Thursday, September 1, 2011

Remove Master Utilities malware and prevent PC slowdowns and future virus attacks

Master Utilities makes any PC infected with its own executables that disable a number of system features. For example, during Windows session the malware may gradually disable audio drivers, block network connections, and then freeze computer system.  These  event develop  when the adware is showing its nag screens (menu, scan window etc.) and alerts. There are only several sets of names, among which the program select one by random choice to show users a scary movie on viruses or errors swarming on the PC.
Several dozens of infections of different types are applied to propagate the pretended enemy  of such programs  through the vulnerabilities detected by those adware friendly parasites.  In such a weird fashion, the pretended antispyware conquers computer system relying on viruses.
Removal of Master Utilities adware is important  not only in term of convenience. It is a critical measure aimed as ensuring system security.
Click here to get rid of Master Utilities and eliminate the danger posed by the fake system\security tool, as well as to ensure extermination of other viruses, including the t infection which support counterfeited utilities.

Master Utilities screenshots:




Manual removal guidelines:
Delete infected files:
%LocalAppData%\
%LocalAppData%\.exe
%LocalAppData%\~
%LocalAppData%\~
%StartMenu%\Programs\Master Utilities\
%StartMenu%\Programs\Master Utilities\Master Utilities.lnk
%StartMenu%\Programs\Master Utilities\Uninstall Master Utilities.lnk
%Temp%\smtmp\
%Temp%\smtmp\1
%Temp%\smtmp\1
%Temp%\smtmp\2
%Temp%\smtmp\3
%Temp%\smtmp\4
%UserProfile%\Desktop\Master Utilities.lnk
Delete infected registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU "MRUList"

No comments: