As soon as you find an instance of this malware on your computer, you should take steps to initiate removal. In order to delete it, you need to stop its processes, unregister its DLL files, delete its files and folders and remove its registry entries.
File Removal Procedures
The first step you need to take for full removal is to stop the following processes from executing:
- nc.exe
- checker.exe
Next, it is necessary to unregister the following DLL file:
- tmp.dll
The next step in removal is to delete the following files and folders:
- C:\NetworkControl\
- C:\NetworkControl\checker.exe
- C:\NetworkControl\list
- C:\NetworkControl\nc.exe
- C:\NetworkControl\tmp.dll
- C:\NetworkControl\tpm.dll
- C:\WINDOWS\Fonts\segoeui.ttf
- %UserProfile%\Local Settings\Temp\abc
- %UserProfile%\Local Settings\Temp\i.bat
After these steps have been completed, it no longer resides on your hard disk. While in most cases following the manual removal procedures is sufficient, due to the prevalent nature of NC malicious software it is recommended to scan the entire computer using genuine antivirus software such as Spyware Doctor with Antivirus. In this way, not only that other hidden or yet unknown NC malicious components can be discovered but also other infections, if any, may be revealed and dealt with.
Registry Removal Procedures
The deletion of files and folders alone is not sufficient to completely remove NC. You need to remove the following keys and settings from the Windows Registry for complete the removal:
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = "0″
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnPostRedirect" = "0″
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "NetworkControl"
Now your computer is safe from this harmful Trojan. For more useful malware removal tips, visit spywareremovalguides.com.
No comments:
Post a Comment