OpenCloud AV can be removed first by stopping its processes (wskinn.exe, OpenCloud AV.exe, c:\Program Files\csrss.exe, c:\Program Files\conhost.exe) and then kill its files by using Emsisoft HiJackFree. Then the user has to remove all the related files and folder. Finally, restore the registry entries added and modified by OpenCloud AV (Read the removal guide below to remove OpenCloud AV successfully).
When OpenCloud AV is installed, OpenCloud AV will be configured to start automatically installing a file called OpenCloud AV.exe in the Window Startup folder. Once Windows is started, OpenCloud AV.exe will automatically be launched, which will then start the main executable for this infection called %AppData%\OpenCloud AV\OpenCloud AV.exe.
OpenCloud AV should be removed immediately!
Removal Guide
Kill Process
(How to kill a process effectively?)
OpenCloud AV.exe
Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “OpenCloud AV.exe”
Remove Folders and Files
%Documents and Settings%\[User Name]\Local Settings\Application Data\OpenCloud AV.exe
No comments:
Post a Comment