TROJ_RECONYC.MN

To restart in Safe Mode:

• For Windows 2000 users

1. Restart your computer.
2. Press F8 when you see the Starting Windows bar at the bottom of the screen.
3. Choose the Safe Mode option from the Windows Advanced Options menu then press Enter.

• For Windows XP users

1. Restart your computer.
2. Press F8 after the Power-On Self Test (POST) routine is done. If the Windows Advanced Options menu does not appear, try restarting then pressing F8 several times when the POST screen appears.
3. Choose the Safe Mode option from the Windows Advanced Options menu then press Enter.

• For Windows Server 2003 users

1. Restart your computer.
2. Press F8 after Windows starts up. If the Windows Advanced Options menu does not appear, try restarting again and pressing F8 several times afterward.
3. On the Windows Advanced Option menu, use the arrow keys to select Safe Mode then press Enter.

• For Windows Vista, Windows 7, and Windows Server 2008 users

1. Restart your computer.
2. Press F8 after the Power-On Self Test (POST) routine is done. If the Advanced Boot Options menu does not appear, try restarting and then pressing F8 several times after the POST screen is displayed.
3. On the Advanced Boot Options menu, use the arrow keys to select the Safe Mode option, and then press Enter.

• For Windows 8, Windows 8.1, and Windows Server 2012 users

1. Access the Charms bar by moving your mouse pointer to the upper right corner of the screen.
2. Move your mouse pointer down and click Settings>Change your PC Settings.
3. In the left panel, click General.
4. In the right panel, scroll down to the bottom to find the Advanced startup section, then click the Restart now button and wait for the system to restart.
5. In the Advanced Startup menu, click Troubleshoot>Advanced Options>Startup Settings>Restart and wait for the system to restart.
6. In the Startup Settings menu, press 4 to enable safe mode.

To delete the registry key this malware/grayware created:

