Tuesday, March 29, 2011

Windows Update Removal GuideWindows Update Removal Guide

Windows Update Removal Guide
Windows Update is an useless program that cannot update the windows. However, Windows Update pretends to be a legitimate updater which can update computers so that to protect computer from the attack malwares. Once Windows Update is installed on the computer, it will start automatically when Windows boot. Then Windows Update will ask the user to update the computer as it has detected many malwares in the computer. Windows Update will repeatedly shows the pop ups to urge the user to purchase the full version of Windows Update so that to remove all the threats. However, Windows Update cannot detect and remove any kind of virus, malware and trojan.

Windows Update can be removed by stopping the processes and removing the files by using Emsisoft HiJackFree. Then the user should remove the registry entries added or modified by Windows Update shown in the removal guide below. All files related to Windows Update must be deleted.

Windows Update should be removed immediately!

Windows Update Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = %UserProfile%\Application Data\[random].exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'yes'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes"

Remove Folders and Files
%Documents and Settings%\[User Name]\Start Menu\Programs\Windows Update
%Documents and Settings%\[User Name]\Desktop\Windows Update.lnk
%Documents and Settings%\All Users\Application Data\[random].dll
%Documents and Settings%\All Users\Application Data\[random].exe
%Documents and Settings%\All Users\Application Data\[random]

No comments:

Post a Comment