Description of rootkit UACd.sys

This rootkit installs a hidden service in your system so it can be started automatically at Windows startup. Once it is running, it will connect remote server to download other malware. It also redirect your search result to unrelated website. Some variants hijack internet browser homepage to windowsclick.com

Objects of rootkit UACd.sys

Registry Key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UACd.sys
File:
C:\Windows\System32\drivers\UACtoaftyexaye.sys

How to remove rootkit UACd.sys with Adware Away

Adware Away can completely remove rootkit UACd.sys and all other malware related to this malware. Just follow the steps below:
  • 1. Launch Adware Away
  • 2. Click "Start Scan" button and wait for the scan completes
  • 3. Click "Fix Selected" button in the scan result window
  • 4. Reboot your computer if Adware Away prompts to reboot.

Adware Away scan result for rootkit UACd.sys (Note: result may be different between different variants)

About Adware Away and Customizing Removal Service

Adware Away is the only product that doesn't provide free trial vesion in anti-malware industry. We have 100% confidence to remove any malware with Adware Away and its customizing removal service. The download link is to download a scan-only version, you are required to purchase it before using it to remove the malware it finds.

Download Adware Away Purchase Adware Away

Customizing removal to remove any new variant of rootkit UACd.sys

If the above automatical method doesn't work, you can request a customizing removal service to let us help you remove this new variant manually, just follow the steps below:
  • 1. Launch Adware Away.
  • 2. Click "Customizing Removal" tab.
  • 3. Click "Diagnostic Scan" button and wait for the scan completes.
  • 4. Send us the scan log file.
  • 5. Our technical support will analyze your log file and send you back a removal guide file
  • 6. When you receive the removal guide file, just drag and drop it into Adware Away window, the removal to the new variant will be done.