Wednesday, September 28, 2011

Remove Advanced PC Shield 2012

Advanced PC Shield 2012 Removal Guide
Advanced PC Shield 2012 is a fake antivirus program that perform like a real antivirus such as Kaspersky Anti-Virus, AVG Free Antivirus, Avira AntiVir etc. Advanced PC Shield 2012 infects the computer when the user accidentally downloads a trojan from a website which provide online videos. Advanced PC Shield 2012 will start automatically when Windows boot. Then, Advanced PC Shield 2012 will scan the computer and produce fake scan results and display many fake alerts to urge the user to purchase the full version of Advanced PC Shield 2012 in order to remove the detected malwares.

Advanced PC Shield 2012 provide fake features such as Perform Scan, Complete PC Protection, Protection against bank account fraud, Self protection from malware, Internet Security, Personal Security, Proactive Protection and Firewall. All of these features cannot protect computer from any attack of trojan, malware or virus. It will ask the user to activate and get full realtime protection with Advanced PC Shield 2012.

Advanced PC Shield 2012 should be removed immediately!

Advanced PC Shield 2012 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[random]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range1 "*" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range1 ":Range" = '127.0.0.1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"

Remove Folders and Files
%LocalAppData%\[random].exe
%StartMenu%\Programs\Advanced PC Shield 2012
%System%\drivers\[random].sys
%UserProfile%\Desktop\Buy Advanced PC Shield 2012.lnk

File Location Notes:

%System% is a variable that refers to the Windows System folder. By default this is C:\Windows\System for Windows 95/98/ME, C:\Winnt\System32 for Windows NT/2000, or C:\Windows\System32 for Windows XP/Vista/7.

%UserProfile% refers to the current user's profile folder. By default, this is C:\Documents and Settings\[Current User] for Windows 2000/XP, C:\Users\[Current User] for Windows Vista/7, and c:\winnt\profiles\[Current User] for Windows NT.

%LocalAppData% refers to the current users Local settings Application Data folder. By default, this is C:\Documents and Settings\[Current User]\Local Settings\Application Data for Windows 2000/XP. For Windows Vista and Windows 7 it is C:\Users\[Current User]\AppData\Local.

%StartMenu% refers to the Windows Start Menu. For Windows 95/98/ME it refers to C:\windows\start menu\, for Windows XP, Vista, NT, 2000 and 2003 it refers to C:\Documents and Settings\[Current User]\Start Menu\, and for Windows Vista/7 it is C:\Users\[Current User]\AppData\Roaming\Microsoft\Windows\Start Menu.

No comments:

Post a Comment