How to Remove
   Leading Windows Vista Repair Site on the Web!

www.PCNinja.com securitytoolremoval.net Virus Removal www.smitfraud.net Windows 7
Top Virus Threats

Do You Need Help?

http://www.pcninja.com/ can 100% remove all viruses and spyware online for you. The cost is low and they work fast.

 

Macatte Antivirus 2009 Removal

Having Trouble removing Macatte Antivirus 2009?
Try Spyware Doctor With Antivirus » Download

If you find the removal guide below too hard to follow or just want an expert to remove this for you then consider www.onlinecomputerrepair.org. They are a great company and I know you will be taken care of. It's a very fast way to repair your computer with out you having to do anything.

Macatte removal

Macatte Antivirus 2009 Removal Software » Download

What is MaCatte Antivirus 2009?

MaCatte Antivirus 2009 is an attempt to exploit popularity of similar name of McAfee Antivirus, which is legit software. The MaCatte logo is practically identical to McAfee’s, and the program design incorporates a lot of McAfee-influenced elements.

This malware goes by others names like MaCatte Antivirus, MaCatteAntivirus, MaCatte-Antivirus. Its origin are from Russia and Ukraine. It even come with a official homepage: wwwDOTmacatteDOTcom .

This application is a malware. A very bad program: it can disable many Windows features including your Task Manager. It will try to take control of your system. Including the fact, you will not be able to update your anti-virus software.

MaCatte Antivirus 2009 is a dangerous and deceptive rogue antispyware application. It is nothing like the name suggests and has no relationship with any antivirus products, including McAfee.

This malware got promoted mostly through the use of Trojans coming from fake “My Computer” online scanners. Those scanners display notifications and alerts stating that your computer is badly infected with malware, mainly Trojans. One of such fake scanners website is Http://proscan5.info. Other distribution channels are peer-to-peer networks, newsgroup postings, social networking websites and so on.

The first thing this rogue program wants is to damage your computer. It also wants you to make an online purchase for a bogus application (its full version).

Never buy the 'Get license' option. Remember all the reports you will see are all fake ones. This program was designed to scare you to get your money.

First, if you become infected with MaCatte Antivirus 2009: you should remove it. You will find below manual instructions to remove it. If you're not very comfortable with such instructions, then let me recommend you a very good online service. It is called  www.onlinecomputerrepair.org . This website dedicates himself to help people like you with their MaCatte Antivirus 2009 removal .
They do charge a very low fee, like 89 dollars. I am sure it is faster and less costly than calling a local repair guy. The clean-up is done online.

What Does MaCatte Antivirus 2009 do?

The first thing MaCatte Antivirus 2009 will do is to create lots of fake files on your system. Then it will change the Registry so it can be run on each boot or logon.
Upon rebooting (or login), MaCatte Antivirus 2009 will start scanning your computer. It is a fake scan. You will then get security notifications and warnings. Please notice the windows that will then pop-up. It is very similar to McAfee.  To remove all those threats, you will be asked to purchase the license version of the program (MaCatte Antivirus 2009). Do not do that. It is useless and you will only lose your money.

This malware will display fake security alerts like every one or two minutes. It will also impersonate the Windows Security Center claiming that it did not find any working antivirus software on your computer and in fact, it will recommend you to buy the full version (the license) to get rid of all those viruses and more. You will also get flooded with fake security notifications related to serious security and privacy problems. You may see fake alerts similar to the following one:

“Spyware activity alert!
Spyware.IEMonster activity detected. It is spyware that attempts to steal passwords from Internet Explorer, Mozilla Firefox, Outlook and other other programs, including logins and passwords from online baking sessions, eBay, PayPal. »

This program will use pop-ups, firewall blockers besides fake scans showing you fake security threats. This rogueware also reduce computer performance.  It will hijack your web browser and redirect you to various misleading websites including the malware homepage:  wwwDOTmacatteDOTcom

Once infected, you will notice difficulties to do online things. Most anti-virus related web pages will not be accessible. Neither your own anti-virus program or Windows features like Task Manager, System Restore, Add/Remove Guy and others. If you try to update your security software, it will not work. Main reason is that MaCatte Antivirus 2009 is trying to control your computer the most it can in order to scare you to buy the full version.

The main MaCatte Antivirus 2009 Properties are to stay resident in the background, to shows some clever commercial ads and to quickly change your browser settings.

How did I get infected with MaCatte Antivirus 2009 ?

The main channel of promotion of MaCatte Antivirus 2009 is through the use of Trojans coming from fake My Computer online scanners. Those fake online scanners will display notifications and alerts stating that your computer is baldy infected with malware, mainly Trojans. One of such fake scanners is Http://proscan5DOTinfo. Other distribution channels are: peer-to-peer networks, newsgroup postings, social networking websites and etc.

Many times, hackers will create such sites (or hack existing ones) in order to distribute their own piece of code. In that case, the rogue software called MaCatte Antivirus 2009.
Such sites will pose as making you believe you are downloading something else than a malware. It could be some codec, some application needed for an online scan and similar things.
Others will push a download unto your computer, it is called a drive by download. You did not request it. The website is only sending you the file, hoping you will run it.
If your computer does not have a recent security program, or if the threat is very new, you'll most likely become infected.
Upon detecting you are infected, I do recommend you clean your system using the following program: Spyware Doctor with Antivirus » download. Do an in-depth and full system scan with it. It will help you with your MaCatte Antivirus 2009 Removal. This program does clean any threats found.

How to Remove MaCatte Antivirus 2009 ?

MaCatte Antivirus 2009 removal is done the following way:

Kill Macatte Antivirus 2009 processes

  • msc.exe
  • mstdl.exe
  • mcull.exe
  • mac.exe
  • msca.exe

We do recommend you run a full scan using Spyware Doctor with Antivirus » download. Even if you do not intend on purchasing the product it will help to stop the virus from re-installing and re-activating while you manually remove the rest of the traces. Also it will inform you of any new changes to the file names. You may need this if it mutates.

Delete Macatte Antivirus 2009 registry values:

  • HKEY_CURRENT_USER\Software\msca
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{459b6bf8-5320-4c41-8833-85baedf31086}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A73890FC-177F-4198-AE3D-C64F7D9E69D8}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{459b6bf8-5320-4c41-8833-85baedf31086}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{459b6bf8-5320-4c41-8833-85baedf31086}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{459b6bf8-5320-4c41-8833-85baedf31086}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\NetworkNeighborhood\NameSpace\{459b6bf8-5320-4c41-8833-85baedf31086}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce “msca”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “wsc”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “msc”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\msca
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnPost “0″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnPostRedirect “0″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnonBadCertRecving “0″

Delete Macatte Antivirus 2009 files: ( Hint ) Most of these files will be in the %Program Files%\msca\ directory. Not all will be there and some may not be present in your virus version

  • WPtect.dll
  • %Program Files%\msca\msc.exe
  • %Program Files%\msca\msca.ico
  • %Program Files%\msca\mstdl.exe
  • %Program Files%\msca\Viruses.dat
  • C:\ProgramData\msca\ (in Windows Vista)
  • %Documents and Settings%\All Users\Application Data\msca\msca.ico
  • %Documents and Settings%\All Users\Application Data\msca\mcull.exe
  • %Documents and Settings%\All Users\Application Data\msca\Viruses.dat
  • %Documents and Settings%\All Users\Application Data\mcsa\mstdll.exe
  • %Documents and Settings%\All Users\Desktop\msca.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\msca\msca.lnk
  • C:\Users\%User name%\AppData\Local\Temp\[RANDOM CHARACTERS.tmp]\
  • C:\Documents and Settings\[User name]\Local Settings\Temp (delete only mac.exe file in this folder)

Delete Macatte Antivirus 2009 directories: ( Please note that in most cases everything in this folder can be deleted. Just be sure it’s the correct folder )

  • %Program Files%\msca\
  • %Documents and Settings%\All Users\Application Data\msca
  • %Documents and Settings%\All Users\Start Menu\Programs\msca
  • C:\Documents and Settings\%User name%\Local Settings\Temp (delete only mac.exe file in this folder)
  • C:\Users\%User name%\AppData\Local\Temp\[RANDOM CHARACTERS.tmp]\
That should do it. This worked very well for us. If you are having a ton of trouble the consider hiring a pro to remove it for you. www.onlinecomputerrepair.org has our vote. They are great and a ton of experts out there recommend them to people.