How to Remove System Adware Scanner 2010 | System Adware Scanner 2010 Removal Guide
System Adware Scanner 2010 is a new and aggressive rogue antivirus application. Once installed on a system it creates a program that acts as a guard of sorts for it’s main process. This guard process is called noterminate and will pop up warnings and encourage users to purchase the rogue for full protection. The guard process also acts to prevent the running of many utilities to clean up the infection and will pop up multiple security alerts warning you of system security issues. Please read on for how to remove system adware scanner 2010.
Among the warnings that this rogue and it’s guard may present are the following:
System Adware Scanner 2010 Warning
Intercepting programs that may compromise your privacy and harm your system have been detected on your PC. Click here to remove them immediately with System Adware Scanner 2010
Warning: Your computer is infected
Windows has detected infection!
Click this message to install the last update of Windows Security Software!
All such messages should be ignored as this is associated with the rogue antivirus and all they want is your money. You may wish to try going to the control panel and add/remove programs to uninstall system adware scanner 2010. However, it is unlikely that this will work to get rid of this rogue. If by any chance it does work, I encourage you to follow that up with a scan with either superantispyware or malwarebytes antimalware and then a trusted antivirus like trendmicro or AVG.
Before you will be ablet o install malwarebytes if the rogue is still running on your system you will need to kill off the processes associated with it. There are a number of ways to do those, the easiest may be to download rkill from bleepingcomputer.com This program will kill off the running processes associated with this and many other rogues so that you can then install malwarebytes antimalware. Another options will be to use the task manager to kill off the processes associated with this rogue, or process explorer (to which a link is available on my virus removal toolkit page.) If you are trying to launch the task manager and cannot, you may copy it’s program (taskmgr.exe) to the desktop and then rename it to something like iexplore.exe and run it. The processes associated with this rogue are randomly named and run from the following location:
c:\Documents and Settings\All Users\Application Data\RANDOMFOLDERNAME\RANDOM.exe
As you can see, rkill is likely your simplest option for killing off the running processes.
There is also a download link for malwarebytes antimalware on the virus removal toolkit page. After you download it (assuming you have already killed off the processes with rkill) you should be able to install it. If while running rkill you get a message from the rogue that is trying to interfere with the running of rkill, leave that warning open and run it a second time, or simply ignore warnings that the rogue gives. So, keep running it until none of the malware is left running. DO NOT REBOOT. During the install process of malwarebytes do not let it reboot the system, but continue on to the update and scan.
If malwarebytes gives an error that it cannot find the executable file mbam.exe (Something like a code 2 error…) you may need to separately download that file and put it in the C:\program files\Malwarebytes’ Anti-Malware\ folder. It can be downloaded directly from malwarebytes antimalware from this link which will create a random filename for it make a note of the random name and save it to the folder listed above. Once downloaded find the file and launch it. Then you should be able to update and scan.
This rogue is fairly aggressive and may have deleted some files associated with malwarebytes antimalware. After you have cleaned it from your system you may wish to uninstall/reinstall mbam if you want to reuse it in the future. I suggest once you have a foothold on the system you keep scanning until things scan clean with malwarebytes/superantipsyware and then with a trusted antivirus like AVG/avira/etc. as well.
The following files and folders are where system adware scanner 2010 installs:
%docs%\All Users\Application Data\RANDOM
%docs%\All Users\Application Data\RANDOM\RANDOM
%docs%\All Users\Application Data\RANDOM\RANDOM.exe
%docs%\All Users\Application Data\RANDOM\RANDOM.i
%docs%\%user%\Desktop\System Adware Scanner 2010.lnk
%docs%\%user%\Start Menu\Programs\System Adware Scanner
%docs%\%user%\Start Menu\Programs\System Adware Scanner\System Adware Scanner 2010.lnk
%win%\system32\drivers\RANDOM.sys
As you can see there are a lot of strings with this rogue that are created randomly making it more challenging to manually remove. It’s important that you remove system adware scanner 2010 from your system and I hope this guide will be of help.