1. Open Registry Editor.
   » For Windows 2000, Windows XP, and Windows Server 2003 users, click Start>Run, type regedit in the text box provided, and then press Enter.
   » For Windows Vista, Windows 7, and Windows Server 2008 users, click the Start button, type regedit in the Search input field then press Enter.
   » For Windows 8, Windows 8.1, and Windows Server 2012 users, right-click on the lower left corner of the screen, click Run, type regedit in the text box provided, and then press Enter.
2. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>MICROSOFT>WINDOWS>CURRENTVERSION>UNINSTALL
3. Still in the left panel, locate and delete the key:
   Internet Download Manager
4. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>Software>Microsoft>Internet Explorer>Low Rights>ElevationPolicy
5. Still in the left panel, locate and delete the key:
   {E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4}
6. In the left panel, double-click the following:
   HKEY_CURRENT_USER>Software>Microsoft>Internet Explorer>Low Rights>ElevationPolicy
7. Still in the left panel, locate and delete the key:
   {1902485B-CE75-42C1-BA2D-57E660793D9A}
8. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>Software>Microsoft>Internet Explorer>Low Rights
9. Still in the left panel, locate and delete the key:
   DragDrop
10. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>Software>Microsoft>Internet Explorer>Low Rights>DragDrop
11. Still in the left panel, locate and delete the key:
    {F6E1B27E-F2DA-4919-9DBD-CAB90A1D662B}
12. In the left panel, double-click the following:
    HKEY_CLASSES_ROOT
13. Still in the left panel, locate and delete the key:
    IDMan.CIDMLinkTransmitter
14. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>IDMan.CIDMLinkTransmitter
15. Still in the left panel, locate and delete the key:
    CLSID
16. In the left panel, double-click the following:
    HKEY_CLASSES_ROOT>CLSID
17. Still in the left panel, locate and delete the key:
    {AC746233-E9D3-49CD-862F-068F7B7CCCA4}
18. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{AC746233-E9D3-49CD-862F-068F7B7CCCA4}
19. Still in the left panel, locate and delete the key:
    LocalServer32
20. In the left panel, double-click the following:
    HKEY_CLASSES_ROOT>AppID
21. Still in the left panel, locate and delete the key:
    {AC746233-E9D3-49CD-862F-068F7B7CCCA4}
22. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib
23. Still in the left panel, locate and delete the key:
    {ECF21EAB-3AA8-4355-82BE-F777990001DD}
24. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{ECF21EAB-3AA8-4355-82BE-F777990001DD}
25. Still in the left panel, locate and delete the key:
    1.0
26. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{ECF21EAB-3AA8-4355-82BE-F777990001DD}>1.0
27. Still in the left panel, locate and delete the key:
    FLAGS
28. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{ECF21EAB-3AA8-4355-82BE-F777990001DD}>1.0>0
29. Still in the left panel, locate and delete the key:
    win32
30. Again Still in the left panel, locate and delete the key:
    HELPDIR
31. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface
32. Still in the left panel, locate and delete the key:
    {94D09862-1875-4FC9-B434-91CF25C840A1}
33. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{94D09862-1875-4FC9-B434-91CF25C840A1}
34. Still in the left panel, locate and delete the key:
    ProxyStubClsid
35. Again Still in the left panel, locate and delete the key:
    ProxyStubClsid32
36. Again Still in the left panel, locate and delete the key:
    TypeLib
37. Again Still in the left panel, locate and delete the key:
    {4BD46AAE-C51F-4BF7-8BC0-2E86E33D1873}
38. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{4BD46AAE-C51F-4BF7-8BC0-2E86E33D1873}
39. Still in the left panel, locate and delete the key:
    ProxyStubClsid
40. Again Still in the left panel, locate and delete the key:
    ProxyStubClsid32
41. Again Still in the left panel, locate and delete the key:
    TypeLib
42. Again Still in the left panel, locate and delete the key:
    IDMGetAll.IDMAllLinksProcessor.1
43. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>IDMGetAll.IDMAllLinksProcessor.1
44. Still in the left panel, locate and delete the key:
    CLSID
45. Again Still in the left panel, locate and delete the key:
    IDMGetAll.IDMAllLinksProcessor
46. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>IDMGetAll.IDMAllLinksProcessor
47. Still in the left panel, locate and delete the key:
    CLSID
48. Again Still in the left panel, locate and delete the key:
    CurVer
49. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID
50. Still in the left panel, locate and delete the key:
    {5312C54E-A385-46B7-B200-ABAF81B03935}
51. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{5312C54E-A385-46B7-B200-ABAF81B03935}
52. Still in the left panel, locate and delete the key:
    ProgID
53. Again Still in the left panel, locate and delete the key:
    VersionIndependentProgID
54. Again Still in the left panel, locate and delete the key:
    Programmable
55. Again Still in the left panel, locate and delete the key:
    InprocServer32
56. Again Still in the left panel, locate and delete the key:
    TypeLib
57. Again Still in the left panel, locate and delete the key:
    {37294E01-DB54-43AF-9D50-93FF7267DF5D}
58. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{37294E01-DB54-43AF-9D50-93FF7267DF5D}
59. Still in the left panel, locate and delete the key:
    1.0
60. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{37294E01-DB54-43AF-9D50-93FF7267DF5D}>1.0
61. Still in the left panel, locate and delete the key:
    FLAGS
62. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{37294E01-DB54-43AF-9D50-93FF7267DF5D}>1.0>0
63. Still in the left panel, locate and delete the key:
    win32
64. Again Still in the left panel, locate and delete the key:
    HELPDIR
65. Again Still in the left panel, locate and delete the key:
    {33AEF752-FB86-4787-9ED1-6010528F5FA3}
66. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{33AEF752-FB86-4787-9ED1-6010528F5FA3}
67. Still in the left panel, locate and delete the key:
    ProxyStubClsid
68. Again Still in the left panel, locate and delete the key:
    ProxyStubClsid32
69. Again Still in the left panel, locate and delete the key:
    TypeLib
70. Again Still in the left panel, locate and delete the key:
    IDMIECC.IDMIEHlprObj.1
71. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>IDMIECC.IDMIEHlprObj.1
72. Still in the left panel, locate and delete the key:
    CLSID
73. Again Still in the left panel, locate and delete the key:
    IDMIECC.IDMIEHlprObj
74. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>IDMIECC.IDMIEHlprObj
75. Still in the left panel, locate and delete the key:
    CLSID
76. Again Still in the left panel, locate and delete the key:
    CurVer
77. Again Still in the left panel, locate and delete the key:
    {0055C089-8582-441B-A0BF-17B458C2A3A8}
78. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{0055C089-8582-441B-A0BF-17B458C2A3A8}
79. Still in the left panel, locate and delete the key:
    ProgID
80. Again Still in the left panel, locate and delete the key:
    VersionIndependentProgID
81. Again Still in the left panel, locate and delete the key:
    Programmable
82. Again Still in the left panel, locate and delete the key:
    InprocServer32
83. Again Still in the left panel, locate and delete the key:
    TypeLib
84. Again Still in the left panel, locate and delete the key:
    IDMIECC.IDMHelperLinksStorage.1
85. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>IDMIECC.IDMHelperLinksStorage.1
86. Still in the left panel, locate and delete the key:
    CLSID
87. Again Still in the left panel, locate and delete the key:
    IDMIECC.IDMHelperLinksStorage
88. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>IDMIECC.IDMHelperLinksStorage
89. Still in the left panel, locate and delete the key:
    CLSID
90. Again Still in the left panel, locate and delete the key:
    CurVer
91. Again Still in the left panel, locate and delete the key:
    {436D67E1-2FB3-4A6C-B3CD-FF8A41B0664D}
92. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{436D67E1-2FB3-4A6C-B3CD-FF8A41B0664D}
93. Still in the left panel, locate and delete the key:
    ProgID
94. Again Still in the left panel, locate and delete the key:
    VersionIndependentProgID
95. Again Still in the left panel, locate and delete the key:
    Programmable
96. Again Still in the left panel, locate and delete the key:
    InprocServer32
97. Again Still in the left panel, locate and delete the key:
    TypeLib
98. Again Still in the left panel, locate and delete the key:
    {3BDFC55C-ED33-43BB-9A77-57C2AF4B56EF}
99. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{3BDFC55C-ED33-43BB-9A77-57C2AF4B56EF}
100. Still in the left panel, locate and delete the key:
     1.0
101. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{3BDFC55C-ED33-43BB-9A77-57C2AF4B56EF}>1.0
102. Still in the left panel, locate and delete the key:
     FLAGS
103. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{3BDFC55C-ED33-43BB-9A77-57C2AF4B56EF}>1.0>0
104. Still in the left panel, locate and delete the key:
     win32
105. Again Still in the left panel, locate and delete the key:
     HELPDIR
106. Again Still in the left panel, locate and delete the key:
     {98D060EC-53AF-4F61-8180-43C507C9FF94}
107. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{98D060EC-53AF-4F61-8180-43C507C9FF94}
108. Still in the left panel, locate and delete the key:
     ProxyStubClsid
109. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid32
110. Again Still in the left panel, locate and delete the key:
     TypeLib
111. Again Still in the left panel, locate and delete the key:
     {C7798BD6-34AF-4925-B01C-450C9EAD2DD9}
112. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{C7798BD6-34AF-4925-B01C-450C9EAD2DD9}
113. Still in the left panel, locate and delete the key:
     ProxyStubClsid
114. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid32
115. Again Still in the left panel, locate and delete the key:
     TypeLib
116. Again Still in the left panel, locate and delete the key:
     DownlWithIDM.LinkProcessor.1
117. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>DownlWithIDM.LinkProcessor.1
118. Still in the left panel, locate and delete the key:
     CLSID
119. Again Still in the left panel, locate and delete the key:
     Insertable
120. Again Still in the left panel, locate and delete the key:
     DownlWithIDM.LinkProcessor
121. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>DownlWithIDM.LinkProcessor
122. Still in the left panel, locate and delete the key:
     CLSID
123. Again Still in the left panel, locate and delete the key:
     CurVer
124. Again Still in the left panel, locate and delete the key:
     {52F6F7BD-DF73-44B3-AE13-89E1E1FB8F6A}
125. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{52F6F7BD-DF73-44B3-AE13-89E1E1FB8F6A}
126. Still in the left panel, locate and delete the key:
     ProgID
127. Again Still in the left panel, locate and delete the key:
     VersionIndependentProgID
128. Again Still in the left panel, locate and delete the key:
     Programmable
129. Again Still in the left panel, locate and delete the key:
     InprocServer32
130. Again Still in the left panel, locate and delete the key:
     Control
131. Again Still in the left panel, locate and delete the key:
     Insertable
132. Again Still in the left panel, locate and delete the key:
     ToolboxBitmap32
133. Again Still in the left panel, locate and delete the key:
     MiscStatus
134. Again Still in the left panel, locate and delete the key:
     TypeLib
135. Again Still in the left panel, locate and delete the key:
     Version
136. Again Still in the left panel, locate and delete the key:
     DownlWithIDM.VLinkProcessor.1
137. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>DownlWithIDM.VLinkProcessor.1
138. Still in the left panel, locate and delete the key:
     CLSID
139. Again Still in the left panel, locate and delete the key:
     DownlWithIDM.VLinkProcessor
140. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>DownlWithIDM.VLinkProcessor
141. Still in the left panel, locate and delete the key:
     CLSID
142. Again Still in the left panel, locate and delete the key:
     CurVer
143. Again Still in the left panel, locate and delete the key:
     {CDD67718-A430-4AB9-A939-83D9074B0038}
144. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{CDD67718-A430-4AB9-A939-83D9074B0038}
145. Still in the left panel, locate and delete the key:
     ProgID
146. Again Still in the left panel, locate and delete the key:
     VersionIndependentProgID
147. Again Still in the left panel, locate and delete the key:
     Programmable
148. Again Still in the left panel, locate and delete the key:
     InprocServer32
149. Again Still in the left panel, locate and delete the key:
     TypeLib
150. Again Still in the left panel, locate and delete the key:
     DownlWithIDM.V2LinkProcessor.1
151. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>DownlWithIDM.V2LinkProcessor.1
152. Still in the left panel, locate and delete the key:
     CLSID
153. Again Still in the left panel, locate and delete the key:
     DownlWithIDM.V2LinkProcessor
154. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>DownlWithIDM.V2LinkProcessor
155. Still in the left panel, locate and delete the key:
     CLSID
156. Again Still in the left panel, locate and delete the key:
     CurVer
157. Again Still in the left panel, locate and delete the key:
     {4764030F-2733-45B9-AE62-3D1F4F6F2861}
158. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{4764030F-2733-45B9-AE62-3D1F4F6F2861}
159. Still in the left panel, locate and delete the key:
     ProgID
160. Again Still in the left panel, locate and delete the key:
     VersionIndependentProgID
161. Again Still in the left panel, locate and delete the key:
     Programmable
162. Again Still in the left panel, locate and delete the key:
     InprocServer32
163. Again Still in the left panel, locate and delete the key:
     TypeLib
164. Again Still in the left panel, locate and delete the key:
     DownlWithIDM.IDMDwnlMgr.1
165. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>DownlWithIDM.IDMDwnlMgr.1
166. Still in the left panel, locate and delete the key:
     CLSID
167. Again Still in the left panel, locate and delete the key:
     DownlWithIDM.IDMDwnlMgr
168. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>DownlWithIDM.IDMDwnlMgr
169. Still in the left panel, locate and delete the key:
     CLSID
170. Again Still in the left panel, locate and delete the key:
     CurVer
171. Again Still in the left panel, locate and delete the key:
     {7D11E719-FF90-479C-B0D7-96EB43EE55D7}
172. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{7D11E719-FF90-479C-B0D7-96EB43EE55D7}
173. Still in the left panel, locate and delete the key:
     ProgID
174. Again Still in the left panel, locate and delete the key:
     VersionIndependentProgID
175. Again Still in the left panel, locate and delete the key:
     Programmable
176. Again Still in the left panel, locate and delete the key:
     InprocServer32
177. Again Still in the left panel, locate and delete the key:
     TypeLib
178. Again Still in the left panel, locate and delete the key:
     {6A89524B-E1B6-4D71-972A-8FD53F240936}
179. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{6A89524B-E1B6-4D71-972A-8FD53F240936}
180. Still in the left panel, locate and delete the key:
     1.0
181. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{6A89524B-E1B6-4D71-972A-8FD53F240936}>1.0
182. Still in the left panel, locate and delete the key:
     FLAGS
183. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{6A89524B-E1B6-4D71-972A-8FD53F240936}>1.0>0
184. Still in the left panel, locate and delete the key:
     win32
185. Again Still in the left panel, locate and delete the key:
     HELPDIR
186. Again Still in the left panel, locate and delete the key:
     {356E6235-B055-46D9-8B32-BDC2266C9DAB}
187. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{356E6235-B055-46D9-8B32-BDC2266C9DAB}
188. Still in the left panel, locate and delete the key:
     ProxyStubClsid
189. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid32
190. Again Still in the left panel, locate and delete the key:
     TypeLib
191. Again Still in the left panel, locate and delete the key:
     {BC69364C-34D7-4225-B16F-8595C743C775}
192. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{BC69364C-34D7-4225-B16F-8595C743C775}
193. Still in the left panel, locate and delete the key:
     ProxyStubClsid
194. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid32
195. Again Still in the left panel, locate and delete the key:
     TypeLib
196. Again Still in the left panel, locate and delete the key:
     {72B7361C-3568-4392-BCCD-D912CD5C1169}
197. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{72B7361C-3568-4392-BCCD-D912CD5C1169}
198. Still in the left panel, locate and delete the key:
     ProxyStubClsid
199. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid32
200. Again Still in the left panel, locate and delete the key:
     TypeLib
201. Again Still in the left panel, locate and delete the key:
     {6B9EB066-DA1F-4C0A-AC62-01AC892EF175}
202. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{6B9EB066-DA1F-4C0A-AC62-01AC892EF175}
203. Still in the left panel, locate and delete the key:
     InProcServer32
204. Again Still in the left panel, locate and delete the key:
     {6B9EB066-DA1F-4C0A-AC62-01AC892EF175}
205. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{6B9EB066-DA1F-4C0A-AC62-01AC892EF175}
206. Still in the left panel, locate and delete the key:
     ProxyStubClsid32
207. Again Still in the left panel, locate and delete the key:
     NumMethods
208. Again Still in the left panel, locate and delete the key:
     {6EDC7F8E-EB3D-4F9A-B693-216F07C94D74}
209. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{6EDC7F8E-EB3D-4F9A-B693-216F07C94D74}
210. Still in the left panel, locate and delete the key:
     ProxyStubClsid32
211. Again Still in the left panel, locate and delete the key:
     NumMethods
212. Again Still in the left panel, locate and delete the key:
     {A87AB5DD-211B-4284-8CBD-B92F77A5DE14}
213. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{A87AB5DD-211B-4284-8CBD-B92F77A5DE14}
214. Still in the left panel, locate and delete the key:
     ProxyStubClsid32
215. Again Still in the left panel, locate and delete the key:
     NumMethods
216. Again Still in the left panel, locate and delete the key:
     Idmfsa.IDMEFSAgent.1
217. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Idmfsa.IDMEFSAgent.1
218. Still in the left panel, locate and delete the key:
     CLSID
219. Again Still in the left panel, locate and delete the key:
     Idmfsa.IDMEFSAgent
220. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Idmfsa.IDMEFSAgent
221. Still in the left panel, locate and delete the key:
     CLSID
222. Again Still in the left panel, locate and delete the key:
     CurVer
223. Again Still in the left panel, locate and delete the key:
     {0F947660-8606-420A-BAC6-51B84DD22A47}
224. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{0F947660-8606-420A-BAC6-51B84DD22A47}
225. Still in the left panel, locate and delete the key:
     Elevation
226. Again Still in the left panel, locate and delete the key:
     ProgID
227. Again Still in the left panel, locate and delete the key:
     VersionIndependentProgID
228. Again Still in the left panel, locate and delete the key:
     Programmable
229. Again Still in the left panel, locate and delete the key:
     InprocServer32
230. Again Still in the left panel, locate and delete the key:
     TypeLib
231. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>AppID
232. Still in the left panel, locate and delete the key:
     {0F947660-8606-420A-BAC6-51B84DD22A47}
233. Again Still in the left panel, locate and delete the key:
     {5518B636-6884-48CA-A9A7-1CFD3F3BA916}
234. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{5518B636-6884-48CA-A9A7-1CFD3F3BA916}
235. Still in the left panel, locate and delete the key:
     1.0
236. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{5518B636-6884-48CA-A9A7-1CFD3F3BA916}>1.0
237. Still in the left panel, locate and delete the key:
     FLAGS
238. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>TypeLib>{5518B636-6884-48CA-A9A7-1CFD3F3BA916}>1.0>0
239. Still in the left panel, locate and delete the key:
     win32
240. Again Still in the left panel, locate and delete the key:
     HELPDIR
241. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid
242. Again Still in the left panel, locate and delete the key:
     TypeLib
243. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid
244. Again Still in the left panel, locate and delete the key:
     TypeLib
245. Again Still in the left panel, locate and delete the key:
     ProxyStubClsid
246. Again Still in the left panel, locate and delete the key:
     TypeLib
247. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>Software
248. Still in the left panel, locate and delete the key:
     Mozilla
249. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software
250. Still in the left panel, locate and delete the key:
     DownloadManager
251. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>DownloadManager
252. Still in the left panel, locate and delete the key:
     MCN
253. Again Still in the left panel, locate and delete the key:
     IDMBI
254. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>DownloadManager>IDMBI
255. Still in the left panel, locate and delete the key:
     IEXPLORE
256. Again Still in the left panel, locate and delete the key:
     Firefox
257. Again Still in the left panel, locate and delete the key:
     chrome
258. Again Still in the left panel, locate and delete the key:
     OPERA
259. Again Still in the left panel, locate and delete the key:
     Safari
260. Again Still in the left panel, locate and delete the key:
     Mozilla
261. Again Still in the left panel, locate and delete the key:
     SpecialKeys
262. Again Still in the left panel, locate and delete the key:
     menuExt
263. Again Still in the left panel, locate and delete the key:
     Passwords
264. Again Still in the left panel, locate and delete the key:
     ListSettings
265. Again Still in the left panel, locate and delete the key:
     FoldersTree
266. Again Still in the left panel, locate and delete the key:
     maxID
267. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>DownloadManager>FoldersTree
268. Still in the left panel, locate and delete the key:
     Compressed
269. Again Still in the left panel, locate and delete the key:
     Documents
270. Again Still in the left panel, locate and delete the key:
     Music
271. Again Still in the left panel, locate and delete the key:
     Programs
272. Again Still in the left panel, locate and delete the key:
     Video
273. Again Still in the left panel, locate and delete the key:
     ProxyPac
274. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Internet Explorer
275. Still in the left panel, locate and delete the key:
     MenuExt
276. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Internet Explorer>MenuExt
277. Still in the left panel, locate and delete the key:
     Download with IDM
278. Again Still in the left panel, locate and delete the key:
     Download all links with IDM
279. Again Still in the left panel, locate and delete the key:
     {E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4}
280. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Internet Explorer>Low Rights
281. Still in the left panel, locate and delete the key:
     DragDrop
282. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Internet Explorer>Low Rights>DragDrop
283. Still in the left panel, locate and delete the key:
     {19129CDA-AFC0-4330-99BC-C5A834F89006}
284. Again Still in the left panel, locate and delete the key:
     Google
285. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>Software>Google
286. Still in the left panel, locate and delete the key:
     Chrome
287. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>Software>Google>Chrome
288. Still in the left panel, locate and delete the key:
     Extensions
289. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Google>Chrome>Extensions
290. Still in the left panel, locate and delete the key:
     ngpampappnmepgilojfohadhhmbhlaek
291. Again Still in the left panel, locate and delete the key:
     Mozilla
292. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Mozilla
293. Still in the left panel, locate and delete the key:
     Firefox
294. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Mozilla>Firefox
295. Still in the left panel, locate and delete the key:
     Extensions
296. Again Still in the left panel, locate and delete the key:
     SeaMonkey
297. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Mozilla>SeaMonkey
298. Still in the left panel, locate and delete the key:
     Extensions
299. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE
300. Still in the left panel, locate and delete the key:
     Internet Download Manager
301. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>PROTOCOLS>Name-Space Handler
302. Still in the left panel, locate and delete the key:
     http
303. Again Still in the left panel, locate and delete the key:
     https
304. Again Still in the left panel, locate and delete the key:
     ftp
305. Again Still in the left panel, locate and delete the key:
     {CDC95B92-E27C-4745-A8C5-64A52A78855D}
306. In the left panel, double-click the following:
     HKEY_CLASSES_ROOT>CLSID>{CDC95B92-E27C-4745-A8C5-64A52A78855D}
307. Still in the left panel, locate and delete the key:
     InProcServer32
308. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>CurrentVersion>Explorer>ShellIconOverlayIdentifiers
309. Still in the left panel, locate and delete the key:
     IDM Shell Extension
310. Again Still in the left panel, locate and delete the key:
     ConfigTime
311. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Classes>CLSID
312. Still in the left panel, locate and delete the key:
     {07999AC3-058B-40BF-984F-69EB1E554CA7}
313. Again Still in the left panel, locate and delete the key:
     DwnlPanel
314. Again Still in the left panel, locate and delete the key:
     Scheduler
315. Again Still in the left panel, locate and delete the key:
     Queue
316. Close Registry Editor.

