How to Remove a Fake Blue Screen
The Nortel virus displays a fake blue screen, also called a blue screen of death, on your computer. The Nortel virus then notifies you that in order to remove the blue screen infection, you must purchase a Nortel license. This is simply an attempt to procure your financial information. In order to remove the fake blue screen, you must remove the Nortel virus. The best way to do this is to update and run your antivirus program. However, the Nortel virus can also be removed manually by following the steps below.
Other People Are Reading
Instructions
-
End Processes
-
1
Press Ctrl + Alt + Delete.
-
2
Click on the \"Task Manager,\" and then click on the \"Processes\" tab.
-
-
3
End the following processes. To end a process, right-click on it and select \"End Process.\"<br /><br />\"C:\\ProgramData\\nol\\mrgdll.exe\"<br />\"C:\\ProgramData\\nol\\wox.exe\"<br />\"C:\\Documents and Settings\\All Users\\Application Data\\nol\\wox.exe”<br />\"UserProfile\\Application Data\\nol\\mrgdll.exe\"
Delete Folders
-
4
Click on the \"Start\" menu.
-
5
Click on the \"Search Files and Folders\" box.
-
6
Search for and delete the following folder. To delete the folder, right-click on it and select \"Delete.\"<br /><br />\"C:\\ProgramData\\nol\"
Delete Registry Values
-
7
Hold down the Windows key and press \"R.\" The Run box opens.
-
8
Type \"regedit\" (without the quotation marks) into the Run box, and click \"OK.\" The Registry Editor opens.
-
9
Locate the following registry values in the left pane of the Registry Editor and delete them. To delete a registry value, right-click on it and select \"Delete.\"<br /><br />\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\[RANDOM NAME] = C:\\ProgramData\\nol\\wox.exe”<br />\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\[RANDOM NAME] = C:\\ProgramData\\nol\\mrgdll.exe”<br />\"HKEY_CURRENT_USER\\Software\\wox\"
-
1
References
- Photo Credit laptop with blue screen image by dim@dim from Fotolia.com
