Showing posts with label spy. Show all posts
Showing posts with label spy. Show all posts

Wednesday, November 12, 2008

Trojan-Spy.Win32.Banker.aiw - new fake trojan

Users are asking how to get rid of Trojan-Spy.Win32.Banker.aiw. It means that there is a spyware item installed at their machines that either shows pop-ups or scan windows referring to Trojan-Spy.Win32.Banker.aiw as to the main source of danger at the respective machine. They even say that rootkits can be created by this trojan so that unless Trojan-Spy.Win32.Banker.aiw removal is performed in a good time, this trojan can never be removed and complete system reinstallation needed. Needless to say, there is no scintilla of truth in such statements as Trojan-Spy.Win32.Banker.aiw is just an imaginary name. A real danger is relevant spyware that wants a user to pay from 40 bucks for… antispyware installation – well, life is a paradox, don’t you find so (blame someone else for someone else won’t blame you – tactic of spyware attacks) .
So, to remove Trojan-Spy.Win32.Banker.aiw means to remove related spyware. Click the link below in order to start scanning computer for free and remove Trojan-Spy.Win32.Banker.aiw pop-up in the right way (using SpywareDoctor+antivirus).

Trojan-Spy.Win32.Banker.aiw message:
Windows Firewall has detected unauthorised activity , but unfortunately it cannot help you remove viruses, keyloggers and spyware threats that steal your personal information from you computer. Click here to pick recommended software.
Trojan-Spy.Win32.Banker.aiw screenshots:

"Protect button" leads to defender-review.com misleading web-site



Trojan-Spy.Win32.Banker.aiw automatical remover:

Monday, September 8, 2008

SpyDevastator - removal information

SpyDevastator (Spy Devastator) will not leave you alone. Its alerts and scans are repeated very often. Where you infected, if you leave your PC turned on but giving no commands to it for a while and then press any key, you may have no other choice but close alerts one by one tat takes considerable time (especially when system buzzes because of them). It should be mentioned, though, that sometimes SpyDevastator runs quietly for during long period. If all undesirable effects of SpyDevastator presence would limit to the above pop-ups!However, such promotion that rather bothers you than is harmful for your machine, is only the top of iceberg; the bottom covered by water is more essential. You may ignore various alerts but it is impossible to ignore depreciation of system performance and errors in applications run caused by the rogue. The sooner you get rid of SpyDevastator, the better, as early removal allows to prevent any significant damage; and otherwise, biding may cause irreversible losses up to system crush. Download Spyware Doctor + antivirus to get rid of this nasty malware.

SpyDevastator screenshot:

SpyDevastator removal tool:

Download SpyDevastator Remover

SpyDevastator manual removal instructions:

Delete SpyDevastator files:

SpyDevastator 1.32.lnk
SpyDevastator.lnk
SDBHO.dll
sdcfg.dat
SpyDevastator Website.lnk
blacklist.txt
msvcp71.dll
msvcr71.dll
sdev.sgn
SpyDevastator.exe
SpyDevastator.url
uninst.exe
Lang
Lang\English.ini

Delete SpyDevastator registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\
Uninstall\SpyDevastator
HKEY_CURRENT_USER\Software\SpyDevastator
HKEY_CLASSES_ROOT\CLSID\{
528A3CF7-AAF9-42FE-A5D0-2A8EDA9E299E}
HKEY_CLASSES_ROOT\IEBHO.IEBHO
HKEY_CLASSES_ROOT\IEBHO.IEBHO.1
HKEY_CLASSES_ROOT\SpyDevastator.COMApp
HKEY_CLASSES_ROOT\SpyDevastator.COMApp.1
HKEY_LOCAL_MACHINE\SOFTWARE\Licenses
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\
Explorer\Browser Helper Objects\
{528A3CF7-AAF9-42FE-A5D0-2A8EDA9E299E}
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run “SpyDevastator”


Saturday, August 9, 2008

AntiSpyCheck - remover and manual removal instructions

AntiSpyCheck is a rogue anti-spyware program that infects users computer using trojan horses and system security holes. AntiSpyCheck will display security warnings and spyware detection messages to trick users into buying "full" version of AntiSpyCheck. AntiSpyCheck malware should not be trusted, it may damage your computer and cause critical system errors and Windows crahses. Download AntiSpyCheck remover (Spyware Doctor + antivirus) to get rid of this nasty malware.

AntiSpyCheck screenshot:


AntiSpyCheck automatical remover:


AntiSpyCheck manual removal instructions:
Delete AntiSpyCheck files:

ad-protect.exe,
AntiSpyCheck.exe,
spamdet.dll
Delete AntiSpyCheck registry entires:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ad-protect.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\spamdet.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{9DA1990B-9BCA-4c80-AEFB-11A40FA849F9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C628512D-A058-4BD4-B47B-B036F45FA02B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99A753C6-E429-46BD-989E-DD4A21CD059D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BBBD3E11-D201-46C9-8471-091D33159287}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2608046-DD09-A225-01BF-70C1EDD8B2E8}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2C1986A-FBEC-4472-AABF-6D42F08DBC8E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D7ABE914-B8CF-4602-9145-6BDAAEDA21AA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3210E86-46A8-5973-963F-0EF4CF226A0C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{214345B8-BB69-498D-A168-29F58F15D806}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CF231820-9904-4A37-B5B0-C87EF6F6CC82}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D2C1986A-FBEC-4472-AABF-6D42F08DBC8E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F51BC478-D997-4C56-988D-79D9EEAAD1EC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FD4DCB8B-C33A-4E70-A351-6FAB7E1071A4}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{32BD20FD-41FD-47FB-9BC9-28DCBD7D55D7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{5AA883DB-7CFD-4737-B3C3-C671595ECCE5}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Addin
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Addin.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Server
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Server.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\spamdet.SpamDetector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\spamdet.SpamDetector.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AntiSpyCheck.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiSpyCheck
HKEY_LOCAL_MACHINE\SOFTWARE\AntiSpyCheck
HKEY_CURRENT_USER\Software\Microsoft\Office\Outlook\Addins\Ad-Protect.Addin.1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\
Start Menu\Programs\AntiSpyCheck