Tuesday, April 7, 2009

How to remove Pcantimalwaresolution.com hijacker


Malware Description:

On Pcantimalwaresolution.com website, cyber-scammers are trying to spread rogue anti-spyware these days. Indeed, Pcantimalwaresolution.com is home to the utility called AntiMalwareSuite, which is an infamous fake anti-spyware application. Pcantimalwaresolution.com is designed to attract most of the users’ attention to the made-up advantages of AntiMalwareSuite and the option of downloading its freeware to check it out. On Pcantimalwaresolution.com, AntiMalwareSuite is described as a “powerful antidote against harmful spyware”, while its only genuine mission is to mislead people into thinking they have malware on their computers. If you do download AntiMalwareSuite on Pcantimalwaresolution.com, your system will be flooded by its obsessive pop-ups and fake scanners alarming you about threats you allegedly have on board. As a solution, you will then be recommended to install AntiMalwareSuite full version in order to remove the detected hazards. In fact, you will have to purchase this software, moreover, all it detects is fabricated and has nothing to do with your system. These are typical tactics which are common with most rogue anti-spywares, and Pcantimalwaresolution.com is a component of this malicious plan. You will probably get redirected to Pcantimalwaresolution.com over and over, until you use a legitimate removal tool to get rid of it. Plus, it’s important to check your PC for additional malware which may have accompanied Pcantimalwaresolution.com hijacker when it challenged your system.


Malware Type: Browser Hijackers

Malware Author: Unknown

Threat Level: High

Advice: Immediately remove

How to remove Pcantimalwaresolution.com hijacker manually:

Manual removal of Pcantimalwaresolution.com hijacker and attendant malware is feasible if you have sufficient expertise in dealing with program files, system processes, .dll files and registry entries.

The associated files to be deleted are listed below:

%Program Files%\AntiMalwareSuite
%Program Files%\AntiMalwareSuite\quaratine.dat
%Program Files%\AntiMalwareSuite\Activate.dat
%Program Files%\AntiMalwareSuite\AMS.xml
%Program Files%\AntiMalwareSuite\appupdate.dat
%Program Files%\AntiMalwareSuite\AsAgents.xml
%Program Files%\AntiMalwareSuite\AutoProcess.dat
%Program Files%\AntiMalwareSuite\dbupdate.dat
%Program Files%\AntiMalwareSuite\lapv.dat
%Program Files%\AntiMalwareSuite\license.rtf
%Program Files%\AntiMalwareSuite\manual.pdf
%Program Files%\AntiMalwareSuite\ps.dat
%Program Files%\AntiMalwareSuite\pv.dat
%Program Files%\AntiMalwareSuite\readme.rtf
%Program Files%\AntiMalwareSuite\scanlog.xml
%Program Files%\AntiMalwareSuite\settings.ini
%Program Files%\AntiMalwareSuite\shellext.xml
%Program Files%\AntiMalwareSuite\Summary.dat
%Program Files%\AntiMalwareSuite\tasks.dat
%Program Files%\AntiMalwareSuite\threatnet.dat
%Program Files%\AntiMalwareSuite\threatnet.ini
%Program Files%\AntiMalwareSuite\unins000.dat
%Program Files%\AntiMalwareSuite\uninstall.ico
%Program Files%\AntiMalwareSuite\up.dat
%Program Files%\AntiMalwareSuite\updateapp.dat
%Program Files%\AntiMalwareSuite\updatedb.dat
%Program Files%\AntiMalwareSuite\database
%Program Files%\AntiMalwareSuite\database\knownfiles.dat
%Program Files%\AntiMalwareSuite\database\MalwareDB.dat
%Program Files%\AntiMalwareSuite\database\TEBase.dat
%Program Files%\AntiMalwareSuite\database\vbpv.dat
%Program Files%\AntiMalwareSuite\Download
%Program Files%\AntiMalwareSuite\quaratine.dat\#post_quarantine
%Program Files%\AntiMalwareSuite\RTMonitor.dat

The related registry entries to be removed are as follows:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “AntiMalwareSuite”

No comments:

Post a Comment