan with BullGuard.
SYMPTOMS
1. A message appear telling you that the computer is infected with spyware.
2. Presence of the xpupdate file in the Windows folder.
DESCRIPTION
1. When it is run, it will create a copy if itself in the Windows folder, with the name xpupdate.
2. It will add itself in the registry in order to run at startup. It creates the following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, Windows update loader
3. A red icon will appear in the task bar and a message will pop up telling you that the computer is infected with spyware.
When you click the icon, it will try to launch the BraveSentry application. BraveSentry is a malicious program that issues
fake warnings in an attempt to trick you into buying it.
Author:
The BullGuard Team