How to remove USBcillin
Friday, June 19th, 2009 at 5:30 amHome » Rogue Antispyware » USBcillin
USBcillin description
USBcillin is presented as a security tool for USB drives. It supposedly protects a computer from viruses that spread via removable media devices. Vendors of this application claim that USBcillin blocks malicious autorun.inf processes. Avoid installing USB cillin software on your PC. Not only it doesn’t function as anti-virus, but it is also dangerous for a computer.
USBcillin acts like a virus. It changes various registry entries; this usually affects computer’s performance speed.
USBcillin is a Rogue Antispyware software
How to manually remove USBcillin
To remove USBcillin spyware you must block USBcillin sites, stop and remove processes, unregister DLL files, search and delete all other USBcillin files and registry utility. Follow the USBcillin detection and removal instructions below.
The most typical software removal method is to remove USBcillin by using "Add or Remove Programs" service. However there may be hidden USBcillin files, running processes and registries in your computer, so USBcillin may recreate all other files after reboot.
USBcillin manual removal instructions
Stop and remove USBcillin processes:
QWE.TXT.EXE
82215601.EXE
64080532.EXE
13882768.EXE
USBcillin.exe
Read more how to kill USBcillin processes
Locate and delete USBcillin registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\"NoDispCPL" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoRun" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoPropertiesMyComputer" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoPrinters" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\"DisableRegistryTools" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\"DisableTaskMgr" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoControlPanel" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoViewContextMenu" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoSetFolders" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Uninstall\"NoRemovePage" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Uninstall\"NoAddRemovePrograms" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoNetHood" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Uninstall\"NoAddPage" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Network\"NoNetSetup" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoFolderOptions" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoFind" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoFileMenu" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoDesktop" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoActiveDesktop" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"USBcillin" = "C:\WINDOWS\system32\USBcillin.exe"
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\"DisableCMD" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoRun" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoPropertiesMyComputer" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoPrinters" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoNetHood" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoViewContextMenu" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoSetFolders" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall\"NoRemovePage" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\"DisableRegistryTools" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network\"NoNetSetup" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoControlPanel" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoActiveDesktop" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\"Window Title" = "Windows Internet Explorer"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\"DisableTaskMgr" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall\"NoAddRemovePrograms" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall\"NoAddPage" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\"NoDispCPL" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoFolderOptions" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoFind" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoFileMenu" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoDesktop" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\TrayNotify\"PastIconsStream" = "hex:14,00,00,00,05,00,00,00,01,00,01,00,b6,00,00,00,14,00,00,00,49,4c,00,06,b6,00,ba,00,04,00,10,00,10,00,ff,ff,ff,ff,21,00…"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\"Order" = "hex:08,00,00,00,02,00,00,00,00,02,00,00,01,00,00,00,03,00,00,00,d2,00,00,00,00,00,00,00,c4,00,00,00,41,75,67,4d,02,00,00,00…"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"Shell" = "explorer.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"Userinit" = "C:\WINDOWS\system32\userinit.exe,"
Read more how to delete USBcillin registry entries
Download RegistryBooster 2010 to scan errors caused by USBcillin
Detect and delete other USBcillin files:
%System%\USBcillin.exe
%Temp%\
64080532.EXE
13882768.EXE
96402658.SVD
QWE.TXT.EXE
82215601.EXE
71519181.SVD
57273426.SVD
We strongly recommend you to use spyware remover to track USBcillin and automaticaly remove USBcillin processes, registries and files as well as other spyware threats.



June 20th, 2009 at 11:04 pm
THANKS FOR ADVICE !IT WORKS
Reply
June 25th, 2009 at 7:06 am
it also provide no uninstall button for itself
Reply
July 22nd, 2009 at 6:41 pm
I downloaded the 3 different software applications but couldn’t get rid of usbcillin. Tried the manual delete of everything as above and did it flawlessly, but now I can’t get into my machine!
Great.. Looks like total re-install is all I have left
Reply
August 13th, 2009 at 12:08 am
@unhappy chappy
tell me more….coz i also want to go for manual removal of this crap………will ot cause any problems to my system secirity??
and what about the changes that it has already made to my computer??
Reply
August 24th, 2009 at 9:26 pm
its very good try.
Reply