Remove Trinity. Removal instructions
Trinity is a browser hijacker that changes the default Internet Explorer start and search pages. The parasite can get into the system along with some ad-supported software. Once executed, it installs its files into C:\Documents and Settings\[Current User]\Desktop directory and alters the Windows registry. Trinity also adds lots of undesirable bookmarks.
Trinity properties:
• Changes browser settings
• Hides from the user
• Stays resident in background
Automatic Trinity removal:
(2012-02-15 21:58:49)
(2012-02-15 21:58:49)
- StopZilla! : Custom spyware made easy - detect, quarantine and block spyware and adware on demand. True real time protection. Also has popup blocking.
- AVG Internet Security 2011 : Complete protection for everything you do online.
- 50% off Webroot Internet Security Essentials! : Antivirus, anti-spyware and firewall protection for your PC for just $29.95. Ends 6.30.11
(2012-02-15 21:58:49)
Trinity manual removal:
Kill processes:
ayb.exe
how to kill malicious processes
Delete registry values:
HKEY_CURRENT_USER\Software\TrinityAYB
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Page=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
how to remove registry entries
Delete files:
ayb.exe
how to remove harmful files
Misc:
[site address] is one of the following URLs: http://search.rub.to or ireland.rub.to.
Information updated: 2012-02-15 19:21:34