SecurityMechanic Removal Instructions

When it comes to rogue security applications, SecurityMechanic is nothing special. It uses the same means as practically every other rogue to infect computers. Though it can be manually downloaded, it commonly infects through Trojans and worms. Once it has infected a computer, SecurityMechanic will harass the user with fake security warnings and false system scans. It will then tell the user that they must purchase the full version of the program.
This is a completely useless program and it will cause the computer it infects to slow down. It may also download other malware. SecurityMechanic should be removed as soon as possible. In order to do this manually, you should stop the following processes:

lsascs.exe
windll32.exe

Relative file contents:

Purchase License.url
Security Mechanic.lnk
Support Page.url
spyprotector.cpl
lsascs.exe
windll32.exe
shellex.dll
SC_Base_new.dat
SC_Config.ini
Security Mechanic.lnk

Delete these registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\Security Mechanic
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{107A1D63-2EAA-4694-8ABA-EC209C630D83}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{107A1D63-2EAA-4694-8ABA-EC209C630D83}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\Security Mechanic
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\Security Mechanic
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Security Mechanic”

Unregister this DLL:

shellex.dll

Finally, delete these files:

C:\Program Files\Security Mechanic\
C:\Program Files\Security Mechanic\Purchase License.url
C:\Program Files\Security Mechanic\Security Mechanic.lnk
C:\Program Files\Security Mechanic\Support Page.url
C:\Windows\System32\spyprotector.cpl
%UserProfile%\Application Data\lsascs.exe
%UserProfile%\Application Data\Microsoft\windll32.exe
%UserProfile%\Application Data\shellex.dll
%UserProfile%\Application Data\SpyProtector\
%UserProfile%\Application Data\SpyProtector\SC_Base_new.dat
%UserProfile%\Application Data\SpyProtector\SC_Config.ini
%UserProfile%\Desktop\Security Mechanic.lnk

Removing SecurityMechanic isn’t enough to secure your computer. All malware must be removed. You should use a reliable and trustworthy antispyware program like ZookaWare PC Cleaner in order to do this.

ZookaWare PC Cleaner is developed by ZookaWare, a company in good standing with the Better Business Bureau. It is the only antispyware guaranteed to remove 100% of spyware. It uses a robot to search over 100 million websites every day in search of new malware threats, so it will always be up to date. Protect your computer from spyware the right way. Use ZookaWare PC Cleaner.

Download Free Scan
ZookaWare runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select ZookaWare and click Uninstall.

One Response

  1. Kiera Gallagher says:

    I purchased SpyZooka for my netbook over a year ago and renewed it. I am very pleased to have never had a virus on my netbook!

Leave a Reply

Your email address will not be published. Required fields are marked *

css.php