Remove VirusRescue

VirusRescue Description

VirusRescue, also known as VirusBlast, is a rogue anti-spyware program that displays
false security messages to lure the user into purchasing the VirusRescue software. VirusRescue alleges to remove spyware from the user's computer, but instead is the one distributing the malware.

The VirusRescue Trojan pops up a message on the user's system tray, which says the compromised computer is infected with dangerous spyware parasites and asks the user to download and install the VirusRescue removal program. Once the user clicks on the message, the VirusRescue trojan opens a purchase page distributing the VirusRescue software. VirusRescue may also attempt to redirect the user's web browser to other malicious spyware websites.

VirusRescue is a variant of other rogue anti-spyware programs such as SpywareQuake, SpySheriff, SpyFalcon, and SpyHeal.

Remove VirusRescue

Stop the following VirusRescue processes:
virusrescue.exe
vrsvc.exe
vr_setup_3_0.exe
vr_setup_3_0[1].exe

Remove the following VirusRescue registry keys:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunVirusRescue
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesvrsvc
AppIDCF79DAB6-0AFE-4678-856D-44574D91915C
MicrosoftWindowsCurrentVersionApp Pathsvirusrescue.exe
CF79DAB6-0AFE-4678-856D-44574D91915C
679B00B5-0783-4DE4-A478-7227FDD50825
C7DF0578-D732-4BFB-A65B-89C1CCEA01CC
VirusRescue

Unregister the following VirusRescue DLL files:
asc4.dll
kernel40.dll
pl.dll
stopapi4.dll
vrext.dll

Delete the following VirusRescue files:
virusrescue.exe
vrsvc.exe
vr_setup_3_0.exe
asc4.dll
kernel40.dll
pl.dll
stopapi4.dll
vrext.dll
config.ini
VirusRescue
vr_setup_3_0[1].exe
VirusRescue v3.0.1.lnk
VirusRescue v3.0.1 Un-Installer.lnk
VirusRescue v3.0.1 Website.lnk
VirusRescue.url
VirusRescue v3.0.3.lnk
VirusRescue v3.0.3 Un-Installer.lnk
VirusRescue v3.0.3 Website.lnk

Other Spyware

0-9