To delete the registry value this malware/grayware created:

1. Open Registry Editor.
   » For Windows 2000, Windows XP, and Windows Server 2003 users, click Start>Run, type regedit in the text box provided, and then press Enter.
   » For Windows Vista, Windows 7, and Windows Server 2008 users, click the Start button, type regedit in the Search input field then press Enter.
   » For Windows 8, Windows 8.1, and Windows Server 2012 users, right-click on the lower-left corner of the screen, click Run, type regedit in the text box provided, and then press Enter.
2. In the left panel, double-click the following:
   HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Run
3. In the right panel, locate and delete the entry:
   IDMan = "%Program Files%\Internet Download Manager\IDMan.exe /onboot"
4. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Uninstall>Internet Download Manager
5. In the right panel, locate and delete the entry:
   UninstallString = "%Program Files%\Internet Download Manager\Uninstall.exe"
6. Again In the right panel, locate and delete the entry:
   DisplayName = "Internet Download Manager"
7. Again In the right panel, locate and delete the entry:
   DisplayIcon = "%Program Files%\Internet Download Manager\IDMan.exe"
8. Again In the right panel, locate and delete the entry:
   Publisher = "Tonec Inc."
9. Again In the right panel, locate and delete the entry:
   URLInfoAbout = "http://www.{BLOCKED}etdownloadmanager.com"
10. Again In the right panel, locate and delete the entry:
    HelpLink = "http://www.{BLOCKED}etdownloadmanager.com/contact_us.html"
11. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Explorer>Browser Helper Objects>{0055C089-8582-441B-A0BF-17B458C2A3A8}
12. In the right panel, locate and delete the entry:
    NoExplorer = "1"
13. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Internet Explorer>Low Rights>ElevationPolicy>{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4}
14. In the right panel, locate and delete the entry:
    AppName = "IDMan.exe"
15. Again In the right panel, locate and delete the entry:
    AppPath = "%Program Files%\Internet Download Manager"
16. Again In the right panel, locate and delete the entry:
    Policy = "3"
17. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>Microsoft>Internet Explorer>Low Rights>ElevationPolicy>{1902485B-CE75-42C1-BA2D-57E660793D9A}
18. In the right panel, locate and delete the entry:
    AppName = "IEMonitor.exe"
19. Again In the right panel, locate and delete the entry:
    AppPath = "%Program Files%\Internet Download Manager"
20. Again In the right panel, locate and delete the entry:
    Policy = "3"
21. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Internet Explorer>Low Rights>DragDrop>{F6E1B27E-F2DA-4919-9DBD-CAB90A1D662B}
22. In the right panel, locate and delete the entry:
    AppName = "IDMan.exe"
23. Again In the right panel, locate and delete the entry:
    AppPath = "%Program Files%\Internet Download Manager"
24. Again In the right panel, locate and delete the entry:
    Policy = "3"
25. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{AC746233-E9D3-49CD-862F-068F7B7CCCA4}
26. In the right panel, locate and delete the entry:
    AppID = "{AC746233-E9D3-49CD-862F-068F7B7CCCA4}"
27. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>AppID>{AC746233-E9D3-49CD-862F-068F7B7CCCA4}
28. In the right panel, locate and delete the entry:
    RunAs = "Interactive User"
29. Again In the right panel, locate and delete the entry:
    ROTFlags = "1"
30. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{94D09862-1875-4FC9-B434-91CF25C840A1}>TypeLib
31. In the right panel, locate and delete the entry:
    Version = "1.0"
32. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{4BD46AAE-C51F-4BF7-8BC0-2E86E33D1873}>TypeLib
33. In the right panel, locate and delete the entry:
    Version = "1.0"
34. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{5312C54E-A385-46B7-B200-ABAF81B03935}>InprocServer32
35. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
36. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{33AEF752-FB86-4787-9ED1-6010528F5FA3}>TypeLib
37. In the right panel, locate and delete the entry:
    Version = "1.0"
38. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{0055C089-8582-441B-A0BF-17B458C2A3A8}>InprocServer32
39. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
40. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{436D67E1-2FB3-4A6C-B3CD-FF8A41B0664D}>InprocServer32
41. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
42. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{98D060EC-53AF-4F61-8180-43C507C9FF94}>TypeLib
43. In the right panel, locate and delete the entry:
    Version = "1.0"
44. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{C7798BD6-34AF-4925-B01C-450C9EAD2DD9}>TypeLib
45. In the right panel, locate and delete the entry:
    Version = "1.0"
46. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{52F6F7BD-DF73-44B3-AE13-89E1E1FB8F6A}>InprocServer32
47. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
48. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{CDD67718-A430-4AB9-A939-83D9074B0038}>InprocServer32
49. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
50. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{4764030F-2733-45B9-AE62-3D1F4F6F2861}>InprocServer32
51. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
52. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{7D11E719-FF90-479C-B0D7-96EB43EE55D7}>InprocServer32
53. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
54. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{356E6235-B055-46D9-8B32-BDC2266C9DAB}>TypeLib
55. In the right panel, locate and delete the entry:
    Version = "1.0"
56. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{BC69364C-34D7-4225-B16F-8595C743C775}>TypeLib
57. In the right panel, locate and delete the entry:
    Version = "1.0"
58. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{72B7361C-3568-4392-BCCD-D912CD5C1169}>TypeLib
59. In the right panel, locate and delete the entry:
    Version = "1.0"
60. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{6B9EB066-DA1F-4C0A-AC62-01AC892EF175}>InProcServer32
61. In the right panel, locate and delete the entry:
    ThreadingModel = "Both"
62. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{0F947660-8606-420A-BAC6-51B84DD22A47}
63. In the right panel, locate and delete the entry:
    AppId = "{0F947660-8606-420A-BAC6-51B84DD22A47}"
64. Again In the right panel, locate and delete the entry:
    LocalizedString = "@%Program Files%\Internet Download Manager\idmfsa.dll,-100"
65. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{0F947660-8606-420A-BAC6-51B84DD22A47}>Elevation
66. In the right panel, locate and delete the entry:
    Enabled = "1"
67. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{0F947660-8606-420A-BAC6-51B84DD22A47}>InprocServer32
68. In the right panel, locate and delete the entry:
    ThreadingModel = "Apartment"
69. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{A87AB5DD-211B-4284-8CBD-B92F77A5DE14}>TypeLib
70. In the right panel, locate and delete the entry:
    Version = "1.0"
71. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{6B9EB066-DA1F-4C0A-AC62-01AC892EF175}>TypeLib
72. In the right panel, locate and delete the entry:
    Version = "1.0"
73. In the left panel, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Classes>Interface>{6EDC7F8E-EB3D-4F9A-B693-216F07C94D74}>TypeLib
74. In the right panel, locate and delete the entry:
    Version = "1.0"
75. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>DownloadManager>IDMBI>IEXPLORE
76. In the right panel, locate and delete the entry:
    name = "Internet Explorer"
77. Again In the right panel, locate and delete the entry:
    int = "1"
78. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>DownloadManager>IDMBI>Firefox
79. In the right panel, locate and delete the entry:
    name = "Mozilla firefox"
80. Again In the right panel, locate and delete the entry:
    int = "1"
81. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>DownloadManager>IDMBI>chrome
82. In the right panel, locate and delete the entry:
    name = "Google Chrome"
83. Again In the right panel, locate and delete the entry:
    int = "1"
84. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>DownloadManager>IDMBI>OPERA
85. In the right panel, locate and delete the entry:
    name = "Opera"
86. Again In the right panel, locate and delete the entry:
    int = "1"
87. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>DownloadManager>IDMBI>Safari
88. In the right panel, locate and delete the entry:
    name = "Apple Safari"
89. Again In the right panel, locate and delete the entry:
    int = "1"
90. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>DownloadManager>IDMBI>Mozilla
91. In the right panel, locate and delete the entry:
    name = "Mozilla"
92. Again In the right panel, locate and delete the entry:
    int = "1"
93. In the left panel, double-click the following:
    HKEY_CURRENT_USER>Software>DownloadManager>SpecialKeys
94. In the right panel, locate and delete the entry:
    UseKeyToPrevent = "1"
95. Again In the right panel, locate and delete the entry:
    UseKeyToForce = "0"
96. Again In the right panel, locate and delete the entry:
    AltP = "1"
97. Again In the right panel, locate and delete the entry:
    ShiftP = "0"
98. Again In the right panel, locate and delete the entry:
    CtrlP = "0"
99. Again In the right panel, locate and delete the entry:
    AltF = "0"
100. Again In the right panel, locate and delete the entry:
     CtrlF = "0"
101. Again In the right panel, locate and delete the entry:
     ShiftF = "0"
102. Again In the right panel, locate and delete the entry:
     InsF = "1"
103. Again In the right panel, locate and delete the entry:
     CheckMouse = "0"
104. Again In the right panel, locate and delete the entry:
     SkipHtml = "1"
105. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>DownloadManager
106. In the right panel, locate and delete the entry:
     AppDataIDMFolder = "%User Profile%\Application Data\IDM"
107. Again In the right panel, locate and delete the entry:
     CommonAppDataIDMFolder = "%User Profile%\Application Data\IDM"
108. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>DownloadManager>menuExt
109. In the right panel, locate and delete the entry:
     ffdownl1_str = "Download with IDM"
110. Again In the right panel, locate and delete the entry:
     ffdownlAll_str = "Download all links with IDM"
111. Again In the right panel, locate and delete the entry:
     ffdownlFLV_str = "Download last requested FLV video"
112. Again In the right panel, locate and delete the entry:
     ffdownl10FLV_str = "Choose from 10 last requested FLV videos"
113. Again In the right panel, locate and delete the entry:
     ffdownlppFLV_str = "Download FLV video with IDM"
114. Again In the right panel, locate and delete the entry:
     ffdownlFLVa_str = "Download last requested FLV video with IDM"
115. Again In the right panel, locate and delete the entry:
     ffdownl10FLVa_str = "Download FLV videos with IDM from 10 last requested"
116. Again In the right panel, locate and delete the entry:
     ExceptionServers = "{random characters}"
117. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>DownloadManager>FoldersTree>Compressed
118. In the right panel, locate and delete the entry:
     ID = "7"
119. Again In the right panel, locate and delete the entry:
     mask = "zip rar r0* r1* arj gz sit sitx sea ace bz2 7z"
120. Again In the right panel, locate and delete the entry:
     pathW = "[REG_NONE, size: 136 bytes]"
121. Again In the right panel, locate and delete the entry:
     rememberLastPath = "0"
122. Again In the right panel, locate and delete the entry:
     forSiteOnly = "0"
123. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>DownloadManager>FoldersTree>Documents
124. In the right panel, locate and delete the entry:
     ID = "5"
125. Again In the right panel, locate and delete the entry:
     mask = "doc pdf ppt pps docx pptx"
126. Again In the right panel, locate and delete the entry:
     pathW = "[REG_NONE, size: 134 bytes]"
127. Again In the right panel, locate and delete the entry:
     rememberLastPath = "0"
128. Again In the right panel, locate and delete the entry:
     forSiteOnly = "0"
129. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>DownloadManager>FoldersTree>Music
130. In the right panel, locate and delete the entry:
     ID = "2"
131. Again In the right panel, locate and delete the entry:
     mask = "mp3 wav wma mpa ram ra aac aif m4a"
132. Again In the right panel, locate and delete the entry:
     pathW = "[REG_NONE, size: 126 bytes]"
133. Again In the right panel, locate and delete the entry:
     rememberLastPath = "0"
134. Again In the right panel, locate and delete the entry:
     forSiteOnly = "0"
135. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>DownloadManager>FoldersTree>Programs
136. In the right panel, locate and delete the entry:
     ID = "1"
137. Again In the right panel, locate and delete the entry:
     mask = "exe msi"
138. Again In the right panel, locate and delete the entry:
     pathW = "[REG_NONE, size: 132 bytes]"
139. Again In the right panel, locate and delete the entry:
     rememberLastPath = "0"
140. Again In the right panel, locate and delete the entry:
     forSiteOnly = "0"
141. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>DownloadManager>FoldersTree>Video
142. In the right panel, locate and delete the entry:
     ID = "3"
143. Again In the right panel, locate and delete the entry:
     mask = "avi mpg mpe mpeg asf wmv mov qt rm mp4 flv m4v webm ogv ogg mkv"
144. Again In the right panel, locate and delete the entry:
     pathW = "[REG_NONE, size: 126 bytes]"
145. Again In the right panel, locate and delete the entry:
     rememberLastPath = "0"
146. Again In the right panel, locate and delete the entry:
     forSiteOnly = "0"
147. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Internet Explorer>MenuExt>Download with IDM
148. In the right panel, locate and delete the entry:
     contexts = "f3"
149. Again In the right panel, locate and delete the entry:
     iedownl1_str = "Download with IDM"
150. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Internet Explorer>MenuExt>Download all links with IDM
151. In the right panel, locate and delete the entry:
     contexts = "f3"
152. Again In the right panel, locate and delete the entry:
     iedownlAll_str = "Download all links with IDM"
153. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Internet Explorer>Low Rights>ElevationPolicy>{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4}
154. In the right panel, locate and delete the entry:
     AppName = "IDMan.exe"
155. Again In the right panel, locate and delete the entry:
     AppPath = "%Program Files%\Internet Download Manager"
156. Again In the right panel, locate and delete the entry:
     Policy = "3"
157. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Internet Explorer>Low Rights>DragDrop>{19129CDA-AFC0-4330-99BC-C5A834F89006}
158. In the right panel, locate and delete the entry:
     AppName = "IDMan.exe"
159. Again In the right panel, locate and delete the entry:
     AppPath = "%Program Files%\Internet Download Manager"
160. Again In the right panel, locate and delete the entry:
     Policy = "3"
161. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Microsoft>Internet Explorer
162. In the right panel, locate and delete the entry:
     DownloadUI = "{7D11E719-FF90-479C-B0D7-96EB43EE55D7}"
163. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Internet Explorer
164. In the right panel, locate and delete the entry:
     DownloadUI = "{7D11E719-FF90-479C-B0D7-96EB43EE55D7}"
165. Again In the right panel, locate and delete the entry:
     EnableDriver = "1"
166. Again In the right panel, locate and delete the entry:
     FSPSSettingsChecked = "1"
167. Again In the right panel, locate and delete the entry:
     FSSettingsChecked = "1"
168. Again In the right panel, locate and delete the entry:
     mzcc_ext_vers = "11d9c"
169. Again In the right panel, locate and delete the entry:
     intAOFRWE = "1"
170. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Google>Chrome>Extensions>ngpampappnmepgilojfohadhhmbhlaek
171. In the right panel, locate and delete the entry:
     path = "%Program Files%\Internet Download Manager\IDMGCExt.crx"
172. Again In the right panel, locate and delete the entry:
     version = "6.23.15"
173. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>Mozilla>SeaMonkey>Extensions
174. In the right panel, locate and delete the entry:
     mozilla_cc@internetdownloadmanager.com = "%User Profile%\IDM\idmmzcc5"
175. Again In the right panel, locate and delete the entry:
     mozilla_cc2@internetdownloadmanager.com = "%Program Files%\Internet Download Manager\idmmzcc2.xpi"
176. Again In the right panel, locate and delete the entry:
     mzcc_vers = "f427"
177. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>Services>IDMTDI
178. In the right panel, locate and delete the entry:
     Start = "1"
179. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Internet Download Manager
180. In the right panel, locate and delete the entry:
     AdvIntDriverEnabled2 = "1"
181. Again In the right panel, locate and delete the entry:
     lastintres = "1"
182. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID>{CDC95B92-E27C-4745-A8C5-64A52A78855D}>InProcServer32
183. In the right panel, locate and delete the entry:
     ThreadingModel = "Apartment"
184. In the left panel, double-click the following:
     HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Shell Extensions>Approved
185. In the right panel, locate and delete the entry:
     {CDC95B92-E27C-4745-A8C5-64A52A78855D} = "IDM Shell Extension"
186. Again In the right panel, locate and delete the entry:
     Extensions = "{random characters}"
187. Again In the right panel, locate and delete the entry:
     LocalPathW = "[REG_NONE, size: 116 bytes]"
188. Again In the right panel, locate and delete the entry:
     TempPath = "%User Profile%\Application Data\IDM"
189. Again In the right panel, locate and delete the entry:
     FindApps = "0"
190. Again In the right panel, locate and delete the entry:
     ExePath = "%Program Files%\Internet Download Manager\IDMan.exe"
191. Again In the right panel, locate and delete the entry:
     ffdownlFLV_v = "2"
192. Again In the right panel, locate and delete the entry:
     ffdownl10FLV_v = "2"
193. Again In the right panel, locate and delete the entry:
     idmvers = "v6.25b03 Trial"
194. Again In the right panel, locate and delete the entry:
     LstCheck = "02/15/16"
195. Again In the right panel, locate and delete the entry:
     LaunchOnStart = "1"
196. Again In the right panel, locate and delete the entry:
     RememberLastSave = "1"
197. Again In the right panel, locate and delete the entry:
     MonitorUrlClipboard = "0"
198. Again In the right panel, locate and delete the entry:
     UseHttpProxy = "0"
199. Again In the right panel, locate and delete the entry:
     UseFtpProxy = "0"
200. Again In the right panel, locate and delete the entry:
     FtpPasive = "0"
201. In the left panel, double-click the following:
     HKEY_CURRENT_USER>CLSID>{07999AC3-058B-40BF-984F-69EB1E554CA7}
202. In the right panel, locate and delete the entry:
     Model = "2d"
203. Again In the right panel, locate and delete the entry:
     Therad = "1"
204. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>DownloadManager>DwnlPanel
205. In the right panel, locate and delete the entry:
     FLV = "1"
206. Again In the right panel, locate and delete the entry:
     MP3 = "1"
207. Again In the right panel, locate and delete the entry:
     MP4 = "1"
208. Again In the right panel, locate and delete the entry:
     M4V = "1"
209. Again In the right panel, locate and delete the entry:
     F4V = "1"
210. Again In the right panel, locate and delete the entry:
     M4A = "1"
211. Again In the right panel, locate and delete the entry:
     MPG = "1"
212. Again In the right panel, locate and delete the entry:
     MPEG = "1"
213. Again In the right panel, locate and delete the entry:
     AVI = "1"
214. Again In the right panel, locate and delete the entry:
     WMV = "1"
215. Again In the right panel, locate and delete the entry:
     WMA = "1"
216. Again In the right panel, locate and delete the entry:
     WAV = "1"
217. Again In the right panel, locate and delete the entry:
     ASF = "1"
218. Again In the right panel, locate and delete the entry:
     RM = "1"
219. Again In the right panel, locate and delete the entry:
     OGG = "1"
220. Again In the right panel, locate and delete the entry:
     OGV = "1"
221. Again In the right panel, locate and delete the entry:
     MOV = "1"
222. Again In the right panel, locate and delete the entry:
     3GP = "1"
223. Again In the right panel, locate and delete the entry:
     QT = "1"
224. Again In the right panel, locate and delete the entry:
     WEBM = "1"
225. Again In the right panel, locate and delete the entry:
     TS = "1"
226. Again In the right panel, locate and delete the entry:
     MKV = "1"
227. Again In the right panel, locate and delete the entry:
     radxcnt = "1"
228. Again In the right panel, locate and delete the entry:
     TrayIcon = "1"
229. Again In the right panel, locate and delete the entry:
     nDESC7 = "1"
230. Again In the right panel, locate and delete the entry:
     nDESC8 = "1"
231. Again In the right panel, locate and delete the entry:
     isSSW_OK = "0"
232. Again In the right panel, locate and delete the entry:
     PanelExceptionServers = "*.gstatic.com"
233. Again In the right panel, locate and delete the entry:
     LargeButtons = "0"
234. Again In the right panel, locate and delete the entry:
     LargeButtons = "1"
235. Again In the right panel, locate and delete the entry:
     ToolbarStyle = "3D Style"
236. Again In the right panel, locate and delete the entry:
     TipTimeStamp = "Mon Nov 09 07:52:36 2015"
237. Again In the right panel, locate and delete the entry:
     TipStartUp = "0"
238. Again In the right panel, locate and delete the entry:
     TipFilePos = "a"
239. In the left panel, double-click the following:
     HKEY_CURRENT_USER>Software>DownloadManager>FoldersTree
240. In the right panel, locate and delete the entry:
     Visiblity = "0"
241. In the left panel, double-click the following:
     HKEY_CLASSES_ROOT
242. In the right panel, locate and delete the entry:
     .grp = "MSProgramGroup"
243. Again In the right panel, locate and delete the entry:
     MSProgramGroup = "Microsoft Program Group"
244. Again In the right panel, locate and delete the entry:
     MSProgramGroup\Shell\Open\Command = "%System%\grpconv.exe %1"
245. Again In the right panel, locate and delete the entry:
     lstbhotime = "[REG_NONE, size: 8 bytes]"
246. Again In the right panel, locate and delete the entry:
     lstbhotime2 = "[REG_NONE, size: 8 bytes]"
247. Close Registry Editor.

To restore registry values this malware/grayware modified:

1. Open Registry Editor. To do this:
   
   • On Windows 2000, XP, and Server 2003:
     Click Start>Run, type REGEDIT in the text box provided, and then press Enter.
   • On Windows Vista, 7, and Server 2008:
     Click the Start button, type REGEDIT in the Search input field then press Enter.
   • On Windows 8, 8.1, and Server 2012:
     Right-click on the lower left corner of the screen and click Run, type REGEDIT in the Run input field, and then press Enter.
2. In the left panel, double-click the following:
   HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>GrpConv
3. In the right panel, locate the registry value:
   Log = "Init Application."
4. Right-click on the value name and choose Modify. Change the value data of this entry to:
   Log = "Uninit Application."
5. Again In the right panel, locate the registry value:
   Log = "bdg: ..."
6. Right-click on the value name and choose Modify. Change the value data of this entry to:
   Log = "Uninit Application."
7. Again In the right panel, locate the registry value:
   Log = "bdg: Done."
8. Right-click on the value name and choose Modify. Change the value data of this entry to:
   Log = "Uninit Application."
9. Again In the right panel, locate the registry value:
   Log = "dros: ..."
10. Right-click on the value name and choose Modify. Change the value data of this entry to:
    Log = "Uninit Application."
11. Again In the right panel, locate the registry value:
    Log = "dros: Renames."
12. Right-click on the value name and choose Modify. Change the value data of this entry to:
    Log = "Uninit Application."
13. Again In the right panel, locate the registry value:
    Log = "dros: Copies."
14. Right-click on the value name and choose Modify. Change the value data of this entry to:
    Log = "Uninit Application."
15. Again In the right panel, locate the registry value:
    Log = "dros: Deletes."
16. Right-click on the value name and choose Modify. Change the value data of this entry to:
    Log = "Uninit Application."
17. Again In the right panel, locate the registry value:
    Log = "dros: Done."
18. Right-click on the value name and choose Modify. Change the value data of this entry to:
    Log = "Uninit Application."
19. Again In the right panel, locate the registry value:
    Log = "Uninit Application."
20. Right-click on the value name and choose Modify. Change the value data of this entry to:
    Log = "Uninit Application."
21. Close Registry Editor.

To manually delete a malware/grayware file from an affected system:

• For Windows 2000, Windows XP, and Windows Server 2003:

1. Right-click Start then click Search....
2. In the File name* input box, type the following:
   
   • %User Temp%\File.exe
   • %User Temp%\IDM_Setup_Temp\IDM0.tmp
   • %User Temp%\IDM_Setup_Temp\IDM1.tmp
   • %User Temp%\IDM_Setup_Temp\IDM2.tmp
   • %User Temp%\IDM_Setup_Temp\IDM3.tmp
   • %User Temp%\IDM_Setup_Temp\IDM4.tmp
   • %User Temp%\IDM_Setup_Temp\IDM5.tmp
   • %User Temp%\IDM_Setup_Temp\IDM6.tmp
   • %User Temp%\IDM_Setup_Temp\IDM7.tmp
   • %User Temp%\IDM_Setup_Temp\IDM8.tmp
   • %User Temp%\IDM_Setup_Temp\IDM9.tmp
   • %User Temp%\IDM_Setup_Temp\IDM10.tmp
   • %User Temp%\IDM_Setup_Temp\IDM11.tmp
   • %User Temp%\IDM_Setup_Temp\IDM12.tmp
   • %User Temp%\IDM_Setup_Temp\IDM13.tmp
   • %User Temp%\IDM_Setup_Temp\IDM14.tmp
   • %User Temp%\IDM_Setup_Temp\IDM15.tmp
   • %User Temp%\IDM_Setup_Temp\IDM16.tmp
   • %User Temp%\IDM_Setup_Temp\IDM17.tmp
   • %User Temp%\IDM_Setup_Temp\IDM18.tmp
   • %User Temp%\IDM_Setup_Temp\IDM19.tmp
   • %User Temp%\IDM_Setup_Temp\IDM20.tmp
   • %User Temp%\IDM_Setup_Temp\IDM21.tmp
   • %User Temp%\IDM_Setup_Temp\IDM22.tmp
   • %User Temp%\IDM_Setup_Temp\IDM23.tmp
   • %User Temp%\IDM_Setup_Temp\IDM24.tmp
   • %User Temp%\IDM_Setup_Temp\IDM25.tmp
   • %User Temp%\IDM_Setup_Temp\IDM26.tmp
   • %User Temp%\IDM_Setup_Temp\IDM27.tmp
   • %User Temp%\IDM_Setup_Temp\IDM28.tmp
   • %User Temp%\IDM_Setup_Temp\IDM29.tmp
   • %User Temp%\IDM_Setup_Temp\IDM30.tmp
   • %User Temp%\IDM_Setup_Temp\IDM31.tmp
   • %User Temp%\IDM_Setup_Temp\IDM32.tmp
   • %User Temp%\IDM_Setup_Temp\IDM33.tmp
   • %User Temp%\IDM_Setup_Temp\IDM34.tmp
   • %User Temp%\IDM_Setup_Temp\IDM35.tmp
   • %User Temp%\IDM_Setup_Temp\IDM36.tmp
   • %User Temp%\IDM_Setup_Temp\IDM37.tmp
   • %User Temp%\IDM_Setup_Temp\IDM38.tmp
   • %User Temp%\IDM_Setup_Temp\IDM39.tmp
   • %User Temp%\IDM_Setup_Temp\IDM40.tmp
   • %User Temp%\IDM_Setup_Temp\IDM41.tmp
   • %User Temp%\IDM_Setup_Temp\IDM42.tmp
   • %User Temp%\IDM_Setup_Temp\IDM43.tmp
   • %User Temp%\IDM_Setup_Temp\IDM44.tmp
   • %User Temp%\IDM_Setup_Temp\IDM45.tmp
   • %User Temp%\IDM_Setup_Temp\IDM46.tmp
   • %User Temp%\IDM_Setup_Temp\IDM47.tmp
   • %User Temp%\IDM_Setup_Temp\IDM48.tmp
   • %User Temp%\IDM_Setup_Temp\IDM49.tmp
   • %User Temp%\IDM_Setup_Temp\IDM50.tmp
   • %User Temp%\IDM_Setup_Temp\IDM51.tmp
   • %User Temp%\IDM_Setup_Temp\IDM52.tmp
   • %User Temp%\IDM_Setup_Temp\IDM53.tmp
   • %User Temp%\IDM_Setup_Temp\IDM54.tmp
   • %User Temp%\IDM_Setup_Temp\IDM55.tmp
   • %User Temp%\IDM_Setup_Temp\IDM56.tmp
   • %User Temp%\IDM_Setup_Temp\IDM57.tmp
   • %User Temp%\IDM_Setup_Temp\IDM58.tmp
   • %User Temp%\IDM_Setup_Temp\IDM59.tmp
   • %User Temp%\IDM_Setup_Temp\IDM60.tmp
   • %User Temp%\IDM_Setup_Temp\IDM61.tmp
   • %User Temp%\IDM_Setup_Temp\IDM62.tmp
   • %User Temp%\IDM_Setup_Temp\IDM63.tmp
   • %User Temp%\IDM_Setup_Temp\IDM64.tmp
   • %User Temp%\IDM_Setup_Temp\IDM65.tmp
   • %User Temp%\IDM_Setup_Temp\IDM66.tmp
   • %User Temp%\IDM_Setup_Temp\IDM67.tmp
   • %User Temp%\IDM_Setup_Temp\IDM68.tmp
   • %User Temp%\IDM_Setup_Temp\IDM69.tmp
   • %User Temp%\IDM_Setup_Temp\IDM70.tmp
   • %User Temp%\IDM_Setup_Temp\IDM71.tmp
   • %User Temp%\IDM_Setup_Temp\IDM72.tmp
   • %User Temp%\IDM_Setup_Temp\IDM73.tmp
   • %User Temp%\IDM_Setup_Temp\IDM74.tmp
   • %User Temp%\IDM_Setup_Temp\IDM75.tmp
   • %User Temp%\IDM_Setup_Temp\IDM76.tmp
   • %User Temp%\IDM_Setup_Temp\IDM77.tmp
   • %User Temp%\IDM_Setup_Temp\IDM78.tmp
   • %User Temp%\IDM_Setup_Temp\IDM79.tmp
   • %User Temp%\IDM_Setup_Temp\IDM80.tmp
   • %User Temp%\IDM_Setup_Temp\IDM81.tmp
   • %User Temp%\IDM_Setup_Temp\IDM82.tmp
   • %User Temp%\IDM_Setup_Temp\IDM83.tmp
   • %User Temp%\IDM_Setup_Temp\IDM84.tmp
   • %User Temp%\IDM_Setup_Temp\IDM85.tmp
   • %User Temp%\IDM_Setup_Temp\IDM86.tmp
   • %User Temp%\IDM_Setup_Temp\IDM87.tmp
   • %User Temp%\IDM_Setup_Temp\IDM88.tmp
   • %User Temp%\IDM_Setup_Temp\IDM89.tmp
   • %User Temp%\IDM_Setup_Temp\IDM90.tmp
   • %User Temp%\IDM_Setup_Temp\IDM91.tmp
   • %User Temp%\IDM_Setup_Temp\IDM92.tmp
   • %User Temp%\IDM_Setup_Temp\IDM93.tmp
   • %User Temp%\IDM_Setup_Temp\IDM94.tmp
   • %User Temp%\IDM_Setup_Temp\IDM95.tmp
   • %User Temp%\IDM_Setup_Temp\IDM96.tmp
   • %User Temp%\IDM_Setup_Temp\IDM97.tmp
   • %User Temp%\IDM_Setup_Temp\IDM98.tmp
   • %User Temp%\IDM_Setup_Temp\IDM99.tmp
   • %User Temp%\IDM_Setup_Temp\IDM100.tmp
   • %User Temp%\IDM_Setup_Temp\IDM101.tmp
   • %User Temp%\IDM_Setup_Temp\IDM102.tmp
   • %User Temp%\IDM_Setup_Temp\IDM103.tmp
   • %User Temp%\IDM_Setup_Temp\IDM104.tmp
   • %User Temp%\IDM_Setup_Temp\IDM105.tmp
   • %User Temp%\IDM_Setup_Temp\IDM106.tmp
   • %User Temp%\IDM_Setup_Temp\IDM107.tmp
   • %User Temp%\IDM_Setup_Temp\IDM108.tmp
   • %User Temp%\IDM_Setup_Temp\IDM109.tmp
   • %User Temp%\IDM_Setup_Temp\IDM110.tmp
   • %User Temp%\IDM_Setup_Temp\IDM111.tmp
   • %User Temp%\IDM_Setup_Temp\IDM112.tmp
   • %User Temp%\IDM_Setup_Temp\IDM113.tmp
   • %User Temp%\IDM_Setup_Temp\IDM114.tmp
   • %User Temp%\IDM_Setup_Temp\IDM115.tmp
   • %User Temp%\IDM_Setup_Temp\IDMSetup2.log
   • %Program Files%\Internet Download Manager\Uninstall.exe
   • %Program Files%\Internet Download Manager\license.txt
   • %Program Files%\Internet Download Manager\IDMIECC.dll
   • %Program Files%\Internet Download Manager\idman.chm
   • %Program Files%\Internet Download Manager\IDMan.exe
   • %Program Files%\Internet Download Manager\idmantypeinfo.tlb
   • %Program Files%\Internet Download Manager\IDMGetAll.dll
   • %Program Files%\Internet Download Manager\idmmkb.dll
   • %Program Files%\Internet Download Manager\IEExt.htm
   • %Program Files%\Internet Download Manager\IEGetAll.htm
   • %Program Files%\Internet Download Manager\Languages\idm_fa.lng
   • %Program Files%\Internet Download Manager\idmtdi.cat
   • %Program Files%\Internet Download Manager\tips.txt
   • %Program Files%\Internet Download Manager\tutor.chm
   • %Program Files%\Internet Download Manager\Languages\idm_ar.lng
   • %Program Files%\Internet Download Manager\Languages\idm_de.lng
   • %Program Files%\Internet Download Manager\Languages\idm_es.lng
   • %Program Files%\Internet Download Manager\Languages\idm_fr.lng
   • %Program Files%\Internet Download Manager\Languages\idm_it.lng
   • %Program Files%\Internet Download Manager\Languages\idm_ptbr.lng
   • %Program Files%\Internet Download Manager\Languages\idm_nl.lng
   • %Program Files%\Internet Download Manager\Languages\template.lng
   • %Program Files%\Internet Download Manager\Languages\tips_ar.txt
   • %Program Files%\Internet Download Manager\Languages\tips_de.txt
   • %Program Files%\Internet Download Manager\Languages\tips_es.txt
   • %Program Files%\Internet Download Manager\Languages\tips_fr.txt
   • %Program Files%\Internet Download Manager\Languages\tips_it.txt
   • %Program Files%\Internet Download Manager\Languages\tips_ptbr.txt
   • %Program Files%\Internet Download Manager\Languages\tips_nl.txt
   • %Program Files%\Internet Download Manager\Toolbar\3d_style_3.tbi
   • %Program Files%\Internet Download Manager\Toolbar\3d_large_3.bmp
   • %Program Files%\Internet Download Manager\Toolbar\3d_largeHot_3.bmp
   • %Program Files%\Internet Download Manager\Toolbar\3d_small_3.bmp
   • %Program Files%\Internet Download Manager\Toolbar\3d_smallHot_3.bmp
   • %Program Files%\Internet Download Manager\downlWithIDM.dll
   • %Program Files%\Internet Download Manager\IDMGrHlp.exe
   • %Program Files%\Internet Download Manager\grabber.chm
   • %Program Files%\Internet Download Manager\idmmzcc.xpi
   • %Program Files%\Internet Download Manager\idmfsa.dll
   • %Program Files%\Internet Download Manager\IEMonitor.exe
   • %Program Files%\Internet Download Manager\scheduler.chm
   • %Program Files%\Internet Download Manager\IEGetVL.htm
   • %Program Files%\Internet Download Manager\IEGetVL2.htm
   • %Program Files%\Internet Download Manager\defexclist.txt
   • %Program Files%\Internet Download Manager\idmbrbtn.dll
   • %Program Files%\Internet Download Manager\idmftype.dll
   • %Program Files%\Internet Download Manager\Languages\idm_tr.lng
   • %Program Files%\Internet Download Manager\Languages\tips_tr.txt
   • %Program Files%\Internet Download Manager\IDMShellExt.dll
   • %Program Files%\Internet Download Manager\idmwfp.inf
   • %Program Files%\Internet Download Manager\idmtdi.inf
   • %Program Files%\Internet Download Manager\idmwfp32.sys
   • %Program Files%\Internet Download Manager\idmtdi32.sys
   • %Program Files%\Internet Download Manager\IDMShellExt64.dll
   • %Program Files%\Internet Download Manager\idmbrbtn64.dll
   • %Program Files%\Internet Download Manager\idmwfp64.sys
   • %Program Files%\Internet Download Manager\idmtdi64.sys
   • %Program Files%\Internet Download Manager\idmwfp.cat
   • %Program Files%\Internet Download Manager\Languages\idm_ru.lng
   • %Program Files%\Internet Download Manager\Languages\tips_ru.txt
   • %Program Files%\Internet Download Manager\Languages\idm_th.lng
   • %Program Files%\Internet Download Manager\Languages\tips_th.txt
   • %Program Files%\Internet Download Manager\Languages\idm_pl.lng
   • %Program Files%\Internet Download Manager\Languages\tips_pl.txt
   • %Program Files%\Internet Download Manager\Languages\tips_fa.txt
   • %Program Files%\Internet Download Manager\IDMIECC64.dll
   • %Program Files%\Internet Download Manager\IDMGetAll64.dll
   • %Program Files%\Internet Download Manager\downlWithIDM64.dll
   • %Program Files%\Internet Download Manager\IDMIntegrator64.exe
   • %Program Files%\Internet Download Manager\IDMFType.dat
   • %Program Files%\Internet Download Manager\IDMFType64.dll
   • %Program Files%\Internet Download Manager\IDMNetMon.dll
   • %Program Files%\Internet Download Manager\IDMNetMon64.dll
   • %Program Files%\Internet Download Manager\Languages\template_inst.lng
   • %Program Files%\Internet Download Manager\Languages\inst_ru.lng
   • %Program Files%\Internet Download Manager\Languages\inst_fr.lng
   • %Program Files%\Internet Download Manager\Languages\inst_src.lng
   • %Program Files%\Internet Download Manager\Languages\inst_ar.lng
   • %Program Files%\Internet Download Manager\Languages\inst_ptbr.lng
   • %Program Files%\Internet Download Manager\Languages\inst_it.lng
   • %Program Files%\Internet Download Manager\Languages\inst_kr.lng
   • %Program Files%\Internet Download Manager\Languages\inst_de.lng
   • %Program Files%\Internet Download Manager\Languages\inst_fa.lng
   • %Program Files%\Internet Download Manager\IDMGCExt.crx
   • %Program Files%\Internet Download Manager\Languages\inst_chn.lng
   • %Program Files%\Internet Download Manager\Languages\inst_th.lng
   • %Program Files%\Internet Download Manager\Languages\inst_ua.lng
   • %Program Files%\Internet Download Manager\idmvs.dll
   • %Program Files%\Internet Download Manager\Languages\inst_dk.lng
   • %Program Files%\Internet Download Manager\Languages\inst_id.lng
   • %Program Files%\Internet Download Manager\Languages\inst_cz.lng
   • %Program Files%\Internet Download Manager\idmBroker.exe
   • %Program Files%\Internet Download Manager\Languages\inst_iw.lng
   • %Program Files%\Internet Download Manager\MediumILStart.exe
   • %Program Files%\Internet Download Manager\Languages\inst_tr.lng
   • %Program Files%\Internet Download Manager\Languages\inst_sk.lng
   • %Program Files%\Internet Download Manager\Languages\inst_pl.lng
   • %Program Files%\Internet Download Manager\Toolbar\3d_large_3_hdpi15.bmp
   • %Program Files%\Internet Download Manager\Toolbar\3d_largeHot_3_hdpi15.bmp
   • %Program Files%\Internet Download Manager\idmindex.dll
   • %Program Files%\Internet Download Manager\Languages\inst_cht.lng
   • %Program Files%\Internet Download Manager\Languages\inst_hu.lng
   • %Program Files%\Internet Download Manager\Languages\inst_es.lng
   • %Program Files%\Internet Download Manager\Languages\inst_pt.lng
   • %Program Files%\Internet Download Manager\Languages\inst_bg.lng
   • %Program Files%\Internet Download Manager\idmvconv.dll
   • %Program Files%\Internet Download Manager\Languages\inst_gr.lng
   • %Program Files%\Internet Download Manager\Languages\inst_al.lng
   • %Program Files%\Internet Download Manager\Languages\inst_my.lng
   • %Program Files%\Internet Download Manager\idmmzcc7.dll
   • %Program Files%\Internet Download Manager\idmmzcc7_64.dll
   • %Program Files%\Internet Download Manager\idmcchandler7.dll
   • %Program Files%\Internet Download Manager\idmcchandler7_64.dll
   • %Program Files%\Internet Download Manager\idmmzcc2.xpi
   • %Program Files%\Internet Download Manager\Languages\inst_uz.lng
   • %Start Menu%\Programs\Internet Download Manager\Uninstall IDM.lnk
   • %Start Menu%\Programs\Internet Download Manager\license.lnk
   • %Start Menu%\Programs\Internet Download Manager\IDM Help.lnk
   • %Start Menu%\Programs\Internet Download Manager\Internet Download Manager.lnk
   • %Start Menu%\Programs\Internet Download Manager\TUTORIALS.lnk
   • %Start Menu%\Programs\Internet Download Manager\Grabber Help.lnk
   • %Desktop%\Internet Download Manager.lnk
   • %User Profile%\IDM\defextmap.dat
   • %User Profile%\IDM\urlexclist.dat
   • %User Profile%\META-INF\zigbert.rsa
   • %User Profile%\idmmzcc5\chrome.manifest
   • %User Profile%\idmmzcc5\icon.png
   • %User Profile%\idmmzcc5\install.js
   • %User Profile%\idmmzcc5\install.rdf
   • %User Profile%\chrome\idmmzcc.jar
   • %User Profile%\components\idmhelper5.js
   • %User Profile%\components\idmmzcc.dll
   • %User Profile%\components\iIDMHelper5.xpt
   • %User Profile%\components\iIDMMzCC.xpt
   • %User Profile%\components12\idmmzcc.dll
   • %User Profile%\components12\idmmzcc64.dll
   • %User Profile%\components2\idmhelper.js
   • %User Profile%\components2\idmmzcc.dll
   • %User Profile%\components2\idmmzcc64.dll
   • %User Profile%\components2\iIDMHelper.xpt
   • %User Profile%\components2\iIDMMzCC.xpt
   • %User Profile%\components2\idmcchandler2.dll
   • %User Profile%\components2\idmcchandler2_64.dll
   • %User Profile%\META-INF\manifest.mf
   • %User Profile%\META-INF\zigbert.sf
   • %User Profile%\Scheduler\s_1.dt
   • %Windows%\INF\oem14.PNF
   • %Program Files%\Internet Download Manager\IDMSetup2.log
   • %Program Files%\Internet Download Manager\setup_error.log
   • %Program Files%\Internet Download Manager\idmcchandler2.dll
   • %Program Files%\Internet Download Manager\idmcchandler2_64.dll
   • %Windows%\INF\oem14.inf
3. In the Look In drop-down list, select My Computer then press Enter.
4. Once located, select the file then press SHIFT+DELETE to delete it.
   *Note: The file name input box title varies depending on the Windows version (e.g. Search for files or folders named or All or part of the file name.).

