Tuesday, June 26, 2012

Removal of Windows Custom Management malware

Windows Custom Management is a pretended antivirus technology installed on XP\Vista\Windows 7 computer by trojan. The trojan can infect any computer system, though it is compatible only with Windows.
The misleading software might be also installed by alternate methods. In particular, several websites have been found to promote the program. However, they were eliminated very soon after their detection due to the reasons which were not quite clear, but most likely because they were ineffective method as compared to trojan-installer technology.
Get Rid of Windows Custom Management or else the adware will keep displaying its annoying error reports. It notifies users of overheated RAM memory, virus detection, firewall problems of inability to read hard drive and wrong memory formatting.
The adware has annoying habit of interrupting running software. It is a typical situation that the adware announces software error, and certain software actually shuts downs all of a sudden. The situation is set up by hackers and is but another reason to remove Windows Custom Management.
Whatever is your reason to exterminate the infection, click here to start free scan and launch PC disinfection.

Windows Custom Management screenshot:


Windows Custom Management manual removal guide:

Delete infected files:
%AppData%\NPSWF32.dll
%AppData%\Protector-[random 3 characters].exe
%AppData%\Protector-[random 4 characters].exe
%AppData%\W34r34mt5h21ef.dat
%AppData%\result.db
%CommonStartMenu%\Programs\Windows Custom Management .lnk
%Desktop%\Windows Custom Management .lnk
Delete Windows Custom Management registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorAdmin” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorUser” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “EnableLUA” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-4-27_2″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “tovvhgxtud”
HKEY_CURRENT_USER\Software\ASProtect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\[random].exe

No comments: