TROJ_DYNAMER.ZGD

To delete the registry key this malware/grayware created:

1. Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
2. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>CurrentVersion>Uninstall
3. Still in the left panel, locate and delete the key:
   Folder Lock
4. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE
5. Still in the left panel, locate and delete the key:
   Folder Lock
6. In the left panel, double-click the following:
   HKEY_CLASSES_ROOT
7. Still in the left panel, locate and delete the key:
   ActiveSkin4.Skin.1
8. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ActiveSkin4.Skin.1
9. Still in the left panel, locate and delete the key:
   CLSID
10. Again Still in the left panel, locate and delete the key:
    ActiveSkin4.Skin
11. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ActiveSkin4.Skin
12. Still in the left panel, locate and delete the key:
    CLSID
13. Again Still in the left panel, locate and delete the key:
    CurVer
14. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID
15. Still in the left panel, locate and delete the key:
    {0944D16C-D0F4-4389-982A-A085595A9EB3}
16. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{0944D16C-D0F4-4389-982A-A085595A9EB3}
17. Still in the left panel, locate and delete the key:
    ProgID
18. Again Still in the left panel, locate and delete the key:
    VersionIndependentProgID
19. Again Still in the left panel, locate and delete the key:
    Programmable
20. Again Still in the left panel, locate and delete the key:
    InprocServer32
21. Again Still in the left panel, locate and delete the key:
    Control
22. Again Still in the left panel, locate and delete the key:
    ToolboxBitmap32
23. Again Still in the left panel, locate and delete the key:
    MiscStatus
24. Again Still in the left panel, locate and delete the key:
    TypeLib
25. Again Still in the left panel, locate and delete the key:
    Version
26. Again Still in the left panel, locate and delete the key:
    verb
27. Again Still in the left panel, locate and delete the key:
    {A5704C37-40DA-49EF-904B-97E5F5F9B1C5}
28. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{A5704C37-40DA-49EF-904B-97E5F5F9B1C5}
29. Still in the left panel, locate and delete the key:
    InprocServer32
30. Again Still in the left panel, locate and delete the key:
    TypeLib
31. Again Still in the left panel, locate and delete the key:
    {EC22770D-3343-4C56-8A8D-3E560475F655}
32. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{EC22770D-3343-4C56-8A8D-3E560475F655}
33. Still in the left panel, locate and delete the key:
    InprocServer32
34. Again Still in the left panel, locate and delete the key:
    TypeLib
35. Again Still in the left panel, locate and delete the key:
    {C406F816-318D-4F7D-81CB-BA93CA7B70D5}
36. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{C406F816-318D-4F7D-81CB-BA93CA7B70D5}
37. Still in the left panel, locate and delete the key:
    InprocServer32
38. Again Still in the left panel, locate and delete the key:
    TypeLib
39. Again Still in the left panel, locate and delete the key:
    {52C01A76-19E2-4A50-AE8A-38FFBCCF9182}
40. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{52C01A76-19E2-4A50-AE8A-38FFBCCF9182}
41. Still in the left panel, locate and delete the key:
    InprocServer32
42. Again Still in the left panel, locate and delete the key:
    TypeLib
43. Again Still in the left panel, locate and delete the key:
    {3DCD2BC5-8489-48AE-891F-90C8B2F19F56}
44. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{3DCD2BC5-8489-48AE-891F-90C8B2F19F56}
45. Still in the left panel, locate and delete the key:
    InprocServer32
46. Again Still in the left panel, locate and delete the key:
    TypeLib
47. Again Still in the left panel, locate and delete the key:
    {A506EF88-9EFC-4522-BFE1-A8E886A64D80}
48. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{A506EF88-9EFC-4522-BFE1-A8E886A64D80}
49. Still in the left panel, locate and delete the key:
    InprocServer32
50. Again Still in the left panel, locate and delete the key:
    TypeLib
51. Again Still in the left panel, locate and delete the key:
    {D502D4A3-03E6-4EAE-A14E-69606CA63430}
52. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{D502D4A3-03E6-4EAE-A14E-69606CA63430}
53. Still in the left panel, locate and delete the key:
    InprocServer32
54. Again Still in the left panel, locate and delete the key:
    TypeLib
55. Again Still in the left panel, locate and delete the key:
    {3831331E-0D11-4716-871D-68F3B11D23C9}
56. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{3831331E-0D11-4716-871D-68F3B11D23C9}
57. Still in the left panel, locate and delete the key:
    InprocServer32
58. Again Still in the left panel, locate and delete the key:
    TypeLib
59. Again Still in the left panel, locate and delete the key:
    {BBC73C94-337C-43CC-B52C-31EB9FA34013}
60. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{BBC73C94-337C-43CC-B52C-31EB9FA34013}
61. Still in the left panel, locate and delete the key:
    InprocServer32
62. Again Still in the left panel, locate and delete the key:
    TypeLib
63. Again Still in the left panel, locate and delete the key:
    {762EC429-1A5D-4AB8-844A-9A552E1241DA}
64. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{762EC429-1A5D-4AB8-844A-9A552E1241DA}
65. Still in the left panel, locate and delete the key:
    InprocServer32
66. Again Still in the left panel, locate and delete the key:
    TypeLib
67. Again Still in the left panel, locate and delete the key:
    ActiveSkin4.SkinLabel.1
68. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ActiveSkin4.SkinLabel.1
69. Still in the left panel, locate and delete the key:
    CLSID
70. Again Still in the left panel, locate and delete the key:
    ActiveSkin4.SkinLabel
71. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>ActiveSkin4.SkinLabel
72. Still in the left panel, locate and delete the key:
    CLSID
73. Again Still in the left panel, locate and delete the key:
    CurVer
74. Again Still in the left panel, locate and delete the key:
    {5954EA75-9BFA-461A-BD34-CEA3A861FF19}
75. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{5954EA75-9BFA-461A-BD34-CEA3A861FF19}
76. Still in the left panel, locate and delete the key:
    ProgID
77. Again Still in the left panel, locate and delete the key:
    VersionIndependentProgID
78. Again Still in the left panel, locate and delete the key:
    Programmable
79. Again Still in the left panel, locate and delete the key:
    InprocServer32
80. Again Still in the left panel, locate and delete the key:
    Control
81. Again Still in the left panel, locate and delete the key:
    ToolboxBitmap32
82. Again Still in the left panel, locate and delete the key:
    MiscStatus
83. Again Still in the left panel, locate and delete the key:
    TypeLib
84. Again Still in the left panel, locate and delete the key:
    Version
85. Again Still in the left panel, locate and delete the key:
    {B87799AF-2CE9-4DAA-93CF-65F002035369}
86. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{B87799AF-2CE9-4DAA-93CF-65F002035369}
87. Still in the left panel, locate and delete the key:
    InprocServer32
88. Again Still in the left panel, locate and delete the key:
    TypeLib
89. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib
90. Still in the left panel, locate and delete the key:
    {90F3D7B3-92E7-44BA-B444-6A8E2A3BC375}
91. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{90F3D7B3-92E7-44BA-B444-6A8E2A3BC375}
92. Still in the left panel, locate and delete the key:
    1.0
93. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{90F3D7B3-92E7-44BA-B444-6A8E2A3BC375}>1.0
94. Still in the left panel, locate and delete the key:
    FLAGS
95. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{90F3D7B3-92E7-44BA-B444-6A8E2A3BC375}>1.0>0
96. Still in the left panel, locate and delete the key:
    win32
97. Again Still in the left panel, locate and delete the key:
    HELPDIR
98. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface
99. Still in the left panel, locate and delete the key:
    {750FC67C-0311-4391-9864-A2EFED49BD28}
100. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{750FC67C-0311-4391-9864-A2EFED49BD28}
101. Still in the left panel, locate and delete the key:
     ProxyStubClsid
102. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid32
103. Again Still in the left panel, locate and delete the key:
     TypeLib
104. Again Still in the left panel, locate and delete the key:
     {F3FC950C-7583-4377-BAD8-EFBEAA33273C}
105. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{F3FC950C-7583-4377-BAD8-EFBEAA33273C}
106. Still in the left panel, locate and delete the key:
     ProxyStubClsid
107. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid32
108. Again Still in the left panel, locate and delete the key:
     TypeLib
109. Again Still in the left panel, locate and delete the key:
     {4921908C-7090-4D37-A6B3-FC447F08378A}
110. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{4921908C-7090-4D37-A6B3-FC447F08378A}
111. Still in the left panel, locate and delete the key:
     ProxyStubClsid
112. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid32
113. Again Still in the left panel, locate and delete the key:
     TypeLib
114. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>classes>CLSID>{130D7743-5F5A-11D1-B676-00A0C9697233}>Implemented Categories
115. Still in the left panel, locate and delete the key:
     {7DD95801-9882-11CF-9FA9-00AA006C42C4}
116. Again Still in the left panel, locate and delete the key:
     {7DD95802-9882-11CF-9FA9-00AA006C42C4}
117. Again Still in the left panel, locate and delete the key:
     {130D7740-5F5A-11D1-B676-00A0C9697233}
118. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{130D7740-5F5A-11D1-B676-00A0C9697233}
119. Still in the left panel, locate and delete the key:
     1.0
120. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{130D7740-5F5A-11D1-B676-00A0C9697233}>1.0
121. Still in the left panel, locate and delete the key:
     FLAGS
122. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{130D7740-5F5A-11D1-B676-00A0C9697233}>1.0>0
123. Still in the left panel, locate and delete the key:
     win32
124. Again Still in the left panel, locate and delete the key:
     HELPDIR
125. Again Still in the left panel, locate and delete the key:
     {130D7741-5F5A-11D1-B676-00A0C9697233}
126. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{130D7741-5F5A-11D1-B676-00A0C9697233}
127. Still in the left panel, locate and delete the key:
     ProxyStubClsid
128. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid32
129. Again Still in the left panel, locate and delete the key:
     TypeLib
130. Again Still in the left panel, locate and delete the key:
     {130D7742-5F5A-11D1-B676-00A0C9697233}
131. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{130D7742-5F5A-11D1-B676-00A0C9697233}
132. Still in the left panel, locate and delete the key:
     ProxyStubClsid
133. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid32
134. Again Still in the left panel, locate and delete the key:
     TypeLib
135. Again Still in the left panel, locate and delete the key:
     HHOPEN.HhopenCtrl.1
136. In the left panel, double-click the following:
     HKEY_CLASSES_ROOT>CLSID
137. Still in the left panel, locate and delete the key:
     {130D7744-5F5A-11D1-B676-00A0C9697233}
138. In the left panel, double-click the following:
     HKEY_CLASSES_ROOT>Drive>shell>Lock drive with Folder Lock
139. Still in the left panel, locate and delete the key:
     command
140. Close Registry Editor.

To delete the registry value this malware/grayware created:

1. Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
2. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Uninstall>Folder Lock
3. In the right panel, locate and delete the entry:
   DisplayName = "Folder Lock"
4. Again In the right panel, locate and delete the entry:
   HelpLink = "www.newsoftwares.net/folderlock"
5. Again In the right panel, locate and delete the entry:
   Publisher = "New Softwares.net Inc."
6. Again In the right panel, locate and delete the entry:
   UninstallString = "%Program Files%\Folder Lock\Uninstall.exe"
7. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Folder Lock
8. In the right panel, locate and delete the entry:
   Startmenu = "%Start Menu%\Programs\Folder Lock"
9. Again In the right panel, locate and delete the entry:
   TopStart = "%Start Menu%"
10. Again In the right panel, locate and delete the entry:
    Favorites = "%Favorites%"
11. Again In the right panel, locate and delete the entry:
    Desktop = "%Desktop%"
12. Again In the right panel, locate and delete the entry:
    SetupSrc = "{malware path and file name}"
13. Again In the right panel, locate and delete the entry:
    UserAppData = "%User Profile%\Application Data"
14. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{0944D16C-D0F4-4389-982A-A085595A9EB3}>InprocServer32
15. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
16. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{A5704C37-40DA-49EF-904B-97E5F5F9B1C5}>InprocServer32
17. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
18. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{EC22770D-3343-4C56-8A8D-3E560475F655}>InprocServer32
19. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
20. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{C406F816-318D-4F7D-81CB-BA93CA7B70D5}>InprocServer32
21. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
22. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{52C01A76-19E2-4A50-AE8A-38FFBCCF9182}>InprocServer32
23. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
24. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{3DCD2BC5-8489-48AE-891F-90C8B2F19F56}>InprocServer32
25. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
26. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{A506EF88-9EFC-4522-BFE1-A8E886A64D80}>InprocServer32
27. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
28. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{D502D4A3-03E6-4EAE-A14E-69606CA63430}>InprocServer32
29. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
30. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{3831331E-0D11-4716-871D-68F3B11D23C9}>InprocServer32
31. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
32. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{BBC73C94-337C-43CC-B52C-31EB9FA34013}>InprocServer32
33. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
34. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{762EC429-1A5D-4AB8-844A-9A552E1241DA}>InprocServer32
35. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
36. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{5954EA75-9BFA-461A-BD34-CEA3A861FF19}>InprocServer32
37. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
38. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{B87799AF-2CE9-4DAA-93CF-65F002035369}>InprocServer32
39. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
40. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{750FC67C-0311-4391-9864-A2EFED49BD28}>TypeLib
41. In the right panel, locate and delete the entry:
    Version = "1.0"
42. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{F3FC950C-7583-4377-BAD8-EFBEAA33273C}>TypeLib
43. In the right panel, locate and delete the entry:
    Version = "1.0"
44. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{4921908C-7090-4D37-A6B3-FC447F08378A}>TypeLib
45. In the right panel, locate and delete the entry:
    Version = "1.0"
46. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{130D7741-5F5A-11D1-B676-00A0C9697233}>TypeLib
47. In the right panel, locate and delete the entry:
    Version = "1.0"
48. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{130D7742-5F5A-11D1-B676-00A0C9697233}>TypeLib
49. In the right panel, locate and delete the entry:
    Version = "1.0"
50. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>HHOPEN.HhopenCtrl.1
51. In the right panel, locate and delete the entry:
    CLSID = "{130D7743-5F5A-11D1-B676-00A0C9697233}"
52. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{130D7743-5F5A-11D1-B676-00A0C9697233}
53. In the right panel, locate and delete the entry:
    ProgID = "HHOPEN.HhopenCtrl.1"
54. Again In the right panel, locate and delete the entry:
    InprocServer32 = "%Program Files%\FOLDER~1\hhopen.ocx"
55. Again In the right panel, locate and delete the entry:
    ToolboxBitmap32 = "%Program Files%\FOLDER~1\hhopen.ocx, 1"
56. Again In the right panel, locate and delete the entry:
    MiscStatus = "0"
57. Again In the right panel, locate and delete the entry:
    MiscStatus\1 = "132241"
58. Again In the right panel, locate and delete the entry:
    TypeLib = "{130D7740-5F5A-11D1-B676-00A0C9697233}"
59. Again In the right panel, locate and delete the entry:
    Version = "1.0"
60. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{130D7743-5F5A-11D1-B676-00A0C9697233}>InprocServer32
61. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
62. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{130D7744-5F5A-11D1-B676-00A0C9697233}
63. In the right panel, locate and delete the entry:
    InprocServer32 = "%Program Files%\FOLDER~1\hhopen.ocx"
64. Again In the right panel, locate and delete the entry:
    ContextMenu = "1"
65. Again In the right panel, locate and delete the entry:
    exit = "1"
66. Again In the right panel, locate and delete the entry:
    taskbar = "1"
67. Again In the right panel, locate and delete the entry:
    showtray = "1"
68. Again In the right panel, locate and delete the entry:
    show1 = "1"
69. Again In the right panel, locate and delete the entry:
    play1 = "True"
70. Again In the right panel, locate and delete the entry:
    ExeName = "Folder Lock.exe"
71. Again In the right panel, locate and delete the entry:
    tips1 = "1"
72. Again In the right panel, locate and delete the entry:
    tips2 = "1"
73. Close Registry Editor.

To delete malware/grayware component files:

1. Search for the following files:
   
   • %User Temp%\is-GT6RC.tmp\is-2JREB.tmp
   • %User Temp%\is-3UHGD.tmp\_shfoldr.dll
   • %Program Files%\Folder Lock\is-ISDNN.tmp
   • %Program Files%\Folder Lock\is-IUFRF.tmp
   • %Program Files%\Folder Lock\is-6FBAI.tmp
   • %Program Files%\Folder Lock\is-P8H3A.tmp
   • %Program Files%\Folder Lock\is-AK419.tmp
   • %Program Files%\Folder Lock\is-USP2D.tmp
   • %Program Files%\Folder Lock\is-D4Q06.tmp
   • %System%\is-KSTEE.tmp
   • %System%\is-A6GJT.tmp
   • %Program Files%\Folder Lock\is-1I26D.tmp
   • %Start Menu%\Programs\Folder Lock\Folder Lock.lnk
   • %Start Menu%\Programs\Folder Lock\User's Guide.lnk
   • %Start Menu%\Programs\Folder Lock\Uninstall Folder Lock.lnk
   • %Desktop%\Folder Lock.lnk
   • %User Profile%\Quick Launch\Folder Lock.lnk
   
   Note: To do a search for the following files, right-click Start then click Search... or Find..., depending on the version of Windows you are running. For each file to be deleted, type its file name in the Named input box. In the Look In drop-down list, select My Computer, then press Enter.
2. Once located, select the file then press SHIFT+DELETE to permanently delete the file.
3. Repeat the said steps for all files listed.

To delete malware/grayware folders:

1. Right-click Start then click Search... or Find..., depending on the version of Windows you are running.
2. In the Named input box, type:
   
   • %User Temp%\is-GT6RC.tmp
   • %User Temp%\is-3UHGD.tmp
   • %Program Files%\Folder Lock
   • %Start Menu%\Programs\Folder Lock
3. In the Look In drop-down list, select My Computer, then press Enter.
4. Once located, select the folder then press SHIFT+DELETE to permanently delete the folder.
5. Repeat the said steps for all folders listed.