Monday, 28 June 2010

How to remove Noexe.exe ransomware (Free Removal)

Noexe.exe is a malicious file/process. It displays fake Windows activation screen in Russian and claims that you should send and SMS with a certain text to receive your activation code. Although, Noexe.exe ransomware was made for people who live in Russia, but this doesn't mean that your PC is safe if you live somewhere else. If you got infected with Noexe.exe ransomware, please follow Noexe.exe removal instructions below to remove it from your computer as soon as possible.

Noexe.exe removal instructions
Download at least one anti-malware program from the list below and run a full system scan.
NOTE: with all of these tools, if running Windows 7 or Vista they MUST be run as administrator. Launch the program and follow the prompts. Don't forget to update the installed program before scanning.

Noexe.exe associated files and registry values:

  • C:\Documents and Settings\[UserName]\Local Settings\Temp\tmp1.tmp
  • C:\Documents and Settings\[UserName]\Local Settings\Temp\tmp2.tmp
  • C:\Documents and Settings\[UserName]\Local Settings\Temp\tmp4.tmp
  • C:\Documents and Settings\[UserName]\Local Settings\Temp\tmp5.tmp
  • C:\Documents and Settings\[UserName]\Local Settings\Temp\tmp6.tmp
  • C:\Documents and Settings\[UserName]\Local Settings\Temp\tmp7.tmp
  • C:\Windows\NoExe.exe
Registry values:
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "explorer.exe = "%Windir%\explorer.exe"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\runas\command
Share this information with other people: 

No comments:

Post a Comment