J
Joe13 B-) 2.0
Guest
Hi
You guessed it! I'm back again with help topics, I wanna share some information about the bloody SAntivirus malware. I was a Segurazo victim 2 times, so I decided to share some information and experiences.
Q&A
What is Segurazo Antivirus (or SAntivirus)?
Segurazo Antivirus, also known as SAntivirus, is a type of Trojan virus which disguises itself as a 'well-known antivirus suite' and steals your precious data. It's also a PUP/PUA (Potentially Unwanted Program/Potentially Unwanted App). It runs fake scans and reports that your PC is completely affected with a load of malware and we need to upgrade to Pro to remove these. Well, it might be true that viruses are there only because of this PUP, but it adds fake viruses too in the list. It won't remove the malwares- it would leave it there, and will tell that those malwares had been removed.
How did it enter my PC? What does it install along with it and why does it install them?
Segurazo Antivirus usually enters when you do a torrent download, or any free download from a site that you don't know, or haven't heard of. SAntivirus remains hidden in most ads in websites, which is why we Community members post a disclaimer in our replies when there's a link which is not owned by Microsoft. It can install Chromium browser, VLC Media Player, KMPlayer, GOM Player, WebDiscover browser (it's also a known malware), Mozilla Firefox browser and other common apps which people use. It installs them because when we open those apps, they can do a background process where it can talk with its server and do risky tasks. It can also exchange your personal data.
What are the other names for SAntivirus?
Segurazo Antivirus is also installed as SAntivirus Realtime Protection Lite, Segurazo Antivirus Lite and Segurazo Antivirus Realtime Protection.
Who made SAntivirus?Segurazo Antivirus was made by the company Digital Communications.
Where is SAntivirus found in File Explorer?
SAntivirus is found in many locations. Two main locations are C:\Program Files (x86) and C:\Program Files, where it remains in the folder named 'Digital Communications'. Other locations are the folders where your personal data is found. It's rare that the stuff is found in those folders with your personal data. Another main location of SAntivirus is the Registry Editor app, which is necessary to help your Windows run.
How does SAntivirus look like?
Below is a screenshot for users to recognize Segurazo Antivirus:
--------------------------------------------------------------------------------
Removal of the idiot Segurazo Antivirus
This is probably the hardest, but it's necessary to remove this idiot before it takes care of our PC.Please note, these steps are taken from another website which helped me remove it from my PC, and the website is not owned by me in any way.
@@@@@@@@@@@@@@@@@@@@@@@@
Please note that this tutorial includes detailed steps on how to eliminate files related to SAntivirus Realtime Protection Lite and also a standard guide on how to clean your browsers and computer system from related software.
Please follow the given steps carefully for a successful removal of the potentially unwanted software. Make sure you complete ALL of the given steps!
Before you start with anything, boot your computer in safe mode. You can learn how to boot in safe mode here.
First step: Disable Network Connection and temporarily disable UAC
It is extremely important that you disable network connection before trying to remove SEGURAZO antivirus. Otherwise, you might find that it is impossible to delete certain registry remains from your computer. As suggested by Roy Dale in the comments section, changing HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current\Version\Policies\System\EnableLUA value to 0 can help you remove stubborn program’s files. Do not forget to revert the changes to this registry key after deleting SAntivirus.
TIP: The antivirus has been noticed to change its tactics and make it harder to remove it by renaming certain values from Segurazo Antivirus to SAntivirus Realtime Protection Lite. If you notice files named in such way, delete SAntivirus files, folders or values without any hesitation as well.
You can find an updated guide on deleting this fake antivirus here. Please note, this site can contain ads, so NEVER CLICK ON ANY ADS THERE, PLEASE!!
1st Part: Use Segurazo Uninstaller first
2nd Part: Clean Windows Registry from associated keys and values
TIP: The instructions are very detailed. If you are advanced computer user, here’s what you need to do in steps 1-12: User Find to discover and delete keys and folders related to the annoying program.
3rd Part: Force delete remaining files in the installation folder
That’s it! You have managed to remove Segurazo Antivirus from Windows 10. In case you didn’t succeed to eliminate additional components of spyware or malware, consider using a Windows security software to do it for you automatically.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Hope this helps.
