Galileo System Cleaner

To remove Galileo System Cleaner virus from an infected computer, you need to scan the system with genuine anti-malware tool. It is also advised to delete the Trojan that drops this malware on your PC.

Boot Windows in Safe Mode With Networking

1. First thing to do is to reboot the computer in Safe Mode with Networking to avoid Galileo System Cleaner from loading at start-up. You may want to print this procedure as we have to restart the computer to complete the removal process.
- Restart the computer.
- Before Windows begins to load, press F8 on your keyboard.
- It will display an Advanced Boot Options menu. Select Safe Mode with Networking.
- Windows will now start in Safe Mode.

Galileo System Cleaner Removal Tool

2. Download anti-malware program here and save it on your Desktop or any location on your PC.
3. When finish downloading, double-click on the file to install the application.
4. Follow the prompts and install with default configuration.
5. Before the installation completes, check prompts that software will run and update on itself.

6. Click Finish. Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
7. When finished updating, the tool will run. Select Perform full scan on main screen to check your computer thoroughly.
8. When scanning is finished click on Show Results.
9. Make sure that all detected threats are checked, click on Remove Selected. This will delete all files and registry entries that belongs to Galileo System Cleaner.
10. Restart your computer.

Note: If Galileo System Cleaner prevents mbam-setup.exe from downloading. Download the software from another computer. Renaming it to something like 'anything.exe' can help elude the malware.

Procedure to Remove Rootkit Trojan

Anti-rootkit utility called TDSSKiller is a free tool from Kasperksy that neutralizes complicated malware which effectively hides its process, folders, files and registry entries.

1. Download TDSSKiller from this link. Save the file to your desktop.
2. Extract the contents using archiver applications.
3. Reboot the computer in Safe Mode to avoid Galileo System Cleaner from loading at start-up. You may want to print this procedure as we have to restart the computer to complete the removal process.
- Restart the computer.
- Before Windows begins to load, press F8 on your keyboard.
- It will display an Advanced Boot Options menu. Select Safe Mode with Networking.
- Windows will now start in Safe Mode.

4. Locate and run the TDSSKiller.exe file.

5. On Object to Scan, please mark Services and drivers as well as Boot Sectors.
6. Click on Start Scan to begin scanning your system. This may take a while.
7. After the scan is finished, it will reboot the computer. That should complete the disinfection process.

Alternative Removal Method for Galileo System Cleaner

Option 1 : Use Windows System Restore to return Windows to previous state

If Galileo System Cleaner enters the computer, there is a big chance that Windows files, registry entries and other essential components are also infected. System Restore can reinstate clean system files by restoring the configuration to an earlier date. The method also replaces compromised files with a clean version. If you have a saved restore point before Galileo System Cleaner infiltrates the PC, we highly encourage you to execute this procedure if none of the above works. You may proceed with Windows System Restore, click here to see the full procedure.

Option 2 : Galileo System Cleaner manual uninstall guide

IMPORTANT! Manual removal of Galileo System Cleaner requires technical skills. Deleting system files and registry entries by mistake may result to total disability of Windows system. We advise you to perform a backup of registry before proceeding with this guide.

1. Kill any running process that belongs to Galileo System Cleaner.
- Press Ctrl+Alt+Del on your keyboard.
- When Windows Task Manager appears, look for Galileo System Cleaner files (refer to Technical Reference) and click End Process.

2. Delete all registry entries that belong to this malware.
- Press [Windows Key]+R on your keyboard.
- In the 'Open' dialog box, type regedit and press Enter. This will open registry editor.
- Find and delete registry entries as mentioned in Technical Reference section below.
- Close registry editor. Changes made will be save automatically.

3. Scan the computer with antivirus program.
- Connect to Internet and open your antivirus software. Please update to obtain the latest database and necessary files.
- Restart the computer in Safe Mode.
- Just before Windows logo begins to load press F8 on your keyboard.
- On Windows Advanced Boot Options, select Safe Mode and press Enter.

4. Delete all files dropped by Galileo System Cleaner.
- While still in Safe Mode, search and delete malicious files. Please refer to 'Technical Reference'. Make sure that you execute 'End Task' first before deleting the file. Otherwise, the system will not let you perform this action.

Technical Reference

Associated Files and Folders:%StartMenu%\Programs\Galileo System Cleaner\ %StartMenu%\Programs\Galileo System Cleaner\Buy Galileo System Cleaner.lnk %StartMenu%\Programs\Galileo System Cleaner\Launch Galileo System Cleaner.lnk %LocalAppData%\(random numbers and characters).exe %System%\drivers\(random numbers and characters).sys %UserProfile%\Desktop\Buy Galileo System Cleaner.lnk Added Registry Entries:HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range1 "*" = 1 HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range1 ":Range" = "127.0.0.1" HKCU\Software\Microsoft\Windows\CurrentVersion\Run "(random numbers and characters).exe" HKLM\SYSTEM\CurrentControlSet\Services\(random numbers and characters) HKLM\SYSTEM\ControlSet\Enum\Root\LEGACY_(random numbers and characters)