SysChat

SysChat (http://www.syschat.com/forum.php)
-   Security (http://www.syschat.com/tutorials/security/)
-   -   Malware Catcher 2009 Manual Removal: Windows XP and Vista (http://www.syschat.com/malware-catcher-2009-manual-removal-windows-4630.html)

KarlM 05-23-2009 09:46 AM

Malware Catcher 2009 Manual Removal: Windows XP and Vista
 
The Malware Catcher 2009 (also known as Malware Catcher) is yet another bogus anti-spyware and anti-malware program that can infect your system and render it susceptible to malicious code and attacks. Malware Catcher 2009 displays fake security and system alerts to coerce the user into purchasing the paid variant of Malware Catcher. This code will drastically slow down your computer and will most likely place your privacy, as well as important data, at risk.

Malware Catcher 2009: Manual Removal Instructions

1. Halt the Malware Catcher 2009 process. Start by pressing the Ctrl, Alt, and Delete keys all at the same time – this gives you access to the Windows Task Manager. Pressing the Ctrl, Alt, and Escape keys simultaneously will also open the Task Manager. Select the MCatcher.exe file, and then click on the ‘End Process’ option.

2. Locate and erase the Malware Catcher 2009 files. At your desktop, go to ‘Start’, and then ‘Search’, and go to the option ‘For Files and Folders’. Enter the file names listed below, and then choose ‘Local Hard Drives’ (typically the C: drive).

• c:\Program Files\MalwareCatcher\MCatcher.exe
• c:\Program Files\MalwareCatcher\MalwareCatcher.url
• %UserProfile%\Start Menu\Programs\MalwareCatcher
• %UserProfile%\Start Menu\MalwareCatcher.lnk
• %UserProfile%\Start Menu\Programs\MalwareCatcher\MalwareCatcher.lnk
• %UserProfile%\Start Menu\Programs\MalwareCatcher\MalwareCatcher Website.lnk
• %UserProfile%\Desktop\MalwareCatcher.exe
• C:\%UserProfile%\Recent\cb.tmp
• C:\%UserProfile%\Recent\CLSV.dll
• C:\%UserProfile%\Recent\CLSV.drv
• C:\%UserProfile%\Recent\eb.tmp
• C:\%UserProfile%\Recent\energy.exe
• C:\%UserProfile%\Recent\energy.sys
• C:\%UserProfile%\Recent\energy.tmp
• C:\%UserProfile%\Recent\exec.dll
• C:\%UserProfile%\Recent\fix.sys
• C:\%UserProfile%\Recent\PE.drv
• C:\%UserProfile%\Recent\PE.sys
• C:\%UserProfile%\Recent\std.drv
• C:\%UserProfile%\Recent\tjd.exe
• C:\%UserProfile%\Recent\tjd.tmp
• C:\%UserProfile%\Start Menu\Malware Catcher 2009.lnk
• C:\%UserProfile%\Start Menu\Programs\Malware Catcher 2009.lnk
• c:\Documents and Settings\All Users\Application Data\7c69f0c
• c:\Documents and Settings\All Users\Application Data\7c69f0c\MCatcher.exe
• c:\Documents and Settings\All Users\Application Data\7c69f0c\SystemFeed
• c:\Documents and Settings\All Users\Application Data\7c69f0c\SystemFeed\vd952342.bd
• c:\Documents and Settings\All Users\Application Data\SystemFeed
• c:\Documents and Settings\All Users\Application Data\SystemFeed\mctch.ini
• C:\%UserProfile%\Application Data\Malware Catcher 2009
• C:\%UserProfile%\Application Data\Malware Catcher 2009\Instructions.ini
• C:\%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Malware Catcher 2009.lnk
• C:\%UserProfile%\Desktop\Malware Catcher 2009.lnk

3. Remove the Malware Catcher 2009 registry values.
For Windows XP systems, go to ‘Start’, and then got to ‘Run’. Type ‘regedit’ in the entry box, and then click on ‘Ok’ for the Registry Editor. You can also make your way through the subkey if you already know which value you are want to edit. Pressing the Ctrl and F keys can also help you find the subkey with the associated value for editing.
For Windows Vista systems, go to ‘Start’, and then enter ‘regedit’ within the search box to access the Registry Editor.
Remove this value: HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run “MalwareCatcher”
Keep in mind that editing registry keys is potentially complicated, and thus, quite risky. You may end up botching the procedure (and your system, as well); so it comes recommended to create a system or registry backup before moving on with the removal process or making any changes.


All times are GMT -4. The time now is 08:31 AM.


Copyright © 2005-2013 SysChat.com


1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54