Joe13 B-) 2.0
More...
You guessed it! I'm back again with help topics, I wanna share some information about the bloody SAntivirus malware. I was a Segurazo victim 2 times, so I decided to share some information and experiences.
Q&A
What is Segurazo Antivirus (or SAntivirus)?
Segurazo Antivirus, also known as SAntivirus, is a type of Trojan virus which disguises itself as a 'well-known antivirus suite' and steals your precious data. It's also a PUP/PUA (Potentially Unwanted Program/Potentially Unwanted App). It runs fake scans and reports that your PC is completely affected with a load of malware and we need to upgrade to Pro to remove these. Well, it might be true that viruses are there only because of this PUP, but it adds fake viruses too in the list. It won't remove the malwares- it would leave it there, and will tell that those malwares had been removed.
How did it enter my PC? What does it install along with it and why does it install them?
Segurazo Antivirus usually enters when you do a torrent download, or any free download from a site that you don't know, or haven't heard of. SAntivirus remains hidden in most ads in websites, which is why we Community members post a disclaimer in our replies when there's a link which is not owned by Microsoft. It can install Chromium browser, VLC Media Player, KMPlayer, GOM Player, WebDiscover browser (it's also a known malware), Mozilla Firefox browser and other common apps which people use. It installs them because when we open those apps, they can do a background process where it can talk with its server and do risky tasks. It can also exchange your personal data.
What are the other names for SAntivirus?
Segurazo Antivirus is also installed as SAntivirus Realtime Protection Lite, Segurazo Antivirus Lite and Segurazo Antivirus Realtime Protection.
Who made SAntivirus?Segurazo Antivirus was made by the company Digital Communications.
Where is SAntivirus found in File Explorer?
SAntivirus is found in many locations. Two main locations are C:\Program Files (x86) and C:\Program Files, where it remains in the folder named 'Digital Communications'. Other locations are the folders where your personal data is found. It's rare that the stuff is found in those folders with your personal data. Another main location of SAntivirus is the Registry Editor app, which is necessary to help your Windows run.
How does SAntivirus look like?
Below is a screenshot for users to recognize Segurazo Antivirus:
--------------------------------------------------------------------------------
Removal of the idiot Segurazo Antivirus
This is probably the hardest, but it's necessary to remove this idiot before it takes care of our PC.Please note, these steps are taken from another website which helped me remove it from my PC, and the website is not owned by me in any way.
@@@@@@@@@@@@@@@@@@@@@@@@
Please note that this tutorial includes detailed steps on how to eliminate files related to SAntivirus Realtime Protection Lite and also a standard guide on how to clean your browsers and computer system from related software.
Please follow the given steps carefully for a successful removal of the potentially unwanted software. Make sure you complete ALL of the given steps!
Before you start with anything, boot your computer in safe mode. You can learn how to boot in safe mode here.
First step: Disable Network Connection and temporarily disable UAC
It is extremely important that you disable network connection before trying to remove SEGURAZO antivirus. Otherwise, you might find that it is impossible to delete certain registry remains from your computer. As suggested by Roy Dale in the comments section, changing HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current\Version\Policies\System\EnableLUA value to 0 can help you remove stubborn program’s files. Do not forget to revert the changes to this registry key after deleting SAntivirus.
TIP: The antivirus has been noticed to change its tactics and make it harder to remove it by renaming certain values from Segurazo Antivirus to SAntivirus Realtime Protection Lite. If you notice files named in such way, delete SAntivirus files, folders or values without any hesitation as well.
You can find an updated guide on deleting this fake antivirus here. Please note, this site can contain ads, so NEVER CLICK ON ANY ADS THERE, PLEASE!!
1st Part: Use Segurazo Uninstaller first
- Open This PC and open folders in the given order:
This PC > Windows (C
> Program Files (x86) > Segurazo. - Here, find a file called SegurazoUninstaller.exe, double-click it to run it.
- Choose Remove Protection in the window that appears on the screen.
- Wait. The uninstaller will suggest restarting computer. Choose to Restart Later in the same window.
- Close any open windows on your screen to go back to desktop. You should see Segurazo Uninstaller window again. Put ticks on Segurazo Antivirus and Configuration Files options and hit Uninstall.
