HomeSiteUrls.com/Security manual removal:
Kill processes:
nvctrl.exe msmsgs.exe icmntr.exe icthis.exe ictun.exe icun.exe isfmm.exe isfmntr.exe isfun.exe VideoAccessCodecInstall.exe pmmon.exe spwoqbmv.exe xbaqktfv.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70d17a5f-ef27-4295-90f5-20ad6f24834f}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Explorer Secure Bar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IExplorer Security Plug-in
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}
Unregister DLLs:gtawclv.dll
Delete files:Online Security Guide.url Security Troubleshooting.url Online Security Guide.url Security Troubleshooting.url
Presents itself as homesiteurls.com/security/[insert name of big cat here]
Looks like Finders AV Software
Downloads variants of the MacDefender Fake AV
I have not confirmed this, though, as I own a Mac OS X computer not.
Post Comment: