PUA.Win32.FusionCore.JA

To uninstall the grayware program:

1. Open Programs via Control Panel. To do this:
   • For Windows 7 and Server 2008 (R2), click Start > Control Panel > Programs and Features.
   • For Windows 8, 8.1, and Server 2012 (R2), right-click on the lower-left corner of the screen, click Control Panel > Programs and Features.
   • For Windows 10, click Start, Type Control Panel > Programs and Features.
2. In the displayed list, choose the following program:
   
   • ImgBurn
3. Click on Remove or Uninstall depending on the currently running Windows version.
4. Follow the instructions on the dialog box that appears.
5. Close the Programs window, and the Control Panel window.

To delete the registry value this malware created:

1. Open Registry Editor. To do this:
   » For Windows 7 and Windows Server 2008 (R2) users, click the Start button, type regedit in the Search input field then press Enter.
   » For Windows 8, Windows 8.1, 10, and Windows Server 2012 (R2) users, right-click on the lower left corner of the screen, click Run, type regedit in the text box provided, and then press Enter.
2. In the left panel of the Registry Editor window, double-click the following:
   HKEY_CURRENT_USER>Software>ImgBurn
3. In the right panel, locate and delete the entry:
   EVENTS_CheckForProgramUpdate = "2"
4. Again In the right panel, locate and delete the entry:
   InstallDirectory = "%Program%\ImgBurn"
5. Again In the right panel, locate and delete the entry:
   VersionMajor = "2"
6. Again In the right panel, locate and delete the entry:
   VersionMinor = "5"
7. Again In the right panel, locate and delete the entry:
   VersionRevision = "8"
8. Again In the right panel, locate and delete the entry:
   VersionBuild = "0"
9. Again In the right panel, locate and delete the entry:
   INSTALLER_StartMenuShortcuts = "1"
10. Again In the right panel, locate and delete the entry:
    INSTALLER_DesktopIcon = "1"
11. Again In the right panel, locate and delete the entry:
    INSTALLER_QuickLaunchIcon = "1"
12. Again In the right panel, locate and delete the entry:
    INSTALLER_InstallAllUsers = "1"
13. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>ImgBurn
14. In the right panel, locate and delete the entry:
    EVENTS_CheckForProgramUpdate = "2"
15. Again In the right panel, locate and delete the entry:
    INSTALLER_EnableSPTIAccessAllUsers = "0"
16. Again In the right panel, locate and delete the entry:
    INSTALLER_EnableSPTIAccessRemoteSessions = "0"
17. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.ape
18. In the right panel, locate and delete the entry:
    {Default} = "Disc Image File"
19. Again In the right panel, locate and delete the entry:
    FriendlyTypeName = "Disc Image File"
20. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.ape>DefaultIcon
21. In the right panel, locate and delete the entry:
    {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
22. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.ape>shell>open
23. In the right panel, locate and delete the entry:
    {Default} = "Burn using ImgBurn"
24. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.ape>shell>open>command
25. In the right panel, locate and delete the entry:
    {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
26. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.bin
27. In the right panel, locate and delete the entry:
    {Default} = "Disc Image File"
28. Again In the right panel, locate and delete the entry:
    FriendlyTypeName = "Disc Image File"
29. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.bin>DefaultIcon
30. In the right panel, locate and delete the entry:
    {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
31. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.bin>shell>open
32. In the right panel, locate and delete the entry:
    {Default} = "Burn using ImgBurn"
33. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.bin>shell>open>command
34. In the right panel, locate and delete the entry:
    {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
35. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.ccd
36. In the right panel, locate and delete the entry:
    {Default} = "Disc Image File"
37. Again In the right panel, locate and delete the entry:
    FriendlyTypeName = "Disc Image File"
38. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.ccd>DefaultIcon
39. In the right panel, locate and delete the entry:
    {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
40. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.ccd>shell>open
41. In the right panel, locate and delete the entry:
    {Default} = "Burn using ImgBurn"
42. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.ccd>shell>open>command
43. In the right panel, locate and delete the entry:
    {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
44. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.cdi
45. In the right panel, locate and delete the entry:
    {Default} = "Disc Image File"
46. Again In the right panel, locate and delete the entry:
    FriendlyTypeName = "Disc Image File"
47. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.cdi>DefaultIcon
48. In the right panel, locate and delete the entry:
    {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
49. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.cdi>shell>open
50. In the right panel, locate and delete the entry:
    {Default} = "Burn using ImgBurn"
51. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.cdi>shell>open>command
52. In the right panel, locate and delete the entry:
    {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
53. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.cdr
54. In the right panel, locate and delete the entry:
    {Default} = "Disc Image File"
55. Again In the right panel, locate and delete the entry:
    FriendlyTypeName = "Disc Image File"
56. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.cdr>DefaultIcon
57. In the right panel, locate and delete the entry:
    {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
58. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.cdr>shell>open
59. In the right panel, locate and delete the entry:
    {Default} = "Burn using ImgBurn"
60. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.cdr>shell>open>command
61. In the right panel, locate and delete the entry:
    {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
62. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.cue
63. In the right panel, locate and delete the entry:
    {Default} = "Disc Image File"
64. Again In the right panel, locate and delete the entry:
    FriendlyTypeName = "Disc Image File"
65. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.cue>DefaultIcon
66. In the right panel, locate and delete the entry:
    {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
67. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.cue>shell>open
68. In the right panel, locate and delete the entry:
    {Default} = "Burn using ImgBurn"
69. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.cue>shell>open>command
70. In the right panel, locate and delete the entry:
    {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
71. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.di
72. In the right panel, locate and delete the entry:
    {Default} = "Disc Image File"
73. Again In the right panel, locate and delete the entry:
    FriendlyTypeName = "Disc Image File"
74. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.di>DefaultIcon
75. In the right panel, locate and delete the entry:
    {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
76. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.di>shell>open
77. In the right panel, locate and delete the entry:
    {Default} = "Burn using ImgBurn"
78. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.di>shell>open>command
79. In the right panel, locate and delete the entry:
    {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
80. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.dvd
81. In the right panel, locate and delete the entry:
    {Default} = "Disc Image File"
82. Again In the right panel, locate and delete the entry:
    FriendlyTypeName = "Disc Image File"
83. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.dvd>DefaultIcon
84. In the right panel, locate and delete the entry:
    {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
85. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.dvd>shell>open
86. In the right panel, locate and delete the entry:
    {Default} = "Burn using ImgBurn"
87. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.dvd>shell>open>command
88. In the right panel, locate and delete the entry:
    {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
89. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.flac
90. In the right panel, locate and delete the entry:
    {Default} = "Disc Image File"
91. Again In the right panel, locate and delete the entry:
    FriendlyTypeName = "Disc Image File"
92. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.flac>DefaultIcon
93. In the right panel, locate and delete the entry:
    {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
94. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.flac>shell>open
95. In the right panel, locate and delete the entry:
    {Default} = "Burn using ImgBurn"
96. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.flac>shell>open>command
97. In the right panel, locate and delete the entry:
    {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
98. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.gcm
99. In the right panel, locate and delete the entry:
    {Default} = "Disc Image File"
100. Again In the right panel, locate and delete the entry:
     FriendlyTypeName = "Disc Image File"
101. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.gcm>DefaultIcon
102. In the right panel, locate and delete the entry:
     {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
103. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.gcm>shell>open
104. In the right panel, locate and delete the entry:
     {Default} = "Burn using ImgBurn"
105. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.gcm>shell>open>command
106. In the right panel, locate and delete the entry:
     {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
107. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.gi
108. In the right panel, locate and delete the entry:
     {Default} = "Disc Image File"
109. Again In the right panel, locate and delete the entry:
     FriendlyTypeName = "Disc Image File"
110. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.gi>DefaultIcon
111. In the right panel, locate and delete the entry:
     {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
112. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.gi>shell>open
113. In the right panel, locate and delete the entry:
     {Default} = "Burn using ImgBurn"
114. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.gi>shell>open>command
115. In the right panel, locate and delete the entry:
     {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
116. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.ibb
117. In the right panel, locate and delete the entry:
     {Default} = "ImgBurn Project File"
118. Again In the right panel, locate and delete the entry:
     FriendlyTypeName = "ImgBurn Project File"
119. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.ibb>DefaultIcon
120. In the right panel, locate and delete the entry:
     {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
121. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.ibb>shell>open
122. In the right panel, locate and delete the entry:
