Remove PCAntiMalware. Description and removal instructions

 
Title: PCAntiMalware
Also known as: PC AntiMalware
Type: Spyware
Severity scale:PCAntiMalware severity is 68  (68 / 100)
 
PCAntiMalware is a rogue anti-spyware application created by the same group of people who have released also fake spyware removers Cleaner2009 and AntiMalwareSuite. Usually, PCAntiMalware is promoted through the use of Trojans. Those trojan viruses display fake security notifications and state that user's computer is infected. When user clicks on these fake notifications, PCAntiMalware is installed automatically into his computer.

Once PC AntiMalware is installed and active, it is configured to start automatically and to perform fake system scan. After the fake scan, this parasite reports various bogus results about spyware and malware infections. However, PCAntiMalware won't remove any of these infections until you purchase the program. While the rogue is running, it will also flood the system with fake and annoying security notifications.

If you think that your computer is infected with PCAntiMalware, use our free removal guide stated below to remove PCAntiMalware from the system immediately.


Related files: bootrem.exe, RTMonitor.dat, quaratine.dat, vbpv.dat, TEBase.dat, MalwareDB.dat, knownfiles.dat, UserAgent.dll, uninstall.ico, unins000.exe, unins000.dat, threatnet.ini, threatnet.dat, tasks.dat, Summary.dat, shellext.xml, shellext.dll, settings.ini, scanlog.xml, readme.rtf, pv.dat, PP.exe, PCAM.xml, PCAM.exe, msvcr71.dll, msvcp71.dll, mfc71.dll, license.rtf, lapv.dat, InstUp.exe, dbupdate.dat, AutoProcess.dat, atl71.dll, AsAgents.xml, asagents.dll, appupdate.dat, Activate.dat, Uninstall PCAntiMalware.lnk, PCAntiMalware.lnk, PCAntiMalware on the Web.url, Contact customer support.url

PCAntiMalware properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

PCAntiMalware snapshot:
PCAntiMalware removal

Automatic PCAntiMalware removal:

remover for PCAntiMalware

PCAntiMalware manual removal:

Kill processes:
InstUp.exe PCAM.exe PP.exe unins000.exe bootrem.exe
Delete registry values:
HKEY_CURRENT_USER\Software\PCAntiMalware
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\ExplorerWAS
HKEY_CLASSES_ROOT\amshellext.ShellHook
HKEY_CLASSES_ROOT\amshellext.ShellHook.1
HKEY_CLASSES_ROOT\CLSID\{_CLSID_WAShellExecuteCheck}
HKEY_CLASSES_ROOT\CLSID\{4567AB12-EDED-4675-AF10-BA15EDDB4D7A}
HKEY_CLASSES_ROOT\CLSID\{4ADD95DA-B25D-4d21-9C5C-05FC6DE05860}
HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\ExplorerWAS
HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\ExplorerWAS
HKEY_CLASSES_ROOT\Interface\{4567AB12-A884-4CA6-B739-CEDB12FEF096}
HKEY_CLASSES_ROOT\TypeLib\{4567AB12-7DFC-4C46-BD8F-41259D169A0D}
HKEY_CLASSES_ROOT\TypeLib\{4567AB12-AE24-4FD6-B479-E2B464F32DA6}
HKEY_CLASSES_ROOT\washellext.WASContextMenu
HKEY_CLASSES_ROOT\washellext.WASContextMenu.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PSAMAP_is1
HKEY_LOCAL_MACHINE\SOFTWARE\PCAntiMalware
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks "{4ADD95DA-B25D-4D21-9C5C-05FC6DE05860}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "UPSAMAP 4.1.228.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "PCAntiMalware"
Unregister DLLs:
AsAgents.dll atl71.dll mfc71.dll msvcp71.dll msvcr71.dll shellext.dll UserAgent.dll

Delete files:
Contact customer support.url PCAntiMalware on the Web.url PCAntiMalware.lnk Uninstall PCAntiMalware.lnk Activate.dat appupdate.dat AsAgents.dll AsAgents.xml atl71.dll AutoProcess.dat dbupdate.dat InstUp.exe lapv.dat license.rtf mfc71.dll msvcp71.dll msvcr71.dll PCAM.exe PCAM.xml PP.exe pv.dat readme.rtf scanlog.xml settings.ini shellext.dll shellext.xml Summary.dat tasks.dat threatnet.dat threatnet.ini unins000.dat unins000.exe uninstall.ico UserAgent.dll knownfiles.dat MalwareDB.dat TEBase.dat vbpv.dat quaratine.dat RTMonitor.dat bootrem.exe
Delete directories:
c:\Documents and Settings\All Users\Application Data\PCAntiMalware
c:\Documents and Settings\All Users\Application Data\PCAntiMalware\Data
c:\Documents and Settings\All Users\Application Data\PCAntiMalware\Data\Abbr
c:\Documents and Settings\All Users\Application Data\PCAntiMalware\Data\ProductCode
c:\Documents and Settings\All Users\Start Menu\Programs\PCAntiMalware
c:\Program Files\PCAntiMalware
c:\Program Files\PCAntiMalware\database

Other programs to remove PCAntiMalware:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 28/04/09
Information updated: 28/04/09

Additional resources related to PCAntiMalware:

Attention: If you know or you have a website or page about PCAntiMalware removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about PCAntiMalware parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: