 |
Home>Tips & Articles>Remove Adware & Spyware>
Remove MagicControl Spyware
About MagicControl
MagicControl is a commercial trojan from dialler manufacturer Electronic Group (eGroup). It seems to contain code aimed at avoiding personal firewall software installed on the local machine.
How to Remove MagicControl?
Click Start > Setting > Control Pane > Add/Remove Programs, choose 'mc' (MC variant), 'wintrim' (Wintrim variant) or 'wincomp' (Wincomp variant). This uninstaller should work, though it requires internet access.
To manually remove it from your computer,
- Open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands.
For the MC variant:
cd "%WinDir%\System"
regsvr32 /u "..\mc\MagicControl.dll"
For the Wintrim variant:
cd "%WinDir%\System"
regsvr32 /u "..\wintrim\MagicControl.dll"
regsvr32 /u "..\wintrim\EGPing.dll"
For the Wincomp variant:
cd "%WinDir%\System"
regsvr32 /u "..\wincomp\2_wincomp.dll"
regsvr32 /u "..\wincomp\3_1,0,0,5_wincomp.dll"
For the Winmgts variant:
cd "%WinDir%\System"
regsvr32 /u "..\wincomp\2_1,0,2,9_winmgts.dll"
regsvr32 /u "..\wincomp\3_1,0,0,6_winmgts.dll"
- Open the registry editor (click Start > Run and enter 'regedit'), and find the key : HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run. Delete the 'cpntmgc' entry.
- Restart the computer.
- Delete the entire 'mc', 'wintrim' or 'wincomp' folder inside the Windows folder, and the 'msegcompid.dll' file from the System folder (inside the Windows folder; called 'System32' on Windows NT, 2000 and XP).
- Delete the 'iexplore' folder in Program Files, too ( not 'Internet Explorer', which is the real IE program folder). Also check to see if you have IEAccess loaded and/or the eGroup certificate in your IE Trusted Publishers list.
Remove other programs:
|
|
|
