|
Gator/GAIN/Claria removal
| Spyware Gator/GAIN/Claria Information |
Name: Gator/GAIN/Claria
Category: Adware
Date: 2005-03-23
Dangerous: Yes
|
GAIN is a advertisement serving network which delivers infects (seeds) in computers of users with the help of adware technology developed by The Gator Corp. The ad serving network is supposed to be based on permissions (user is aware of installing ad serving ware) in addition to free software. Should a user of a ad supported program decide to stop receiving advertisements, it should be possible to easily uninstall the ad serving application. However, any GAIN/Gator components remain effective after an attempt to perform uninstall process.
This Adware is also known as:
Panda software named this malware as Adware/Gator
>> Delete Gator/GAIN/Claria automatically - Download Spyware Doctor
| Gator/GAIN/Claria Removal Instructions |
|
Delete these registry entries
HKEY_CLASSES_ROOT\clsid\{06dfeda9-6196-11d5-bfc8-00508b4a487d}
HKEY_CLASSES_ROOT\clsid\{21ffb6c0-0da1-11d5-a9d5-00500413153c}
HKEY_CLASSES_ROOT\clsid\{29eeff42-f3fa-11d5-a9d5-00500413153c}
HKEY_CLASSES_ROOT\clsid\{38493f7f-2922-4c6c-9a9a-8da2c940d0ee}
HKEY_CLASSES_ROOT\clsid\{4006e7b2-0fb2-4345-b388-083b138e80af}
HKEY_CLASSES_ROOT\clsid\{456ba350-947f-4406-b091-aa1c6678ebe7}
HKEY_CLASSES_ROOT\clsid\{54e7e082-1da6-412e-96b5-c290fcef5329}
HKEY_CLASSES_ROOT\clsid\{6c8dbec0-8052-11d5-a9d5-00500413153c}
HKEY_CLASSES_ROOT\clsid\{731918d2-517a-47e2-886a-3bc1380c591d}
HKEY_CLASSES_ROOT\clsid\{a9ef28a2-55d1-480b-a403-84928d59f556}
HKEY_CLASSES_ROOT\getandrun.dfrun
HKEY_CURRENT_USER\software\gator.com
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\&programs\gain
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\&programs\gator ewallet
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\gain
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\gator
HKEY_LOCAL_MACHINE\software\classes\clsid\{21ffb6c0-0da1-11d5-a9d5-00500413153c}
HKEY_LOCAL_MACHINE\software\classes\clsid\{21ffb6c0-0da1-11d5-a9d5-00500413153c}\gef
HKEY_LOCAL_MACHINE\software\classes\clsid\{21ffb6c0-0da1-11d5-a9d5-00500413153c}\gmg
HKEY_LOCAL_MACHINE\software\classes\clsid\{21ffb6c0-0da1-11d5-a9d5-00500413153c}\gmi
HKEY_LOCAL_MACHINE\software\classes\clsid\{21ffb6c0-0da1-11d5-a9d5-00500413153c}\lastinstall
HKEY_LOCAL_MACHINE\software\classes\clsid\{21ffb6c0-0da1-11d5-a9d5-00500413153c}\sevt
HKEY_LOCAL_MACHINE\software\classes\clsid\{21ffb6c0-0da1-11d5-a9d5-00500413153c}\sih
HKEY_LOCAL_MACHINE\software\classes\clsid\{21ffb6c0-0da1-11d5-a9d5-00500413153c}\siseq
HKEY_LOCAL_MACHINE\software\classes\clsid\{21ffb6c0-0da1-11d5-a9d5-00500413153c}\sseq
HKEY_LOCAL_MACHINE\software\classes\clsid\{21ffb6c0-0da1-11d5-a9d5-00500413153c}\uets
HKEY_LOCAL_MACHINE\software\classes\getandrun.dfrun
HKEY_LOCAL_MACHINE\software\classes\interface\{06dfeda9-6196-11d5-bfc8-00508b4a487d}
HKEY_LOCAL_MACHINE\software\classes\interface\{38493f7f-2922-4c6c-9a9a-8da2c940d0ee}
HKEY_LOCAL_MACHINE\software\classes\kbbar.kbbarband\clsid
HKEY_LOCAL_MACHINE\software\gator.com
HKEY_LOCAL_MACHINE\software\gator.com\cmeii
HKEY_LOCAL_MACHINE\software\gator.com\gator\dyn
HKEY_LOCAL_MACHINE\software\gator.com\gator\stat\gmt
HKEY_LOCAL_MACHINE\software\gatortest
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app management\arpcache\gator
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/conflict.1/hdplugin1014.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/conflict.1/iegator.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/hdplugin1014.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/iegator.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/conflict.1/iegator.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/winnt/downloaded program files/iegator.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\d:/winnt/downloaded program files/iegator.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\cmesys
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\trickler
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\c:\windows\downloaded program files\conflict.1\hdplugin1014.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\c:\windows\downloaded program files\conflict.1\iegator.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\c:\windows\downloaded program files\iegator.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\c:\winnt\downloaded program files\iegator.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\Windows\downloaded program files\hdplugin1014.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\stashedgef
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\stashedgmg
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{456ba350-947f-4406-b091-aa1c6678ebe7}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{4a840e1e-2ba8-47de-923e-0e00407eb530}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{6c8dbec0-8052-11d5-a9d5-00500413153c}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\date manager
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\gator
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\offers
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\precisiontime
HKEY_USERS\.default\software\microsoft\windows\currentversion\explorer\menuorder\start menu\&programs\gain
HKEY_USERS\.default\software\microsoft\windows\currentversion\explorer\menuorder\start menu\&programs\gator ewallet
|
|
Remove the following directories
c:\documents and settings\all users.windows\start menu\programs\date manager
c:\documents and settings\all users.windows\start menu\programs\gator ewallet
c:\documents and settings\all users\start menu\programs\gain
c:\documents and settings\all users\start menu\programs\gator ewallet
c:\documents and settings\all users\start menu\programs\precisiontime
Program Files\Common Files\gain
Program Files\Common Files\gain publishing
Program Files\Common Files\offercompanion
Documents and Settings\UserName\start menu\programs\gain
Documents and Settings\UserName\start menu\programs\gator
Documents and Settings\UserName\start menu\programs\gator ewallet
Documents and Settings\UserName\start menu\programs\offercompanion
Program Files\clickthebutton
Program Files\common files\cmeii
Program Files\common files\gmt
Program Files\common files\gmt\d71256a02w\gb\22219
Program Files\common files\gmt\d71256a02w\gb\22275
Program Files\common files\gmt\d71256a02w\gb\22367
Program Files\common files\gmt\d71256a02w\gb\22568
Program Files\common files\gmt\d71256a02w\gb\22599
Program Files\common files\gmt\d71256a02w\gb\22637
Program Files\common files\gmt\d71256a02w\gb\22719
Program Files\common files\gmt\d71256a02w\gb\23148
Program Files\common files\gmt\d71256a02w\gb\23294
Program Files\common files\gmt\d71256a02w\gb\23306
Program Files\common files\gmt\d71256a02w\gb\23405
Program Files\common files\gmt\d71256a02w\gb\23410
Program Files\common files\gmt\d71256a02w\gb\23436
Program Files\common files\gmt\d71256a02w\gb\23466
Program Files\common files\gmt\d71256a02w\gb\23479
Program Files\common files\gmt\d71256a02w\gb\23486
Program Files\common files\gmt\d71256a02w\gb\23543
Program Files\common files\gmt\d71256a02w\gb\23574
Program Files\common files\gmt\d71256a02w\gb\23757
Program Files\common files\gmt\d71256a02w\gb\23783
Program Files\common files\gmt\d71256a02w\gb\23785
Program Files\common files\gmt\d71256a02w\gb\23815
Program Files\common files\gmt\d71256a02w\gb\23817
Program Files\common files\gmt\d71256a02w\gb\23843
Program Files\common files\gmt\d71256a02w\gb\23871
Program Files\common files\gmt\d71256a02w\gd
Program Files\common files\gmt\d71256a02w\gg
Program Files\common files\gmt\data
Program Files\common files\gmt\scripts
Program Files\common files\gmt\vky889g40u\ga
Program Files\gator.com
Program Files\webrebates\system\temp
Windows\start menu\programs\date manager
Windows\start menu\programs\gain
Windows\start menu\programs\precisiontime
Windows\system32\pcs
Windows\temp\adware
Windows\temp\fsg_tmp
Program Files\common files\gmt\18lfpza0nz\ga
Program Files\common files\gmt\30v5332k7h\ga
Program Files\common files\gmt\30v5332k7h\gb\13276
Program Files\common files\gmt\30v5332k7h\gb\14877
Program Files\common files\gmt\30v5332k7h\gb\14879
Program Files\common files\gmt\30v5332k7h\gb\19829
Program Files\common files\gmt\30v5332k7h\gb\19911
Program Files\common files\gmt\30v5332k7h\gb\20263
Program Files\common files\gmt\30v5332k7h\gb\20278
Program Files\common files\gmt\30v5332k7h\gb\20300
Program Files\common files\gmt\30v5332k7h\gb\20395
Program Files\common files\gmt\30v5332k7h\gb\20535
Program Files\common files\gmt\30v5332k7h\gb\20813
Program Files\common files\gmt\30v5332k7h\gb\20814
Program Files\common files\gmt\30v5332k7h\gb\20835
Program Files\common files\gmt\30v5332k7h\gb\20976
Program Files\common files\gmt\30v5332k7h\gb\21234
Program Files\common files\gmt\30v5332k7h\gb\21525
Program Files\common files\gmt\30v5332k7h\gb\21830
Program Files\common files\gmt\30v5332k7h\gb\21887
Program Files\common files\gmt\30v5332k7h\gb\21888
Program Files\common files\gmt\30v5332k7h\gb\21914
Program Files\common files\gmt\30v5332k7h\gb\22011
Program Files\common files\gmt\30v5332k7h\gb\22016
Program Files\common files\gmt\30v5332k7h\gb\22131
Program Files\common files\gmt\30v5332k7h\gb\22367
Program Files\common files\gmt\30v5332k7h\gb\22719
Program Files\common files\gmt\30v5332k7h\gb\23294
Program Files\common files\gmt\30v5332k7h\gb\23407
Program Files\common files\gmt\30v5332k7h\gb\23436
Program Files\common files\gmt\30v5332k7h\gb\23479
Program Files\common files\gmt\30v5332k7h\gb\23757
Program Files\common files\gmt\30v5332k7h\gd
Program Files\common files\gmt\30v5332k7h\gg
Program Files\common files\gmt\6433t0f33z\ga
Program Files\common files\gmt\banners
Program Files\common files\gmt\d71256a02w
Program Files\common files\gmt\d71256a02w\gb\13276
Program Files\common files\gmt\d71256a02w\gb\14877
Program Files\common files\gmt\d71256a02w\gb\14879
Program Files\common files\gmt\d71256a02w\gb\16714
Program Files\common files\gmt\d71256a02w\gb\17481
Program Files\common files\gmt\d71256a02w\gb\17486
Program Files\common files\gmt\d71256a02w\gb\18845
Program Files\common files\gmt\d71256a02w\gb\19807
Program Files\common files\gmt\d71256a02w\gb\19829
Program Files\common files\gmt\d71256a02w\gb\19909
Program Files\common files\gmt\d71256a02w\gb\19995
Program Files\common files\gmt\d71256a02w\gb\20263
Program Files\common files\gmt\d71256a02w\gb\20278
Program Files\common files\gmt\d71256a02w\gb\20300
Program Files\common files\gmt\d71256a02w\gb\20301
Program Files\common files\gmt\d71256a02w\gb\20394
Program Files\common files\gmt\d71256a02w\gb\20535
Program Files\common files\gmt\d71256a02w\gb\20813
Program Files\common files\gmt\d71256a02w\gb\20814
Program Files\common files\gmt\d71256a02w\gb\20835
Program Files\common files\gmt\d71256a02w\gb\20899
Program Files\common files\gmt\d71256a02w\gb\21201
Program Files\common files\gmt\d71256a02w\gb\21525
Program Files\common files\gmt\d71256a02w\gb\21830
Program Files\common files\gmt\d71256a02w\gb\21887
Program Files\common files\gmt\d71256a02w\gb\21888
Program Files\common files\gmt\d71256a02w\gb\21899
Program Files\common files\gmt\d71256a02w\gb\21914
Program Files\common files\gmt\d71256a02w\gb\22008
Program Files\common files\gmt\d71256a02w\gb\22016
Program Files\common files\gmt\d71256a02w\gb\22104
Program Files\common files\gmt\d71256a02w\gb\22131
Program Files\common files\gmt\d71256a02w\gb\22192
|
Bookmark Gator/GAIN/Claria page
| Visitor Comments on Gator/GAIN/Claria |
2007-03-03 23:27:51, Guest:
Doesn't help at all. Pop-ups didn't go away. What am I doing wrong?
2008-08-31 07:32:55, fornetti:
I do not believe this
2008-09-04 19:52:14, hacekawo:
Thanks for really good information
|
| Previous Spyware: Remove GateScan20 |
Next Spyware: Remove Gaura |
|