Sign in to follow this  
Christian Mairoll

FakeCopyright Adware Removal Instructions

Recommended Posts

The Emsisoft malware research team has discoverd a new outbreak of the FakeCopyright adware. Emsisoft Anti-Malware detects this malware as Adware.Win32.FakeCopyright.

FakeCopyright trying to force users to pay a fee for illegal or copyrighted material that installed on the user computer. Once installed, this program will run automatically when starting Windows and shows a window like this:

Adware.Win32.FakeCopyright_1-400x349.png

Create new files:

  • %UserProfile%Application DataAPManagerwallpaper.jpg
  • %UserProfile%Application DataAPManagerapmanager.exe
  • %UserProfile%Application DataAPManagerfiles
  • %UserProfile%Application DataAPManageriplog
  • %UserProfile%Application DataAPManagerispinfo
  • %UserProfile%Application DataAPManagersettings.ini
  • %UserProfile%Application DataAPManageruninstall.exe
  • %UserProfile%Application DataAPManagerlanguagesFrench.lng
  • %UserProfile%Application DataAPManagerlanguagesGerman.lng
  • %UserProfile%Application DataAPManagerlanguagesItalian.lng
  • %UserProfile%Application DataAPManagerlanguagesPortuguese.lng
  • %UserProfile%Application DataAPManagerlanguagesSlovak.lng
  • %UserProfile%Application DataAPManagerlanguagesSpanish.lng
  • %UserProfile%Application DataAPManagerlanguagestemplate.lng
  • %UserProfile%Application DataAPManagerlanguagesCzech.lng
  • %UserProfile%Application DataAPManagerlanguagesDanish.lng
  • %UserProfile%Application DataAPManagerlanguagesDutch.lng
  • %UserProfile%Application DataAPManagerlanguagesEnglish.lng
  • %UserProfile%DesktopAP Manager.lnk

Create new registry entries:

  • HKEY_LOCAL_MACHINEsoftwaremicrosoftWindowsCurrentVersionUninstallAPManager
  • HKEY_CURRENT_USERsoftwareMicrosoftWindowsCurrentVersionRun, “apmanager.exe”

How to remove the infection of FakeCopyright (Adware.Win32.FakeCopyright)?

To delete this malware infection, please download and install Emsisoft Anti-Malware. Run a full scan on all drives and move all detected items to the quarantine.



View the full article

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.