• For Windows Vista, Windows 7, Windows Server 2008, Windows 8, Windows 8.1, and Windows Server 2012:

1. Open a Windows Explorer window.
   • For Windows Vista, 7, and Server 2008 users, click Start>Computer.
   • For Windows 8, 8.1, and Server 2012 users, right-click on the lower left corner of the screen,then click File Explorer.
2. In the Search Computer/This PC input box, type:
   
   • %User Temp%\File.exe
   • %User Temp%\IDM_Setup_Temp\IDM0.tmp
   • %User Temp%\IDM_Setup_Temp\IDM1.tmp
   • %User Temp%\IDM_Setup_Temp\IDM2.tmp
   • %User Temp%\IDM_Setup_Temp\IDM3.tmp
   • %User Temp%\IDM_Setup_Temp\IDM4.tmp
   • %User Temp%\IDM_Setup_Temp\IDM5.tmp
   • %User Temp%\IDM_Setup_Temp\IDM6.tmp
   • %User Temp%\IDM_Setup_Temp\IDM7.tmp
   • %User Temp%\IDM_Setup_Temp\IDM8.tmp
   • %User Temp%\IDM_Setup_Temp\IDM9.tmp
   • %User Temp%\IDM_Setup_Temp\IDM10.tmp
   • %User Temp%\IDM_Setup_Temp\IDM11.tmp
   • %User Temp%\IDM_Setup_Temp\IDM12.tmp
   • %User Temp%\IDM_Setup_Temp\IDM13.tmp
   • %User Temp%\IDM_Setup_Temp\IDM14.tmp
   • %User Temp%\IDM_Setup_Temp\IDM15.tmp
   • %User Temp%\IDM_Setup_Temp\IDM16.tmp
   • %User Temp%\IDM_Setup_Temp\IDM17.tmp
   • %User Temp%\IDM_Setup_Temp\IDM18.tmp
   • %User Temp%\IDM_Setup_Temp\IDM19.tmp
   • %User Temp%\IDM_Setup_Temp\IDM20.tmp
   • %User Temp%\IDM_Setup_Temp\IDM21.tmp
   • %User Temp%\IDM_Setup_Temp\IDM22.tmp
   • %User Temp%\IDM_Setup_Temp\IDM23.tmp
   • %User Temp%\IDM_Setup_Temp\IDM24.tmp
   • %User Temp%\IDM_Setup_Temp\IDM25.tmp
   • %User Temp%\IDM_Setup_Temp\IDM26.tmp
   • %User Temp%\IDM_Setup_Temp\IDM27.tmp
   • %User Temp%\IDM_Setup_Temp\IDM28.tmp
   • %User Temp%\IDM_Setup_Temp\IDM29.tmp
   • %User Temp%\IDM_Setup_Temp\IDM30.tmp
   • %User Temp%\IDM_Setup_Temp\IDM31.tmp
   • %User Temp%\IDM_Setup_Temp\IDM32.tmp
   • %User Temp%\IDM_Setup_Temp\IDM33.tmp
   • %User Temp%\IDM_Setup_Temp\IDM34.tmp
   • %User Temp%\IDM_Setup_Temp\IDM35.tmp
   • %User Temp%\IDM_Setup_Temp\IDM36.tmp
   • %User Temp%\IDM_Setup_Temp\IDM37.tmp
   • %User Temp%\IDM_Setup_Temp\IDM38.tmp
   • %User Temp%\IDM_Setup_Temp\IDM39.tmp
   • %User Temp%\IDM_Setup_Temp\IDM40.tmp
   • %User Temp%\IDM_Setup_Temp\IDM41.tmp
   • %User Temp%\IDM_Setup_Temp\IDM42.tmp
   • %User Temp%\IDM_Setup_Temp\IDM43.tmp
   • %User Temp%\IDM_Setup_Temp\IDM44.tmp
   • %User Temp%\IDM_Setup_Temp\IDM45.tmp
   • %User Temp%\IDM_Setup_Temp\IDM46.tmp
   • %User Temp%\IDM_Setup_Temp\IDM47.tmp
   • %User Temp%\IDM_Setup_Temp\IDM48.tmp
   • %User Temp%\IDM_Setup_Temp\IDM49.tmp
   • %User Temp%\IDM_Setup_Temp\IDM50.tmp
   • %User Temp%\IDM_Setup_Temp\IDM51.tmp
   • %User Temp%\IDM_Setup_Temp\IDM52.tmp
   • %User Temp%\IDM_Setup_Temp\IDM53.tmp
   • %User Temp%\IDM_Setup_Temp\IDM54.tmp
   • %User Temp%\IDM_Setup_Temp\IDM55.tmp
   • %User Temp%\IDM_Setup_Temp\IDM56.tmp
   • %User Temp%\IDM_Setup_Temp\IDM57.tmp
   • %User Temp%\IDM_Setup_Temp\IDM58.tmp
   • %User Temp%\IDM_Setup_Temp\IDM59.tmp
   • %User Temp%\IDM_Setup_Temp\IDM60.tmp
   • %User Temp%\IDM_Setup_Temp\IDM61.tmp
   • %User Temp%\IDM_Setup_Temp\IDM62.tmp
   • %User Temp%\IDM_Setup_Temp\IDM63.tmp
   • %User Temp%\IDM_Setup_Temp\IDM64.tmp
   • %User Temp%\IDM_Setup_Temp\IDM65.tmp
   • %User Temp%\IDM_Setup_Temp\IDM66.tmp
   • %User Temp%\IDM_Setup_Temp\IDM67.tmp
   • %User Temp%\IDM_Setup_Temp\IDM68.tmp
   • %User Temp%\IDM_Setup_Temp\IDM69.tmp
   • %User Temp%\IDM_Setup_Temp\IDM70.tmp
   • %User Temp%\IDM_Setup_Temp\IDM71.tmp
   • %User Temp%\IDM_Setup_Temp\IDM72.tmp
   • %User Temp%\IDM_Setup_Temp\IDM73.tmp
   • %User Temp%\IDM_Setup_Temp\IDM74.tmp
   • %User Temp%\IDM_Setup_Temp\IDM75.tmp
   • %User Temp%\IDM_Setup_Temp\IDM76.tmp
   • %User Temp%\IDM_Setup_Temp\IDM77.tmp
   • %User Temp%\IDM_Setup_Temp\IDM78.tmp
   • %User Temp%\IDM_Setup_Temp\IDM79.tmp
   • %User Temp%\IDM_Setup_Temp\IDM80.tmp
   • %User Temp%\IDM_Setup_Temp\IDM81.tmp
   • %User Temp%\IDM_Setup_Temp\IDM82.tmp
   • %User Temp%\IDM_Setup_Temp\IDM83.tmp
   • %User Temp%\IDM_Setup_Temp\IDM84.tmp
   • %User Temp%\IDM_Setup_Temp\IDM85.tmp
   • %User Temp%\IDM_Setup_Temp\IDM86.tmp
   • %User Temp%\IDM_Setup_Temp\IDM87.tmp
   • %User Temp%\IDM_Setup_Temp\IDM88.tmp
   • %User Temp%\IDM_Setup_Temp\IDM89.tmp
   • %User Temp%\IDM_Setup_Temp\IDM90.tmp
   • %User Temp%\IDM_Setup_Temp\IDM91.tmp
   • %User Temp%\IDM_Setup_Temp\IDM92.tmp
   • %User Temp%\IDM_Setup_Temp\IDM93.tmp
   • %User Temp%\IDM_Setup_Temp\IDM94.tmp
   • %User Temp%\IDM_Setup_Temp\IDM95.tmp
   • %User Temp%\IDM_Setup_Temp\IDM96.tmp
   • %User Temp%\IDM_Setup_Temp\IDM97.tmp
   • %User Temp%\IDM_Setup_Temp\IDM98.tmp
   • %User Temp%\IDM_Setup_Temp\IDM99.tmp
   • %User Temp%\IDM_Setup_Temp\IDM100.tmp
   • %User Temp%\IDM_Setup_Temp\IDM101.tmp
   • %User Temp%\IDM_Setup_Temp\IDM102.tmp
   • %User Temp%\IDM_Setup_Temp\IDM103.tmp
   • %User Temp%\IDM_Setup_Temp\IDM104.tmp
   • %User Temp%\IDM_Setup_Temp\IDM105.tmp
   • %User Temp%\IDM_Setup_Temp\IDM106.tmp
   • %User Temp%\IDM_Setup_Temp\IDM107.tmp
   • %User Temp%\IDM_Setup_Temp\IDM108.tmp
   • %User Temp%\IDM_Setup_Temp\IDM109.tmp
   • %User Temp%\IDM_Setup_Temp\IDM110.tmp
   • %User Temp%\IDM_Setup_Temp\IDM111.tmp
   • %User Temp%\IDM_Setup_Temp\IDM112.tmp
   • %User Temp%\IDM_Setup_Temp\IDM113.tmp
   • %User Temp%\IDM_Setup_Temp\IDM114.tmp
   • %User Temp%\IDM_Setup_Temp\IDM115.tmp
   • %User Temp%\IDM_Setup_Temp\IDMSetup2.log
   • %Program Files%\Internet Download Manager\Uninstall.exe
   • %Program Files%\Internet Download Manager\license.txt
   • %Program Files%\Internet Download Manager\IDMIECC.dll
   • %Program Files%\Internet Download Manager\idman.chm
   • %Program Files%\Internet Download Manager\IDMan.exe
   • %Program Files%\Internet Download Manager\idmantypeinfo.tlb
   • %Program Files%\Internet Download Manager\IDMGetAll.dll
   • %Program Files%\Internet Download Manager\idmmkb.dll
   • %Program Files%\Internet Download Manager\IEExt.htm
   • %Program Files%\Internet Download Manager\IEGetAll.htm
   • %Program Files%\Internet Download Manager\Languages\idm_fa.lng
   • %Program Files%\Internet Download Manager\idmtdi.cat
   • %Program Files%\Internet Download Manager\tips.txt
   • %Program Files%\Internet Download Manager\tutor.chm
   • %Program Files%\Internet Download Manager\Languages\idm_ar.lng
   • %Program Files%\Internet Download Manager\Languages\idm_de.lng
   • %Program Files%\Internet Download Manager\Languages\idm_es.lng
   • %Program Files%\Internet Download Manager\Languages\idm_fr.lng
   • %Program Files%\Internet Download Manager\Languages\idm_it.lng
   • %Program Files%\Internet Download Manager\Languages\idm_ptbr.lng
   • %Program Files%\Internet Download Manager\Languages\idm_nl.lng
   • %Program Files%\Internet Download Manager\Languages\template.lng
   • %Program Files%\Internet Download Manager\Languages\tips_ar.txt
   • %Program Files%\Internet Download Manager\Languages\tips_de.txt
   • %Program Files%\Internet Download Manager\Languages\tips_es.txt
   • %Program Files%\Internet Download Manager\Languages\tips_fr.txt
   • %Program Files%\Internet Download Manager\Languages\tips_it.txt
   • %Program Files%\Internet Download Manager\Languages\tips_ptbr.txt
   • %Program Files%\Internet Download Manager\Languages\tips_nl.txt
   • %Program Files%\Internet Download Manager\Toolbar\3d_style_3.tbi
   • %Program Files%\Internet Download Manager\Toolbar\3d_large_3.bmp
   • %Program Files%\Internet Download Manager\Toolbar\3d_largeHot_3.bmp
   • %Program Files%\Internet Download Manager\Toolbar\3d_small_3.bmp
   • %Program Files%\Internet Download Manager\Toolbar\3d_smallHot_3.bmp
   • %Program Files%\Internet Download Manager\downlWithIDM.dll
   • %Program Files%\Internet Download Manager\IDMGrHlp.exe
   • %Program Files%\Internet Download Manager\grabber.chm
   • %Program Files%\Internet Download Manager\idmmzcc.xpi
   • %Program Files%\Internet Download Manager\idmfsa.dll
   • %Program Files%\Internet Download Manager\IEMonitor.exe
   • %Program Files%\Internet Download Manager\scheduler.chm
   • %Program Files%\Internet Download Manager\IEGetVL.htm
   • %Program Files%\Internet Download Manager\IEGetVL2.htm
   • %Program Files%\Internet Download Manager\defexclist.txt
   • %Program Files%\Internet Download Manager\idmbrbtn.dll
   • %Program Files%\Internet Download Manager\idmftype.dll
   • %Program Files%\Internet Download Manager\Languages\idm_tr.lng
   • %Program Files%\Internet Download Manager\Languages\tips_tr.txt
   • %Program Files%\Internet Download Manager\IDMShellExt.dll
   • %Program Files%\Internet Download Manager\idmwfp.inf
   • %Program Files%\Internet Download Manager\idmtdi.inf
   • %Program Files%\Internet Download Manager\idmwfp32.sys
   • %Program Files%\Internet Download Manager\idmtdi32.sys
   • %Program Files%\Internet Download Manager\IDMShellExt64.dll
   • %Program Files%\Internet Download Manager\idmbrbtn64.dll
   • %Program Files%\Internet Download Manager\idmwfp64.sys
   • %Program Files%\Internet Download Manager\idmtdi64.sys
   • %Program Files%\Internet Download Manager\idmwfp.cat
   • %Program Files%\Internet Download Manager\Languages\idm_ru.lng
   • %Program Files%\Internet Download Manager\Languages\tips_ru.txt
   • %Program Files%\Internet Download Manager\Languages\idm_th.lng
   • %Program Files%\Internet Download Manager\Languages\tips_th.txt
   • %Program Files%\Internet Download Manager\Languages\idm_pl.lng
   • %Program Files%\Internet Download Manager\Languages\tips_pl.txt
   • %Program Files%\Internet Download Manager\Languages\tips_fa.txt
   • %Program Files%\Internet Download Manager\IDMIECC64.dll
   • %Program Files%\Internet Download Manager\IDMGetAll64.dll
   • %Program Files%\Internet Download Manager\downlWithIDM64.dll
   • %Program Files%\Internet Download Manager\IDMIntegrator64.exe
   • %Program Files%\Internet Download Manager\IDMFType.dat
   • %Program Files%\Internet Download Manager\IDMFType64.dll
   • %Program Files%\Internet Download Manager\IDMNetMon.dll
   • %Program Files%\Internet Download Manager\IDMNetMon64.dll
   • %Program Files%\Internet Download Manager\Languages\template_inst.lng
   • %Program Files%\Internet Download Manager\Languages\inst_ru.lng
   • %Program Files%\Internet Download Manager\Languages\inst_fr.lng
   • %Program Files%\Internet Download Manager\Languages\inst_src.lng
   • %Program Files%\Internet Download Manager\Languages\inst_ar.lng
   • %Program Files%\Internet Download Manager\Languages\inst_ptbr.lng
   • %Program Files%\Internet Download Manager\Languages\inst_it.lng
   • %Program Files%\Internet Download Manager\Languages\inst_kr.lng
   • %Program Files%\Internet Download Manager\Languages\inst_de.lng
   • %Program Files%\Internet Download Manager\Languages\inst_fa.lng
   • %Program Files%\Internet Download Manager\IDMGCExt.crx
   • %Program Files%\Internet Download Manager\Languages\inst_chn.lng
   • %Program Files%\Internet Download Manager\Languages\inst_th.lng
   • %Program Files%\Internet Download Manager\Languages\inst_ua.lng
   • %Program Files%\Internet Download Manager\idmvs.dll
   • %Program Files%\Internet Download Manager\Languages\inst_dk.lng
   • %Program Files%\Internet Download Manager\Languages\inst_id.lng
   • %Program Files%\Internet Download Manager\Languages\inst_cz.lng
   • %Program Files%\Internet Download Manager\idmBroker.exe
   • %Program Files%\Internet Download Manager\Languages\inst_iw.lng
   • %Program Files%\Internet Download Manager\MediumILStart.exe
   • %Program Files%\Internet Download Manager\Languages\inst_tr.lng
   • %Program Files%\Internet Download Manager\Languages\inst_sk.lng
   • %Program Files%\Internet Download Manager\Languages\inst_pl.lng
   • %Program Files%\Internet Download Manager\Toolbar\3d_large_3_hdpi15.bmp
   • %Program Files%\Internet Download Manager\Toolbar\3d_largeHot_3_hdpi15.bmp
   • %Program Files%\Internet Download Manager\idmindex.dll
   • %Program Files%\Internet Download Manager\Languages\inst_cht.lng
   • %Program Files%\Internet Download Manager\Languages\inst_hu.lng
   • %Program Files%\Internet Download Manager\Languages\inst_es.lng
   • %Program Files%\Internet Download Manager\Languages\inst_pt.lng
   • %Program Files%\Internet Download Manager\Languages\inst_bg.lng
   • %Program Files%\Internet Download Manager\idmvconv.dll
   • %Program Files%\Internet Download Manager\Languages\inst_gr.lng
   • %Program Files%\Internet Download Manager\Languages\inst_al.lng
   • %Program Files%\Internet Download Manager\Languages\inst_my.lng
   • %Program Files%\Internet Download Manager\idmmzcc7.dll
   • %Program Files%\Internet Download Manager\idmmzcc7_64.dll
   • %Program Files%\Internet Download Manager\idmcchandler7.dll
   • %Program Files%\Internet Download Manager\idmcchandler7_64.dll
   • %Program Files%\Internet Download Manager\idmmzcc2.xpi
   • %Program Files%\Internet Download Manager\Languages\inst_uz.lng
   • %Start Menu%\Programs\Internet Download Manager\Uninstall IDM.lnk
   • %Start Menu%\Programs\Internet Download Manager\license.lnk
   • %Start Menu%\Programs\Internet Download Manager\IDM Help.lnk
   • %Start Menu%\Programs\Internet Download Manager\Internet Download Manager.lnk
   • %Start Menu%\Programs\Internet Download Manager\TUTORIALS.lnk
   • %Start Menu%\Programs\Internet Download Manager\Grabber Help.lnk
   • %Desktop%\Internet Download Manager.lnk
   • %User Profile%\IDM\defextmap.dat
   • %User Profile%\IDM\urlexclist.dat
   • %User Profile%\META-INF\zigbert.rsa
   • %User Profile%\idmmzcc5\chrome.manifest
   • %User Profile%\idmmzcc5\icon.png
   • %User Profile%\idmmzcc5\install.js
   • %User Profile%\idmmzcc5\install.rdf
   • %User Profile%\chrome\idmmzcc.jar
   • %User Profile%\components\idmhelper5.js
   • %User Profile%\components\idmmzcc.dll
   • %User Profile%\components\iIDMHelper5.xpt
   • %User Profile%\components\iIDMMzCC.xpt
   • %User Profile%\components12\idmmzcc.dll
   • %User Profile%\components12\idmmzcc64.dll
   • %User Profile%\components2\idmhelper.js
   • %User Profile%\components2\idmmzcc.dll
   • %User Profile%\components2\idmmzcc64.dll
   • %User Profile%\components2\iIDMHelper.xpt
   • %User Profile%\components2\iIDMMzCC.xpt
   • %User Profile%\components2\idmcchandler2.dll
   • %User Profile%\components2\idmcchandler2_64.dll
   • %User Profile%\META-INF\manifest.mf
   • %User Profile%\META-INF\zigbert.sf
   • %User Profile%\Scheduler\s_1.dt
   • %Windows%\INF\oem14.PNF
   • %Program Files%\Internet Download Manager\IDMSetup2.log
   • %Program Files%\Internet Download Manager\setup_error.log
   • %Program Files%\Internet Download Manager\idmcchandler2.dll
   • %Program Files%\Internet Download Manager\idmcchandler2_64.dll
   • %Windows%\INF\oem14.inf
3. Once located, select the file then press SHIFT+DELETE to delete it.
   *Note: Read the following Microsoft page if these steps do not work on Windows 7.

To delete malware/grayware/spyware folders:

For Windows 2000, Windows XP, and Windows Server 2003:

1. Right-click Start then click Search... or Find..., depending on the version of Windows you are running.
2. In the File name* input box, type:
   
   • %User Temp%\IDM_Setup_Temp
   • %Program Files%\Internet Download Manager
   • %Program Files%\Internet Download Manager\Languages
   • %Program Files%\Internet Download Manager\Toolbar
   • %Start Menu%\Programs\Internet Download Manager
   • %User Profile%\Application Data\DMCache
   • %User Profile%\Application Data\IDM
   • %User Profile%\My Documents\Downloads
   • %User Profile%\Downloads\Compressed
   • %User Profile%\Downloads\Documents
   • %User Profile%\Downloads\Music
   • %User Profile%\Downloads\Programs
   • %User Profile%\Downloads\Video
   • %User Profile%\IDM\idmmzcc5
   • %User Profile%\idmmzcc5\META-INF
   • %User Profile%\idmmzcc5\chrome
   • %User Profile%\idmmzcc5\components
   • %User Profile%\idmmzcc5\components12
   • %User Profile%\idmmzcc5\components2
   • %User Profile%\IDM\Grabber
   • %User Profile%\Grabber\Projects
   • %User Profile%\IDM\Scheduler
   • %Windows%\LastGood
   • %Windows%\LastGood\INF
3. In the Look In drop-down list, select My Computer, then press Enter.
4. Once located, select the folder then press SHIFT+DELETE to permanently delete the folder.
5. Repeat steps 2 to 4 for the remaining folders:
   • %User Temp%\IDM_Setup_Temp
   • %Program Files%\Internet Download Manager
   • %Program Files%\Internet Download Manager\Languages
   • %Program Files%\Internet Download Manager\Toolbar
   • %Start Menu%\Programs\Internet Download Manager
   • %User Profile%\Application Data\DMCache
   • %User Profile%\Application Data\IDM
   • %User Profile%\My Documents\Downloads
   • %User Profile%\Downloads\Compressed
   • %User Profile%\Downloads\Documents
   • %User Profile%\Downloads\Music
   • %User Profile%\Downloads\Programs
   • %User Profile%\Downloads\Video
   • %User Profile%\IDM\idmmzcc5
   • %User Profile%\idmmzcc5\META-INF
   • %User Profile%\idmmzcc5\chrome
   • %User Profile%\idmmzcc5\components
   • %User Profile%\idmmzcc5\components12
   • %User Profile%\idmmzcc5\components2
   • %User Profile%\IDM\Grabber
   • %User Profile%\Grabber\Projects
   • %User Profile%\IDM\Scheduler
   • %Windows%\LastGood
   • %Windows%\LastGood\INF
   *Note: The file name input box title varies depending on the Windows version (e.g. Search for files or folders named or All or part of the file name.).

For Windows Vista, Windows 7, Windows Server 2008, Windows 8, Windows 8.1, and Windows Server 2012:

1. Open a Windows Explorer window.
   • For Windows Vista, 7, and Server 2008 users, click Start>Computer.
   • For Windows 8, 8.1, and Server 2012 users, right-click on the lower left corner of the screen, then click File Explorer.
2. In the Search Computer/This PC input box, type:
   
   • %User Temp%\IDM_Setup_Temp
   • %Program Files%\Internet Download Manager
   • %Program Files%\Internet Download Manager\Languages
   • %Program Files%\Internet Download Manager\Toolbar
   • %Start Menu%\Programs\Internet Download Manager
   • %User Profile%\Application Data\DMCache
   • %User Profile%\Application Data\IDM
   • %User Profile%\My Documents\Downloads
   • %User Profile%\Downloads\Compressed
   • %User Profile%\Downloads\Documents
   • %User Profile%\Downloads\Music
   • %User Profile%\Downloads\Programs
   • %User Profile%\Downloads\Video
   • %User Profile%\IDM\idmmzcc5
   • %User Profile%\idmmzcc5\META-INF
   • %User Profile%\idmmzcc5\chrome
   • %User Profile%\idmmzcc5\components
   • %User Profile%\idmmzcc5\components12
   • %User Profile%\idmmzcc5\components2
   • %User Profile%\IDM\Grabber
   • %User Profile%\Grabber\Projects
   • %User Profile%\IDM\Scheduler
   • %Windows%\LastGood
   • %Windows%\LastGood\INF
3. Once located, select the file then press SHIFT+DELETE to permanently delete the folder.
4. Repeat steps 2-3 for the remaining folders:
   • %User Temp%\IDM_Setup_Temp
   • %Program Files%\Internet Download Manager
   • %Program Files%\Internet Download Manager\Languages
   • %Program Files%\Internet Download Manager\Toolbar
   • %Start Menu%\Programs\Internet Download Manager
   • %User Profile%\Application Data\DMCache
   • %User Profile%\Application Data\IDM
   • %User Profile%\My Documents\Downloads
   • %User Profile%\Downloads\Compressed
   • %User Profile%\Downloads\Documents
   • %User Profile%\Downloads\Music
   • %User Profile%\Downloads\Programs
   • %User Profile%\Downloads\Video
   • %User Profile%\IDM\idmmzcc5
   • %User Profile%\idmmzcc5\META-INF
   • %User Profile%\idmmzcc5\chrome
   • %User Profile%\idmmzcc5\components
   • %User Profile%\idmmzcc5\components12
   • %User Profile%\idmmzcc5\components2
   • %User Profile%\IDM\Grabber
   • %User Profile%\Grabber\Projects
   • %User Profile%\IDM\Scheduler
   • %Windows%\LastGood
   • %Windows%\LastGood\INF
   *Note: Read the following Microsoft page if these steps do not work on Windows 7.