Tuesday, August 26, 2008

Spyware Preventer - will damage your computer! Removal instructions

Spyware Preventer is another typical rogue with deceptive detection scheme. It use trojan horse to generate popups and fake security messages, hijack and redirect your homepage to trick you into:
1) Downloading Spyware Preventer installer
2) Purchasing its "full version"
REMEMBER that Spyware Preventer is not able to remove ANY of reported threats, its just an imitation of legitimate anti-spyware application designed to steal your money. Spyware Preventer may slow your computer and install addtional spyware programs. We recomend to remove this scamware as soon as possible. Download Spyware Doctor + Antivirus, it will easily remove Spyware Preventer and other malware from your computer.

Spyware Preventer screenshot:


Spyware Preventer automatical remover: Spyware Preventer manual removal instructions:
Delete Spyware Preventer files:
Spyware Preventer.lnk
SPP.cpl
SPP.exe
SPP.ooo
SPP1.dat
SPP.cpl
Delete Spyware Preventer registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”Antivirus” = “C\Program Files\SPP\SPP.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”Antivirus” = “C\Program Files\SPP\SPP.exe”
HKEY_CLASSES_ROOT\.key
HKEY_CURRENT_USER\Software\SPP
HKEY_CURRENT_USER\Software\Antivirus

Friday, August 22, 2008

XPert Antivirus - new rogue. Simple removal solution.

XPert Antivirus (XPertAntivirus) is the latest rogue anti-spyware application designed to trick you into buying "full version" of this useless software. It generates fake spyware detection messages and security warnings and may redirect you to misleading web-sites that simulates malware detections. Remember that XPert Antivirus may damage sensitive data, install additional malware and slow computers perfomance. Download Spyware Doctor + antivirus to get rid of this nasty rogue application.

XPert Antivirus screenshot:



XPert Antivirus automatical remover:

XPert Antivirus manual removal instructions:
Delete XPert Antivirus files:
XPA.cpl
XPA.exe
XPA0.dat
XPA1.dat
XPA.cpl
XPert Antivirus Enterprise.lnk
Delete XPert Antivirus registry entries:
HKEY_CURRENT_USER\Software\AntiVirus
HKEY_CURRENT_USER\Software\XAE
HKEY_CLASSES_ROOT\.key
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run “Antivirus”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Run “Antivirus”

Thursday, August 21, 2008

Remove MS Antivirus 2008 - MSAntivirus Removal Tool

MS Antivirus 2008 (MSAntivirus 2008) is the latest rogue antispyware product from Antivirus XP 2008 family. The instalation of MS Antivirus 2008 is often performed by Zlob.Trojan or through browser backdoors. MS Antivirus 2008 will load on every operational system startup and will display a large number of unwanted pop-up advertisements, including the ones with fake security notifications that user's computer is infected with different malware. It is also reported that MS Antivirus 2008 may appear difficult to remove manually because it can recreate itself. We recomend to download Spyware Doctor + Antivirus to remove MS Antivirus 2008 fake antispyware.

MS Antivirus 2008 screenshot:


MS Antivirus 2008 automatical remover:

MS Antivirus 2008 manual removal instructions:
Delete MS Antivirus 2008 files:
MSA
MSA.cpl
MSA.exe
msa0.dat
msa1.dat
MSAntivirus.lnk
Delete MS Antivirus 2008 registry entries:
HKEY_CURRENT_USER\Software\AntiVirus
HKEY_CURRENT_USER\Software\MSA
HKEY_CLASSES_ROOT\.key
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run "Antivirus"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Run "Antivirus"

Remove “Warning! Win32/Adware.Virtumonde” popup

“Warning! Win32/Adware.Virtumonde” popup is a sign of malware presence. Do not trust experts saying “we have program to remove “Warning! Win32/Adware.Virtumonde” error message or that it is essential to perform timely removal of “Warning! Win32/Adware.Virtumonde” alert. They can give you antispyware capable only to eliminate pop-ups, but the roots would remain untouched. One day sooner or later comes when you are wandering how it comes to this, all pop-ups have been eliminated long time ago but system has been crushed suddenly!? The problem is clear – you uploaded wrong medicine. “Warning! Win32/Adware.Virtumonde” alerts is annoying itself, but you need not just eliminate it by blocking pop-ups, complex malware removal is to be performed. It is recommended to remove “Warning! Win32/Adware.Virtumonde” alert and related malware (and unrelated, too) using Spyware Doctor + antivirus.

“Warning! Win32/Adware.Virtumonde” message text:
WARNING! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer.
Warning! Win32/Adware.Virtumonde
Warning! Win32/privacyremover.M64


“Warning! Win32/Adware.Virtumonde” popup screenshot:


“Warning! Win32/Adware.Virtumonde” popup removal tool:


“Warning! Win32/Adware.Virtumonde” popup manual removal instructions:
Delete infector files:
XP-Guard.lnk
XPGuardSetup.exe
XPGuard\XP-Guard Web Site.lnk
XPGuard\XP-Guard.lnk
XP-Guard Web Site.url
XP-Guard.exe
Delete registry entries:
414B0283-2228-4F26-8BB3-C2211FA99223
BC37F38C-D37C-46FC-AC8D-93ABBCE72947
FE06810E-CAFB-4F02-A65B-F35190236D02

Wednesday, August 20, 2008

AntivirDoc - new rogue. Be aware!

AntivirDoc is a new rogue anti-spyware that use trojan horse to generate large number of unwanted ads and fake security warning in order to force you to download and purchase full version of this useless program. AntivirDoc may cause your computer to slow down dramatically, it would also put your privacy and data in risk. We recomend to download Spyware Doctor + antivirus to get rid of this annoying malware.

AntivirDoc's web-site screenshot:


AntivirDoc automatical remover:


AntivirDoc manual removal instructions:
Delete AntivirDoc files:

AntiVirusDoc.pif
AntiVirusDoc.exe
AntiVirusDoc.lnk
Delete AntivirDoc registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\AntivirusDoc

Monday, August 11, 2008

Internet Antivirus - fake software with aggressive behaviour

Internet Antivirus is the latest rogue anti-spyware with aggressive behaviour. You may have been infected with Internet Antivirus by a Trojan horse or through system security backdoors. After installation Internet Antivirus will start issuing its scare tactics in an attempt to lure you into buying the supposed virus\spyware remover. Moreover, Internet Antivirus may change some system settings, slow your PC and cause critical system errors and slowdowns. Be aware of Internet Antivirus 2008 and try to remove it as soon as possible. Download Spyware Doctor + antivirus or use manual removal instructions.

Internet Antivirus screenshots:





Internet Antivirus automatical remover:


Internet Antivirus manual removal instructions:
Delete Internet Antivirus files:

InternetAntivirus.exe
activate.ico
cookies.log
Explorer.ico
IAUpdater.exe
IAvir.exe
Scanner.log
unins000.dat
uninstall.ico
working.log
db\config.cfg
db\DBInfo.ver
db\ia080614.db
Languages
Internet Antivirus.lnk
Internet Antivirus Home Page.lnk
Purchase License.lnk
settings.ini
uill.ini
unins000.exe
Uninstall Internet Antivirus.lnk
iv.exe
Delete Internet Antivirus registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer\Run "iv"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Internet Antivirus"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "3P_UDEC_IA"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\Internet Antivirus_is1

Saturday, August 9, 2008

AntiSpyCheck - remover and manual removal instructions

AntiSpyCheck is a rogue anti-spyware program that infects users computer using trojan horses and system security holes. AntiSpyCheck will display security warnings and spyware detection messages to trick users into buying "full" version of AntiSpyCheck. AntiSpyCheck malware should not be trusted, it may damage your computer and cause critical system errors and Windows crahses. Download AntiSpyCheck remover (Spyware Doctor + antivirus) to get rid of this nasty malware.

AntiSpyCheck screenshot:


AntiSpyCheck automatical remover:


AntiSpyCheck manual removal instructions:
Delete AntiSpyCheck files:

ad-protect.exe,
AntiSpyCheck.exe,
spamdet.dll
Delete AntiSpyCheck registry entires:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ad-protect.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\spamdet.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{9DA1990B-9BCA-4c80-AEFB-11A40FA849F9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C628512D-A058-4BD4-B47B-B036F45FA02B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99A753C6-E429-46BD-989E-DD4A21CD059D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BBBD3E11-D201-46C9-8471-091D33159287}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2608046-DD09-A225-01BF-70C1EDD8B2E8}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2C1986A-FBEC-4472-AABF-6D42F08DBC8E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D7ABE914-B8CF-4602-9145-6BDAAEDA21AA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3210E86-46A8-5973-963F-0EF4CF226A0C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{214345B8-BB69-498D-A168-29F58F15D806}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CF231820-9904-4A37-B5B0-C87EF6F6CC82}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D2C1986A-FBEC-4472-AABF-6D42F08DBC8E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F51BC478-D997-4C56-988D-79D9EEAAD1EC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FD4DCB8B-C33A-4E70-A351-6FAB7E1071A4}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{32BD20FD-41FD-47FB-9BC9-28DCBD7D55D7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{5AA883DB-7CFD-4737-B3C3-C671595ECCE5}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Addin
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Addin.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Server
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Server.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\spamdet.SpamDetector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\spamdet.SpamDetector.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AntiSpyCheck.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiSpyCheck
HKEY_LOCAL_MACHINE\SOFTWARE\AntiSpyCheck
HKEY_CURRENT_USER\Software\Microsoft\Office\Outlook\Addins\Ad-Protect.Addin.1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\
Start Menu\Programs\AntiSpyCheck

Friday, August 8, 2008

Antivirus Master - master to kill your PC!

Antivirus Master is the latest rogue security application that generates fake spyware detection messages and security warnings to get you to purchase the full Antivirus Master program. Antivirus Master may be very dangerous for your privacy and security. We strongly recomend to download Spyware Docotor + antivirus to get rid of this nasty malware. Remember that Antivirus Master may damage your sensitive data and slow your PC.

Antivirus Master screenshots:


Antivirus Master automatical remover:

Antivirus Master manual removal instructions:
Delete Antivirus Master files:
avm.cpl
avm.exe
avm0.dat
avm1.dat
avm.cpl
Antivirus Master.lnk
Delete Antivirus Master registry entries:
HKEY_CURRENT_USER\Software\AntiVirus
HKEY_CURRENT_USER\Software\AVM
HKEY_CLASSES_ROOT\.key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Antivirus”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Antivirus”

Wednesday, August 6, 2008

Antivirus2008XP or Antivirus 2008 XP removal information

Antivirus 2008 XP (Antivirus2008XP) is the latest rogue anti-spyware that was created to trick users to buy its full version to supposedly remove "detected" spyware infections. Antivirus 2008 XP may install in your computer using Zlob Trojan. Antivirus 2008 XP may flood your system with popups and fake warning stating that your computer is infected with dangerous malware. Antivirus 2008 XP may hijack your homepage and slow PC perfomance. Moreover, it can secretly install other malware. We recomend Spyware Doctor + antivirus to remove Antivirus 2008 XP from your computer.

Antivirus 2008 XP screenshot:


Antivirus 2008 XP automatical removal tool:

Antivirus 2008 XP manual removal instructions:

Delete Antivirus 2008 XP files:

av2008xp.exe
Antivirus2008XP.exe
rhcn7cj0ea59.exe
rhcn7cj0ea59Skin.dll
rhcn7cj0ea59.exe.local
pphcj7cj0ea59.exe
scan[1].exe
lphcj7cj0ea59.exe
1scan31[1].exe
1450345358.exe
rhcn7cj0ea59Skin.dll
Delete Antivirus 2008 XP regitry keys and subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Uninstall\Antivirus2008XP
Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Antivirus XP 2008
Microsoft\Windows\CurrentVersion\Run\SMrhcn7cj0ea59
Microsoft\Windows\CurrentVersion\Uninstall\rhcn7cj0ea59
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Run
SOFTWARE\Microsoft\Windows\CurrentVersion\rhcn7cj0ea59
Microsoft\Windows\CurrentVersion\Run\lphcj7cj0ea59
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\
CURRENTVERSION\RUN\s9201

Monday, August 4, 2008

PyroAntiSpy - destroy your PC! New rogue from VirusProtect family

PyroAntiSpy 2.2 is a new scamware from one of the most dangerous rogue family (VirusProtect). PyroAntiSpy have new engine and use latest version of Zlob trojan to install itself on your computer and hijack browser homepage. Once executed, PyroAntiSpy will scan your machine and use false positives in order to frighten you into purchasing the full version of the program. Although PyroAntiSpy may appear to be undamaging, it is a security risk to your computer and it may actually expose you to more security threats by installing additional malware. We recomend to use Spyware Doctor + Antivirus to protect your PC from PyroAntiSpy.

