February 29, 2008

EasySpywareCleaner -Misleading Application & Removal Tips

EasySpywareCleaner is a misleading application which gives fake or overstated reports about security threats on the computer.

Source: Symantec


EasySpywareCleaner Removal Tips

1. Follow standard procedure for virus removal

2. Delete these values and subkeys added to registry.


1. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"EasySpywareCleaner" = "C:\Program Files\EasySpywareCleaner\EasySpywareCleaner.exe"

Delete the following registry subkeys:

1. HKEY_CLASSES_ROOT\CLSID\{1FF382F8-D15A-4579-8B1B-5E70AA7FD9C5}
2. HKEY_CLASSES_ROOT\CLSID\{733428B8-CE6A-4A0C-9DB8-46B5CA63AB7C}
3. HKEY_CLASSES_ROOT\CLSID\{E0B4FBB2-2A99-47D4-9735-1084AD5EDD35}
4. HKEY_CLASSES_ROOT\Interface\{229C952A-531A-4716-AF7B-DB4082E2D77D}
5. HKEY_CLASSES_ROOT\Interface\{ABA843BB-72EE-4BA3-A987-67FA2A28ECE1}
6. HKEY_CLASSES_ROOT\Interface\{BF7601E2-2F66-43B7-9F8B-1E7673AD5E6B}
7. HKEY_CLASSES_ROOT\Interface\{DC47E1E9-35BC-4566-8A8C-CADD3C960704}
8. HKEY_CLASSES_ROOT\TypeLib\{3C92267F-5B8B-4343-B79A-138427A10EB8}
9. HKEY_LOCAL_MACHINE\SOFTWARE\EasySpywareCleaner
10. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Easy Spyware Cleaner


No comments: