Wednesday, February 17, 2010

Live PC Care Removal GuideLive PC Care Removal Guide

Live PC Care Removal Guide
Live PC Care is a rogue anti-spyware program that is promoted through the use of fake online scanner sites and misleading advertisements. When Live PC Care is installed it will be configured to start automatically. The installer will also create numerous files on your computer that will then be detected as malware by Live PC Care when it scans your computer. Do not hesitate, have Live PC Care removed from your PC before it starts causing havoc on the system.

Removal Tool: Remove Fake Antivirus. (Download it here.)

Removal Guide
Kill Process
(How to kill a process effectively?)
DBOLE.exe
fan.exe

Unregister DLL files
%UserProfile%\Recent\exec.dll
%UserProfile%\Recent\SM.dll
%UserProfile%\Recent\runddl.dll
%UserProfile%\Recent\ppal.dll
%UserProfile%\Recent\FW.dll

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
HKEY_CURRENT_USER\Software\3
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_5ea56.DocHostUIHandler
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "[xSP_2:117fc3395e69e29f71abba93a68c4181_7]"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Live PC Care"

Remove Folders and Files
Live PC Care.lnk
Live PC Care
%UserProfile%\Recent\exec.dll
%UserProfile%\Recent\DBOLE.sys
%UserProfile%\Recent\DBOLE.exe
%UserProfile%\Recent\CLSV.sys
%UserProfile%\Recent\cb.drv
%UserProfile%\Recent\SM.dll
%UserProfile%\Recent\runddl.dll
%UserProfile%\Recent\ppal.sys
%UserProfile%\Recent\ppal.dll
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\kernel32.drv
%UserProfile%\Recent\hymt.drv
%UserProfile%\Recent\FW.dll
%UserProfile%\Recent\fan.exe

No comments:

Post a Comment