How To Remove USAntiSpy - (Uninstall Guide)
USAntiSpy is a rogue security software application that is incapable of protecting your system from any sort of security threat. The only thing this piece of software wants to do is scam you out of your money. The scam is a three step process that goes something like this:
WM/Helper virus propagates by infecting Word documents in Microsoft WORD Versions 6.x/7.x on Windows and Macintosh platforms. The virus became active by using AutoMacros. All macros are encrypted using the standard Word execute-only feature. Meaning that the user is unable to edit or view the macro code.
Automatic removal guide
Step 1. If you have a printer, make sure to print out this tutorial. If you do not have a printer, save this tutorial, go out to a copy center and print it out there. If you do not have a printer and do not want to go out, then use the pen and paper method: grab a pen and a piece of paper and write down the instruction presented in the steps below. In the process of eliminating USAntiSpy from your machine you will need to shut down the browser. And since this will also shut down the tutorial, you need to know what you should do next.
Step 2. You will have to install Malwarebytes’ Anti-Malware. In this regard you need to download the software’s setup executable. Just click this link and save the .exe file on your computer (preferably on your desktop).
Step 3. Double click the Malwarebytes’ Anti-Malware setup executable. It should be on the desktop under the name mbam-setup. This will launch the installation process. If you already know how to install a piece of software, proceed to step 4. If you do not know how to do this, we’ll walk you though it all:

- The Select Setup Language window should have popped up. By default, the language in which the software will be installed is set to English, but you can change this. The software provides support for 30+ languages. After selecting the language of your choice, click OK. It would be best to just leave it set to English though.

- The Malwarebytes’ Anti-Malware Setup Wizard will now popup. Just click Next.

- You will be presented with the License Agreement. Click I accept the agreement and then click Next. If you do not accept the agreement you will not be able to continue.

- Keep clicking Next until you get to the Ready to install window. Now click Install. After the installation process completes click Finish. Do not uncheck the boxes next to Update Malwarebytes’ Anti-Malware or Launch Malwarebytes’ Anti-Malware.







Step 4. The Malwarebytes’ Anti-Malware application will launch automatically. The Perform quick scan option should be checked by default – if it isn’t then check it and then click Scan. You are well advised to close all running apps before clicking scan. This will ensure the scan for USAntiSpy will complete swiftly.

Malwarebytes’ Anti-Malware will start scanning your files for signs of USAntiSpy. This may take a while, so be patient. It all depends on how powerful your computer is and how many files Malwarebytes’ Anti-Malware has to scan.

When the scan for USAntiSpy is complete you will be presented with a notification box. Click OK to close the notification box and go to the main Scanner screen. Click Show Results and you will be presented with a list of all the infected files Malwarebytes’ Anti-Malware has detected.


Step 5. Click Remove Selected and Malwarebytes’ Anti-Malware will remove all the infected files it has detected. It may be necessary to restart your computer in order to remove some of these files. After Malwarebytes’ Anti-Malware is done removing all the infected files, it will open Notepad and present the scan log to you. You can review the log at your leisure – save it If you want.

Step 6. Close Malwarebytes’ Anti-Malware and you’re done. No traces of USAntiSpy should be left on your computer.
Manual removal guide
Stop and remove the processes:
Access the Windows Registry Editor and delete the following registry keys:
Locate and delete the following files:
Unregister the following DLL libraries:
Block access to the domain(s):
Tags:
- First of all it will trick you into thinking it is a genuine antivirus program, so it will claim to be able to provide “complete antivirus protection that allows you to surf the web safely and keeps your Pc free of viruses.”
- Once installed on your system, USAntiSpy will try to scare you into thinking your system is infected. In this regard it will perform fake system scans that detect numerous infected files; it will hijack your browser, preventing your from visiting certain sites and redirecting you to malicious sites; it ill blast you with popups and fake security alerts. Like this one:
WM/Helper virus propagates by infecting Word documents in Microsoft WORD Versions 6.x/7.x on Windows and Macintosh platforms. The virus became active by using AutoMacros. All macros are encrypted using the standard Word execute-only feature. Meaning that the user is unable to edit or view the macro code.
- After getting you to think your system is infected, USAntiSpy says it can remove the infection – but only if you pay for a license first. Paying for a fake antivirus program to remove a phony infection is a scam, no matter how you look at it. Instead of paying for a license, you should remove the USAntiSpy rogue from your system.
Automatic removal guide
Step 1. If you have a printer, make sure to print out this tutorial. If you do not have a printer, save this tutorial, go out to a copy center and print it out there. If you do not have a printer and do not want to go out, then use the pen and paper method: grab a pen and a piece of paper and write down the instruction presented in the steps below. In the process of eliminating USAntiSpy from your machine you will need to shut down the browser. And since this will also shut down the tutorial, you need to know what you should do next.
Step 2. You will have to install Malwarebytes’ Anti-Malware. In this regard you need to download the software’s setup executable. Just click this link and save the .exe file on your computer (preferably on your desktop).
Step 3. Double click the Malwarebytes’ Anti-Malware setup executable. It should be on the desktop under the name mbam-setup. This will launch the installation process. If you already know how to install a piece of software, proceed to step 4. If you do not know how to do this, we’ll walk you though it all:

- The Select Setup Language window should have popped up. By default, the language in which the software will be installed is set to English, but you can change this. The software provides support for 30+ languages. After selecting the language of your choice, click OK. It would be best to just leave it set to English though.

