Home » News » Rogue Antispyware » How to Remove SaveArmor, SaveArmor Removal Guide

How to Remove SaveArmor, SaveArmor Removal Guide

By Jason on September 22, 2009 | Rogue Antispyware, SaveArmor, Save Armor, Remove SaveArmor How to Remove SaveArmor, SaveArmor Removal Guide

The recent series of malicious applications pretending to be security tools and calling themselves defenders, warriors, fighters or even ninjas, continues. This time they have launched SaveArmor. Although the name might suggest safety and protection, it is neither safe, nor does it provide armor for your system. What Save Armor does is weaken the existing system security and infect it with even more parasites.

The malicious processes performed by this fake security program is very similar to those of the previous members of this family, you may check all of them by following these links: SaveDefender, TrustWarrior, SoftSafeness, SafetyKeeper, SaveKeeper, QuickHealCleaner, SystemCop, BlockDefence, TrustNinja, SaveDefense, SaveSoldier, SaveKeep, WiniShield, WiniFighter and WinBlueSoft.

False system scans, pop-up advertisements, fabricated warning messages, browser hijacking – these are the actual “functions” of SaveArmor. It also suggests purchasing the Save Armor software which should provide system security. Unfortunately, such a program does not even exist, therefore paying for it means just wasting your money. To remove SaveArmor from your system, please follow the instructions bellow.

SaveArmor websites

savearmor.com Learn how to block rogue websites

New processes created

x0lc3bqd.exe
SaveArmor.exe
uninstall.exe Learn how to remove malicious processes

New SaveArmor registry entries created

HKEY_CURRENT_USER\Software\SaveArmor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SaveArmor
HKEY_LOCAL_MACHINE\SOFTWARE\SaveArmor
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SAVEARMORSVC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SaveArmorSvc
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SaveArmor"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "x0lc3bqd.exe" Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries

New files and directories created

c:\Program Files\SaveArmor Software
c:\Program Files\SaveArmor Software\SaveArmor
c:\Program Files\SaveArmor Software\SaveArmor\SaveArmor.exe
c:\Program Files\SaveArmor Software\SaveArmor\uninstall.exe
c:\WINDOWS\10069zo5-a-virus796.bin
c:\WINDOWS\105579izus27f5.bin
c:\WINDOWS\105899py3cz.dll
c:\WINDOWS\system32\30c9ba5kdzor218.cpl
c:\WINDOWS\system32\31429wor51baz.bin
c:\WINDOWS\system32\3190z59rus461.cpl
c:\Documents and Settings\All Users\Desktop\SaveArmor.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\SaveArmor
c:\Documents and Settings\All Users\Start Menu\Programs\SaveArmor\1 SaveArmor.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\SaveArmor\2 Homepage.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\SaveArmor\3 Uninstall.lnk
%Temp%\Local Settings\Temp\x0lc3bqd.exe Learn how to unregister malicious DLL files

How to remove SaveArmor

To remove SaveArmor manually you must block rogue SaveArmor related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious SaveArmor files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.

Scan your computer

More Rogue Antispyware news

System Protection Tools removal guide

System Protection Tools removal guide

System Protection Tools is a rogue anti-spyware tool which spreads via trojan horse. Trojan comes to the system via its vulnerabilities and leaves a backdoor for System Protection Tools to sneak. The parasite comes to the system without user’s knowledge and consent. Read more.


News categories

Latest news