FrEn

E-mail Print

Free malware removal tool to remove Da Vinci Encryption System
Written by Administrator  |  Tuesday, 23 February 2010 16:30
AddThis Social Bookmark Button
Da Vinci Encryption System is a rogue Antispyware, a scareware, it's a malware that pretends to be a good tool. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm that there are more malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is Da Vinci Encryption System. It invites you to purchase a license to remove malware, do not, it's a scam, you need a license for a malware? Uninstall Da Vinci Encryption System immediately from your system.

To remove Da Vinci Encryption System (Uninstall Da Vinci Encryption System)

  • Download this free removal tool for Da Vinci Encryption System
  • Extract it
  • Launch
  • Click on the delete button

Da Vinci Encryption System will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

  • DaVinci.exe

Files :

  • %DesktopDir%\Da Vinci Encryption System.lnk
  • %Temp%\nsg2.tmp\LicenseVer.dll
  • %Temp%\nsg2.tmp\Processes.dll
  • %Programs%\Da Vinci\Da Vinci help system.lnk
  • %Programs%\Da Vinci\Da Vinci Homesite.lnk
  • %Programs%\Da Vinci\Da Vinci Support.lnk
  • %Programs%\Da Vinci\Da Vinci.lnk
  • %Programs%\Da Vinci\Release notes.lnk
  • %Programs%\Da Vinci\Remove Da Vinci.lnk
  • %ProgramFiles%\Open\Da Vinci\DaVinci.dll
  • %ProgramFiles%\Open\Da Vinci\DaVinci.exe
  • %ProgramFiles%\Open\Da Vinci\DaVinci.exe.manifest
  • %ProgramFiles%\Open\Da Vinci\DaVinci.SDX
  • %ProgramFiles%\Open\Da Vinci\DaVinci.url
  • %ProgramFiles%\Open\Da Vinci\DaVinciEn.chm
  • %ProgramFiles%\Open\Da Vinci\Relnotes.txt
  • %ProgramFiles%\Open\Da Vinci\Support.url
  • %ProgramFiles%\Open\Da Vinci\tvtool13.dll
  • %ProgramFiles%\Open\Da Vinci\Uninstall.exe
  • %ProgramFiles%\Open\Da Vinci\updater.exe
  • %ProgramFiles%\Open\Da Vinci\updaterGUI.exe
  • %System%\drivers\DaVinciDr.sys
  • %System%\tshellx.dll
  • %System%\wbem\Performance\WmiApRpl_new.ini
  • %Temp%\nsg2.tmp
  • %Programs%\Da Vinci
  • %ProgramFiles%\Open
  • %ProgramFiles%\Open\Da Vinci

Registry

Registry keys created

  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\tshellx
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5A599BB0-0217-4dfe-9D8A-8DDF9E252FE5}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5A599BB0-0217-4dfe-9D8A-8DDF9E252FE5}\ProgID
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f268c962-e470-11d3-86da-00a0d212b26d}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f268c962-e470-11d3-86da-00a0d212b26d}\InprocServer32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\tshellx
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.dvf
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.tef
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Da VinciFile
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Da VinciFile\DefaultIcon
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TriviaFile
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TriviaFile\shellex
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TriviaFile\shellex\ContextMenuHandlers
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TriviaFile\shellex\ContextMenuHandlers\tshellx
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Da Vinci Encryption System 1.18
  • HKEY_LOCAL_MACHINE\SOFTWARE\DaVinci
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DaVinciDr
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DaVinciDr\Parameters
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DaVinciDr
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DaVinciDr\Parameters

