Showing posts with label myzor. Show all posts
Showing posts with label myzor. Show all posts

Wednesday, September 3, 2008

Doublestartpage.com - new browser hijacker. Removal Instructions

Doublestartpage.com is the latest hijacker that may be installed by Zlob trojan to promote rogue anti-spyware products. It displays fake security warnings to scare users and trick to download and purchase fake removers:
“Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer. If you are infected with this hijacker you will receive warnings in your task bar stating that you are infected with spyware and to run its special anti-spyware tool.”

Remember that this hijacker may slow your PC and cause critical system errors and data loss. Doublestartpage.com have two versions: Doublestartpage.com/xp and Doublestartpage.com/vista for different Microsoft operational systems. Never visit this dangerous web-sites! We recomend to remove Doublestartpage.com using Spyware Doctor + antivirus with free scan.

Doublestartpage.com screenshots:


Doublestartpage.com automatical remover:

Doublestartpage.com manual removal instructions:

Delete Doublestartpage.com files:
icmntr.exe
icthis.exe
ictun.exe
icun.exe
isfmm.exe
isfmntr.exe
isfun.exe
pmuninst.exe
gtawclv.dll
Online Security Guide.url
Security Troubleshooting.url
Online Security Guide.url
Security Troubleshooting.url
pmmon.exe
Delete Doublestartpage.com registry entries:
{c96395b8-ab09-46a4-b539-7ddf6e061808}
{ba934431-76af-4c99-93c2-c3d21944a72e}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{70d17a5f-ef27-4295-90f5-20ad6f24834f}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\Internet Explorer Secure Bar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\IExplorer Security Plug-in
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{D61D7E1A-6613-49CA-B6F9-51DB248E209D}

Thursday, January 24, 2008

Remove allsecuritypage.com - allsecuritypage.com removal tool

Allsecuritypage.com is the latest browser hijacker that generates fake spyware detection reports to scare users and force to download rogue anti-spyware software. Allsecuritypage.com can damage your computer, steal personal data and cause REAL system errors and malware installations. We recomend to use Spyware Doctor antispyware with free scan to remove this hijacker.

Allsecuritypage.com hijacker:

Automatical removal tools:


Manual removal instructions:
Remove registry keys and subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{70d17a5f-ef27-4295-90f5-20ad6f24834f}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{80ced3d6-ece9-48ba-8df8-2503d8d87c2b}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Uninstall\Messenger Service
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{D61D7E1A-6613-49CA-B6F9-51DB248E209D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Explorer\Browser Helper objects\
{D61D7E1A-6613-49CA-B6F9-51DB248E209D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\IExplorer Security Plug-in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\Internet Explorer Secure Bar
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}


Remove files and dll's:
isamini.exe
isamonitor.exe
pmmon.exe
pmsngr.exe
iesplugin.dll
iesuninst.exe
isaddon.dll
Online Security Guide.url
Security Troubleshooting.url
Online Security Guide.url
Security Troubleshooting.url
pmmon.exe
pmsngr.exe
pmuninst.exe
gtawclv.dll
vjxwnn.dll
khtbpdl.dll
cfqbw.dll
fdpzgi.dll
vmlwp.dll
veptlh.dll