How to Remove Pcsecuritylab Virus

The PCSecurityLab virus installs itself on your computer's hard drive without your permission when you surf infected websites or download infected files. The virus changes the settings on your Web browser so that any website you attempt to visit will redirect you to a different page offering you fake anti-virus software. To completely remove the virus from your computer, you will need to stop the virus from running and then delete all of the registry entries it created.

Difficulty: Moderate

Instructions

1. 
    
   The Processes Tab

   Open your computer's task manager window by simultaneously pressing the "Ctrl," Alt," and "Delete" keys. Click on the tab labeled "Processes" to bring up the list of program files currently in use by your operating system.

2. Arrange the program files alphabetically for easier navigation by clicking on the "Image Name" tab. Use the scroll bar at the right side of the window to navigate through the list of program files. Find the entry named "vvgeowbv.exe" and click on it. Click on the "End Process" button at the bottom right side of the window to shut down the program.

3. 
    
   Search Box

   Find the entry named "Pcsecuritylab.com" and click on it. Click on the "End Process" button. Close down the task manager window and then open the "Start" menu. Click on the search box.

4. Type in the phrase "PCSecurityLab" and hit the "Enter" key. Right-click on all of the entries that will appear in the search results window and then choose "Delete." Repeat the process of searching for and deleting the files named "dpqaqlqx.bin," "stfv.bin," and "acespy.exe."

5. 
    
   The Find Box

   Search for the file named "Regedit." Double-click on the search result, when it appears to open the computer's registry editor. Bring up the "Find" box by hitting the "Ctrl" and "F" keys simultaneously.

6. Type the phrase: "HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{00000000-d9e3-4bc6-a0bd-3d0ca4be5271}" into the find box and hit the "Enter" key. Right-click on the registry entry when it pops up in the search results and choose "Delete."

7. Find and delete the registry entries named: "HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{00000012-890e-4aac-afd9-eff6954a34dd}," "HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{029e02f0-a0e5-4b19-b958-7bf2db29fb13}," "HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{06dfedaa-6196-11d5-bfc8-00508b4a487d}," "HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{51641ef3-8a7a-4d84-8659-b0911e947cc8}," "HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{53C330D6-A4AB-419B-B45D-FD4411C1FEF4}," "HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6abc861a-31e7-4d91-b43b-d3c98f22a5c0}," "HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ca1d1b05-9c66-11d5-a009-000103c1e50b}," "HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{e690500e-1dd1-11b2-a943-9ecd016314d0}," and "HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{e9306072-417e-43e3-81d5-369490beef7c}."

8. Restart the computer to save the registry changes and finish removing the PcSecurityLab virus from your computer.

Tips & Warnings

• Always save backup copies of all of your important files to a secure external source such as a CD-RW before making any changes to the registry files on your computer. The registry files are required for your operating system to load and run. Your computer may stop working properly, if you accidentally delete the wrong entry.

Resources

• Microsoft Registry Changing Support Website