Title: GAIN

Type: Adware

Remove GAIN. Removal instructions

Severity scale:

(37 / 100)

GAIN is a prevalent adware parasite that tracks user browsing habits, downloads and displays undesirable commercial advertisements. GAIN is installed by some ad-supported software. Once executed, it creates several folders and files, drops infected objects in default system directory and modifies the registry, so that the threat runs on every Windows startup.

GAIN properties:
• Shows commercial adverts
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic GAIN removal:

remover for GAIN

SpyHunter is recommended remover to uninstall GAIN. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove GAIN using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

We are testing STOPzilla's efficiency at removing GAIN (2006-01-11 18:38:23)

Malwarebytes Anti Malware

download | review

We are testing Malwarebytes Anti Malware's efficiency at removing GAIN (2006-01-11 18:38:23)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing GAIN (2006-01-11 18:38:23)

XoftSpySE Anti Spyware

download | review

GAIN manual removal:

FORUM:
Discuss GAIN in
spyware removal forum

Kill processes:
gmt.exe, cmesys.exe, trickler_[XVS].exe, fsg_[XVS].exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Trickler
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\CMESys
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com
HKEY_LOCAL_MACHINE\SOFTWARE\hlnpan
HKEY_CLASSES_ROOT\HDPlugin.HDPluginCtrl
HKEY_CLASSES_ROOT\HDPlugin.HDPluginCtrl.1
HKEY_CLASSES_ROOT\ttjltept
HKEY_CLASSES_ROOT\CLSID\{DBAE7000-01EC-4162-8FEB-8A27AC937CA0}
HKEY_CLASSES_ROOT\Interface\{22D34833-06F9-4CE6-9FF7-CE4DA0BA351D}
HKEY_CLASSES_ROOT\TypeLib\{2EC7A834-9C5E-4154-BADC-0D86A2EDC82D}

HELP:
how to remove registry entries

Delete files:
gmt.exe, cmesys.exe, trickler_[XVS].exe, fsg_[XVS].exe, gainplugin.dll, hdplugin[XVS].dll

HELP:
how to remove harmful files

Delete directories:
C:\Program Files\Common Files\GMT
C:\Program Files\Common Files\CMEII
C:\Documents and Settings\All Users\Start Menu\Programs\GAIN Publishing
Misc:
[XVS] is the version number.

Exact file location:
gmt.exe - C:\Program Files\GMT
cmesys.exe - C:\Program Files\Common Files\CMEII
trickler_[XVS].exe, fsg_[XVS].exe - C:\Windows\Temp or C:\Winnt\Temp
gainplugin.dll - C:\Windows\Downloded Program Files or C:\Winnt\Downloaded Program Files

Information added: 2004-03-19 10:00:00
Information updated: 2006-01-11 16:01:08

Additional resources related to GAIN:

Attention: If you know or you have a website or page about GAIN removal, feel free to add a link to this list: add url

more resources

Andrei

Gator Corporation has changed their name to Claria Corporation.

Reply »

2004 03 05

gatorSUX

why arn't there any cracks for NoAdware/SpyHunter/Xoftspy to remove this shit spyware? I don't want to have to pay to remove a piece of shit I didn't want in the first place

Reply »

2004 05 01

Guest

even after its detected on my virus scan 75 percent of these adware spyware shit cant be deleted

Reply »

2004 12 13

Nobody's Business

Trying to hide from their past. Gator is nearly impossible to remove without software help. It hogs resources like crazy.

Reply »

2005 02 04

BMR777

Gator is Evil, especially since it uses deceptive Active X pop-ups to lure unsuspecting victims to installing it or a GAIN program. It makes me sick!

Reply »

2005 02 26

Guest

I needs help, I was removed GAIN from the computer , and I want to download back

Reply »

2006 01 11

Post Comment:

Attention: Use this form only if you have additional information about GAIN parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.