Do you have Files Secure?

This “Files Secure Removal Guide” article will show you how to identify and remove Files Secure. This guide will be updated as more information is available.

Files Secure Detection Test

 Run SpyHunter’s Spyware Scanner to check for Files Secure infections on your PC.

Files Secure Description

Files Secure Method of Automatic Removal

The removal of spyware such as Files Secure can be a difficult process. If you regularly run a spyware scan with a good spyware remover, you can automatically detect Files Secure and other Spyware, Trojans, Rogue Anti-spyware, Adware, Browser Hijackers and other unwanted programs.

To quickly remove Files Secure, follow the instructions below:

1. Download SpyHunter’s Spyware Scanner.

2. Select “Start Scan” to run a full system Files Secure scan.

3. Reboot your computer.

4. Run another scan to pick up any remaining Files Secure infections.

** SpyHunter’s Spyware Scanner only allows you to detect Files Secure and other spyware. In order to remove Files Secure, we advise you to buy the full-version of SpyHunter. Weekly Files Secure file updates and technical support are available with SpyHunter’s spyware remover.

Files Secure Method of Infection

Tip: Turn your sound ON and watch the video in Full Screen mode to fully experience how Files Secure infects a computer. In the “How Files Secure Infects Your Computer” video, the following Files Secure actions occur:

• The Internet user surfs the Web and visits a questionable website. A large amount of rogue anti-spyware programs like Files Secure is mostly pushed through adult websites.

• The Internet user is infected with the rogue anti-spyware program Files Secure. Files Secure runs a scan on the computer and gives a false spyware report claiming that the computer is infected with spyware. Once the scan is completed, a warning message appears with a message with a link that says “Remove – Remove dangerous unit”. This deceptive tactic is an attempt to scare the Internet user into clicking the “Remove – Remove dangerous unit” link.

Files Secure’s warning message reads:

• Malware Found Your system is infected! Malware: OGG Viewer Variant of the Trojan.Win32.Obfuscated.gx (porn adware) Remove Remove dangerous unit
• The Internet user closes all the fake Windows error messages and warnings and is unaware that Files Secure is still running its malicious tasks in the background. Files Secure reloads itself on a timer so if the Internet user closes the program it will only take a few moments until it opens again. The average Internet user does not realize when spyware has infected his/her computer until it is too late and the spyware problem has already spread throughout the computer.

• Internet user opens web browser and is redirected to a rogue website called files-secure.com. The Internet user is bombard with websites that pop up messages that tries to push a product on him/her. Ignore such messages! We recommend closing these windows by clicking on the X instead of the OK button.

Files Secure Symptoms

The following Files Secure symptoms occur:

• Files Secure displays a fake system alert. The fake system alert promises to give you a legitimate anti-spyware program that will help you fix spyware problems, but instead it really reports false information to try to trick you into purchasing the program. In some cases, even when you don’t click on the icon the fake system alert may still pop up. Files Secure’s false sytem alert message reads: Critical System Error! Your browser was hijacked by Trojan.Win32.Obfuscated.gx You need to clean your system immediately, in other case it can be crashed soon! Click OK to download the high-tech antispyware protection software! (Recommended) OR Your computer was hijacked by Trojan.Win32.Gorshok.a It’s dangerous for your system, some files can be lost and your browser can be slow! Click OK to download the antispyware program to clean your computer! (Recommended)

• Files Secure hijacks or modifies your search engine results. Files Secure hijacks your Google and Yahoo! search results and displays a fake system alert message within the search results in order to trick you into clicking on the message.

• Files Secure hijacks or modifies your homepage and displays new desktop shortcuts. Files Secure changes your default homepage to a different homepage and creates new unnecessary shortcuts on your desktop. Sometimes Files Secure won’t even allow you to change it back to your original homepage. Websites that you’re redirected to is files-secure.com.

• Files Secure installs a rogue toolbar called Security Toolbar 7.1. Security toolbar 7.1 is a rogue toolbar that comes with two green bars, one that says “block adware” and the other “remove spyware”. If you click on either of them you’re directed to a rogue anti-spyware site such as files-secure.com which can install additional malware.

• Files Secure bombards your PC with fake Windows warnings messages. Even after you’ve closed all the Files Secure messages or your PC has been idle for awhile, you’ll still get constant alert popups appearing on your system tray or on your screen.

Files Secure Anatomy

As new Files Secure spyware components is reported by our customers and our Spyware Threat Research Labs, we will update this section. Name: secure.exe File Size: 3089920 bytes MD5: f78198a7b04473c3a85abaa69dbb7661 Name: setup1[1].exe File Size: 2999003 bytes MD5: b70455d23fe65ddd79bf11146e13dada Symbolic Links: Files Secure 2.1.lnk Files-secure.com WHOIS Information: Registration Service Provided By: ESTDOMAINS INC Contact: +1.3027224217 Website: http://www.estdomains.com Domain Name: FILES-SECURE.COM Registrant: Yancheg Ormancheg (iedefender@gmail.com) Street 2212 California null,232 US Tel. +111.5411311 Creation Date: 04-Dec-2007 Expiration Date: 04-Dec-2008 Domain servers in listed order: ns2.files-secure.com ns1.files-secure.com

Files Secure Manual Removal Instructions

To learn the Files Secure manual removal process, read the step-by-step instructions provided on this section. Use Caution! Please read the instructions below carefully. Manual removal of Files Secure is a delicate procedure. Proceed at your own risk. Make sure you backup your system and close all open Internet Explorer windows before you manually remove Files Secure. If you are still having problems with Files Secure after completing these instructions, we recommend you download SpyHunter’s Spyware Removal Tool to safely remove Files Secure. To manually remove Files Secure, follow these removal steps: Step #1: How to Kill Files Secure files using Process Explorer.

