Monday, September 8, 2008

SpyDevastator - removal information

SpyDevastator (Spy Devastator) will not leave you alone. Its alerts and scans are repeated very often. Where you infected, if you leave your PC turned on but giving no commands to it for a while and then press any key, you may have no other choice but close alerts one by one tat takes considerable time (especially when system buzzes because of them). It should be mentioned, though, that sometimes SpyDevastator runs quietly for during long period. If all undesirable effects of SpyDevastator presence would limit to the above pop-ups!However, such promotion that rather bothers you than is harmful for your machine, is only the top of iceberg; the bottom covered by water is more essential. You may ignore various alerts but it is impossible to ignore depreciation of system performance and errors in applications run caused by the rogue. The sooner you get rid of SpyDevastator, the better, as early removal allows to prevent any significant damage; and otherwise, biding may cause irreversible losses up to system crush. Download Spyware Doctor + antivirus to get rid of this nasty malware.

SpyDevastator screenshot:

SpyDevastator removal tool:

Download SpyDevastator Remover

SpyDevastator manual removal instructions:

Delete SpyDevastator files:

SpyDevastator 1.32.lnk
SpyDevastator.lnk
SDBHO.dll
sdcfg.dat
SpyDevastator Website.lnk
blacklist.txt
msvcp71.dll
msvcr71.dll
sdev.sgn
SpyDevastator.exe
SpyDevastator.url
uninst.exe
Lang
Lang\English.ini

Delete SpyDevastator registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\
Uninstall\SpyDevastator
HKEY_CURRENT_USER\Software\SpyDevastator
HKEY_CLASSES_ROOT\CLSID\{
528A3CF7-AAF9-42FE-A5D0-2A8EDA9E299E}
HKEY_CLASSES_ROOT\IEBHO.IEBHO
HKEY_CLASSES_ROOT\IEBHO.IEBHO.1
HKEY_CLASSES_ROOT\SpyDevastator.COMApp
HKEY_CLASSES_ROOT\SpyDevastator.COMApp.1
HKEY_LOCAL_MACHINE\SOFTWARE\Licenses
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\
Explorer\Browser Helper Objects\
{528A3CF7-AAF9-42FE-A5D0-2A8EDA9E299E}
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run “SpyDevastator”


Sunday, September 7, 2008

AntiRogue Killer is a rogue! Removal instructions

AntiRogue Killer (AntiRogueKiller) is the latest rogue anti-spyware software that may be installed by trojan horses or through system security holes. AntiRogue Killer displays popups and alert messages of imaginary infections or threats to get you to purchase the full AntiRogue Killer program. AntiRogue Killer may slow your computer and decrease internet connection speed. Download AntiRogue Killer remover (Spyware Doctor + antivirus) to detect and remove AntiRogue Killer malware.

AntiRogue Killer screenshot:

AntiRogue Killer automatical remover:


AntiRogue Killer manual removal instructions:
Delete AntiRogue Killer files:
AntiRogueKiller on the Web.lnk
AntiRogueKiller.lnk
Uninstall AntiRogueKiller lnk
AntiRogueKiller.exe
AntiRogueKiller.url
unins000.dat
unins000.exe
Delete AntiRogue Killer registry entries:
HKEY_LOCAL_MACHINE\Software\AntiRogue Killer
HKEY_CURRENT_USER\Software\AntiRogue Killer

Thursday, September 4, 2008

SmartAntivirus 2009 - new rogue with known face

SmartAntivirus 2009 is a rogue antispyware program that may look like a legitimate spyware removal tool. SmartAntivirus 2009 may get inside your machine through various security loopholes or via malicious Trojans. Once installed on your machine, SmartAntivirus 2009 will try to goad you into purchasing its full version. Moreover, it may slow your PC and cause serious system errors and slowdowns. Download SmartAntivirus 2009 remover to get rid of this nasty malware.

SmartAntivirus 2009 screenshots:




SmartAntivirus 2009 automatical remover:

Win32/adware.virtumonde and win32/PrivacyRemover.M64 Removal Tool

Win32/adware.virtumonde and Win32/PrivacyRemover.M64 are fake infections. They results from Zlob trojan. It may generate popups about Win32/adware.virtumonde and win32/PrivacyRemover.M64 detected on your computer or change desktop wallpaper. We recomend to remove Win32/adware.virtumonde and win32/PrivacyRemover.M64 false positives using automatical remover (Spyware Doctor + antivirus).

