Thursday, June 26, 2008

WinX Security Center 2.2 Removal Info (WinXSecurityCenter 2.2)

WinX Security Center 2.2 is the latest rogue anti-spyware from russian hackers. It produces false positives to lure users into buying full version of this useless malware. Be aware of WinX Security Center 2.2, it may download other spyware using trojan horses or through browser security holes. In addition, WinX Security Center 2.2 may slow your PC, hijack browser homepage, redirect you to misleading web-sites e.t.c. We recomend to use Spyware Doctor + antivirus to remove this crapware from your PC

WinX Security Center 2.2 screenshot:


WinX Security Center 2.2 automatical remover:


WinX Security Center 2.2 manual removal instructions:
Delete WinX Security Center 2.2 files:
Purchase License.lnk
Start WinX Security Center.lnk
Support Page.lnk
WinX Security Center Uninstall.lnk
base.dat
base2.dat
Desc.dat
spline.dat
WinX Security Center.ini
Desktop\WinX Security Center.lnk
Buy.url
Help.url
HowToBuy.txt
License.txt
redir.dll
Restart.exe
Uninstall.exe
WinX Security Center.exe
Delete WinX Security Center 2.2 registry entries:
HKEY_CLASSES_ROOT\CLSID\{F3642B57-3EA8-4EEA-A643-9DE138381A57}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{F3642B57-3EA8-4EEA-A643-9DE138381A57}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run "WinX Security Center"

Tuesday, June 24, 2008

How to remove Free-viruscan.com - Free-viruscan.com Remover

Free-viruscan.com (http://free-viruscan.com/id/4912933/4/1/) is the latest browser hijacker affiliated with Zlob trojan and IEAntivirus 3.2 fake malware remover. It will generate fake spyware detection reports and malwarescans to scare you and force to download and purchase IE Antivirus 3.2 (and other rogues). Use SpywareDoctor + antivirus to remove Free-viruscan.com hijacker from your PC.

Free-viruscan.com screenshot:


Free-viruscan.com automatical remover:

Monday, June 23, 2008

HomeSecurePage.com hijacker removal instructions

HomeSecurePage.com is the latest Zlob trojan hijacker designed to trick users and force to buy rogue anti-spyware products. HomeSecurePage.com will issue fake Myzor@fk.yf worm detection messages and other security warnings. Moreover, HomeSecurePage.com may install additional security toolbars, change your desktop wallpaper and generate fake system tray notifications. We strongly recomend to use Spyware Doctor + antivirus to remove HomeSecurePage.com and Zlob trojan from your PC.

HomeSecurePage.com screenshots:


HomeSecurePage.com automatical remover:


HomeSecurePage.com manual removal instructions:

Delete HomeSecurePage.com files:

gtawclv.dll
vjxwnn.dll
khtbpdl.dll
cfqbw.dll
fdpzgi.dll
vmlwp.dll
veptlh.dll
isamini.exe
isamonitor.exe
pmmon.exe
pmsngr.exe
iesplugin.dll
iesuninst.exe
isaddon.dll
Online Security Guide.url
Security Troubleshooting.url
Online Security Guide.url
Security Troubleshooting.url
pmmon.exe
pmsngr.exe
pmuninst.exe
gtawclv.dll
vjxwnn.dll
khtbpdl.dll
cfqbw.dll
fdpzgi.dll
vmlwp.dll
veptlh.dll

Delete HomeSecurePage.com registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{70d17a5f-ef27-4295-90f5-20ad6f24834f}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{80ced3d6-ece9-48ba-8df8-2503d8d87c2b}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\Messenger Service
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{D61D7E1A-6613-49CA-B6F9-51DB248E209D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper objects\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\IExplorer Security Plug-in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\Internet Explorer Secure Bar
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}

Monday, June 16, 2008

Dobrowsesecure.com Removal Help

Dobrowsesecure.com is the latest Zlob hijacker that will display fake spyware detection messages and alerts to trick users into buying fake spyware removers. This nasty malware may slow your PC and disable antivirus protection. Moreover, it may secretly install additional spyware. We strongly recomend to remove it using Dobrowsesecure.com automatical remover (Spyware Doctor + antivirus)

Dobrowsesecure.com screenshots (XP and Vista variants):


