Jul 25, 2011

Learn how to remove Ultimate Scan parasite

Ultimate Scan is an awkward attempt to mimic antivirus. It is not that the appearance of the program sounds amateurish, but the way the viruses, so to speak, are disclosed betrays the fraud. That is, a proper computer scan takes time. If you have ever ordered one for your PC from genuine security solution, regardless of its quality it probably could take no less than few hours. Remove Ultimate Scan that often offers full summary of computer scan in a few minutes on its installation. That is the best indirect proof that the product is not true, but just a package containing nothing of what is written on the label.

Introduction of the useless program is a task fulfilled via misleading online ads, including fabricated scanners, as well as several trojans exploit various vulnerabilities of computer systems taking into account version peculiarities, to drop the misleading content onto targeted machines.
Get rid of Ultimate Scan to quit its fake scan once and for all !


Type: Rogue Anti-Spyware
Malware Author: Unknown

Threat Level: High
Screenshot:
How to remove Ultimate Scan manually:
It's possible to remove Ultimate Scan manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

%AllUsersProfile%\Application Data\~
%AllUsersProfile%\Application Data\~r
%AllUsersProfile%\Application Data\.dll
%AllUsersProfile%\Application Data\.exe
%AllUsersProfile%\Application Data\
%AllUsersProfile%\Application Data\.exe
%UserProfile%\Desktop\Ultimate Scan.lnk
%UserProfile%\Start Menu\Programs\Ultimate Scan\
%UserProfile%\Start Menu\Programs\Ultimate Scan\Uninstall Ultimate Scan.lnk
%UserProfile%\Start Menu\Programs\Ultimate Scan\Ultimate Scan.lnk

Remove registry entries:


HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ’1′
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “Hidden” = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “ShowSuperHidden” = 0′


Please be careful because manual removal of Ultimate Scan may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

No comments:

/