Remove Wolfram Antivirus

Wolfram Antivirus is a fake antivirus. Wolfram Antivirus infected your computer through a malicious website or Trojan. Wolfram Antivirus scan the whole infected computer without any notice. After finish scanning, Wolfram Antivirus shows false result that there are a lot of malware infections found on the computer. Moreover, the users of the infected computer will receive several warning alerts trying to force the users to purchase the fake full version of Wolfram Antivirus. Wolfram Antivirus cannot detect and remove any kind of virus, malware or trojan. Wolfram Antivirus is a SCAM. Do not believe any warning or alert given by Wolfram Antivirus. Most important, do not purchase the full version of Wolfram Antivirus as it really cannot remove any kind of malware! Wolfram Antivirus is delivered through many ways that involve installing via a bogus scanner page created to look like a Windows application screen. Another way of how Wolfram Antivirus spreads is via a Trojan infection generated to look like a flash update or video codec.

Wolfram Antivirus can be removed first by stopping its processes (wskinn.exe, Wolfram Antivirus.exe, c:\Program Files\csrss.exe, c:\Program Files\conhost.exe) and then kill its files by using Emsisoft HiJackFree. Then the user has to remove all the related files and folder. Finally, restore the registry entries added and modified by Wolfram Antivirus (Read the removal guide below to remove Wolfram Antivirus successfully).



When Wolfram Antivirus is installed, Wolfram Antivirus will be configured to start automatically y installing a file called csrss.exe in the Window Startup folder. Once Windows is started, csrss.exe will automatically be launched, which will then start the main executable for this infection called %AppData%\Wolfram Antivirus\Wolfram Antivirus.exe. Please note that the csrss.exe file that this infection installs in the Startup folder should not be confused with the legitimate Microsoft C:\Windows\System32\csrss.exe file, which is required for Windows to operate normally.



Wolfram Antivirus should be removed immediately!





Removal Guide

Kill Process

(How to kill a process effectively?)

%UserProfile%\Application Data\Wolfram Antivirus\csrss.exe

%UserProfile%\Application Data\Wolfram Antivirus\Wolfram Antivirus.exe

%StartMenu%\Programs\Startup\csrss.exe



Delete Registry

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "load"="%Temp%\csrss.exe"



Remove Folders and Files

%UserProfile%\Application Data\Wolfram Antivirus

%UserProfile%\Desktop\Wolfram Antivirus.lnk

%StartMenu%\Programs\Startup\csrss.exe

%StartMenu%\Programs\Wolfram Antivirus



File Location Notes:



%UserProfile% refers to the current user's profile folder. By default, this is C:\Documents and Settings\ for Windows 2000/XP, C:\Users\ for Windows Vista/7, and c:\winnt\profiles\ for Windows NT.



%StartMenu% refers to the Windows Start Menu. For Windows 95/98/ME it refers to C:\windows\start menu\, for Windows XP, Vista, NT, 2000 and 2003 it refers to C:\Documents and Settings\\Start Menu\, and for Windows Vista/7 it is C:\Users\\AppData\Roaming\Microsoft\Windows\Start Menu.