Dobrowsesecure.com automatical removal tool:

Dobrowsesecure.com manual removal instructions:
Delete Dobrowsesecure.com files:

gtawclv.dll
vjxwnn.dll
khtbpdl.dll
cfqbw.dll
fdpzgi.dll
vmlwp.dll
veptlh.dll
isamini.exe
isamonitor.exe
pmmon.exe
pmsngr.exe
iesplugin.dll
iesuninst.exe
isaddon.dll
Online Security Guide.url
Security Troubleshooting.url
Online Security Guide.url
Security Troubleshooting.url
pmmon.exe
pmsngr.exe
pmuninst.exe
gtawclv.dll
vjxwnn.dll
khtbpdl.dll
cfqbw.dll
fdpzgi.dll
vmlwp.dll
veptlh.dll
Delete Dobrowsesecure.com registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{70d17a5f-ef27-4295-90f5-20ad6f24834f}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{80ced3d6-ece9-48ba-8df8-2503d8d87c2b}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\Messenger Service
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{D61D7E1A-6613-49CA-B6F9-51DB248E209D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper objects\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\IExplorer Security Plug-in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\Internet Explorer Secure Bar
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}


Sunday, June 15, 2008

ALOT Toolbar - description and removal tool

ALOT Toolbar is a special counterfit toolbar for Internet Explorer (BHO toolbar - Browser Helper Object). It will generate fake spyware detection messages and security warnings to trick you into purchasing those fake anti-spyware applications. ALOT Toolbar may also hijack and redirect your homepage. We recomend to remove this annoying malware using Spyware Doctor + antivirus.


Saturday, June 14, 2008

Errorallhere.com Removal Help - How to remove Errorallhere.com

Errorallhere.com is a fake 404 error page that promotes rogue anti-spyware products (such as Windows Antivirus 2008). We strongly recomend to remove http://errorallhere.com hijacker from your computer because it may secretly install other malware and slow PC perfomance. Download Errorallhere.com remover (Spyware Doctor + antivirus) to remove this parasite safely and quickly.

Errorallhere.com screenshot:

Errorallhere.com automatical remover:

Win32/glenwiry.p removal tool

Win32/glenwiry.p is a dangerous virus that spreads throug security holes and infects network computers. After Win32/glenwiry.p will infect your computer it may download additional malware (trojan horses, spyware, adware, hijackers and keyloggers). Moreover, Win32/glenwiry.p can change system settings and slow your PC. Download Spyware Doctor + antivirus to remove this dangerous threat from your computer.

Tuesday, June 10, 2008

Trojan Apisnuf Removal Information

Trojan Apisnuf is the latest trojan horse that will integrate itself on your system and gather all private information (passwords, credit card numbers, PayPal account info e.t.c.) and than send it to malicious web-servers. Trojan Apisnuf may track all keystrokes and secretly install additional malware. We recomend to remove it using Spyware Doctor + antivirus.

Trojan Apisnuf manual removal instructions:
Unregister and remove Trojan Apisnuf dll's:
ws2_32.dll
key_lgr.dll
Trojan Apisnuf Remover:

Monday, June 9, 2008

MalwareProtector 2008 Removal Help : Tool and Instructions

MalwareProtector 2008 is one of the most dangerous rogue anti-spywares. MalwareProtector 2008 may be installed using trojan horse or through system security holes. After installation it will start to diplay fake spyware detection messages and security warnings to fool you into thinking you have several infection and than lead to MalwareProtector 2008 purchase page (http://www.malwareprotector2008.com/buy/). Moreover, MalwareProtector 2008 may download and install other spyware. We recomend to remove MalwareProtector 2008 using automatical remover with free scan (Spyware Doctor + Antivirus).

MalwareProtector 2008 screenshots:


MalwareProtector 2008 automatical remover:


MalwareProtector 2008 manual removal instructions:
Delete MalwareProtector 2008 files:
Malware Protector 2008.lnk
How to Register Malware Protector 2008.lnk
License Agreement.lnk
Malware Protector 2008.lnk
Register Malware Protector 2008.lnk
Uninstall.lnk
database.dat
license.txt
MFC71.dll
MFC71ENU.DLL
msvcp71.dll
msvcr71.dll
shcev9j0e1b1.exe
shcev9j0e1b1.exe.local
shcev9j0e1b1Skin.dll
Uninstall.exe
Delete MalwareProtector 2008 registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
”SMshcev9j0e1b1″ = “C:\Program Files\shcev9j0e1b1\shcev9j0e1b1.exe” HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\shcev9j0e1b1\”DisplayName” = “MProtector”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\shcev9j0e1b1\”UninstallString” = “C:\Program Files\shcev9j0e1b1\uninstall.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\
”RegistrationUrl” = “http://www.malwareprotector2008.com/buy/”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”RegistrationDiscUrl” = “http://www.malwareprotector2008.com/purchase/”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”ADVid” = “”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”" = “C:\Program Files\shcev9j0e1b1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”InstallDir” = “C:\Program Files\shcev9j0e1b1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”domain” = “malwareprotector2008.com”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”SoftID” = “MProtector”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”DatabaseVersion” = “2.1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”ProgramVersion” = “2.1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”EngineVersion” = “2.1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”GuiVersion” = “2.1″
HKEY_LOCAL_MACHINE\SOFTWARE\ashcev9j0e1b1\”ProxyName” = “”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”ProxyPort” = “0″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”ScanPriority” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”DaysInterval” = “7″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”ScanDepth” = “2″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”ScanSystemOnStartup” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”AutomaticallyUpdates” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”MinimizeOnStart” = “0″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”BackgroundScan” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\”BackgroundScanTimeout” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\
”MGuid” = “{0DB56EFC-EE39-447F-94AB-73409F51AC2E}”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\
”InstallationID” = “{F2D62961-6358-4CCF-B806-7664421D16B2}”
HKEY_LOCAL_MACHINE\SOFTWARE\shcev9j0e1b1\
”LastTimeStamp” = “B8″
HKEY_USERS\S-1-5-21-1172441840-534431857-1906119351-500\
Software\Microsoft\Windows\ShellNoRoam\MUICache\”C:\Program Files\
shcev9j0e1b1\shcev9j0e1b1.exe” = “shcev9j0e1b1

Thursday, June 5, 2008

Securearticle.com hijacker removal information

Securearticle.com is a new browser hijacker from Zlob.Trojan family. It will show fake error messages and security warnings saying that your computer is infected with spyware. Securearticle.com may be installed through system exploits. Moreover, it may come bundled with other malware (usually Zlob trojan and different adware installers). This misleading web-site was designed to trick users into buying fake spyware removers from Russia or Ukraine. Securearticle.com may damage your computer and cause system errors and data loss. We recomend to use Spyware Doctor with antivirus to remove Securearticle.com from your computer.

Securearticle.com screenshots:




Securearticle.com automatical remover:


Securearticle.com manual removal instructions:
Delete Securearticle.com files:

tjby.dll
ncompat.tlb
btrklfr.dll
uimcu.dll
%UserProfile%\Application Data\Microsoft\Crypto\RSA
%UserProfile%\Application Data\Microsoft\Protect
dumpserv.com nvctrl.exe
msmsgs.exe
hp[X].tmp
msvol.tlb
RSA
Protect
vnp7s.net
zxserv0.com
dumpserv.com
antzozc.dll
ictmdl.dll
isfmdl.dll
nczupfw.dll
icthis.exe
ictun.exe
isfmntr.exe
isfun.exe
Trojan.Zlob|eulbn.dll
werbetpwg.dll
sysdivx.dll
vipextnog.dll
werbetlrw.dll
vipextgpk.dll
werbettxf.dll
vipextpxm.dll
voipwet.dll
hdtip.dll
G2-tmp.exe
G5-tmp.exe
fsehfcu.dll
qhcvdw.dll
findsiteonline.dll
1201639705.dll
1201639702.dll
ofcpi.dll
1202030455.dll
iinqyl.dll
1198448796.dll
sbmdl.dll
sbmntr.exe
sbsm.exe
sbun.exe
scit.exe
scm.exe
scu.exe
uninst.exe
wamdl.dll
waun.exe
1198448799.dll
laf1.exe
1202567261.dll
1202650266.dll
1203140349.dll
1204372749.dll
1203634438.dll
1203846321.dll
1204460162.dll
1204885300.dll
antiviirus.exe
dkxrstqqgr.dll
apdqnxp.dll
enlfxgw.dll
1205289674.dll
altvxvm.dll
bokpkov.dll
drnpfdxxrs.dll
drnpfdxrqv.dll
etlrlws.dll
drnpfdxsfn.dll
1205847823.dll
drnpfdxlwn.dll
admggxp.dll
drnpfdxlsk.dll
drnpfdxxsn.dll
drnpfdxopx.dll
drnpfdxsxp.dll
kdftlboekae.dll
jdxah.dll
dwnrpofk.dll
vbgtorfd.dll
qvdntlmw.dll
dcggain.dll
drnpfdxwgv.dll
svpekgonlop.dll
svpekgonnof.dll
svpekgongrk.dll
ekvgsnw.dll
vualf.dll
mgsvflkw.dll
qdnkewfa.dll
rkvdr.dll
temlxopqftg.dll
403445.dll
892267.dll
qtvglped.dll
omlbpkaw.dll
dntpkwodpx.dll
bubbj.dll
rkaxfza.dll
814810.dll
uyhjw.dll
Wxdbpfvo.dll
pmsoarbf.dll
qnmargolbve.dll
312191.dll
561756.dll
wdpoefan.dll
vadokmxt.dll
qdsba.dll
527631.dll
wxdbpfvo.dll
rtmipr.dll
xbaqktfv.exe
gndarmblvpg.dll
834668.dll
qvlbodmnlks.dll
gndarmblaor.dll
tdomgafw.dll
wetkadmr.dll
qvlbodmnbof.dll
158117.dll
fvowketqksn.dll
fvowketqsle.dll
443059.dll
qvlbodmnmle.dll
824223.dll
boqnrwdmstg.dll
nldfmtapndk.dll
pxgdslro.dll
566828.dll

Delete Securearticle.com registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70d17a5f-ef27-4295-90f5-20ad6f24834f}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{80ced3d6-ece9-48ba-8df8-2503d8d87c2b}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Messenger Service
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper objects\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IExplorer Security Plug-in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Explorer Secure Bar
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}

Wednesday, June 4, 2008

Vista Antivirus 2008 - new rogue from Russian hackers

Vista Antivirus 2008 (VistaAntivirus 2008) is a rogue spyware remover that leaps into your computer by a Trojan horse through system security holes. Vista Antivirus 2008 runs when Windows starts, generating fake security popups. Vista Antivirus 2008 notifications state that your computer is infected with spyware and that in order to remove these threats you should buy the full Vista Antivirus 2008 program. Vista Antivirus 2008 was created to steal money from gullible users. We recomend to remove Vista Antivirus 2008 from your computer using Spyware Doctor + antivirus with free scan.

Vista Antivirus 2008 screenshot:

Vista Antivirus 2008 automatical removal tool:


Vista Antivirus 2008 removal instructions:
Delete Vista Antivirus 2008
VistaAntivirus2008.exe
shlwapi.dll
wininet.dll
Vista Antivirus 2008.lnk
Uninstall Vista Antivirus 2008.lnk
Delete Vista Antivirus 2008 registry entries:
HKEY_CURRENT_USER\Software\Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run\”Antivirus” = “%ProgramFiles%\Vista Antivirus 2008\Antvrs.exe”

Tuesday, June 3, 2008

How to remove Zlob trojan - Zlob Trojan popups removal tool

Zlob Trojan (Trojan.Zlob) is one of the most dangerous and popular trojan horses. It was designed to promote and sell rogue anti-spyware products. Zlob may seriously damage your PC, steal personal data and cause frequent errors and slowdowns. Once inside the computer system Zlob can give access of your computer system to an attacker, though the trojan has no ability to replicate itself. We STRONGLY recomend to remove Zlob as soon as possible. Download Spyware Doctor+antivirus to remove Zlob trojan automatically.

