martes, 21 de mayo de 2013

Como eliminar : System Care Antivirus

Manual removal is all about using your own knowledge to get rid of the malware and this method can be risky at times. If you don’t know how to find the infected files and correct registry entries, you won’t be able to remove the malware fully. On the other hand, If you leave traces of the malware on your computer, System Care Antivirus will return back in no time and start bugging you again.

For this reason, please follow manual removal steps at your own risk and don’t delete any files just because you think that they are infected.

1. Before you do anything else, you need to stop System Care Antivirus from running in your computer so that It can’t interfere with removal process. To terminate System Care Antivirus forcefully, you need to download Process Explorer and save it as “explorer.exe” on desktop. Once you’ve got Process Explorer on your computer, run it and End task System Care Antivirus.

2. Now find these malicious files and delete them permanently :

%CommonAppData%\<random numbers and chars>\
%CommonAppData%\<random numbers and chars>\<random numbers and chars>
%CommonAppData%\<random numbers and chars>\<random numbers and chars>.exe
%CommonAppData%\<random numbers and chars>\<random numbers and chars>.ico

Please don’t delete any files from your computer If you feel that you’re deleting the wrong onces.

3. After deleting malicious files, edit the registry and remove malicious registry entries so that malware can’t launch itself at startup. To run registry editor, click on “Start—>Run” type, “regedit” and click OK button.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “<random numbers and chars>”

If you follow manual removal steps correctly, you should be able to remove System Care Antivirus. Please also keep in mind that manual removal instructions may get outdated at anytime. Although we try to keep the removal guides fresh but If the malware changes its way of working, you can always try your hands on Automatic Removal as this method is supposed to work all the time. If you’ve any questions, please feel free to post them here.