Remove CryptoLocker

CryptoLocker is a program that was detected in the beginning of September 2013. CryptoLocker encrypt certain files in computer using RSA and AES encryption. When CryptoLocker has finished encrypting your files, it will display a CryptoLocker payment program that force you to send $100 or $300 in order to decrypt the files. This screen will also display a timer stating that you have 72 hours, or 3 days, to pay the ransom or CryptoLocker will delete your encryption key and you will not have any way to decrypt your files. This ransom must be paid using MoneyPak vouchers or Bitcoins. Once you send the payment and it is verified, the program will decrypt the files that it encrypted. However, don't believe whatever displayed. All of them is a lie! They just want to cheat your hard-earn money.

CryptoLocker states that Your important files encryption produced on this computer: photos, videos, documents, etc. Here is a complete list of encrypted files, and you can personally verify this. Encryption was produced using a unique public key RSA-2048 generated for this computer. To decrypt files you need to obtain the private key. The single copy of the private key, which will allow you to decrypt the files, located on a secret server on the Internet; the server will destroy the key after a time specified in this window. After that, nobody and never will be able to restore files... To obtain the private key for this computer, which will automatically decrypt fiels, you need to pay 300 USD / 300 EUR / similar amount in another currency. Any attempt to remove or damage this software will lead to the immediate destruction fo the private key by server.

CryptoLocker should be removed immediately!


Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "CryptoLocker"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "*CryptoLocker"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[Random]"

Remove Folders and Files
%UserProfile%\[random].exe
%UserProfile%\[random]

Read More

Remove Antimalware

Antimalware is a fake antivirus program that produce fake alert that there are several vulnerabilities are detected in the computer which Antimalware is installed. Antimalware installs into the computer and will configure itself to start automatically (in registry) when Windows boot. Antimalware will scan the computer and WILL SURELY detect many malwares in the computer. In fact, it is just a fake alert. The intention of Antimalware is to urge the user to register Antimalware by purchasing the full version of Antimalware so that to earn some money from the user. Antimalware cannot detect and remove any malware / virus / trojan.

Antimalware can be removed by stopping the processes and removing the files by using Emsisoft HiJackFree. Then the user should remove the registry entries added or modified by Antimalware shown in the removal guide below. All files related to Antimalware must be deleted. Antimalware provide fake features such as Scan PC, Quarantine, Updates, Memory Protection, File System, Anti-Spyware and even Firewall, but none of them can really protect the computer from any kind of malwares.

Antimalware should be removed immediately!

Antimalware Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\
HKEY_CLASSES_ROOT\.key
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%Temp%\\.exe -r "%1" %*"
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "(Default)" ="%Temp%\\.exe -r "%1" %*"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = 1
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar "Enabled" = 0
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = 0
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "EnabledV9" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:48738"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "" = "%Temp%\\.exe"
HKEY_CLASSES_ROOT\.key "(Default)" = "regfile"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = 1

Remove Folders and Files
%temp%\[random]

Read More

Remove Security Cleaner Pro

Security Cleaner Pro is a fake antivirus program created to urge the user to buy the full version of Security Cleaner Pro in order to earn some profit. Don't ever buy it as it is a cheat! Security Cleaner Pro install itself into the computer without confirmation of the users and it start automatically when the windows boot. Security Cleaner Pro produce fake virus warning alert consistently to force the user to purchase the full version so that to remove the malwares. Security Cleaner Pro is nothing more than a scam and plagiarized antispyware program

Security Cleaner Pro provide fake features such as Perform Scan, Internet Security, Personal Security, Proactive Defense, Firewall, Settings, Complete PC Protection, Automating Updating, Protection against bank account fraud, Self-protection from malware etc. All of them cannot protect the computer from any kind of malware.

Security Cleaner Pro can be removed by using Emsisoft HiJackFree to stop the processes and kill the files from the hard drive. Then, the user has to restore the registry entries added and modified by Security Cleaner Pro. Finally, all the file related to Security Cleaner Pro must be deleted from the hard drive. All of them has been shown in the removal guide below.

Security Cleaner Pro should be removed immediately!
Security Cleaner Pro Removal Guide
Kill Process
shl.exe

Delete Registry
HKCU\Software\Protection
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "ProtSoftware Inc" = "%AppData%\shl.exe"

Remove Folders and Files
%StartMenu%\Programs\Startup\shl.exe
%AppData%\shl.exe
File Location Notes:

%AppData% refers to the current users Application Data folder. By default, this is C:\Documents and Settings\[Current User]\Application Data for Windows 2000/XP. For Windows Vista and Windows 7 it is C:\Users\[Current User]\AppData\Roaming.

%StartMenu% refers to the Windows Start Menu. For Windows 95/98/ME it refers to C:\windows\start menu\, for Windows XP, Vista, NT, 2000 and 2003 it refers to C:\Documents and Settings\[Current User]\Start Menu\, and for Windows Vista/7/8 it is C:\Users\[Current User]\AppData\Roaming\Microsoft\Windows\Start Menu.

Read More

Remove Fake Antivirus 1.94

Remove Fake Antivirus is used to remove the most popular fake antiviruses. What is fake antivirus? This is a type of virus/malwares which disguises itself to be an antivirus. It infects your computer when you accidentally click a link in a website which will download the malware into your computer and run automatically when your windows boot. It scan the infected computer and produces fake alert warnings. It convinces you that your computer is in danger and urge you to purchase a useless copy of the fake antivirus. These fake antiviruses must be removed immediately.

