Malware Protector 2008 manual removal:
Kill processes:
%ProgramFiles%\\shcev9j0e1b1\\shcev9j0e1b1.exe %ProgramFiles%\\shcev9j0e1b1\\shcev9j0e1b1.exe.local %ProgramFiles%\\shcev9j0e1b1\\Uninstall.exe
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”SMshcev9j0e1b1″ = “C:\Program Files\shcev9j0e1b1\shcev9j0e1b1.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\shcev9j0e1b1\”DisplayName” = “MProtector”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\shcev9j0e1b1\”UninstallString” = “C:\Program Files\shcev9j0e1b1\uninstall.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”RegistrationUrl” = “http://www.malwareprotector2008.com/buy/”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”RegistrationDiscUrl” = “http://www.malwareprotector2008.com/purchase/”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”ADVid” = “”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”" = “C:\Program Files\shcev9j0e1b1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”InstallDir” = “C:\Program Files\shcev9j0e1b1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”domain” = “malwareprotector2008.com”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”SoftID” = “MProtector”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”ScanDepth” = “2″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”ScanSystemOnStartup” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”AutomaticallyUpdates” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”MinimizeOnStart” = “0″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”BackgroundScan” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”BackgroundScanTimeout” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”MGuid” = “{0DB56EFC-EE39-447F-94AB-73409F51AC2E}”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”InstallationID” = “{F2D62961-6358-4CCF-B806-7664421D16B2}”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”LastTimeStamp” = “B8″
HKEY_USERS\S-1-5-21-1172441840-534431857-1906119351-500\Software\Microsoft\Windows\ShellNoRoam\MUICache\”C:\Program Files\shcev9j0e1b1\shcev9j0e1b1.exe” = “shcev9j0e1b1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”DatabaseVersion” = “2.1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”ProgramVersion” = “2.1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”EngineVersion” = “2.1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”GuiVersion” = “2.1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”ProxyName” = “”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”ProxyPort” = “0″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”ScanPriority” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”DaysInterval” = “7″
Unregister DLLs:%ProgramFiles%\\shcev9j0e1b1\\MFC71.dll %ProgramFiles%\\shcev9j0e1b1\\MFC71ENU.DLL %ProgramFiles%\\shcev9j0e1b1\\shcev9j0e1b1Skin.dll %ProgramFiles%\\shcev9j0e1b1\\msvcp71.dll %ProgramFiles%\\shcev9j0e1b1\\msvcr71.dll
Delete files:%UserProfile%\\Application Data\\Microsoft\\Internet Explorer\\Quick Launch\\Malware Protector 2008.lnk %UserProfile%\\Application Data\\shcev9j0e1b1 C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Malware Protector 2008\\Register Malware Protector 2008.lnk C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Malware Protector 2008\\Uninstall.lnk C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Malware Protector 2008.lnk %ProgramFiles%\\shcev9j0e1b1\\database.dat %ProgramFiles%\\shcev9j0e1b1\\license.txt C:\\Documents and Settings\\All Users\\Desktop\\Malware Protector 2008.lnk C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Malware Protector 2008\\How to Register Malware Protector 2008.lnk C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Malware Protector 2008\\License Agreement.lnk C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Malware Protector 2008\\Malware Protector 2008.lnk
Post Comment:
Attention: Use this form only if you have additional information about Malware Protector 2008 parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Comments from visitors:
1. by
I have no idea how this got on my computer, but after deleting everything that was listed, everything was running smoothly again.
Thanks,
Kyle Lewis