Saturday, March 26, 2011

Windows Repair Removal Guide

Windows Repair Removal Guide
Windows Repair is another type of fake antivirus program which will definitely show pop ups to tell the user that the computer has been infected by malwares, trojans and viruses. Windows Repair CANNOT detect and remove any kind of malware, trojan and virus. Windows Repair can only cheat the user to purchase the full version of Windows Repair so that to removed the detected threats. Do not believe any pop ups or report shown by Windows Repair. All of them is a lie.

Windows Repair can be uninstalled by by stopping all processes with random name and also kill its files. Then, all registry entries added and modified by Windows Repair must be cleared by using Windows Registry Editor.

Windows Repair should be removed immediately!


Windows Repair Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Unregister DLL files
%Documents and Settings%\All Users\Application Data\[random].dll

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s's:/ogn:/uyu:/dyd:/c'u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/'wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v'w:/rbs:'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"


Remove Folders and Files
%Documents and Settings%\[User Name]\Start Menu\Programs\Windows Repair\Uninstall Windows Repair.lnk
%Documents and Settings%\[User Name]\Start Menu\Programs\Windows Repair\Windows Repair.lnk
%Documents and Settings%\[User Name]\Start Menu\Programs\Windows Repair
%Documents and Settings%\[User Name]\Desktop\Windows Repair.lnk
%Documents and Settings%\All Users\Application Data\[random].dll
%Documents and Settings%\All Users\Application Data\[random].exe
%Documents and Settings%\All Users\Application Data\[random]

No comments:

Post a Comment