- The Malwarebytes’ Anti-Malware Setup Wizard will now popup. Just click Next.

- You will be presented with the License Agreement. Click I accept the agreement and then click Next. If you do not accept the agreement you will not be able to continue.

- Keep clicking Next until you get to the Ready to install window. Now click Install. After the installation process completes click Finish. Do not uncheck the boxes next to Update Malwarebytes’ Anti-Malware or Launch Malwarebytes’ Anti-Malware.







Step 4. The Malwarebytes’ Anti-Malware application will launch automatically. The Perform quick scan option should be checked by default – if it isn’t then check it and then click Scan. You are well advised to close all running apps before clicking scan. This will ensure the scan for USAntiSpy will complete swiftly.

Malwarebytes’ Anti-Malware will start scanning your files for signs of USAntiSpy. This may take a while, so be patient. It all depends on how powerful your computer is and how many files Malwarebytes’ Anti-Malware has to scan.

When the scan for USAntiSpy is complete you will be presented with a notification box. Click OK to close the notification box and go to the main Scanner screen. Click Show Results and you will be presented with a list of all the infected files Malwarebytes’ Anti-Malware has detected.


Step 5. Click Remove Selected and Malwarebytes’ Anti-Malware will remove all the infected files it has detected. It may be necessary to restart your computer in order to remove some of these files. After Malwarebytes’ Anti-Malware is done removing all the infected files, it will open Notepad and present the scan log to you. You can review the log at your leisure – save it If you want.

Step 6. Close Malwarebytes’ Anti-Malware and you’re done. No traces of USAntiSpy should be left on your computer.
Manual removal guide
Stop and remove the processes:
USAntivirus.exe
usa.exe
usa.exe
Access the Windows Registry Editor and delete the following registry keys:
HKEY_CLASSES_ROOT/CLSID/{0B014B81-4E12-46F9-806F-55867AF8FD3C}
HKEY_LOCAL_MACHINE/SOFTWARE/A6EE1950FD52D0A942D887EEEE3EE4B5
HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Explorer/Browser Helper Objects/{0B014B81-4E12-46F9-806F-55867AF8FD3C}
HKEY_LOCAL_MACHINE/SYSTEM/ControlSet002/Control/Class/{4D36E96E-E325-11CE-BFC1-08002BE10318}/S
HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Run "USA"
HKEY_LOCAL_MACHINE/SOFTWARE/A6EE1950FD52D0A942D887EEEE3EE4B5
HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Explorer/Browser Helper Objects/{0B014B81-4E12-46F9-806F-55867AF8FD3C}
HKEY_LOCAL_MACHINE/SYSTEM/ControlSet002/Control/Class/{4D36E96E-E325-11CE-BFC1-08002BE10318}/S
HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Run "USA"
Locate and delete the following files:
c:/Program Files/USA
c:/Program Files/USA/dm0_rte.xmz
c:/Program Files/USA/usa.exe
c:/WINDOWS/system32/ddrawx.dll
%UserProfile%/Desktop/USAntispy.lnk
c:/Documents and Settings/All Users/Start Menu/USA
c:/Documents and Settings/All Users/Start Menu/USA/Uninstall.lnk
c:/Documents and Settings/All Users/Start Menu/USA/USAntispy.lnk
c:/Program Files/Common Files/Security
c:/Program Files/Common Files/Security/Uninstall USAntispy.lnk
C:/Windows/dBeL3EEgfP.dll
c:/Program Files/USA/dm0_rte.xmz
c:/Program Files/USA/usa.exe
c:/WINDOWS/system32/ddrawx.dll
%UserProfile%/Desktop/USAntispy.lnk
c:/Documents and Settings/All Users/Start Menu/USA
c:/Documents and Settings/All Users/Start Menu/USA/Uninstall.lnk
c:/Documents and Settings/All Users/Start Menu/USA/USAntispy.lnk
c:/Program Files/Common Files/Security
c:/Program Files/Common Files/Security/Uninstall USAntispy.lnk
C:/Windows/dBeL3EEgfP.dll
Unregister the following DLL libraries:
dBeL3EEgfP.dll
ddrawx.dll
ddrawx.dll
Block access to the domain(s):
active-antivir.com
antiviruslicensepurchase.com
antiviruslicensepurchase.com
Tags:
I Hope you LIKE this blog post! Thank you!
What do YOU have to say about this
blog comments powered by Disqus
Popular Removal Guide
By George Norman on 19 Feb 2010
If you did not manually install XP Micro Antivirus and the software just showed up on your computer one day, it means that a Trojan By George Norman on 19 Feb 2010
Software Antivirus, unlike what the name may suggest, is not a security software solution nor is it an antivirus program. Software Antivirus is nothing more By George Norman on 19 Feb 2010
The irony here is that the name WiniFighter would lead you to believe this is a security software application that will keep malware from the By George Norman on 19 Feb 2010
PC Security 2009, a rogue antispyware program, is usually distributed by malware that installs the rogue on your system without your consent. The rogue’s installer By George Norman on 18 Feb 2010
The people with malicious intent that put out the Internet Security 2010 rogue have rolled out another fake security software application, mainly Security By George Norman on 18 Feb 2010
Personal Anti Malware, a rogue security software application, is usually distributed by Trojans. A Trojan manages to compromise your system, then installs the rogue without Advertising
Hot Software Updates
