Rogue software details: RapidAntivirus

RapidAntivirus is a rogue security application. In order to remove it, find out what files and registry entries to look for below.

Known system changes:

Files
c:\Desktop\Rapid Antivirus.lnk
c:\Desktop\Best BDSM P0rn..lnk
c:\Desktop\Gay Fetish Sex..lnk
c:\Documents and Settings\All Users\Desktop\Best BDSM P0rn.
c:\Documents and Settings\All Users\Desktop\Gay Fetish Sex.

Folders
c:\ProgramFiles\Rapid Antivirus
c:\ApplicationData\Rapid Antivirus
c:\CommonPrograms\Rapid Antivirus
c:\ApplicationData\Rapid Antivirus
c:\StartMenu\Programs\Rapid Antivirus
c:\Documents and Settings\All Users\Start Menu\
Programs\Rapid Antivirus

Registry entry
Key: HKEY_CURRENT_USER\software\rapid antivirus
Value:
Data:
Key: HKEY_CURRENT_USER\software\microsoft\windows\
currentversion\run
Value: loader.exe
Data:
Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\
currentversion\run
Value: loader.exe
Data:

Source: Lavasoft Malware Lab’s Rogue Gallery.