Anti Malware Suite Removal Instructions
Title: Anti Malware Suite
Also Known as: AntiMalwareSuite, AntiMalware Suite, Anti MalwareSuite
Severity scale:
You need to protect your computer with bona fide antispyware application or it may become infected with a rogue antispyware program like Anti Malware Suite. This rogue will use a Trojan horse like Zlob to infect your computer. Once it has weaseled its way into your system, it will systematically try to scare you into buying its product.
Anti Malware Suite will use an icon in your task tray that will display warnings about imaginary malware infections. It may even generate fake security messages that advise you to allow a scan. The results of these methods ultimately lead up to a sales pitch for the full version of the rogue. But the full version is completely useless. It only causes pop-up ads, steals your money, slows down your computer, stifles your Internet connection, and alters your browser settings.
AKA:
Cleaner 2009
Anti Malware Suite file contents:
ams_free_setup[1].exe
QuickInstallPack.exe
AMS_FreeInstaller[1].exe
AMS_FreeSetup.exe, Install AntiMalwareSuite.lnk
Uninstall AntiMalwareSuite.lnk
AntiMalwareSuite.lnk
QuickInstallPack.lnk
QuickInstallPack on the Web.url
Uninstall QuickInstallPack.lnk
QuickInstallPack
AMS_FreeSetup.exe
data.ini
iercpt.dll
data.ini
AMS_FreeSetup.exe.ini
QuickInstallPack.exe
update.log
Install AntiMalwareSuite.lnk
QuickInstallPack.lnk
AntiMalwareSuite.lnk
nprcpt.dll
AntiMalwareSuite.lnk
AntiMalwareSuite Online
anual.url
Uninstall AntiMalwareSuite.lnk
Contact customer support.url
AntiMalwareSuite on the Web.url
ProductCode
AntiMalwareSuite
bootrem.exe
MalwareDB.dat
TEBase.dat
vbpv.dat
RTMonitor.dat
UserAgent.dll
updatedb.dat
updateapp.dat
up.dat
knownfiles.dat
unins000.exe
unins000.dat
threatnet.ini
threatnet.dat
tasks.dat
Summary.dat
pv.dat
ps.dat
shellext.dll
scanlog.xml
readme.rtf
shellext.xml
uninstall.ico
msvcr71.dll
msvcp71.dll
manual.pdf
license.rtf
lapv.dat
InstUp.exe
settings.ini
mfc71.dll
dbupdate.dat
AutoProcess.dat
atl71.dll
AsAgents.xml
AsAgents.dll
appupdate.dat
Activate.dat
AMS.xml
AMS.exe
PaymentPage.exe
quaratine.dat
If Anti Malware Suite has infected your computer, remove it immediately. To remove it manually, you should stop the following processes:
ams_free_setup[1].exe
QuickInstallPack.exe
AMS_FreeInstaller[1].exe
AMS_FreeSetup.exe
Then, delete the following registry entries:
4ADD95DA-B25D-4d21-9C5C-05FC6DE05860
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\4ADD95DA-B25D-4D21-9C5C-05FC6DE05860
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “UAMS 4.1.221.0″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks “{4ADD95DA-B25D-4D21-9C5C-05FC6DE05860}”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “AntiMalwareSuite”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “QuickInstallPack”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4CDC21D-43BE-4101-A1EF-E379F134771E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QuickInstallPack
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AMS_is1
HKEY_CLASSES_ROOT\washellext.WASContextMenu.1
HKEY_CLASSES_ROOT\washellext.WASContextMenu
HKEY_CLASSES_ROOT\TypeLib\{4567AB12-AE24-4FD6-B479-E2B464F32DA6}
HKEY_CLASSES_ROOT\TypeLib\{A6FBD2E4-1C7E-4EAB-80DD-01DE2645566A}
HKEY_CLASSES_ROOT\TypeLib\{4567AB12-7DFC-4C46-BD8F-41259D169A0D}
HKEY_CLASSES_ROOT\CLSID\{4567AB12-EDED-4675-AF10-BA15EDDB4D7A}
HKEY_CLASSES_ROOT\CLSID\{D4CDC21D-43BE-4101-A1EF-E379F134771E}
HKEY_CLASSES_ROOT\CLSID\{4ADD95DA-B25D-4d21-9C5C-05FC6DE05860}
HKEY_CLASSES_ROOT\AppID\{3A9377A6-BE7F-485D-908C-D44114691389}
HKEY_CLASSES_ROOT\Interface\{4567AB12-A884-4CA6-B739-CEDB12FEF096}
HKEY_CLASSES_ROOT\Interface\{59C345BA-3D5E-44E3-9D10-D3848AF15D73}
HKEY_CLASSES_ROOT\AppID\iercpt.DLL
HKEY_CLASSES_ROOT\amshellext.ShellHook.1
HKEY_CLASSES_ROOT\amshellext.ShellHook
HKEY_CLASSES_ROOT\iercpt.iercptbho.1
HKEY_CLASSES_ROOT\iercpt.iercptbho
HKEY_CURRENT_USER\Software\AntiMalwareSuite
Unregister these DLLs:
%UserProfile%\Local Settings\Application Data\qip\iercpt.dll
c:\Program Files\Mozilla Firefox\plugins\nprcpt.dll
c:\Program Files\AntiMalwareSuite\UserAgent.dll
c:\Program Files\AntiMalwareSuite\shellext.dll
c:\Program Files\AntiMalwareSuite\msvcr71.dll
c:\Program Files\AntiMalwareSuite\msvcp71.dll
c:\Program Files\AntiMalwareSuite\mfc71.dll
c:\Program Files\AntiMalwareSuite\atl71.dll
c:\Program Files\AntiMalwareSuite\AsAgents.dll
Then, delete these files:
ams_free_setup[1].exe
QuickInstallPack.exe
AMS_FreeInstaller[1].exe
AMS_FreeSetup.exe
Install AntiMalwareSuite.lnk
Uninstall AntiMalwareSuite.lnk
AntiMalwareSuite.lnk
AntiMalwareSuite Online Manual.url
AntiMalwareSuite on the Web.url
AntiMalwareSuite
%UserProfile%\Start Menu\Programs\QuickInstallPack\QuickInstallPack.lnk
%UserProfile%\Start Menu\Programs\QuickInstallPack\QuickInstallPack on the Web.url
%UserProfile%\Start Menu\Programs\QuickInstallPack\Uninstall QuickInstallPack.lnk
%UserProfile%\Start Menu\Programs\QuickInstallPack
%UserProfile%\Local Settings\Temp\AMS_FreeSetup.exe
%UserProfile%\Local Settings\Application Data\UAMS_QIP\data.ini
%UserProfile%\Local Settings\Application Data\UAMS_QIP
%UserProfile%\Local Settings\Application Data\qip\iercpt.dll
%UserProfile%\Local Settings\Application Data\qip\data.ini
%UserProfile%\Local Settings\Application Data\qip\AMS_FreeSetup.exe.ini
%UserProfile%\Local Settings\Application Data\qip\QuickInstallPack.exe
%UserProfile%\Local Settings\Application Data\qip
%UserProfile%\Application Data\update.log
%UserProfile%\Desktop\Install AntiMalwareSuite.lnk
%UserProfile%\Desktop\QuickInstallPack.lnk
%UserProfile%\Desktop\AntiMalwareSuite.lnk
c:\Program Files\Mozilla Firefox\plugins\nprcpt.dll
c:\Documents and Settings\All Users\Start Menu\Programs\AntiMalwareSuite\AntiMalwareSuite.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\AntiMalwareSuite\AntiMalwareSuite Online Manual.url
c:\Documents and Settings\All Users\Start Menu\Programs\AntiMalwareSuite\Uninstall AntiMalwareSuite.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\AntiMalwareSuite\Contact customer support.url
c:\Documents and Settings\All Users\Start Menu\Programs\AntiMalwareSuite\AntiMalwareSuite on the Web.url
c:\Documents and Settings\All Users\Start Menu\Programs\AntiMalwareSuite
c:\Documents and Settings\All Users\Application Data\AntiMalwareSuite\Data\Abbr
c:\Documents and Settings\All Users\Application Data\AntiMalwareSuite\Data\ProductCode
c:\Documents and Settings\All Users\Application Data\AntiMalwareSuite\Data
c:\Documents and Settings\All Users\Application Data\AntiMalwareSuite
c:\WINDOWS\system32\bootrem.exe
c:\Program Files\AntiMalwareSuite\quaratine.dat\#post_quarantine
c:\Program Files\AntiMalwareSuite\Download
c:\Program Files\AntiMalwareSuite\database\MalwareDB.dat
c:\Program Files\AntiMalwareSuite\database\TEBase.dat
c:\Program Files\AntiMalwareSuite\database\vbpv.dat
c:\Program Files\AntiMalwareSuite\database
c:\Program Files\AntiMalwareSuite\RTMonitor.dat
c:\Program Files\AntiMalwareSuite\UserAgent.dll
c:\Program Files\AntiMalwareSuite\updatedb.dat
c:\Program Files\AntiMalwareSuite\updateapp.dat
c:\Program Files\AntiMalwareSuite\up.dat
c:\Program Files\AntiMalwareSuite\database\knownfiles.dat
c:\Program Files\AntiMalwareSuite\unins000.exe
c:\Program Files\AntiMalwareSuite\unins000.dat
c:\Program Files\AntiMalwareSuite\threatnet.ini
c:\Program Files\AntiMalwareSuite\threatnet.dat
c:\Program Files\AntiMalwareSuite\tasks.dat
c:\Program Files\AntiMalwareSuite\Summary.dat
c:\Program Files\AntiMalwareSuite\pv.dat
c:\Program Files\AntiMalwareSuite\ps.dat
c:\Program Files\AntiMalwareSuite\shellext.dll
c:\Program Files\AntiMalwareSuite\scanlog.xml
c:\Program Files\AntiMalwareSuite\readme.rtf
c:\Program Files\AntiMalwareSuite\shellext.xml
c:\Program Files\AntiMalwareSuite\uninstall.ico
c:\Program Files\AntiMalwareSuite\msvcr71.dll
c:\Program Files\AntiMalwareSuite\msvcp71.dll
c:\Program Files\AntiMalwareSuite\manual.pdf
c:\Program Files\AntiMalwareSuite\license.rtf
c:\Program Files\AntiMalwareSuite\lapv.dat
c:\Program Files\AntiMalwareSuite\InstUp.exe
c:\Program Files\AntiMalwareSuite\settings.ini
c:\Program Files\AntiMalwareSuite\mfc71.dll
c:\Program Files\AntiMalwareSuite\dbupdate.dat
c:\Program Files\AntiMalwareSuite\AutoProcess.dat
c:\Program Files\AntiMalwareSuite\atl71.dll
c:\Program Files\AntiMalwareSuite\AsAgents.xml
c:\Program Files\AntiMalwareSuite\AsAgents.dll
c:\Program Files\AntiMalwareSuite\appupdate.dat
c:\Program Files\AntiMalwareSuite\Activate.dat
c:\Program Files\AntiMalwareSuite\AMS.xml
c:\Program Files\AntiMalwareSuite\AMS.exe
c:\Program Files\AntiMalwareSuite\PaymentPage.exe
c:\Program Files\AntiMalwareSuite\quaratine.dat
c:\Program Files\AntiMalwareSuite
Finally, remove the following directories:
%ProgramFiles%\AntiMalwareSuite
%AllUsersProfile%\Start Menu\Programs\AntiMalwareSuite
%AllUsersProfile%\Application Data\AntiMalwareSuite
As you can see, removing Anti Malware Suite manually take a lot of work. What is worse is that if you don’t remove it all at once, the program will regenerate itself. That is why it is better to use an authentic antispyware program like SpyZooka.
SpyZooka is the best in antispyware. It has been developed by a company that is in good standing with the Better Business Bureau. SpyZooka has won several awards and is the only genuine antispyware with a 100% spyware removal guarantee. Since it uses a robot to hunt down new forms of malware and constantly update its database, it will always be ready to offer you the best service possible. Protect your computer from spyware the right way. Protect it with SpyZooka.
