Antivirus IS claims itself as an innovative protection for your PC. It provide basic antivirus feature such as "Performing Scan" and "Get Updates". However, all of these are fake features which do not really function. It gives fake malware(such as Backdoor.Win32.Small.x, PSW.Win32.OnLineGames.rth, Downloader.Win32.Delf.cgx etc) detection.
Antivirus IS should be removed immediately!
Antivirus IS Removal Guide
Kill Process
(How to kill a process effectively?)
[random]lanw.exe
Delete Registry
HKEY_CURRENT_USER\Software\mksybupgw
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:27811"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]lanw.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]lanw.exe"
Remove Folders and Files
%Temp%\[random]
%Temp%\[random]\[random]lanw.exe
Antivirus IS should be removed immediately!
Antivirus IS Removal Guide
Kill Process
(How to kill a process effectively?)
[random]lanw.exe
Delete Registry
HKEY_CURRENT_USER\Software\mksybupgw
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:27811"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]lanw.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]lanw.exe"
Remove Folders and Files
%Temp%\[random]
%Temp%\[random]\[random]lanw.exe
No comments:
Post a Comment