Tuesday, November 22, 2011

Remove Win32/Cycbot.G and its own malicious antispyware

Win32/Cycbot.G has become notorious due to its installing its own antispyware. The antispyware it installs is virus-friendly and fake. It only can disable genuine security solution, and is harmless for real infections.
Example of phony antispyware names promoted by the trojan includes such common knowledge counterfeits as ThinkPoint, family of fake Microsoft Security Essentials alerts, Windows Simple Protector
Payload of the infection is not limited to fake antimalware promotion only. There are yet a dozen of tasks the malware is dedicated to. Hence removal of Win32/Cycbot.G is important not just as a prevention of pretended antivirus.
Click here to start free scan and get rid of Win32/Cycbot.G and the malwares it has already managed to inject into your PC, as well as to repair damage caused by the G-bot.




Win32/Cycbot.G manual removal guide:
Delete infected files:
%AllUsersProfile%\Application Data\~
%AllUsersProfile%\Application Data\~r
%AllUsersProfile%\Application Data\.dll
%AllUsersProfile%\Application Data\.exe
%AllUsersProfile%\Application Data\
%AllUsersProfile%\Application Data\.exe

Delete infected registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ’0′

No comments: