Archive

Archive for December, 2011

How to remove Home Security Solutions

December 28th, 2011 No comments

Sometimes it is very hard to detect a real location of infection, in most cases there is no infection on the computer besides this Home Security Solutions program. Never buy this program or any other false antivirus program, in order not to sponsor the development of similar programs.
Home Security Solutions is able to deactivate real existing antivirus programs and some system programs as Task Manager. You should delete this rogue program, although because it can restrict the System Security and prevent you from normal work of your computer, when it runs automatically.

home security solutions rogue

Download Home Security Solutions Removal Tool

You should remove Home Security Solutions if you have it on your computer. Just follow the instructions given bellow:

1. You can use the license keys in order to deactivate this program. Just click “Activate full protection” button and insert one of the enumerate keys:

  • K7LY-R5GU-SI9D-EVFB
  • K7LY-H4KA-SI9D-U2FD
  • U2FD-S2LA-H4KA-UEPB

If this works then you can install any antivirus program and remove Home Security Solutions from your computer.

2. So download anti-malware software (for example Spyware Doctor, Malwarebytes Anti-Malware, Hitman Pro or another one) and perform a full scan to remove this virus from your computer.

3. Then you should restore the Hosts file, you can use Fix it utility and follow the steps in the Fix Wizard.

Of course there are some other Home Security Solutions removal instructions. For example you can use the next method that we are going to describe right now:

1. Boot your computer in “Safe Mode with Networking“.

2. Launch Internet Explorer. Then open Tools, select Internet Options, choose Connections tab. Then click LAN Settings and remove the tick from Use a proxy server for your LAN check-box. Then click OK.

3. Download any useful antimalware problem and scan your computer for viruses with the help of it and then restore your system.

And for an experienced user only we can enumerate the associated Home Security Solutions files and registry values that should be removed.

Files:

%AppData%\Home Security Solutions\
%AppData%\Home Security Solutions\cookies.sqlite
%AppData%\Home Security Solutions\Instructions.ini
%AppData%\Home Security Solutions\ScanDisk_.exe
%AppData%\Microsoft\Internet Explorer\Quick Launch\Home Security Solutions.lnk
%CommonAppData%\79b35\
%CommonAppData%\79b35\HSa76.exe
%CommonAppData%\79b35\HSS.ico
%CommonAppData%\HSALJNS\
%CommonAppData%\HSALJNS\HSGZLIDJFOS.cfg
%Desktop%\Home Security Solutions.lnk
%UserProfile%\Recent\ANTIGEN.exe
%UserProfile%\Recent\CLSV.drv
%UserProfile%\Recent\CLSV.sys
%UserProfile%\Recent\ddv.sys
%UserProfile%\Recent\eb.dll
%UserProfile%\Recent\FW.dll
%UserProfile%\Recent\grid.exe
%UserProfile%\Recent\kernel32.exe
%UserProfile%\Recent\kernel32.tmp
%UserProfile%\Recent\pal.exe
%UserProfile%\Recent\snl2w.sys
%UserProfile%\Recent\std.exe
%UserProfile%\Recent\tjd.exe
%UserProfile%\Start Menu\Home Security Solutions.lnk
%UserProfile%\Start Menu\Programs\Home Security Solutions.lnk

Registry values:

HKEY_CLASSES_ROOT\HSS.DocHostUIHandler
HKEY_CLASSES_ROOT\HSS.DocHostUIHandler\Clsid
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=7&q={searchTerms}”
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=7&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PRS” = “http://127.0.0.1:27777/?inj=%ORIGINAL%”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer “DisallowRun” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “0″ = “msseces.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “1″ = “MSASCui.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “10″ = = “avgscanx.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “11″ = “avgcfgex.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “12″ = “avgemc.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “13″ = “avgchsvx.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “14″ = “avgcmgr.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “15″ = “avgwdsvc.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “2″= “ekrn.exe”