Remove Fake Antivirus 1.94 is used to remove:

1. Antivirus Security Pro
2. Attentive Antivirus
3. Antivirus System File
4. iON Internet Security
5. Smart Security
6. PC Defender Plus
7. Windows Proprietary Advisor
8. Windows Smart Warden
9. Home Malware Cleaner
10. Strong Malware Defender
11. AV Security 2012
12. Data Recovery
13. Wolfram Antivirus
14. Security Protection
15. Windows Antivirus 2011
16. Mega Antivirus 2012
17. AVG Antivirus 2011
18. PC Security 2011
19. ThinkPoint
20. ThinkSmart
21. Antivirus 8
22. Security Tool
23. My Security Shield
24. Antivirus 7
25. Antivirus GT
26. Defense Center
27. Protection Center
28. Sysinternals Antivirus
29. Security Master AV
30. CleanUp Antivirus
31. Security Toolbar
32. Digital Protection
33. XP Smart Security 2010
34. Antivirus Suite
35. Vista Security Tool 2010
36. Total XP Security
37. Security Central
38. Security Antivirus
39. Total PC Defender 2010
40. Vista Antivirus Pro 2010
41. Your PC Protector
42. Vista Internet Security 2010
43. XP Guardian
44. Vista Guardian 2010
45. Antivirus Soft
46. XP Internet Security 2010
47. Antivir 2010
48. Live PC Care
49. Malware Defense
50. Internet Security 2010
51. Desktop Defender 2010
52. Antivirus Live
53. Personal Security
54. Cyber Security
55. Alpha Antivirus
56. Windows Enterprise Suite
57. Security Center
58. Control Center
59. Braviax
60. Windows Police Pro
61. Antivirus Pro 2010
62. PC Antispyware 2010
63. FraudTool.MalwareProtector.d
64. Winshield2009.com
65. Green AV
66. Windows Protection Suite
67. Total Security 2009
68. Windows System Suite
69. Antivirus BEST
70. System Security
71. Personal Antivirus
72. System Security 2009
73. Malware Doctor
74. Antivirus System Pro
75. WinPC Defender
76. Anti-Virus-1
77. Spyware Guard 2008
78. System Guard 2009
79. Antivirus 2009
80. Antivirus 2010
81. Antivirus Pro 2009
82. Antivirus 360
83. MS Antispyware 2009
84. IGuardPC or I Guard PC
85. Additional Guard

(all of them are fake antivirus which are
viruses or trojans) and other fake antivirus from your computer.

Remove Fake Antivirus is used to remove
fake antivirus which are viruses or trojans.

CLICK HERE TO DOWNLOAD
Latest updated :
Link I Link II
md5: 158fcb42598e5c655d3323b61d1e1b7f
Pad File 1: rfa.xml
Pad File 2: rfa.xml

Recent Posts

• Remove Security Cleaner Pro
• Remove Sinergia Cleaner
• Remove Titan Antivirus 2013
• Remove Antivirus Security Pro
• Remove Antiviral Factory 2013
• Remove PC Defender 360
• Remove Live Security Professional
• Remove Attentive Antivirus
• Remove Antivirus System
• Remove PC Health Boost
• Remove Internet Security Premium
• Remove System Doctor 2014
• Remove Win 7 Security Cleaner Pro
• Remove System Care Antivirus
• Remove  iON Internet Security
• Remove AVASoft Professional Antivirus
• Remove Vista Security Cleaner Pro
• Remove XP Smart Defender Pro
• Remove Win 7 Smart Defender Pro
• Remove Vista Smart Defender Pro
• Remove Vista Smart Defender
• Remove Win 7 Smart Defender
• Remove XP Smart Defender
• Remove Vista Defender Plus
• Remove Win 7Defender Plus 
• Remove XP Defender Plus  
• Remove Disk Antivirus Professional
• Remove Smart Security
• Remove XP Security Plus 2013
• Remove Vista Security Plus 2013
• Remove Win 7 Defender
• Remove XP Defender
• Remove Vista Defender
• Remove Win Server Defender
• Remove Win 7 Home Security Pro 2013
• Remove Super AV 2013
• Remove Microsoft Antivirus 2013
• Remove Vista Internet Security Pro 2013
• Remove XP Internet Security Pro 2013
• Remove Win 7 Internet Security Pro 2013
• Remove PC Defender Plus
• Remove Advanced System Protector
• Remove XP Antivirus Pro 2013
• Remove Vista Antivirus Pro 2013
• Remove Win 7 Antivirus Pro 2013
• Remove Vista Security Pro 2013
• Remove XP Antispyware Pro 2013
• Remove Vista Antispyware Pro 2013
• Remove Win 7 Antispyware Pro 2013
• Remove Windows Protection Maintenance
• Remove Win 8 Home Security 2013
• Remove Win 8 Antivirus 2013
• Remove Win 8 Antispyware 2013
• Remove Win 8 Security Suite 2013
• Remove Micorsoft Essential Security Pro 2013
• Remove Vista Total Security 2013
• Remove Win 7 Total Security 2013
• Remove File Restore
• Remove Win 7 Security 2013
• Remove Windows Antipiracy Virus
• Remove XP Internet Security 2013
• Remove XP Antispyware 2013
• Remove Win 7 Home Security 2013
• Remove XP Security 2013
• Remove Vista Security 2013
• Remove Vista Antispyware 2013
• Remove Win 8 Defender 2013
• Remove XP Home Security 2013
• Remove Win 7 Antispyware 2013
• Remove Win 7 Internet Security 2013
• Remove XP Defender 2013
• Remove System Progressive Protection
• Remove Galileo System Cleaner
• Remove Great Antispy 2012
• Remove Win 8 Security System
• Remove PC Utility Kit
• Remove Windows Secure Workshop
• Remove Windows Safety Series
• Remove Windows Secure Workstation

Read More