Zlob Symthoms:
  • Slow PC
  • Frequent popups
  • System tray notifications (popup baloons)
  • Homepage hijackings
  • Malware installations
  • Fake malware scanner popups
  • Fake toolbars installations (Security Toolbar 7.1 and others)
Zlob screenshots:
Zlob hijacker with fake security toolbar
Zlob baloon popups
Zlob automatical removal tool:


Zlob manual removal instructions:
Delete Zlob files, unregister dll's and disable processes:
btrklfr.dll
ncompat.tlb
dtjby.dll
uimcu.dll
%UserProfile%\Application Data\Microsoft\Crypto\RSA
%UserProfile%\Application Data\Microsoft\Protect
dumpserv.com nvctrl.exe
hp[X].tmp
msvol.tlb
RSA
Protect
vnp7s.net
zxserv0.com
dumpserv.com
antzozc.dll
ictmdl.dll
isfmdl.dll
nczupfw.dll
icthis.exe
ictun.exe
isfmntr.exe
isfun.exe
Trojan.Zlob|eulbn.dll
werbetpwg.dll
sysdivx.dll
vipextnog.dll
werbetlrw.dll
vipextgpk.dll
werbettxf.dll
vipextpxm.dll
voipwet.dll
hdtip.dll
G2-tmp.exe
G5-tmp.exe
fsehfcu.dll
qhcvdw.dll
findsiteonline.dll
1201639705.dll
1201639702.dll
ofcpi.dll
1202030455.dll
iinqyl.dll
1198448796.dll
sbmdl.dll
sbmntr.exe
sbsm.exe
sbun.exe
scit.exe
scm.exe
scu.exe
wamdl.dll
waun.exe
1198448799.dll
laf1.exe
1202567261.dll
1202650266.dll
1203140349.dll
1204372749.dll
1203634438.dll
1203846321.dll
1204460162.dll
1204885300.dll
antiviirus.exe
dkxrstqqgr.dll
apdqnxp.dll
enlfxgw.dll
1205289674.dll
altvxvm.dll
bokpkov.dll
drnpfdxxrs.dll
drnpfdxrqv.dll
etlrlws.dll
drnpfdxsfn.dll
1205847823.dll
drnpfdxlwn.dll
admggxp.dll
drnpfdxlsk.dll
drnpfdxxsn.dll
drnpfdxopx.dll
drnpfdxsxp.dll
kdftlboekae.dll
jdxah.dll
dwnrpofk.dll
vbgtorfd.dll
qvdntlmw.dll
dcggain.dll
drnpfdxwgv.dll
svpekgonlop.dll
svpekgonnof.dll
svpekgongrk.dll
ekvgsnw.dll
vualf.dll
mgsvflkw.dll
qdnkewfa.dll
rkvdr.dll
temlxopqftg.dll
403445.dll
892267.dll
qtvglped.dll
omlbpkaw.dll
dntpkwodpx.dll
bubbj.dll
rkaxfza.dll
814810.dll
uyhjw.dll
Wxdbpfvo.dll
pmsoarbf.dll
qnmargolbve.dll
312191.dll
561756.dll
wdpoefan.dll
vadokmxt.dll
qdsba.dll
527631.dll
wxdbpfvo.dll
rtmipr.dll
xbaqktfv.exe
gndarmblvpg.dll
834668.dll
qvlbodmnlks.dll
gndarmblaor.dll
tdomgafw.dll
wetkadmr.dll
qvlbodmnbof.dll
158117.dll
fvowketqksn.dll
fvowketqsle.dll
443059.dll
qvlbodmnmle.dll
566828.dll
566828.dll
824223.dll
boqnrwdmstg.dll
boqnrwdmstg.dll
nldfmtapndk.dll
pxgdslro.dll
566828.dll
Delete Zlob registry entries:
{DB9FBA9D-AB1B-4CC6-9745-F3B549D64E40}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects\{A3D76B96-30B9-4DCC-9B3D-D12E31280D29}
{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
{ab75cc7d-2751-4144-a278-5462d5a5884c}
{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\start
{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
{60dea04c-9817-4309-bfa2-f8a1766c3cd1}
{D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
Online Add-on
{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
{a6d478c6-7961-4fe9-be4b-e621dd640112}
{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
{c0ca766d-060c-48e1-b536-205e321bd174}
{F2BADA0D-FD61-45EF-A994-64A073FD6613}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
HKEY_CURRENT_USER\Software\Online Add-on
{aaad3a22-1c07-45f5-bfb3-e9a8c3b382fe}
{2012F73E-7427-4AD8-9E9D-6CBA6E0053D4}
c7cd9e83-3bf6-47f8-b2e2-b114c96c1888
BA0BACB5-FC95-451E-94D2-4959AB0949D2
F10587E9-0E47-4CBE-84AE-7DD20B8684CC
F10587E9-0E47-4CBE-ABCD-7DD20B8622FF
10C52A42-DB8B-4ade-AA4A-CED6A8282B85
7265100a-17e1-41bf-bd08-63b95a25a9c3
{27cb634d-c84e-4c00-9b53-f5523601dbad}
{F10587E9-0E47-4CBE-ABCD-7DD20B862223}
E404.e404mgr
E404.e404mgr.1
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F10587E9-0E47-4CBE-ABCD-7DD20B862223}
NetProject
{10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
{747e1fbe-b70f-441d-bbca-6e536c04924a}
{81705D67-3F73-4983-859B-97D0922E5ABE}
{C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
{E85F6AA5-7A0C-49A5-9E5E-936FED62347D}
{F7D09218-46D7-4D3D-9B7F-315204CD0836}
{499B8A53-5949-4625-A8BF-A4D934AFC9DA}
{E63648F7-3933-440E-B4F6-A8584DD7B7EB}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
Microsoft\Windows\CurrentVersion\Uninstall\Internet Service
Microsoft\Windows\CurrentVersion\Uninstall\MultiMedia Software
Microsoft\Windows\CurrentVersion\Uninstall\Secure Browsing
Microsoft\Windows\CurrentVersion\Uninstall\Web Application
Microsoft\Windows\CurrentVersion\Uninstall\Windows Safety Alert
Microsoft\Internet Explorer\Toolbar\{81705D67-3F73-4983-859B-97D0922E5ABE}
Microsoft\Windows\CurrentVersion\policies\explorer\run\some
Microsoft\Windows\CurrentVersion\policies\explorer\run\start
{C03FD59D-9104-44B7-929A-9EAA0BA05211}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C03FD59D-9104-44B7-929A-9EAA0BA05211}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2C566C34-7D72-4DC1-9BBE-1121A76698F8}
Microsoft\Internet Explorer\Toolbar\WebBrowser
Objects\{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03B902B1-9B25-4173-9468-56775C85A8D4}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4FEDE82-C500-4AA4-BB99-A4DAE5A65A46}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{0D574C9F-71F9-4F3C-BA6D-CF9C0E1E3EE8}
{6D7990CB-1D01-4554-9EED-75BDC6406FC2}
zlob.trojan
{12a31567-9883-4cc0-a684-ad5804394d69}
{9E654A16-4765-4EAA-94EC-D5A6578053A4}
{25E0128D-AAFC-49FF-AB11-1F12C2FCC391}
{C130E860-7C1C-44F0-996C-1F995C10B61E}
Security Centre
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E4E30C12-F249-43D5-ACE3-E0C380448648}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7C109800-A5D5-438F-9640-18D17E168B88}
Microsoft\Internet Explorer\Toolbar\{51D81DD5-55B7-497F-95DB-D356429BB54E}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D0B9175-1463-4B59-80DB-4DDE662ACB2B}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DDFF8B71-EF58-4922-ACF2-2003FE2B7481}

Monday, June 2, 2008

SpyBossPro (Spyware.SpyBossPro) Removal Instructions

SpyBossPro (Spyware.SpyBossPro) is a latest keylogger that can record all information from keyboard (logins, passwords, credit card numbers e.t.c) and then send all data to third party servers. Remember that SpyBossPro is extremely dangerous, it may compromise your privacy and security. We recomend to use Spyware Doctor antispyware+antivirus to get rid of SpyBossPro.


Sunday, June 1, 2008

How to remove AdwareAlert fake spyware remover

AdwareAlert (Adware Alert) is yet another fake anti-spyware program that is often downloaded and installed by a Trojan or through browser security holes. AdwareAlert launches on Windows startup and may generate large numbers of popup adverts. AdwareAlert will also display notifications of imaginary security risks in its attempts to get the user to purchase the full version. AdwareAlert and all the warning messages shouldn't be trusted because it is just like all other Rogue programs. We recomend to download AdwareAlert automatical remover with free scan (Spyware Doctor+antivirus) to get rid of this annoying malware.

AdwareAlert screenshot:

AdwareAlert automatical remover: