Manual Process to remove Fakealert spyware
Step 1: Since, the Trojan process might be up and running in the system, you need to restart your computer in safe mode. This will ensure easy removal of fakelalert.
Step 2: Click Start Menu and select Run. In the Run window, type “regedit" without double quotes. In the registry editor window, search for the below registry key and remove it.
Step 3: Now, press Ctrl + Alt + Del keys together to open up the Task Manager. In the Task Manager window, select the Processes tab and delete the following processes, if running.
tcpservice2.exe, users32.exe, rpnqrdnm.exe, susp.exe and runsrv32.exe
Step 4: Now, again go to Run window, and type “cmd". A command prompt window will appear. Now, move to the Fakealert spyware directory by typing ‘cd’ followed by space and the complete path of the Fakealert directory and press Enter. (Eg: cd c:\program files\Some_Directory_Name)
Now, one by one un-register the following dll files by typing “regsvr32 /u Some_DLL_Name.dll".
zserv.dll, runsrv32.dll, jao.dll, wstart.dll, bridge.dll, questmod.dll, winflash.dll, pynix.dll, udpmod.dll
Step 5: Finally, you need to delete all the files present in the fakealert directory and in other places. The best way is to search for the following files using the search functionality of windows, and delete all of them one by one.
zserv.dll, runsrv32.dll, jao.dll, wstart.dll, bridge.dll, questmod.dll, winflash.dll, pynix.dll, udpmod.dll, tcpservice2.exe, users32.exe, rpnqrdnm.exe, susp.exe and runsrv32.exe
Restart your computer and then follow the automatic process guide to ensure complete removal of Fakealert spyware from your computer.