• 1a. How to Kill Files Secure processes.

1. Download and install Process Explorer.

2. Open Process Explorer.

3. Locate the Files Secure processes listed below.

4. To kill an Files Secure process, right-click the Files Secure process and choose the option “Kill Process Tree”.

5. Kill the following Files Secure processes:
   secure.exe
• 1b. How to Kill Files Secure DLL files.

1. Right-click the Explorer.exe process and choose the option “Properties”.

2. Click on the “Threads” Tab, locate and highlight the Files Secure DLL files listed below.

3. To kill Files Secure DLL files, click the “Kill” button.

4. Kill the following Files Secure DLL files:
   oggview.dll

• Step #2: How to Delete Files Secure Registry Keys and Values.

1. Right-click on your Desktop > select “New” option > select “Text Document” (.txt file) option.

2. Rename the .txt file as a .reg file and call it “Delete_Registry_ FilesSecure_Entities.reg”. This renamed .reg file is a command that creates a shortcut to your Windows registry and allows you to easily delete registry values.

3. Right-click and select the “Edit” option.

4. Copy and paste the Files Secure keys listed below.

5. In the menu bar, go to “File” > select “Save” > then click the “X” button to close the file.

6. Double-click on the .reg file.

7. When the message box appears saying “Are you sure you want to add the information in C:DOCUME~1%username%DesktopDELETE~1.REG to the registry?”, click the “Yes” button.

8. When the message box appears saying “Information in C:DOCUME~1%username% DesktopDELETE~1.REG has been successfully entered into the registry.”, click the “OK” button.

9. The Files Secure registry keys have been deleted from your registry.

10. Copy and paste the following Files Secure keys:
    

        Windows Registry Editor Version 5.00    [-HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{90F39E5A-1C6C-4597-8B59-9AED38E88387}]      

• Step #3: How to Delete Files Secure Directories.

1. To locate Files Secure directories, go to “Start” > “My Computer” > “Local Disk (C:)” > “Program Files” > “Show the contents of this folder”.

2. Search and delete the Files Secure directories listed below.

3. Right-click on the Files Secure folder and select “Delete”. option.

4. When the message box appears saying “Are you sure you want to remove the folder [FOLDERNAME] and move all its contents to the Recycle Bin?”, click the “Yes” button.

5. When the message box appears saying “Renaming, moving or deleting [FOLDERNAME] could make some programs not work. Are you sure you want to do this?”, click the “Yes” button.

6. Search and delete the following Files Secure directories:
   Files-Secure

• Step #4: How to Search and Delete C:WINDOWSSystem32oggview.dll.

1. Go back to “Local Disk (C:)” > “Windows” > “System32″ > “Show the contents of this folder”.

2. Search for oggview.dll.

3. Right-click on the oggview.dll file and select the “Delete” option.

• Step #5: How to Restore Original Default Home Page.

1. Go to “Start” > “Control Panel” > “Internet Options”.

2. Click on the General Tab > click the Use Default button under Home Page.

3. Click “Apply” and then click the “OK” button.

4. Open a Web browser to verify that your default homepage has been restored.

Step #6: How to Remove the Files Secure Icons.
1. If the Files Secure icons still remain on your Desktop, you can drag and drop them to the “Recycle Bin”.

2. Reboot your computer to make sure all changes made for the removal of Files Secure are complete. If your computer still has issues, you should scan your computer for Files Secure with a spyware scanner.

Congratulations!! You’ve completed our Files Secure manual removal tutorial.

Submit Files Secure To Our Spyware Threat Research Labs

Since Files Secure spyware components change constantly, you may come across application issues that prevent you from removing Files Secure completely. You can report Files Secure spyware components by using SpyHunter’s Free Support Log System. Our Support Log System takes snapshots of all the points of execution on your operating system, allowing us to precisely identify each and any problem. We encourage you to post your Support Logs on this article so we can help you come up with a custom fix. Below are the instructions on how to generate Support Logs using SpyHunter. Open SpyHunter > click on the “Generate Support Log” button > click on the “Copy to Clipboard” button to save your Support Logs > Post your Support Logs to this article.

Disclaimer

Warning!! Enigma Software Group can not be held responsible for any problems that may occur by using the information contained within this Files Secure removal guide. By following any of these Files Secure removal instructions, you agree to be bound by the disclaimer. If you do not agree, do not follow these Files Secure removal instructions. We make no guarantees that these Files Secure removal instructions will completely remove Files Secure. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means. In order to effectively clean and secure your computer, we recommend you purchase our spyware remover SpyHunter or seek professional help from a computer expert.