Monday, March 31, 2008

WinFix Master - new misleading application. Be aware!

WinFix Master or WinFixMaster is a new rogue anti-spyware. It will produce false positives to trick you into buying "FULL version" of this scam. WinFix Master will load on every Windows startup and will display a large number of unwanted pop-up advertisements, including the ones with fake security notifications that user's computer is infected with malware. It is also reported that WinFix Master may appear difficult to remove manually. We recomend to remove WinFix Master using automatical removal tool with free scan.

WinFix Master remover for Windows Vista and XP

WinFix Master screenshot:

Saturday, March 29, 2008

Remove Shyam.com.np hijacker - Shyam.com.np remover

Shyam.com.np is a browser hijacker that will popup commercial advertisments an other scam. It may be extremely difficult to remove this hijacker from your system, it can update and recreate itself. Shyam.com.np may slow your computer and cause system errors and slowdowns. We recomend to remove Shyam.com.np using automatical removal tool.

Shyam.com.np Remover for Windows Vista and XP

Friday, March 28, 2008

How to remove BugsDestroyer fake registry repair application

BugsDestroyer is a malicious application disguised as a legitimate registry repair program. The common way of rogue anti-spyware applications to get into your machine unnoticed, is to be brought by a Trojan parasite. Once the Trojan installs BugsDestroyer, it will try to deceive you into buying the full version of the program by displaying exaggerated threat reports and error messages. BugsDestroyer is a fraud, and cannot perform registry-cleanup tasks. We strongly recommended you to eliminate BugsDestroyer from your system as soon as possible, you can download automatical removal tool or use manual removal instructions.

BugsDestroyer automatical removal tool for Windows Vista (32\64 bit) and XP

BugsDestroyer screenshot:


BugsDestroyer manual removal instructions:
Delete BugsDestroyer files:
SysRep.exe
unins000.exe
ucookw.exe
transpaid.exe
atl71.dll
mfc71.dll
msvcp71.dll
kernel.dll
msvcr71.dll
Delete BugsDestroyer registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Purchased Products\System Error Repair
HKEY_CURRENT_USER\Software\BugsDestroyer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “UGES 1.5.15.0″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GES_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “BugsDestroyer”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “strpmon”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “cwriter”
HKEY_CURRENT_USER\Software\BugsDestroyerDownloader
HKEY_LOCAL_MACHINE\SOFTWARE\BugsDestroyer

Wednesday, March 26, 2008

How to remove MalwareWar 7.3

MalwareWar 7.3 is a rogue (corrupt) anti-spyware with deceptive detection mechanism. It will generate fake spyware detection reports to trick you into buying full version of this useless crap. MalwareWar is a clone of well known MalwareWipe rogue, they have similiar interface and behaviour. We recomend to use automatical removal tool to get rid of this annoying program.

MalwareWar Remover for Windows Vista and XP

MalwareWar 7.3 screenshot:


MalwareWar 7.3 manual removal instructions:
Remove MalwareWar 7.3 files:
MalwareWar 7.3 MalwareWar 7.3.exe MalwareWar 7.3.url msvcp71.dll msvcr71.dll mwdb.dat uninst.exe Lang Lang\English.ini Quarantine MalwareWar 7.3.lnk MWLanguage.ini MalwareWar 7.3.lnk MalwareWar 7.3 MalwareWar 7.3 Website.lnk Uninstall MalwareWar 7.3.lnk Quick Launch\MalwareWar 7.3.lnk

