Adware.Win32.Gator.B

To restart in Safe Mode:

• For Windows 7 and Windows Server 2008 (R2) users

1. Restart your computer.
2. Press F8 after the Power-On Self Test (POST) routine is done. If the Advanced Boot Options menu does not appear, try restarting and then pressing F8 several times after the POST screen is displayed.
3. On the Advanced Boot Options menu, use the arrow keys to select the Safe Mode option, and then press Enter.

• For Windows 8, Windows 8.1, and Windows Server 2012 users

1. Access the Charms bar by moving your mouse pointer to the upper right corner of the screen.
2. Move your mouse pointer down and click Settings>Change your PC Settings.
3. In the left panel, click General.
4. In the right panel, scroll down to the bottom to find the Advanced startup section, then click the Restart now button and wait for the system to restart.
5. In the Advanced Startup menu, click Troubleshoot>Advanced Options>Startup Settings>Restart and wait for the system to restart.
6. In the Startup Settings menu, press 4 to enable safe mode.

• For Windows 10 users

1. Press Windows logo key + I on your keyboard to open Settings. If that doesn't work, select the Start button, then select Settings.
2. Select Update & Security > Recovery.
3. Under Advanced startup, select Restart now.
4. After your PC restarts to the Choose an option screen, select Troubleshoot > Advcanced options > Startup settings > Restart.
5. After your PC restarts, you'll see a list og options. Select 4 or press F4 to start your PC in Safe Mode.

To delete the registry key this malware/grayware created:

1. Open Registry Editor.
   » For Windows 7 and Windows Server 2008 (R2) users, click the Start button, type regedit in the Search input field then press Enter.
   » For Windows 8, Windows 8.1, Windows 10, and Windows Server 2012 (R2) users, right-click on the lower left corner of the screen, click Run, type regedit in the text box provided, and then press Enter.
2. In the left panel, double-click the following:
   HKEY_CURRENT_USER>Software
3. Still in the left panel, locate and delete the key:
   DivXNetworks
4. In the left panel, double-click the following:
   HKEY_CURRENT_USER>Software>DivXNetworks
5. Still in the left panel, locate and delete the key:
   DivX4Windows
6. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>Control>MediaResources
7. Still in the left panel, locate and delete the key:
   icm
8. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>Control>MediaResources>icm
9. Still in the left panel, locate and delete the key:
   vidc.DIVX
10. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>Software
11. Still in the left panel, locate and delete the key:
    DivXNetworks
12. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SoftwareNetworks
13. Still in the left panel, locate and delete the key:
    DivX
14. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>Software>DivXNetworks>DivX
15. Still in the left panel, locate and delete the key:
    Enhancement
16. In the left panel, double-click the following:
    HKEY_CLASSES_ROOT>AVIFILE>Extensions
17. Still in the left panel, locate and delete the key:
    MP4
18. In the left panel, double-click the following:
    HKEY_CLASSES_ROOT>CLSID
19. Still in the left panel, locate and delete the key:
    {634f0d74-0dda-4344-be44-8b1c35ee3296}
20. In the left panel, double-click the following:
    HKEY_CLASSES_ROOT>CLSID>{634f0d74-0dda-4344-be44-8b1c35ee3296}
21. Still in the left panel, locate and delete the key:
    AVIFile
22. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>Software>DivXNetworks
23. Still in the left panel, locate and delete the key:
    DivX Player 2.0
24. Again Still in the left panel, locate and delete the key:
    DivX Player 2.0
25. In the left panel, double-click the following:
    HKEY_CLASSES_ROOT
26. Still in the left panel, locate and delete the key:
    .divx
27. Again Still in the left panel, locate and delete the key:
    divxfile
28. In the left panel, double-click the following:
    HKEY_CLASSES_ROOT>divxfile
29. Still in the left panel, locate and delete the key:
    DefaultIcon
30. Again Still in the left panel, locate and delete the key:
    shell
31. In the left panel, double-click the following:
    HKEY_CLASSES_ROOT>divxfile>shell
32. Still in the left panel, locate and delete the key:
    open
33. In the left panel, double-click the following:
    HKEY_CLASSES_ROOT>divxfile>shell>open
34. Still in the left panel, locate and delete the key:
    command
35. Again Still in the left panel, locate and delete the key:
    .div
36. Again Still in the left panel, locate and delete the key:
    divfile
37. In the left panel, double-click the following:
    HKEY_CLASSES_ROOT>divfile
38. Still in the left panel, locate and delete the key:
    DefaultIcon
39. Again Still in the left panel, locate and delete the key:
    shell
40. In the left panel, double-click the following:
    HKEY_CLASSES_ROOT>divfile>shell
41. Still in the left panel, locate and delete the key:
    open
42. In the left panel, double-click the following:
    HKEY_CLASSES_ROOT>divfile>shell>open
43. Still in the left panel, locate and delete the key:
    command
44. Again Still in the left panel, locate and delete the key:
    .dps
45. Again Still in the left panel, locate and delete the key:
    dpsfile
46. In the left panel, double-click the following:
    HKEY_CLASSES_ROOT>dpsfile
47. Still in the left panel, locate and delete the key:
    DefaultIcon
48. In the left panel, double-click the following:
    HKEY_CLASSES_ROOT>CLSID>{083863F1-70DE-11D0-BD40-00A0C911CE86}>Instance
49. Still in the left panel, locate and delete the key:
    {78766964-0000-0010-8000-00AA00389B71}
50. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Uninstall
51. Still in the left panel, locate and delete the key:
    DivX Codec
52. Again Still in the left panel, locate and delete the key:
    {78766964-0000-0010-8000-00AA00389B71}
53. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{78766964-0000-0010-8000-00AA00389B71}
54. Still in the left panel, locate and delete the key:
    InprocServer32
55. Again Still in the left panel, locate and delete the key:
    {310E42A0-F913-11D4-887C-006008DC5C26}
56. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{310E42A0-F913-11D4-887C-006008DC5C26}
57. Still in the left panel, locate and delete the key:
    InprocServer32
58. Again Still in the left panel, locate and delete the key:
    {1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}
59. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}
60. Still in the left panel, locate and delete the key:
    InprocServer32
61. Again Still in the left panel, locate and delete the key:
    {83E66439-05D5-488C-A236-AA20E543D384}
62. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{83E66439-05D5-488C-A236-AA20E543D384}
63. Still in the left panel, locate and delete the key:
    InprocServer32
64. In the left panel, double-click the following:
    HKEY_CLASSES_ROOT>CLSID>{CF49D4E0-1115-11CE-B03A-0020AF0BA770}>Instance
65. Still in the left panel, locate and delete the key:
    CLSID_DivXDeux
66. Again Still in the left panel, locate and delete the key:
    CLSID_DivXDeux
67. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>Software>CLASSES>CLSID
68. Still in the left panel, locate and delete the key:
    {21FFB6C0-0DA1-11D5-A9D5-00500413153C}
69. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>software>Gator.com
70. Still in the left panel, locate and delete the key:
    Trickler
71. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>software>Gator.com>Gator
72. Still in the left panel, locate and delete the key:
    dyn
73. Again Still in the left panel, locate and delete the key:
    stat
74. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>software>Gator.com>Trickler>Files>SilentSetup
75. Still in the left panel, locate and delete the key:
    dl
76. Again Still in the left panel, locate and delete the key:
    chk
77. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>software>Gator.com>Trickler>Files>Bundle
78. Still in the left panel, locate and delete the key:
    chk
79. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>software>Gator.com>Trickler>Files>OemResDll
80. Still in the left panel, locate and delete the key:
    dl
81. Again Still in the left panel, locate and delete the key:
    chk
82. Close Registry Editor.

To delete the registry value this malware/grayware created:

1. Open Registry Editor.
   » For Windows 7 and Windows Server 2008 (R2) users, click the Start button, type regedit in the Search input field then press Enter.
   » For Windows 8, Windows 8.1, Windows 10, and Windows Server 2012 (R2) users, right-click on the lower-left corner of the screen, click Run, type regedit in the text box provided, and then press Enter.
2. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Run
3. In the right panel, locate and delete the entry:
   Trickler = %Program Files%\divx\divx pro codec\gain_trickler_3202.exe
4. In the left panel, double-click the following:
   HKEY_CURRENT_USER>Software>DivXNetworks>DivX4Windows
5. In the right panel, locate and delete the entry:
   Postprocessing = 14
6. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>CurrentVersion>drivers.desc
7. In the right panel, locate and delete the entry:
   DivX.dll = DivX 5.0 Pro Codec
8. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>Control>MediaResources>icm>vidc.DIVX
9. In the right panel, locate and delete the entry:
   Description = DivX 5.0 Codec
10. Again In the right panel, locate and delete the entry:
    Driver = DivX.dll
11. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>DivXNetworks>DivX
12. In the right panel, locate and delete the entry:
    uninstdir = %Program Files%\DivX
13. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>DivXNetworks>DivX Player 2.0
14. In the right panel, locate and delete the entry:
    InstallDir = %Program Files%\DivX\DivX Player 2.0 Alpha
15. Again In the right panel, locate and delete the entry:
    SkinsDir = %Program Files%\DivX\DivX Player 2.0 Alpha\Skins
16. Again In the right panel, locate and delete the entry:
    applicationdir = %Program Files%\DivX\DivX Player 2.0 Alpha
17. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>DivXNetworks>DivX Player 2.0
18. In the right panel, locate and delete the entry:
    applicationdir = %Program Files%\DivX\DivX Player 2.0 Alpha
19. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{78766964-0000-0010-8000-00AA00389B71}>InprocServer32
20. In the right panel, locate and delete the entry:
    ThreadingModel = Both
21. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{310E42A0-F913-11D4-887C-006008DC5C26}>InprocServer32
22. In the right panel, locate and delete the entry:
    ThreadingModel = Both
23. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}>InprocServer32
24. In the right panel, locate and delete the entry:
    ThreadingModel = Both
25. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{83E66439-05D5-488C-A236-AA20E543D384}>InprocServer32
26. In the right panel, locate and delete the entry:
    ThreadingModel = Both
27. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{083863F1-70DE-11d0-BD40-00A0C911CE86}>Instance>{78766964-0000-0010-8000-00AA00389B71}
28. In the right panel, locate and delete the entry:
    FriendlyName = DivX Decoder Filter
29. Again In the right panel, locate and delete the entry:
    CLSID = {78766964-0000-0010-8000-00AA00389B71}
30. Again In the right panel, locate and delete the entry:
    FilterData = {random values}
31. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{CF49D4E0-1115-11CE-B03A-0020AF0BA770}>Instance>CLSID_DivXDeux
32. In the right panel, locate and delete the entry:
    FriendlyName = DivX Decoder Filter
33. Again In the right panel, locate and delete the entry:
    CLSID = {78766964-0000-0010-8000-00AA00389B71}
34. Again In the right panel, locate and delete the entry:
    FilterData = {random values}
35. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{083863F1-70DE-11d0-BD40-00A0C911CE86}>Instance>CLSID_DivXDeux
36. In the right panel, locate and delete the entry:
    FriendlyName = DivX Decoder Filter
37. Again In the right panel, locate and delete the entry:
    CLSID = {78766964-0000-0010-8000-00AA00389B71}
38. Again In the right panel, locate and delete the entry:
    FilterData = {random values}
39. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Uninstall>DivX Codec
40. In the right panel, locate and delete the entry:
    DisplayName = DivX 5.0.3 Pro Bundle
41. Again In the right panel, locate and delete the entry:
    UninstallString = %Windows%\unvise32.exe %Program Files%\DivX\uninstal.log
42. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>SharedDlls
43. In the right panel, locate and delete the entry:
    %Windows%\unvise32.exe = 1
44. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
45. In the right panel, locate and delete the entry:
    uets = {random values}
46. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Gator.com>Trickler
47. In the right panel, locate and delete the entry:
    AppPath = %Program Files%\divx\divx pro codec\gain_trickler_3202.exe
48. Again In the right panel, locate and delete the entry:
    OldTrickler = %Program Files%\divx\divx pro codec\gain_trickler.exe0
49. Again In the right panel, locate and delete the entry:
    GEF = 4
50. Again In the right panel, locate and delete the entry:
    FirstStartValue = 349
51. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Gator.com>Gator>dyn
52. In the right panel, locate and delete the entry:
    PdpFirstStart = 841:NEW
53. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Gator.com>Gator>stat
54. In the right panel, locate and delete the entry:
    Guid = 6BDA2A38-F52D-49EC-9ABD-270F4AD39F30
55. Again In the right panel, locate and delete the entry:
    GMG = 6BDA2A38-F52D-49EC-9ABD-270F4AD39F30
56. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Gator.com>Trickler>Files>SilentSetup>dl
57. In the right panel, locate and delete the entry:
    Attempts = 0
58. Again In the right panel, locate and delete the entry:
    Errors = 0
59. Again In the right panel, locate and delete the entry:
    FileDones = 0
60. Again In the right panel, locate and delete the entry:
    UrlSize = ffffffff
61. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Gator.com>Trickler>Files>SilentSetup>chk
62. In the right panel, locate and delete the entry:
    CheckFailures = 0
63. Again In the right panel, locate and delete the entry:
    Attempts = 0
64. Again In the right panel, locate and delete the entry:
    Errors = 0
65. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Gator.com>Trickler>Files>Bundle>dl
66. In the right panel, locate and delete the entry:
    Attempts = 0
67. Again In the right panel, locate and delete the entry:
    Errors = 0
68. Again In the right panel, locate and delete the entry:
    FileDones = 0
69. Again In the right panel, locate and delete the entry:
    UrlSize = ffffffff
70. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Gator.com>Trickler>Files>Bundle>chk
71. In the right panel, locate and delete the entry:
    CheckFailures = 0
72. Again In the right panel, locate and delete the entry:
    Attempts = 0
73. Again In the right panel, locate and delete the entry:
    Errors = 0
74. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Gator.com>Trickler>Files>OemResDll>dl
75. In the right panel, locate and delete the entry:
    Attempts = 0
76. Again In the right panel, locate and delete the entry:
    Errors = 0
77. Again In the right panel, locate and delete the entry:
    FileDones = 0
78. Again In the right panel, locate and delete the entry:
    UrlSize = ffffffff
79. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Gator.com>Trickler>Files>OemResDll>chk
80. In the right panel, locate and delete the entry:
    CheckFailures = 0
81. Again In the right panel, locate and delete the entry:
    Attempts = 0
82. Again In the right panel, locate and delete the entry:
    Errors = 0
83. Again In the right panel, locate and delete the entry:
    StartTime = 57a26f5
84. Close Registry Editor.

To delete malware/grayware files:

For Windows 7 and Server 2008 (R2), 8, 8.1, 10, and Server 2012 (R2):

1. Open a Windows Explorer window.
   • For Windows 7 and Server 2008 (R2) users, click Start>Computer.
   • For Windows 8, 8.1, 10, and Server 2012 users, right-click on the lower left corner of the screen, then click File Explorer.
2. In the Search Computer/This PC input box, type:
    
   • %User Temp%\~vis0000\vise32ex.dll
   • %User Temp%\~vis0000\English.vlg
   • %User Temp%\~vis0000\dsetup.dll
   • %User Temp%\~vis0000\jpeg.dll
   • %User Temp%\~vis0000\miscdata.xyz
   • %User Temp%\~vis0000\rebootnt.exe
   • %User Temp%\~vis0000\uninst32.exe
   • %User Temp%\~vis0000\default.bmp
   • %User Temp%\~vis0000\divxpro_gain.jpg
   • %User Temp%\~vis0000\GAIN Banner.bmp
   • %User Temp%\~vis0000\uninstal.log
   • %User Temp%\~vis0000\rollback.log
   • %User Temp%\~vis0000\r0000000.000
   • %User Temp%\~vis0000\r0000000.001
   • %User Temp%\~vis0000\r0000000.002
   • %User Temp%\~vis0000\r0000000.003
   • %User Temp%\~vis0000\r0000000.004
   • %User Temp%\~vis0000\r0000000.005
   • %User Temp%\~vis0000\r0000000.006
   • %User Temp%\~vis0000\r0000000.007
   • %User Temp%\~vis0000\r0000000.008
   • %User Temp%\~vis0000\r0000000.009
   • %User Temp%\~vis0000\r0000000.010
   • %User Temp%\~vis0000\r0000000.011
   • %User Temp%\~vis0000\r0000000.012
   • %User Temp%\~vis0000\r0000000.013
   • %User Temp%\~vis0000\r0000000.014
   • %User Temp%\~vis0000\r0000000.015
   • %User Temp%\~vis0000\r0000000.016
   • %User Temp%\~vis0000\r0000000.017
   • %User Temp%\~vis0000\r0000000.018
   • %User Temp%\~vis0000\r0000000.019
   • %User Temp%\~vis0000\r0000000.020
   • %User Temp%\~vis0000\r0000000.021
   • %User Temp%\~vis0000\r0000000.022
   • %User Temp%\~vis0000\r0000000.023
   • %User Temp%\~vis0000\r0000000.024
   • %User Temp%\~vis0000\r0000000.025
   • %User Temp%\~vis0000\r0000000.026
   • %Program Files%\DivX\xxxxxxxx.yyy
   • %Program Files%\DivX\DivX Pro Codec\LICENSE.TXT
   • %Program Files%\DivX\DivX Pro Codec\DivX help guide.url
   • %Program Files%\DivX\DivX Pro Codec\DivX.com.url
   • %Program Files%\DivX\DivX Pro Codec\README.txt
   • %Program Files%\DivX\DivX Pro Codec\config.exe
   • %Program Files%\DivX\DivX Pro Codec\Gain_Trickler.exe
   • %Program Files%\DivX\DivX Player 2.0 Alpha\Skins\Default.dps
   • %Program Files%\DivX\DivX Player 2.0 Alpha\DivX Player 2.0 Alpha.exe
   • %Program Files%\DivX\DivX Player 2.0 Alpha\DivXPlayer.dbf
   • %Program Files%\DivX\DivX Player 2.0 Alpha\LICENSE.TXT
   • %Program Files%\DivX\DivX Player 2.0 Alpha\README.txt
   • %Program Files%\DivX\DivX Player 2.0 Alpha\DivX.com.url
   • %Program Files%\DivX\DivX Pro Codec\gain_trickler_3202.exe
   • %Program Files%\DivX\uninstal.log
   • %System%\divxdec.ax
   • %System%\divx.dll
   • %Windows%\unvise32.exe
   • %Common Programs%\VIS7bd6.TMP
   • %Common Programs%\VIS7be5.TMP
   • %Common Programs%\VIS7c14.TMP
   • %Common Programs%\VIS7c24.TMP
   • %Common Programs%\VIS7c33.TMP
   • %Common Programs%\DivX\DivX Pro Codec\DivX Help Guide.lnk
   • %Common Programs%\DivX\DivX Pro Codec\License.txt.lnk
   • %Common Programs%\DivX\DivX Pro Codec\Readme.txt.lnk
   • %Common Programs%\DivX\DivX Pro Codec\DivX.com.lnk
   • %Common Programs%\DivX\DivX Pro Codec\Decoder Configuration.lnk
   • %Common Programs%\DivX\DivX Player 2.0 Alpha\DivX Player 2.0 Alpha.lnk
   • %Common Programs%\DivX\DivX Player 2.0 Alpha\License.txt.lnk
   • %Common Programs%\DivX\DivX Player 2.0 Alpha\DivX.com.lnk
   • %Common Programs%\DivX\DivX Player 2.0 Alpha\Readme.txt.lnk
   • %Common Programs%\DivX\Remove DivX 5.0.3 Pro Bundle.lnk
   • %Common Programs%\VIS7c43.TMP
   • %Common Programs%\VIS7c53.TMP
   • %Common Programs%\VIS7c62.TMP
   • %Common Programs%\VIS7c72.TMP
   • %Common Programs%\VIS7c81.TMP
   • %Common Programs%\VIS7c91.TMP
   • %Common Programs%\VIS7ca1.TMP
   • %Common Programs%\VIS7cb0.TMP
   • %Common Programs%\VIS7cc0.TMP
   • %Common Programs%\VIS7ccf.TMP
   • %Common Programs%\VIS7cdf.TMP
   • %Common Programs%\VIS7cef.TMP
   • %Common Programs%\VIS7cfe.TMP
   • %Common Programs%\VIS7d0e.TMP
   • %Common Programs%\VIS7d1d.TMP
   • %Common Programs%\VIS7d2d.TMP
   • %Common Programs%\VIS7d4c.TMP
   • %Common Programs%\VIS7d5c.TMP
   • %Common Programs%\VIS7d6b.TMP
   • %Common Programs%\VIS7d7b.TMP
   • %Common Programs%\VIS7d8b.TMP
   • %Common Programs%\VIS7d9a.TMP
   • %Common Programs%\VIS7daa.TMP
   • %Common Programs%\VIS7db9.TMP
   • %Common Programs%\VIS7dc9.TMP
   • %Common Programs%\VIS7dd9.TMP
   • %Common Programs%\VIS7de8.TMP
   • %Common Programs%\VIS7df8.TMP
   • %Common Programs%\VIS7e17.TMP
   • %Common Programs%\VIS7e27.TMP
   • %Common Programs%\VIS7e36.TMP
   • %Common Programs%\VIS7e46.TMP
   • %Common Programs%\VIS7e55.TMP
   • %Common Programs%\VIS88d1.TMP
   • %Common Programs%\VIS88e0.TMP
   • %Common Programs%\VIS88f0.TMP
   • %Common Programs%\VIS89bb.TMP
   • %Common Programs%\VIS89da.TMP
   • %Desktop%\DivX Player 2.0 Alpha.lnk
3. Once located, select the file then press SHIFT+DELETE to delete it.
4. Repeat the said steps for all files listed.
   *Note: Read the following Microsoft page if these steps do not work on Windows 7 and Server 2008 (R2).

To delete malware/grayware/spyware folders:

For Windows 7, Windows Server 2008 (R2), Windows 8, Windows 8.1, Windows 10, and Windows Server 2012 (R2):

1. Open a Windows Explorer window.
   • For Windows 7 and Server 2008 (R2) users, click Start>Computer.
   • For Windows 8, 8.1, 10, and Server 2012 (R2) users, right-click on the lower-left corner of the screen,then click File Explorer.
2. In the Search Computer/This PC input box, type:
   
   • %User Temp%\~vis0000
   • %Program Files%\DivX
   • %Program Files%\DivX\DivX Pro Codec
   • %Common Programs%\DivX
   • %Common Programs%\DivX\DivX Pro Codec
   • %Common Programs%\DivX\DivX Player 2.0 Alpha
   • %Program Files%\DivX\DivX Player 2.0 Alpha
   • %Program Files%\DivX\DivX Player 2.0 Alpha\Skins
   • %User Temp%\fsg_tmp
   • %User Temp%\fsg_tmp\accum
   • %User Temp%\fsg_tmp\accum\Trickler
3. Once located, select the file then press SHIFT+DELETE to permanently delete the folder.
4. Repeat steps 2-3 for the remaining folders:
   • %User Temp%\~vis0000
   • %Program Files%\DivX
   • %Program Files%\DivX\DivX Pro Codec
   • %Common Programs%\DivX
   • %Common Programs%\DivX\DivX Pro Codec
   • %Common Programs%\DivX\DivX Player 2.0 Alpha
   • %Program Files%\DivX\DivX Player 2.0 Alpha
   • %Program Files%\DivX\DivX Player 2.0 Alpha\Skins
   • %User Temp%\fsg_tmp
   • %User Temp%\fsg_tmp\accum
   • %User Temp%\fsg_tmp\accum\Trickler
   *Note: Read the following Microsoft page if these steps do not work on Windows 7 and Server 2008 (R2).