Registry values created

  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\tshellx
    • (Default) = "{f268c962-e470-11d3-86da-00a0d212b26d}"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5A599BB0-0217-4dfe-9D8A-8DDF9E252FE5}\ProgID
    • (Default) = "Project.0"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5A599BB0-0217-4dfe-9D8A-8DDF9E252FE5}
    • (Default) = "z5d7pmixgyi3w"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f268c962-e470-11d3-86da-00a0d212b26d}
    • \InprocServer32
    • (Default) = "%System%\tshellx.dll"
    • ThreadingModel = "Apartment"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f268c962-e470-11d3-86da-00a0d212b26d}
    • (Default) = "tshellx"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\tshellx
    • (Default) = "{f268c962-e470-11d3-86da-00a0d212b26d}"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.dvf
    • (Default) = "Da VinciFile"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.tef
    • (Default) = "TriviaFile"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Da VinciFile\DefaultIcon
    • (Default) = "tshellx.dll,0"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TriviaFile\shellex\ContextMenuHandlers\tshellx
    • (Default) = "{f268c962-e470-11d3-86da-00a0d212b26d}"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    • DaVinci = ""%ProgramFiles%\Open\Da Vinci\DaVinci.exe" -minimized -boot"

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
    • {f268c962-e470-11d3-86da-00a0d212b26d} = "tshellx"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Da Vinci Encryption System 1.18
    • DisplayName = "Da Vinci Encryption System 1.18 (remove only)"
    • UninstallString = "%ProgramFiles%\Open\Da Vinci\Uninstall.exe"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Borland\Locales
    • %ProgramFiles%\Open\Da Vinci\DaVinci.exe = "ITA"
    • %ProgramFiles%\Open\Da Vinci\tvtool13.dll = "ITA"
  • HKEY_LOCAL_MACHINE\SOFTWARE\DaVinci
    • CheckShare = 0x00000000
    • FirstRun = 0x00000001
    • rbcrc = 0x00000001
    • PasswordSecurityLevel = 0x00000001
    • RunOnWinStart = 0x00000001
    • MinimizeOnClose = 0x00000000
    • IfFirstUpdate = 0x00000001
    • Timeout = 0x00000001
    • UseTimeout = 0x00000000
    • ClpKeyHK = ""
    • UnmountKeyHK = ""
    • HddData = "13441600"
    • Abbr = "DVC"
    • InstallPath = "%ProgramFiles%\Open\Da Vinci"
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DaVinciDr\Parameters
    • ConcurrentConnections = 0x00000018
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DaVinciDr
    • Group = "Base"
    • ErrorControl = 0x00000000
    • Start = 0x00000001
    • Type = 0x00000001
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DaVinciDr\Parameters
    • ConcurrentConnections = 0x00000018
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DaVinciDr
    • Group = "Base"
    • ErrorControl = 0x00000000
    • Start = 0x00000001
    • Type = 0x00000001

 

Download

 
 

Add comment


Security code
Refresh

Related articles
Latest posts

  • Free malware removal tool for Guard Online

    Written by %s admin 10/10/2011
    Guard Online is a another rogue Antispyware from the OpenCloud and AV Guard Online familly, it's a malware that pretends to be an Antivirus. Guard Online conducts a fake scan of your system; you are…
    Read more...

  • Free malware removal tool to remove AV Guard Online

    Written by %s admin 05/10/2011
    AV Guard Online is a another rogue Antispyware from the OpenCloud familly, it's a malware that pretends to be an Antivirus. AV Guard Online conducts a fake scan of your system; you are warned by a…
    Read more...

  • Free removal tool to remove Security Guard 2012

    Written by %s admin 05/10/2011
    Security Guard 2012 is a another rogue Antispyware from the OpenCloud familly, it's a malware that pretends to be an Antivirus. Security Guard 2012 conducts a fake scan of your system; you are warned…
    Read more...

  • Free removal tool for Advanced PC Shield 2012

    Written by %s admin 01/10/2011
    Advanced PC Shield 2012 is a another rogue Antispyware, it's a malware that pretends to be an Antivirus. Advanced PC Shield 2012 conducts a fake scan of your system; you are warned by a fake alarm…
    Read more...

  • Security Sphere 2012 Free Removal Tool

    Written by %s admin 01/10/2011
    Security Sphere 2012 is another spyware from the Security Tool family. Security Sphere 2012 is not a legit program; it's a fake, a counterfeit. Security Sphere 2012 claims to fix your system, but…
    Read more...
.
Information | Contact

© All Rights Reserved. net-studio.org 2009