PyroAntiSpy screenshots:




PyroAntiSpy removal tool:

PyroAntiSpy manual removal instructions:

Delete PyroAntiSpy files:

PyroAntiSpy 2.2.lnk
PyroAntiSpy.lnk
[Random Name].TMP
PyroAntiSpy 2.2 Website.lnk
Uninstall PyroAntiSpy 2.2.lnk
blacklist.txt
English.ini
msvcp71.dll
msvcr71.dll
PyroAntiSpy.exe
PyroAntiSpy.url
ref.dat
uninst.exe
Delete PyroAntiSpy registry entries:
HKEY_CLASSES_ROOT\CLSID\{1696AFC0-5194-4380-4EAD-1ABA5BCE1B57}
HKEY_CLASSES_ROOT\Interface\{0EF1C54E-C3B6-4BD4-BC03-B8C307A018E5}
HKEY_CLASSES_ROOT\Interface\{14B17A8E-B176-47A0-B6BC-4E1BA8228BD0}
HKEY_CLASSES_ROOT\Interface\{31115F60-D58E-42AF-89F0-E524A55427BA}
HKEY_CLASSES_ROOT\Interface\{38F560FD-646A-44B0-AD5E-3069D8ADC851}
HKEY_CLASSES_ROOT\Interface\{50229B5C-ED47-49EC-8959-F66758830C5C}
HKEY_CLASSES_ROOT\Interface\{5F0E78FA-C76B-49FB-88FC-61A7306C2FE1}
HKEY_CLASSES_ROOT\Interface\{6667E268-6334-4204-97DF-85F1D27D7CC9}
HKEY_CLASSES_ROOT\Interface\{6D1595CE-B92A-47C5-9CC3-AE11E5A9AAFA}
HKEY_CLASSES_ROOT\Interface\{844EC9CE-24A3-491A-A660-B8B7DF4766BA}
HKEY_CLASSES_ROOT\Interface\{A363B82A-1069-41EC-B185-188B59F504E6}
HKEY_CLASSES_ROOT\Interface\{BC760874-E3AC-4D05-969B-8FC28EB85252}
HKEY_CLASSES_ROOT\Interface\{C2194F32-D124-4956-8060-AE4696A78911}
HKEY_CLASSES_ROOT\Interface\{C783B30B-54CB-4745-AC2A-D41A4948C975}
HKEY_CLASSES_ROOT\Interface\{EE22CCD9-5D92-459B-B955-4115E6A1D0D7}
HKEY_CLASSES_ROOT\Interface\{F813DA8B-A263-450E-96AC-DB4BA5D55605}
HKEY_CLASSES_ROOT\Interface\{FF753266-C9EF-490C-85D0-A1A4C24FE8D2}
HKEY_CLASSES_ROOT\TypeLib\{12FCEB01-1FB2-486C-BBCB-7479300468F1}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\PyroAntiSpy.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PyroAntiSpy
HKEY_LOCAL_MACHINE\SOFTWARE\PyroAntiSpy

Antispyware 2008 XP - description and removal methods

Antispyware 2008 XP (Antispyware2008XP) is the latest WinSpywareProtect clone, it use popular scare tactic (fake security warnings, hijacked homepage and desktop). Antispyware 2008 XP may be installed through trojan horses and system security holes. It displays false positives to trick you into buying "full" version of this malware. Moreover, Antispyware 2008 XP may slow your computer and cause system errors and slowdowns. We recomend to use Antispyware 2008 XP automatical remover (Spyware Doctor with antivirus) to get rid of this nasty malware.

Antispyware 2008 XP screenshots:



Antispyware 2008 XP automatical remover:

Antispyware 2008 XP manual removal instructions:
Delete Antispyware 2008 XP files:
as2008xp.exe
setup_100527_3_.exe
Antispyware 2008 XP registry entries:

HKEY_CURRENT_USER\software\secure solutions\antispyware 2008 xp lgid
HKEY_CURRENT_USER\software\secure solutions\antispyware 2008 xp lid
HKEY_CURRENT_USER\software\secure solutions\antispyware 2008 xp pid
HKEY_CURRENT_USER\software\secure solutions\antispyware 2008 xp\2.1 installtime
HKEY_CURRENT_USER\software\secure solutions\antispyware 2008 xp\2.1 start counter
HKEY_CURRENT_USER\software\secure solutions\antispyware 2008 xp\2.1\config