- Wait until the uninstall process is finished. You will be asked whether you want to restart your computer. Click No.
- At this point, all files of the potentially unwanted antivirus will be deleted, except SegurazoKD.sys and SegurazoShell64_v1069.dll, which will be left in the program’s installation folder. These can’t be deleted that easily – neither one by one, or with the whole folder. Here’s what you need to do next.
2nd Part: Clean Windows Registry from associated keys and values
TIP: The instructions are very detailed. If you are advanced computer user, here’s what you need to do in steps 1-12: User Find to discover and delete keys and folders related to the annoying program.
- Press down Windows key + R to launch Run prompt. In Run, type regedit and press Enter. In UAC window, press Yes.
- In Windows Registry, press Ctrl + F to open Find. You can also click Edit > Find… for the same result.
- In Find, type Segurazo and press Find Next.
- The first found key should lie in HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store. Drag the Name column on the right to expand it so that you could see full names clearly. Find, right-click and choose to Delete a key named C:\Program Files (x86)\Segurazo\SegurazoUninstaller.exe. Click Yes to agree.
- Press Ctrl + F to open Find again. Click Find Next. Wait.
Now you should be taken to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\segurazoclient_RASAPI32 folder. - Look on the left panel; here, you should see a list of the PUP-related folders. Right-click, then choose Delete > Yes for these folders:
segurazoclient_RASAPI32
segurazoclient_RASMANCS
SegurazoService_RASAPI32
SegurazoService_RASMANCS
SegurazoUninstaller_RASAPI32
SegurazoUninstaller_RASMANCS - Open Find again (Ctrl + F) and press Find Next.
This should take you to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Segurazo folder. Right-click it on the left panel and choose Delete > Yes. - Press Ctrl + F and press Find Next. This should take you to HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Segurazo. Delete this folder from the left panel by right-clicking it and choosing Delete > Yes.
- Press Ctrl + F, then Find Next.
You will be taken to HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager folder. In this folder, you should find and delete value called PendingFileRenameOperations. - Repeat the Find procedure and delete the \Device\HarddiskVolume5\Program Files (x86)\Segurazo\SegurazoClient.exe value.
- Repeat Find Next procedure.
You should now right-click to delete SegurazoSvc key from HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Application folder. - Open Find > Find Next, then delete \Device\HarddiskVolume5\Program Files (x86)\Segurazo\SegurazoUninstaller.exe value from a folder named with a long numeric string.
- Scroll up the Windows Registry Navigation and click on Computer. Now Repeat Find Next procedure to make sure that there are no more keys or values related to the stubborn PUP, and if found, delete them.
3rd Part: Force delete remaining files in the installation folder
- First of all, you need to copy the path to the previously mentioned files that won’t delete from program’s installation folder. You can copy it by going to C:\Program Files (x86), entering the folder of Segurazo (can be Digital Communications or Segurazo), clicking on the address bar where the file location is displayed, right-clicking the selected location on the address bar, and clicking Copy.
Tip: We recommend writing down the names of files that you can’t delete from this folder as they might differ from ours. - Once you copied the path, press Ctrl + Alt + Del and open Windows Task Manager from the displayed options. Here, select File Explorer and choose End Task.
- Now, search for cmd in Windows search. Right-click the result and choose to Run as Administrator. Click Yes to confirm.
- In cmd, type del /f <filename> where instead of <filename>, paste the path you copied earlier and add the full file name. Press Enter to execute the command, and repeat by changing the filename to eliminate all remains.
Example of commands we entered to force delete remaining files:
del /f C:\Program Files (x86)\Segurazo\SegurazoShell64_v1069.dlldel /f C:\Program Files (x86)\Segurazo\SegurazoKD.sys - Following that, you can go back to C:\Program Files (x86) and delete the Segurazo folder.
- Go to desktop, right-click Recycle Bin and choose Empty Recycle Bin. As a result, all files related to the annoying program will be eliminated for good.
That’s it! You have managed to remove Segurazo Antivirus from Windows 10. In case you didn’t succeed to eliminate additional components of spyware or malware, consider using a Windows security software to do it for you automatically.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Hope this helps.
Joe13 B-) 2.0
More...
