HOW DO I REMOVE THE VIRUS

WHAT IS IT: The virus is what we call Spyware that will actually tap into your System32 and log everything and anything you do on your PC, stealing critical system information/diagnostics, Email addresses, Passwords, Logins, and much more. The process is called Vcs6Core.exe(.) Vcs6Core.exe file can be used by hackers to compromise your computer. To prevent your computer's security and privacy from any risk, you are recommended to run a scan immediately on your computer to detect any spyware threats.

The Vcs6Core.exe file is a malicious file related to spyware. You can read the following information to learn more about the Vcs6Core.exe file and get detailed approach on how to detect and remove the Vcs6Core.exe file.

HOW DO I REMOVE THE VIRUS? The following tutorial is going to show you how to safely and effectively remove the spyware from your computer manually without virus protection or removal software.

Step 1: Find Vcs6Core.exe Path with Windows File Search Tool

1. Click Start > Search > select All files and folders > type "Vcs6Core.exe" in the "All or part of the file name" section.

2. Go to "Look in" > select "Local Hard Drives" or "My Computer" > click "Search" button > delete the file "Vcs6Core.exe".

You may also stay on the "In Folder" and note down the file path of "Vcs6Core.exe" on your clipboard, as the file path may be needed to delete Vcs6Core.exe in the following manual removal steps.

Step 2: Remove Vcs6Core.exe Processes with Windows Task Manager Press

Press CTRL+ALT+DEL or CTRL+SHIFT+ESC > tab Processes > list of "Image Name" > search "Vcs6Core.exe" process > select "Vcs6Core.exe" process > click "End Process" button.

Step 3: Check for and Delete Other Vcs6Core.exe Files

1. click Start > Run > type in cmd > press "OK" > type in "cd name_of_the_folder" in the emerged window > press Enter button.

2. Type in "dir /a" > press Enter button > find the file you're looking for > type in "del name_of_the_file".

Now that is the end of Phase 1 of the process in completely removing this virus, but there is also some follow up's you have to do in order to keep your PC nice and clean and running smoothly.

The following step involves going into your system Registry editor and removing the Registry entries manually. NOTE: Ace Utilities or any other Registry Clean-up utilities will most likely not remove them completely, so this involves a manual removal.

STEP 1: There are a couple ways to get into your Registry editor, the easiest way is just to open up your Command prompt (Cmd) and type in "regedit" and your registry editor should start running.

STEP 2:
Once you have regedit open you are going to want to do the following: Go to the top of the screen and Click "Edit" and then "Find" button.

All you are going to do is type the name of the virus or spyware which is "Vcs6Core"

This step may take a couple minutes to find depending on how many files are on your PC

STEP 3: Once you have found the file where it says Vcs6Core there should be a couple files in the folder or (Registry Entries) you are going to want to delete all the files that are in that folder.

A message will pop up with a warning, just ignore that and delete anyway. If you are afraid of this messing up your PC, please feel free to backup your Registry files before deleting or possibly create a System Restore point on your PC. I say this because sometimes a virus can spread into regular system32 files and you wouldn't even know it.

This may not apply to everyone, your AV's might have actually done the trick and removed the virus, I was just randomly searching around on my System files because I do a weekly sweep and stumbled upon this little bastard, and I am almost certain that it was in-fact from when "LLoyd" Defaced LF.

The following are some Known registry entries for Vcs6Core

Code:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run@^PCMMRealtime
HKEY_CURRENT_USER\Software\PC MightyMax
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{94D5AF0F-E6EE-4A75-BE31-9C9C9A87AD45}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache "%UserProfile%\Desktop\flash_player_installer\flash_player_installer.exe"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter\"EnabledV8" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations\"LowRiskFileTypes" = ".exe"