Home » News » Rogue Antispyware » How to Remove REAnti, REAnti Removal

How to Remove REAnti, REAnti Removal

By Gina on November 27, 2009 | Rogue Antispyware How to Remove REAnti, REAnti Removal

REAnti is a malicious program which pretends to be a real antivirus application. This rogue anti-spyware is distributed online at numerous corrupt websites. When such a website is visited, the trojans are used to download and install REAnti without the user's permission. When this bogus tool enters the computer it performs fake system scans and loads falsified warning messages in order to scare the user and convince them that their computer is infected with viruses and various security threats.

The purpose of such behavior is to trick the user and make them purchase the license for using REAnti. However, paying money for this malware does not solve anything. In fact, it only leaves the user with less money in their account and with computer infected with REAnti which may actually cause system problems itself. The best thing to do when having REAnti is to remove it manually by using the instructions provided bellow. Good luck!

REAnti websites

reanti.com Learn how to block rogue websites

New processes created

10235w5rm39dz.exe
REAnti.exe
uninstall.exe Learn how to remove malicious processes

New REAnti registry entries created

HKEY_CURRENT_USER\Software\REAnti
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\REAnti
HKEY_LOCAL_MACHINE\SOFTWARE\REAnti
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96E-E325-11CE-BFC1-08002BE10318}\l
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "REAnti.exe" Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries

New files and directories created

c:\Documents and Settings\All Users\Desktop\REAnti.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\REAnti
c:\Documents and Settings\All Users\Start Menu\Programs\REAnti\1 REAnti.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\REAnti\2 Homepage.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\REAnti\3 Uninstall.lnk
c:\Program Files\REAnti Software
c:\Program Files\REAnti Software\REAnti
c:\Program Files\REAnti Software\REAnti\REAnti.exe
c:\Program Files\REAnti Software\REAnti\uninstall.exe
c:\WINDOWS\1022795zj549.ocx
c:\WINDOWS\10235w5rm39dz.exe Learn how to unregister malicious DLL files

Symptoms in a Hijackthis log

O4 - HKCU\..\Run: [<random>.exe] C:\WINDOWS\system32\<random>.exe
O4 - HKCU\..\Run: [REAnti.exe] C:\Program Files\REAnti Software\REAnti\REAnti.exe

How to remove REAnti

To remove REAnti manually you must block rogue REAnti related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious REAnti files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.

Scan your computer

More Rogue Antispyware news

Delete Windows Safety Maintenance fraud

Delete Windows Safety Maintenance fraud

Windows Safety Maintenance is a rogue anti-spyware program which spreads via trojan. Once the trojan is released Windows Safety Maintenance stars fake scans and shows fraudulent results. It puts many efforts in trying to trick user into believing their PC is infected. Read more.


News categories

Latest news