{"id":64806,"date":"2016-12-21T05:52:58","date_gmt":"2016-12-21T02:52:58","guid":{"rendered":"http:\/\/greatis.com\/blog\/how-to\/remove-uninstall-qqpcdownload-exe-virus.htm"},"modified":"2016-12-21T05:52:58","modified_gmt":"2016-12-21T02:52:58","slug":"remove-uninstall-qqpcdownload-exe-virus","status":"publish","type":"post","link":"https:\/\/greatis.com\/blog\/how-to\/remove-uninstall-qqpcdownload-exe-virus.htm","title":{"rendered":"How to FULLY get rid of QQPCDOWNLOAD.EXE virus? Follow Manual Removal Instructions"},"content":{"rendered":"
<\/div>

Be careful! Full path on computer: %TEMP%\\DFC1\\QQPCDOWNLOAD.EXE<\/b><\/p>\n

\nQQPCDOWNLOAD.EXE is a pretty popular virus.<\/b>
\nYou can get it on your computer while downloading it bundled with some free software.
\nSadly, most free downloads do not disclose that other programs will be installed, so you are more likely to get QQPCDOWNLOAD.EXE on your PC without your own knowledge.<\/p>\n

After being downloaded, QQPCDOWNLOAD.EXE<\/b> hijacks your browser and changes search settings.
\nQQPCDOWNLOAD.EXE also causes an appearance of popup ads and browser redirecting.<\/p>\n

QQPCDOWNLOAD.EXE is very annoying and hard to get rid of.
\nMake a full backup of your PC before starting.<\/b>
\nFollow the next steps to make your system clean again:<\/p>\n

Removal guide for QQPCDOWNLOAD.EXE:<\/h2>\n
    \n
  1. Uninstall QQPCDOWNLOAD.EXE<\/b> using Windows uninstallation applet (use Add\/Remove Programs or Uninstall Program or Apps & features).\n
  2. Open Task Manager and terminate "QQPCDOWNLOAD.EXE" processes<\/b>.\n
  3. Use Windows search to find and remove "QQPCDOWNLOAD.EXE" files and folders<\/b>.\n
  4. Run services.msc and disable a "QQPCDOWNLOAD.EXE"<\/b> Windows service.\n
  5. Execute taskschd.msc to get rid of "QQPCDOWNLOAD.EXE"<\/b> scheduled tasks.\n
  6. Open regedit.exe and delete QQPCDOWNLOAD.EXE registry keys<\/b> and values.\n
  7. Inspect the properties of your desktop and Start menu shortcuts<\/b> for QQPCDOWNLOAD.EXE presence and "http:\/\/" links.\n
  8. Open your browser and disable QQPCDOWNLOAD.EXE plugins<\/b>. Disable all unknown plugins. Reset the browser settings.\n
  9. Clean your Recycle bin and temporary files.\n
  10. Restart your computer and check results.\n<\/ol>\n

    Autostart registry keys:
    \nHKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\FIREWALLRULES\\{847A801B-17DE-42F8-B538-3559285D8547}: “V2.10|ACTION=ALLOW|ACTIVE=TRUE|DIR=IN|PROTOCOL=6|PROFILE=PRIVATE|APP=%TEMP%\\DFC1\\QQPCDOWNLOAD.EXE|NAME=TENCENT DOWNLOAD PROGRAM|”
    \nHKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\FIREWALLRULES\\{7A59D088-195A-4C6B-9859-E4C001DDCBA7}: “V2.10|ACTION=ALLOW|ACTIVE=TRUE|DIR=IN|PROTOCOL=17|PROFILE=PRIVATE|APP=%TEMP%\\DFC1\\QQPCDOWNLOAD.EXE|NAME=TENCENT DOWNLOAD PROGRAM|”
    \nRelated Files:
    \n%LOCAL APPDATA%\\GOOGLE\\CHROME\\USER DATA\\DEFAULT\\EXTENSIONS\\OOEBKLGPFNBCNPOKAHMDIDGBMLCDEPKM\\3.2_0\\POPUP.HTML
    \n%TEMP%\\DFC1\\DAR.DLL
    \n%TEMP%\\DFC1\\QQPCDOWNLOAD.EXE
    \n%TEMP%\\DFC1\\WECHAT_SETUP.EXE
    \n%TEMP%\\NSO2067.TMP\\WECHATSETUP\\AVCODEC-56.DLL<\/\/p>

    <\/div>

    File Information QQPCDOWNLOAD.EXE:<\/h2>\n

    Virustotal = 1\/56<\/b>
    \nMD5 = 4A050982C29752AF1F3D338BB1C397E7<\/b>
    \nFile Size: 1566696<\/p>\n

    <\/div>","protected":false},"excerpt":{"rendered":"

    What is QQPCDOWNLOAD.EXE? PC tunning sluggish, slow boot up! How to uninstall QQPCDOWNLOAD.EXE? I wrote this post to show you how to permanently remove (uninstall& cleanup) QQPCDOWNLOAD.EXE from Windows and from browsers: Chrome, Mozilla Firefox, Internet Explorer, Microsoft Edge.
    \n
    More…<\/u><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[51029],"tags":[71667,71669,71666,71668,71670],"_links":{"self":[{"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/posts\/64806"}],"collection":[{"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/comments?post=64806"}],"version-history":[{"count":0,"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/posts\/64806\/revisions"}],"wp:attachment":[{"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/media?parent=64806"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/categories?post=64806"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/tags?post=64806"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}