Win32/adware.virtumonde and Win32/PrivacyRemover.M64 message screenshot:


Win32/adware.virtumonde and Win32/PrivacyRemover.M64 automatical remover:

Wednesday, September 3, 2008

Doublestartpage.com - new browser hijacker. Removal Instructions

Doublestartpage.com is the latest hijacker that may be installed by Zlob trojan to promote rogue anti-spyware products. It displays fake security warnings to scare users and trick to download and purchase fake removers:
“Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer. If you are infected with this hijacker you will receive warnings in your task bar stating that you are infected with spyware and to run its special anti-spyware tool.”

Remember that this hijacker may slow your PC and cause critical system errors and data loss. Doublestartpage.com have two versions: Doublestartpage.com/xp and Doublestartpage.com/vista for different Microsoft operational systems. Never visit this dangerous web-sites! We recomend to remove Doublestartpage.com using Spyware Doctor + antivirus with free scan.

Doublestartpage.com screenshots:


Doublestartpage.com automatical remover:

Doublestartpage.com manual removal instructions:

Delete Doublestartpage.com files:
icmntr.exe
icthis.exe
ictun.exe
icun.exe
isfmm.exe
isfmntr.exe
isfun.exe
pmuninst.exe
gtawclv.dll
Online Security Guide.url
Security Troubleshooting.url
Online Security Guide.url
Security Troubleshooting.url
pmmon.exe
Delete Doublestartpage.com registry entries:
{c96395b8-ab09-46a4-b539-7ddf6e061808}
{ba934431-76af-4c99-93c2-c3d21944a72e}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{70d17a5f-ef27-4295-90f5-20ad6f24834f}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\Internet Explorer Secure Bar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\IExplorer Security Plug-in
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{D61D7E1A-6613-49CA-B6F9-51DB248E209D}

Monday, September 1, 2008

Remove XPAntivirus 2009 - XP Antivirus 2009 Remover

XPAntivirus 2009 is a new version of previously reviewed XPAntivirus 2008 rogue anti-spyware. It have some new "features" and infector files. If your computer is already infected - use XPAntivirus 2009 remover (Spyware Doctor + antivirus) or manual removal instructions. Remember that XPAntivirus 2009 is extremely dangerous rogue anti-spyware, it may slow your computer, open security holes to install other spyware and steal personal data.

XPAntivirus 2009 screenshot:


XPAntivirus 2009 automatical removal tool:

XPAntivirus 2009 manual removal instructions:
Delete XPAntivirus 2009 files:

xpa.exe
XPAntivirus.exe
scui.cpl
XP Antivirus 2008.lnk
XP Antivirus 2008
Uninstall XP Antivirus 2008.lnk
XP Antivirus 2008.lnk
krln32.exe
scvh0st.exe
trjdwnl.dll
shlext32.exe
Delete XPAntivirus 2009 registry entries:
HKEY_CURRENT_USER\Software\XP antivirus
HKEY_CURRENT_USER\Software\
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\XPAntivirusFilter
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XPAntivirusFilter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{4e7bd74f-2b8d-469e-dcf7-f96da086b434}\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{6C6B8C69-9285-4D94-8492-9E920C8C2B65}\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{74f25a2c-22b3-4023-8f1a-ca616c30a8b5}\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{9a19966f-ae0e-4699-8cce-9b6f5f1c352c}\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{D714A94F-123A-45CC-8F03-040BCAF82AD6}\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\XP antivirus_is1\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “XP Antivirus”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run “mmnext06″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run “shellbn”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run “System”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run “Windows Framework”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”

Antivir64 - easy detection and removal instructions

Antivir64 is the latest rogue security application with extremely aggressive behaviour. Antivir64 will generate and display a lot of fake warning popups, fake scan reports to trick user into buying a "full" version of Antivir64 program. Antivir64 will launch every time when users starts up their computers and it will generating millions of annoying popups that are very difficult to close. Users should delete Antivir64 as soon as possible from their computers to prevent damage of their computer and data loss. Download Spyware Doctor + Antivirus to get rid of this nasty malware.

Antivir64 screenshot:


Antivir64 automatical remover:

Antivir64 manual removal instructions:
Delete Antivir64 files:
Antivir64
Antivir64.exe
Buy.url
Help.url
HowToBuy.txt
ID.dat
License.txt
Uninstall.exe
Antivir64.lnk
Antivir64.ini
base.dat
base2.dat
Desc.dat
spline.dat
Purchase License.lnk
Start Antivir64.lnk
Support Page.lnk
Delete Antivir64 registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run “Antivir64″