     {Default} = "Burn using ImgBurn"
123. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.ibb>shell>open>command
124. In the right panel, locate and delete the entry:
     {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE BUILD /SOURCE "%1""
125. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.ibq
126. In the right panel, locate and delete the entry:
     {Default} = "ImgBurn Queue File"
127. Again In the right panel, locate and delete the entry:
     FriendlyTypeName = "ImgBurn Queue File"
128. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.ibq>DefaultIcon
129. In the right panel, locate and delete the entry:
     {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
130. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.ibq>shell>open
131. In the right panel, locate and delete the entry:
     {Default} = "Burn using ImgBurn"
132. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.ibq>shell>open>command
133. In the right panel, locate and delete the entry:
     {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
134. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.img
135. In the right panel, locate and delete the entry:
     {Default} = "Disc Image File"
136. Again In the right panel, locate and delete the entry:
     FriendlyTypeName = "Disc Image File"
137. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.img>DefaultIcon
138. In the right panel, locate and delete the entry:
     {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
139. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.img>shell>open
140. In the right panel, locate and delete the entry:
     {Default} = "Burn using ImgBurn"
141. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.img>shell>open>command
142. In the right panel, locate and delete the entry:
     {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
143. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.iso
144. In the right panel, locate and delete the entry:
     {Default} = "Disc Image File"
145. Again In the right panel, locate and delete the entry:
     FriendlyTypeName = "Disc Image File"
146. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.iso>DefaultIcon
147. In the right panel, locate and delete the entry:
     {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
148. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.iso>shell>open
149. In the right panel, locate and delete the entry:
     {Default} = "Burn using ImgBurn"
150. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.iso>shell>open>command
151. In the right panel, locate and delete the entry:
     {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
152. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.lst
153. In the right panel, locate and delete the entry:
     {Default} = "Disc Image File"
154. Again In the right panel, locate and delete the entry:
     FriendlyTypeName = "Disc Image File"
155. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.lst>DefaultIcon
156. In the right panel, locate and delete the entry:
     {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
157. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.lst>shell>open
158. In the right panel, locate and delete the entry:
     {Default} = "Burn using ImgBurn"
159. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.lst>shell>open>command
160. In the right panel, locate and delete the entry:
     {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
161. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.mds
162. In the right panel, locate and delete the entry:
     {Default} = "Disc Image File"
163. Again In the right panel, locate and delete the entry:
     FriendlyTypeName = "Disc Image File"
164. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.mds>DefaultIcon
165. In the right panel, locate and delete the entry:
     {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
166. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.mds>shell>open
167. In the right panel, locate and delete the entry:
     {Default} = "Burn using ImgBurn"
168. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.mds>shell>open>command
169. In the right panel, locate and delete the entry:
     {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
170. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.nrg
171. In the right panel, locate and delete the entry:
     {Default} = "Disc Image File"
172. Again In the right panel, locate and delete the entry:
     FriendlyTypeName = "Disc Image File"
173. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.nrg>DefaultIcon
174. In the right panel, locate and delete the entry:
     {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
175. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.nrg>shell>open
176. In the right panel, locate and delete the entry:
     {Default} = "Burn using ImgBurn"
177. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.nrg>shell>open>command
178. In the right panel, locate and delete the entry:
     {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
179. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.pdi
180. In the right panel, locate and delete the entry:
     {Default} = "Disc Image File"
181. Again In the right panel, locate and delete the entry:
     FriendlyTypeName = "Disc Image File"
182. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.pdi>DefaultIcon
183. In the right panel, locate and delete the entry:
     {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
184. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.pdi>shell>open
185. In the right panel, locate and delete the entry:
     {Default} = "Burn using ImgBurn"
186. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.pdi>shell>open>command
187. In the right panel, locate and delete the entry:
     {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
188. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.tak
189. In the right panel, locate and delete the entry:
     {Default} = "Disc Image File"
190. Again In the right panel, locate and delete the entry:
     FriendlyTypeName = "Disc Image File"
191. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.tak>DefaultIcon
192. In the right panel, locate and delete the entry:
     {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
193. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.tak>shell>open
194. In the right panel, locate and delete the entry:
     {Default} = "Burn using ImgBurn"
195. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.tak>shell>open>command
196. In the right panel, locate and delete the entry:
     {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
197. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.udi
198. In the right panel, locate and delete the entry:
     {Default} = "Disc Image File"
199. Again In the right panel, locate and delete the entry:
     FriendlyTypeName = "Disc Image File"
200. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.udi>DefaultIcon
201. In the right panel, locate and delete the entry:
     {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
202. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.udi>shell>open
203. In the right panel, locate and delete the entry:
     {Default} = "Burn using ImgBurn"
204. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.udi>shell>open>command
205. In the right panel, locate and delete the entry:
     {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
206. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.wv
207. In the right panel, locate and delete the entry:
     {Default} = "Disc Image File"
208. Again In the right panel, locate and delete the entry:
     FriendlyTypeName = "Disc Image File"
209. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.wv>DefaultIcon
210. In the right panel, locate and delete the entry:
     {Default} = "%Program%\ImgBurn\ImgBurn.exe,1"
211. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.wv>shell>open
212. In the right panel, locate and delete the entry:
     {Default} = "Burn using ImgBurn"
213. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ImgBurn.AssocFile.wv>shell>open>command
214. In the right panel, locate and delete the entry:
     {Default} = ""%Program%\ImgBurn\ImgBurn.exe" /MODE WRITE /SOURCE "%1""
215. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>ImgBurn>Capabilities
216. In the right panel, locate and delete the entry:
     ApplicationDescription = "A lightweight burning application that everyone should have in their toolkit!"
217. Again In the right panel, locate and delete the entry:
     ApplicationName = "ImgBurn"
218. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>ImgBurn>Capabilities>FileAssociations
219. In the right panel, locate and delete the entry:
     .ape = "ImgBurn.AssocFile.ape"
220. Again In the right panel, locate and delete the entry:
     .bin = "ImgBurn.AssocFile.bin"
221. Again In the right panel, locate and delete the entry:
     .ccd = "ImgBurn.AssocFile.ccd"
222. Again In the right panel, locate and delete the entry:
     .cdi = "ImgBurn.AssocFile.cdi"
223. Again In the right panel, locate and delete the entry:
     .cdr = "ImgBurn.AssocFile.cdr"
224. Again In the right panel, locate and delete the entry:
     .cue = "ImgBurn.AssocFile.cue"
225. Again In the right panel, locate and delete the entry:
     .di = "ImgBurn.AssocFile.di"
226. Again In the right panel, locate and delete the entry:
     .dvd = "ImgBurn.AssocFile.dvd"
227. Again In the right panel, locate and delete the entry:
     .flac = "ImgBurn.AssocFile.flac"
228. Again In the right panel, locate and delete the entry:
     .gcm = "ImgBurn.AssocFile.gcm"
229. Again In the right panel, locate and delete the entry:
     .gi = "ImgBurn.AssocFile.gi"
230. Again In the right panel, locate and delete the entry:
     .ibb = "ImgBurn.AssocFile.ibb"
231. Again In the right panel, locate and delete the entry:
     .ibq = "ImgBurn.AssocFile.ibq"
232. Again In the right panel, locate and delete the entry:
     .img = "ImgBurn.AssocFile.img"
233. Again In the right panel, locate and delete the entry:
     .iso = "ImgBurn.AssocFile.iso"
234. Again In the right panel, locate and delete the entry:
     .lst = "ImgBurn.AssocFile.lst"
235. Again In the right panel, locate and delete the entry:
     .mds = "ImgBurn.AssocFile.mds"
236. Again In the right panel, locate and delete the entry:
     .nrg = "ImgBurn.AssocFile.nrg"
237. Again In the right panel, locate and delete the entry:
     .pdi = "ImgBurn.AssocFile.pdi"
238. Again In the right panel, locate and delete the entry:
     .tak = "ImgBurn.AssocFile.tak"
239. Again In the right panel, locate and delete the entry:
     .udi = "ImgBurn.AssocFile.udi"
240. Again In the right panel, locate and delete the entry:
     .wv = "ImgBurn.AssocFile.wv"
241. In the left panel of the Registry Editor window, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Uninstall>ImgBurn
242. In the right panel, locate and delete the entry:
     DisplayIcon = "%Program%\ImgBurn\ImgBurn.exe"
243. Again In the right panel, locate and delete the entry:
     DisplayName = "ImgBurn"
244. Again In the right panel, locate and delete the entry:
     DisplayVersion = "2.5.8.0"
245. Again In the right panel, locate and delete the entry:
     HelpLink = "http://forum.imgburn.com/"
246. Again In the right panel, locate and delete the entry:
     InstallDate = "20190914"
247. Again In the right panel, locate and delete the entry:
     InstallLocation = "%Program%\ImgBurn"
248. Again In the right panel, locate and delete the entry:
     NoModify = "1"
249. Again In the right panel, locate and delete the entry:
     NoRepair = "1"
250. Again In the right panel, locate and delete the entry:
     Publisher = "LIGHTNING UK!"
251. Again In the right panel, locate and delete the entry:
     StartMenuDirectory = "ImgBurn"
252. Again In the right panel, locate and delete the entry:
     UninstallString = ""%Program%\ImgBurn\uninstall.exe""
253. Again In the right panel, locate and delete the entry:
     URLInfoAbout = "http://www.imgburn.com/"
254. Again In the right panel, locate and delete the entry:
     URLUpdateInfo = "http://www.imgburn.com/"
255. Close Registry Editor.

To manually delete a malware/grayware file from an affected system:

•For Windows 7, Windows Server 2008 (R2), Windows 8, Windows 8.1, Windows 10, and Windows Server 2012 (R2):

1. Open a Windows Explorer window.
   • For Windows 7 and Server 2008 (R2) users, click Start>Computer.
   • For Windows 8, 8.1, 10, and Server 2012 (R2) users, right-click on the lower-left corner of the screen,then click File Explorer.
2. In the Search Computer/This PC input box, type:
   
   • %User Temp%\nsd{random numbers}\nsh{4 random character}.tmp
   • %User Temp%\nsd{random numbers}\nsh{4 random character}.tmp\Fusion.dll
   • %User Temp%\nsd{random numbers}\nsh{4 random character}.tmp\System.dll
   • %User Temp%\nsd{random numbers}\0005473C.log
   • %User Temp%\nsd{random numbers}\css\ie6_main.css
   • %User Temp%\nsd{random numbers}\css\main.css
   • %User Temp%\nsd{random numbers}\css\sdk-ui\browse.css
   • %User Temp%\nsd{random numbers}\css\sdk-ui\button.css
   • %User Temp%\nsd{random numbers}\css\sdk-ui\checkbox.css
   • %User Temp%\nsd{random numbers}\css\sdk-ui\images\button-bg.png
   • %User Temp%\nsd{random numbers}\css\sdk-ui\images\progress-bg-corner.png
   • %User Temp%\nsd{random numbers}\css\sdk-ui\images\progress-bg.png
   • %User Temp%\nsd{random numbers}\css\sdk-ui\images\progress-bg2.png
   • %User Temp%\nsd{random numbers}\css\sdk-ui\progress-bar.css
   • %User Temp%\nsd{random numbers}\csshover3.htc
   • %User Temp%\nsd{random numbers}\images\Loader.gif
   • %User Temp%\nsd{random numbers}\locale\AF.locale
   • %User Temp%\nsd{random numbers}\locale\AZ.locale
   • %User Temp%\nsd{random numbers}\locale\BE.locale
   • %User Temp%\nsd{random numbers}\locale\BG.locale
   • %User Temp%\nsd{random numbers}\locale\BS.locale
   • %User Temp%\nsd{random numbers}\locale\CA.locale
   • %User Temp%\nsd{random numbers}\locale\CS.locale
   • %User Temp%\nsd{random numbers}\locale\DA.locale
   • %User Temp%\nsd{random numbers}\locale\DE.locale
   • %User Temp%\nsd{random numbers}\locale\EL.locale
   • %User Temp%\nsd{random numbers}\locale\EN.locale
   • %User Temp%\nsd{random numbers}\locale\ES.locale
   • %User Temp%\nsd{random numbers}\locale\ET.locale
   • %User Temp%\nsd{random numbers}\locale\EU.locale
   • %User Temp%\nsd{random numbers}\locale\FA.locale
   • %User Temp%\nsd{random numbers}\locale\FI.locale
   • %User Temp%\nsd{random numbers}\locale\FR.locale
   • %User Temp%\nsd{random numbers}\locale\GU.locale
   • %User Temp%\nsd{random numbers}\locale\HE.locale
   • %User Temp%\nsd{random numbers}\locale\HI.locale
   • %User Temp%\nsd{random numbers}\locale\HR.locale
   • %User Temp%\nsd{random numbers}\locale\HT.locale
   • %User Temp%\nsd{random numbers}\locale\HU.locale
   • %User Temp%\nsd{random numbers}\locale\HY.locale
   • %User Temp%\nsd{random numbers}\locale\ID.locale
   • %User Temp%\nsd{random numbers}\locale\IS.locale
   • %User Temp%\nsd{random numbers}\locale\IT.locale
   • %User Temp%\nsd{random numbers}\locale\JA.locale
   • %User Temp%\nsd{random numbers}\locale\KA.locale
   • %User Temp%\nsd{random numbers}\locale\KK.locale
   • %User Temp%\nsd{random numbers}\locale\KO.locale
   • %User Temp%\nsd{random numbers}\locale\KU.locale
   • %User Temp%\nsd{random numbers}\locale\LO.locale
   • %User Temp%\nsd{random numbers}\locale\LT.locale
   • %User Temp%\nsd{random numbers}\locale\LV.locale
   • %User Temp%\nsd{random numbers}\locale\MK.locale
   • %User Temp%\nsd{random numbers}\locale\ML.locale
   • %User Temp%\nsd{random numbers}\locale\MR.locale
   • %User Temp%\nsd{random numbers}\locale\MS.locale
   • %User Temp%\nsd{random numbers}\locale\NE.locale
   • %User Temp%\nsd{random numbers}\locale\NL.locale
   • %User Temp%\nsd{random numbers}\locale\NO.locale
   • %User Temp%\nsd{random numbers}\locale\PA.locale
   • %User Temp%\nsd{random numbers}\locale\PL.locale
   • %User Temp%\nsd{random numbers}\locale\PS.locale
   • %User Temp%\nsd{random numbers}\locale\PT.locale
   • %User Temp%\nsd{random numbers}\locale\RO.locale
   • %User Temp%\nsd{random numbers}\locale\RU.locale
   • %User Temp%\nsd{random numbers}\locale\SK.locale
   • %User Temp%\nsd{random numbers}\locale\SL.locale
   • %User Temp%\nsd{random numbers}\locale\SQ.locale
   • %User Temp%\nsd{random numbers}\locale\SR.locale
   • %User Temp%\nsd{random numbers}\locale\SV.locale
   • %User Temp%\nsd{random numbers}\locale\TA.locale
   • %User Temp%\nsd{random numbers}\locale\TE.locale
   • %User Temp%\nsd{random numbers}\locale\TH.locale
   • %User Temp%\nsd{random numbers}\locale\TL.locale
   • %User Temp%\nsd{random numbers}\locale\TR.locale
   • %User Temp%\nsd{random numbers}\locale\UK.locale
   • %User Temp%\nsd{random numbers}\locale\UR.locale
   • %User Temp%\nsd{random numbers}\locale\UZ.locale
   • %User Temp%\nsd{random numbers}\locale\VI.locale
   • %User Temp%\nsd{random numbers}\locale\YO.locale
   • %User Temp%\nsd{random numbers}\locale\ZH.locale
   • %User Temp%\nsd{random numbers}\locale\ZU.locale
   • %Programs%\ImgBurn\ImgBurn.exe
   • %Programs%\ImgBurn\ImgBurnPreview.exe
   • %Programs%\ImgBurn\ReadMe.txt
   • %Programs%\ImgBurn\Sounds\Success.wav
   • %Programs%\ImgBurn\Sounds\Error.wav
   • %Programs%\ImgBurn\uninstall.exe
   • %Common Programs%\ImgBurn.lnk
   • %Common Programs%\ImgBurn\Uninstall.lnk
   • %Common Programs%\ImgBurn\ImgBurn.lnk
   • %Common Programs%\ImgBurn\ImgBurn Read Me.lnk
   • %Desktop%\ImgBurn.lnk
3. Once located, select the file then press SHIFT+DELETE to delete it.
   *Note: Read the following Microsoft page if these steps do not work on Windows 7 and Windows Server 2008 (R2).