IronProtector also install RegistryClever into the computer which is a fake registry scanner program. IronProtector provide fake features like "Full Scan", "System Scan", "Scan Basic Locations", "Scan Removable Media", "Scan Folder" and even "Realtime Protection".
IronProtector should be removed immediately!
IronProtector Removal Guide
Kill Process
(How to kill a process effectively?)
F0E84.exe
RegistryClever.exe
RegistryCleverTray.exe
[random].exe
Delete Registry
HKEY_CURRENT_USER\Software\IronProtector
HKEY_CURRENT_USER\Software\RegistryClever
HKEY_LOCAL_MACHINE\SOFTWARE\IronProtector
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IronProtector
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegistryClever
HKEY_LOCAL_MACHINE\SOFTWARE\RegistryClever
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "TrayScan"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "F0E84.exe"
Remove Folders and Files
%ALLUSERSPROFILE%\Application Data\RegistryClever
%ALLUSERSPROFILE%\Desktop\RegistryClever.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\IronProtector.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\RegistryClever
%ProgramFiles%\FDFCA
%ProgramFiles%\RegistryClever Software
%windir%\[random].dll
%windir%\[random].bin
%windir%\[random].cpl
%windir%\system32\[random].cpl
%windir%\system32\[random].exe
%windir%\system32\[random].bin
%UserProfile%\Desktop\IronProtector.lnk
%UserProfile%\Local Settings\Temp\[random].exe
IronProtector should be removed immediately!
IronProtector Removal Guide
Kill Process
(How to kill a process effectively?)
F0E84.exe
RegistryClever.exe
RegistryCleverTray.exe
[random].exe
Delete Registry
HKEY_CURRENT_USER\Software\IronProtector
HKEY_CURRENT_USER\Software\RegistryClever
HKEY_LOCAL_MACHINE\SOFTWARE\IronProtector
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IronProtector
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegistryClever
HKEY_LOCAL_MACHINE\SOFTWARE\RegistryClever
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "TrayScan"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "F0E84.exe"
Remove Folders and Files
%ALLUSERSPROFILE%\Application Data\RegistryClever
%ALLUSERSPROFILE%\Desktop\RegistryClever.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\IronProtector.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\RegistryClever
%ProgramFiles%\FDFCA
%ProgramFiles%\RegistryClever Software
%windir%\[random].dll
%windir%\[random].bin
%windir%\[random].cpl
%windir%\system32\[random].cpl
%windir%\system32\[random].exe
%windir%\system32\[random].bin
%UserProfile%\Desktop\IronProtector.lnk
%UserProfile%\Local Settings\Temp\[random].exe
No comments:
Post a Comment