Remove Home Security Solutions phony antivirus that annoys progressively

Sunday, December 25, 2011

Remove Home Security Solutions phony antivirus that annoys progressively

Home Security Solutions is programmed to popup misleading alerts and fake scan windows at increasing frequency. There is no correlation between security state (number of infections, firewall security, junk files) of allegedly analyzed PC and the results announced by the above software product. Remove Home Security Solutions or else the cheating goes on until you are not able running any software as the popups by the annoying informer have occupied its working space completely.
In the other words, removal of Home Security Solutions is meant to clean your PC of self-announced security software that turns out to be a malicious counterfeit in reality. Free scanner specifically tested against its ability to delete the counterfeit under review, yet being capable of completely disinfecting targeted computer, is waiting you to start its download right here.

Home Security Solutions screenshots:

Manual removal directions:

Delete infected files:

%AllUsersProfile%\{random}\
%AllUsersProfile%\{random}\14.mof
%AllUsersProfile%\{random}\3178.mof
%AllUsersProfile%\{random}\46.mof
%AllUsersProfile%\{random}\6113.mof
%AllUsersProfile%\{random}\HSE.ico
%AllUsersProfile%\{random}\HSESys
%AllUsersProfile%\{random}\Quarantine Items
%AllUsersProfile%\HSYITSQGE
%AllUsersProfile%\HSYITSQGE\HSLGILTOGE.cfg
%AppData%\Home Security Solutions\
%AppData%\Home Security Solutions\Instructions.ini
%AppData%\Microsoft\Internet Explorer\Quick Launch\Home Security Solutions.lnk
%AppData%\Microsoft\Windows\Recent\CLSV.tmp
%AppData%\Microsoft\Windows\Recent\DBOLE.dll
%AppData%\Microsoft\Windows\Recent\PE.sys
%AppData%\Microsoft\Windows\Recent\SICKBOY.drv
%AppData%\Microsoft\Windows\Recent\SICKBOY.sys
%AppData%\Microsoft\Windows\Recent\delfile.dll
%AppData%\Microsoft\Windows\Recent\eb.dll
%AppData%\Microsoft\Windows\Recent\eb.sys
%AppData%\Microsoft\Windows\Recent\energy.dll
%AppData%\Microsoft\Windows\Recent\gid.tmp
%AppData%\Microsoft\Windows\Recent\pal.sys
%AppData%\Microsoft\Windows\Recent\ppal.drv
%AppData%\Microsoft\Windows\Recent\runddlkey.exe
%AppData%\Microsoft\Windows\Recent\snl2w.drv
%AppData%\Microsoft\Windows\Start Menu\Programs\Home Security Solutions.lnk
%AppData%\Microsoft\Windows\Start Menu\Home Security Solutions.lnk
%UserProfile%\Desktop\Home Security Solutions.lnk

Delete registry keys:

HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\91\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Vid {137E7700-3573-11CF-AE69-08002B2E1262}
HKCU\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes\URL http://findgala.com/?&uid=231&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Download\RunInvalidSignatures 1
HKCU\Software\Microsoft\Internet Explorer\PRS http://127.0.0.1:27777/?inj=%ORIGINAL%
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\URL http://findgala.com/?&uid=231&q={searchTerms}
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\89770803
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\lib/5.00231
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\UID 231
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun 1
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Home Security Solutions
HKLM\SOFTWARE\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKLM\SOFTWARE\Classes\HS2d7_231.DocHostUIHandler
HKCU\Software\Microsoft\Internet Explorer\Download\CheckExeSignatures “no”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorAdmin “2″
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorUser “2″
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA “1″