How to remove USBcillin

Friday, June 19th, 2009 at 5:30 am
Home » Rogue Antispyware » USBcillin

USBcillin description

USBcillin is presented as a security tool for USB drives. It supposedly protects a computer from viruses that spread via removable media devices. Vendors of this application claim that USBcillin blocks malicious autorun.inf processes. Avoid installing USB cillin software on your PC. Not only it doesn’t function as anti-virus, but it is also dangerous for a computer.

usbcillin

USBcillin acts like a virus. It changes various registry entries; this usually affects computer’s performance speed.

USBcillin is a Rogue Antispyware software

How to manually remove USBcillin

To remove USBcillin spyware you must block USBcillin sites, stop and remove processes, unregister DLL files, search and delete all other USBcillin files and registry utility. Follow the USBcillin detection and removal instructions below.

The most typical software removal method is to remove USBcillin by using "Add or Remove Programs" service. However there may be hidden USBcillin files, running processes and registries in your computer, so USBcillin may recreate all other files after reboot.

USBcillin manual removal instructions

Stop and remove USBcillin processes:
QWE.TXT.EXE
82215601.EXE
64080532.EXE
13882768.EXE
USBcillin.exe
Read more how to kill USBcillin processes

Locate and delete USBcillin registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\"NoDispCPL" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoRun" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoPropertiesMyComputer" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoPrinters" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\"DisableRegistryTools" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\"DisableTaskMgr" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoControlPanel" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoViewContextMenu" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoSetFolders" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Uninstall\"NoRemovePage" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Uninstall\"NoAddRemovePrograms" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoNetHood" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Uninstall\"NoAddPage" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Network\"NoNetSetup" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoFolderOptions" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoFind" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoFileMenu" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoDesktop" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoActiveDesktop" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"USBcillin" = "C:\WINDOWS\system32\USBcillin.exe"
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\"DisableCMD" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoRun" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoPropertiesMyComputer" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoPrinters" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoNetHood" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoViewContextMenu" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoSetFolders" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall\"NoRemovePage" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\"DisableRegistryTools" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network\"NoNetSetup" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoControlPanel" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoActiveDesktop" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\"Window Title" = "Windows Internet Explorer"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\"DisableTaskMgr" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall\"NoAddRemovePrograms" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall\"NoAddPage" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\"NoDispCPL" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoFolderOptions" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoFind" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoFileMenu" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoDesktop" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\TrayNotify\"PastIconsStream" = "hex:14,00,00,00,05,00,00,00,01,00,01,00,b6,00,00,00,14,00,00,00,49,4c,00,06,b6,00,ba,00,04,00,10,00,10,00,ff,ff,ff,ff,21,00…"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\"Order" = "hex:08,00,00,00,02,00,00,00,00,02,00,00,01,00,00,00,03,00,00,00,d2,00,00,00,00,00,00,00,c4,00,00,00,41,75,67,4d,02,00,00,00…"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"Shell" = "explorer.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"Userinit" = "C:\WINDOWS\system32\userinit.exe,"
Read more how to delete USBcillin registry entries
Download RegistryBooster 2010 to scan errors caused by USBcillin

Detect and delete other USBcillin files:
%System%\USBcillin.exe
%Temp%\
64080532.EXE
13882768.EXE
96402658.SVD
QWE.TXT.EXE
82215601.EXE
71519181.SVD
57273426.SVD

We strongly recommend you to use spyware remover to track USBcillin and automaticaly remove USBcillin processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: ,

5 Responses to

USBcillin

  1. PP

    THANKS FOR ADVICE !IT WORKS

    Reply

  2. name

    it also provide no uninstall button for itself

    Reply

  3. unhappy chappy

    I downloaded the 3 different software applications but couldn’t get rid of usbcillin. Tried the manual delete of everything as above and did it flawlessly, but now I can’t get into my machine!

    Great.. Looks like total re-install is all I have left

    Reply

  4. techbird

    @unhappy chappy

    tell me more….coz i also want to go for manual removal of this crap………will ot cause any problems to my system secirity??

    and what about the changes that it has already made to my computer??

    Reply

  5. ani

    its very good try.

    Reply

Leave a Reply

Download does not start? Try a mirror download here