Removal Tool: Remove Fake Antivirus. (Download it here.)
Removal Guide
Kill Process
(How to kill a process effectively?)
DBOLE.exe
fan.exe
Unregister DLL files
%UserProfile%\Recent\exec.dll
%UserProfile%\Recent\SM.dll
%UserProfile%\Recent\runddl.dll
%UserProfile%\Recent\ppal.dll
%UserProfile%\Recent\FW.dll
Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
HKEY_CURRENT_USER\Software\3
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_5ea56.DocHostUIHandler
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "[xSP_2:117fc3395e69e29f71abba93a68c4181_7]"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Live PC Care"
Remove Folders and Files
Live PC Care.lnk
Live PC Care
%UserProfile%\Recent\exec.dll
%UserProfile%\Recent\DBOLE.sys
%UserProfile%\Recent\DBOLE.exe
%UserProfile%\Recent\CLSV.sys
%UserProfile%\Recent\cb.drv
%UserProfile%\Recent\SM.dll
%UserProfile%\Recent\runddl.dll
%UserProfile%\Recent\ppal.sys
%UserProfile%\Recent\ppal.dll
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\kernel32.drv
%UserProfile%\Recent\hymt.drv
%UserProfile%\Recent\FW.dll
%UserProfile%\Recent\fan.exe
Removal Guide
Kill Process
(How to kill a process effectively?)
DBOLE.exe
fan.exe
Unregister DLL files
%UserProfile%\Recent\exec.dll
%UserProfile%\Recent\SM.dll
%UserProfile%\Recent\runddl.dll
%UserProfile%\Recent\ppal.dll
%UserProfile%\Recent\FW.dll
Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
HKEY_CURRENT_USER\Software\3
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_5ea56.DocHostUIHandler
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "[xSP_2:117fc3395e69e29f71abba93a68c4181_7]"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Live PC Care"
Remove Folders and Files
Live PC Care.lnk
Live PC Care
%UserProfile%\Recent\exec.dll
%UserProfile%\Recent\DBOLE.sys
%UserProfile%\Recent\DBOLE.exe
%UserProfile%\Recent\CLSV.sys
%UserProfile%\Recent\cb.drv
%UserProfile%\Recent\SM.dll
%UserProfile%\Recent\runddl.dll
%UserProfile%\Recent\ppal.sys
%UserProfile%\Recent\ppal.dll
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\kernel32.drv
%UserProfile%\Recent\hymt.drv
%UserProfile%\Recent\FW.dll
%UserProfile%\Recent\fan.exe
No comments:
Post a Comment