Remove MalwareWar 7.3 registry entries:
HKEY_CLASSES_ROOT\AppID\{C291DEE7-D4B6-42d8-A016-302E6141D63B}
HKEY_CLASSES_ROOT\AppID\MalwareWar.EXE
HKEY_CLASSES_ROOT\CLSID\{13901470-5BCF-0EA6-A762-AD195455772B}
HKEY_CLASSES_ROOT\Interface\{195EA874-7AD8-4BE2-A1D1-ADDFFDC66DCA}
HKEY_CLASSES_ROOT\Interface\{2568D1BF-6D5E-4B17-81E5-7A97EF5D8F05}
HKEY_CLASSES_ROOT\Interface\{2F9DB89F-7F95-4C69-B775-A0C6C01DACE1}
HKEY_CLASSES_ROOT\Interface\{3CDB3874-DC96-4890-A786-4B6089E10980}
HKEY_CLASSES_ROOT\Interface\{5C03DE51-7AB7-41FC-8D50-ECDF39BA2DC0}
HKEY_CLASSES_ROOT\Interface\{5EFA24D1-944B-4ED8-99F1-2283F79E4136}
HKEY_CLASSES_ROOT\Interface\{65605733-BE0B-445A-B221-3C82A6BB1EE0}
HKEY_CLASSES_ROOT\Interface\{90E3F5BF-324B-433F-96C6-E272F2040D6B}
HKEY_CLASSES_ROOT\Interface\{B3FC6AF3-D3F4-496F-B8BF-8373BACE33F1}
HKEY_CLASSES_ROOT\Interface\{B6CB3B36-6134-45B8-83F0-6907B2538890}
HKEY_CLASSES_ROOT\Interface\{B71726E1-CBFE-425D-8446-15B51F54E493}
HKEY_CLASSES_ROOT\Interface\{C68F00CE-07D1-48AB-830E-D311D255C894}
HKEY_CLASSES_ROOT\Interface\{C9605621-B932-4359-AB54-5D88EB56A2A3}
HKEY_CLASSES_ROOT\Interface\{C9686C59-8568-40B1-9468-15446A529354}
HKEY_CLASSES_ROOT\Interface\{DAFAF86D-9B59-48C1-895F-4FF84A794675}
HKEY_CLASSES_ROOT\Interface\{E0394CFD-D54D-4826-932D-8379AB554882}
HKEY_CLASSES_ROOT\TypeLib\{2108EBD7-160B-4C23-A99F-1F559DDD320A}
HKEY_LOCAL_MACHINE\SOFTWARE\Licenses
HKEY_LOCAL_MACHINE\SOFTWARE\MalwareWar 7.3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RFC1156Agent
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RFC1156Agent\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RFC1156Agent\CurrentVersion\Parameters
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MalwareWar 7.3.exe 7.3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "MalwareWar 7.3"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MalwareWar 7.3

Monday, March 24, 2008

How to remove Antispyware-reviews.biz hijacker

Antispyware-reviews.biz is a browser hijacker that promotes rogue anti-spyware programs. Antispyware-reviews.biz can be installed using trojan horses or other crapware. It may popup fake spyware detection reports. It is difficult to remove this hijacker manually. We recomend to use automatical removal tools with free scan to kill this nasty malware.

Download Antispyware-reviews.biz remover for Windows Vista and XP

Antispyware-reviews.biz screenshot:

Sunday, March 23, 2008

How to remove Qvdntlmw Toolbar - Qvdntlmw Toolbar Remover

Qvdntlmw Toolbar is the fake security toolbar that results from Zlob Trojan. It will popup fake security warnings to trick you into buying rogue anti-spyware products. Qvdntlmw Toolbar can damage system files, this may cause critical Windows errors and data loss. We recomend to use SpyZilla anti-spyware to remove this badware from your computer.

Qvdntlmw Toolbar screenshot:


Qvdntlmw Toolbar removal tool:

Qvdntlmw Toolbar manual removal instructions:

Remove Qvdntlmw Toolbar files:
qvdntlmw.dll
byxww.dll
qvdntlmw.dll
toprates.dll
sprt_ads.dll
oggview32.dll
turbosearchsite.dll
ddcyvtt.dll
Remove Qvdntlmw Toolbar registry entries:
A74F3FC3-CC9A-4D4C-AFB5-B56F0CAA445D
82C8422E-86A3-41C1-9F2E-094F7BF849E2
4090F502-6B2D-41B4-8409-B08905A3A0E6
F10587E9-0E47-4CBE-84AE-7DD20B8684BB
14B65C62-1F53-4B15-9476-5D697608536F
BCBC8B3C-397C-4D98-B6BA-FF337B9671E1
80DFDD57-D8B8-4991-82B9-9E9D426668B0
4911E55D-9240-49DB-B878-337DE4F53E70
47EFD4AD-CB46-4549-B24B-CEE415394C56
17D2F953-B2D1-4D1B-BCD3-20432E09ECF1
3DAF1739-AB9E-493E-8DD7-F65CDF363BCB
F4D76F09-7896-458a-890F-E1F05C46069F

Saturday, March 22, 2008

Zonebak Trojan Removal Instructions

Zonebak Trojan results from Vundo infection. It will generate endless popups and fake security warnings to trick you into downloading rogue anti-spyware products. Zonebak Trojan can open system security holes and secretly install additional spyware to track browsing habits and steal personal data. Download SpyZilla with free scan to remove this nasty malware.