PCAntiMalware Removal Instructions
Title: PCAntiMalware
Also Known as: PCAntiMalware
Severity scale:
As with all types of rogue antispyware, PCAntiMalware is designed to con people into buying a program that infected a computer in the first place. The growth of rogue antispyware like PCAntiMalware has exploded over the last few years, many because these types of programs make it easy for scammers to con people out of money with no risk of getting caught. Just like all types of rogue antispyware PCAntiMalware floods a computer’s screen with scare warnings to convince consumers that the only way to protect their computers is to buy a full version of a program that is really just spyware. PCAntiMalware is a bit different from other type of rogue application because it is harder to remove manually. Though it can be removed without the help of a good malware removal program, it can come back fairly quickly if it is not removed in its entirety.
AKA:
PCAntiMalwareScannerSetup.exe
Pcantimalware.com
PCAntiMalware file contents:
PCAntiMalwareScannerSetup[1].exe
c:\WINDOWS\system32\bootrem.exe
c:\Program Files\PCAntiMalware\unins000.exe
c:\Program Files\PCAntiMalware\PP.exe
c:\Program Files\PCAntiMalware\PCAM.exe
c:\Program Files\PCAntiMalware\InstUp.exe
Recommended Action: Immediate removal.
Manually removing PCAntiMalware take a bit of time and can be difficult. First, start by rebooting the computer in safe mode, followed by turning off these executables.
PCAntiMalwareScannerSetup[1].exe
c:\WINDOWS\system32\bootrem.exe
c:\Program Files\PCAntiMalware\unins000.exe
c:\Program Files\PCAntiMalware\PP.exe
c:\Program Files\PCAntiMalware\PCAM.exe
c:\Program Files\PCAntiMalware\InstUp.exe
After the executables are turned off the user needs to remove the associated .dll files.
c:\Program Files\PCAntiMalware\UserAgent.dll
c:\Program Files\PCAntiMalware\shellext.dll
c:\Program Files\PCAntiMalware\atl71.dll
c:\Program Files\PCAntiMalware\AsAgents.dll
c:\Program Files\PCAntiMalware\msvcr71.dll
Then the user must clean up these registry entries.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks “{4ADD95DA-B25D-4D21-9C5C-05FC6DE05860}”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “UPSAMAP 4.1.228.0?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PSAMAP_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “PCAntiMalware”
HKEY_LOCAL_MACHINE\SOFTWARE\PCAntiMalware
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\ExplorerWAS
HKEY_CLASSES_ROOT\TypeLib\{4567AB12-AE24-4FD6-B479-E2B464F32DA6}
HKEY_CLASSES_ROOT\TypeLib\{4567AB12-7DFC-4C46-BD8F-41259D169A0D}
HKEY_CLASSES_ROOT\Interface\{4567AB12-A884-4CA6-B739-CEDB12FEF096}
HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\ExplorerWAS
HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\ExplorerWAS
HKEY_CLASSES_ROOT\CLSID\{4567AB12-EDED-4675-AF10-BA15EDDB4D7A}
HKEY_CLASSES_ROOT\CLSID\{4ADD95DA-B25D-4d21-9C5C-05FC6DE05860}
HKEY_CLASSES_ROOT\CLSID\{_CLSID_WAShellExecuteCheck}
HKEY_CLASSES_ROOT\washellext.WASContextMenu.1
HKEY_CLASSES_ROOT\washellext.WASContextMenu
HKEY_CURRENT_USER\Software\PCAntiMalware
HKEY_CLASSES_ROOT\amshellext.ShellHook.1
HKEY_CLASSES_ROOT\amshellext.ShellHook.
If removal is not achieved manually using these methods, then it might be necessary to install Spyzooka, a 100% guaranteed malware removal program.
Recommended Action: Immediate removal.
Manually removing PCAntiMalware take a bit of time and can be difficult. First, start by rebooting the computer in safe mode, followed by turning off these executables.
