|
Master Utilities Removal Tool
|
|
Written by Administrator |
Thursday, 01 September 2011 17:43
|
|
Master Utilities is another spyware from the HDD repair, HDD Tools, HDD Low... family. Master Utilities is not a legit program; it's a fake, a counterfeit. Master Utilities claims to fix your system, but not, do not trust on it. Do not believe in the scan results of this pretentious, it's a scam, and the only flaw in your system is this Master Utilities. Master Utilities is just another fake Antispyware whose purpose is to trick you to pay this useless program. Uninstall Master Utilities immediately from your system.

To remove Master Utilities (Uninstall Master Utilities)
- Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
- Choose Start computer in SAFE MODE with network support (This removal tool should work under normal mode as well)
- Download this free removal tool for Master Utilities
- Extract it
- Launch
- Click on the delete button
Master Utilities will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :
Files :
- %Temp%\smtmp\[NUMBER]
- %AppData%\[random]
- %AppData%\[random].exe
- %AppData%\~[random]
- %StartMenu%\Programs\Master Utilities\
- %StartMenu%\Programs\Master Utilities\Master Utilities.lnk
- %StartMenu%\Programs\Master Utilities\Uninstall Master Utilities.lnk
- %UserProfile%\Desktop\Master Utilities.lnk
Registry
New registry keys created
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
New registry values created
- HKEY_CURRENT_USER\Software
- 12B79064-EB17-4f82-9DFE-B975BD26D1DC = ""
- HKEY_CURRENT_USER\Software\Microsoft
- BootData = 43 00 3A 00 5C 00 44 00 6F 00 63 00 75 00 6D 00 65 00 6E 00 74 00 73 00 20 00 61 00 6E 00 64 00 20 00 53 00 65 00 74 00 74 00 69 00 6E 00 67 00 73 00 5C 00 41 00 6C 00 6C 00 20 00 55 00 73 00 65 00 72 00 73 00 5C 00 41 00 70 00
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
- WarnOnZoneCrossing = 0x00000000
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations
- LowRiskFileTypes = ".zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;.scr;"
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
- SaveZoneInformation = 0x00000001
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- [Random].exe = "%CommonAppData%\[Random].exe"
- [Random] = "%AppData%\[Random].exe"

Remove Master Utilities Software manually :
- Restart your computer in safe mode :
- Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
- Choose Start computer in SAFE MODE
- Open the infected account
- Open explorer, paste into the address bar the text %Temp% then press enter, it will open C:\Documents and Settings\Christian\Local Settings\Temp on my computer
- Remove all .exe files and all random folders under this path
- Open explorer, paste into the address bar the text %AppData% then press enter, it will open C:\Documents and Settings\Christian\Local Settings\Application Data on my computer
- Remove all .exe files and all random folders under this path
- Remove Master Utilities.lnk from your desktop
- Remove Master Utilities.lnk from your start menu
- Click on the start menu button then click on run
- Type msconfig and press enter
- Go to the Startup tab
- Uncheck all random character keys in it and click on the OK button
- Restart your computer in normal mode
This will solve the problem but you can run the removal tool to remove the other registry keys and values.
|