Tuesday, August 26, 2008

Spyware Preventer - will damage your computer! Removal instructions

Spyware Preventer is another typical rogue with deceptive detection scheme. It use trojan horse to generate popups and fake security messages, hijack and redirect your homepage to trick you into:
1) Downloading Spyware Preventer installer
2) Purchasing its "full version"
REMEMBER that Spyware Preventer is not able to remove ANY of reported threats, its just an imitation of legitimate anti-spyware application designed to steal your money. Spyware Preventer may slow your computer and install addtional spyware programs. We recomend to remove this scamware as soon as possible. Download Spyware Doctor + Antivirus, it will easily remove Spyware Preventer and other malware from your computer.

Spyware Preventer screenshot:


Spyware Preventer automatical remover: Spyware Preventer manual removal instructions:
Delete Spyware Preventer files:
Spyware Preventer.lnk
SPP.cpl
SPP.exe
SPP.ooo
SPP1.dat
SPP.cpl
Delete Spyware Preventer registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”Antivirus” = “C\Program Files\SPP\SPP.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”Antivirus” = “C\Program Files\SPP\SPP.exe”
HKEY_CLASSES_ROOT\.key
HKEY_CURRENT_USER\Software\SPP
HKEY_CURRENT_USER\Software\Antivirus

Friday, August 22, 2008

XPert Antivirus - new rogue. Simple removal solution.

XPert Antivirus (XPertAntivirus) is the latest rogue anti-spyware application designed to trick you into buying "full version" of this useless software. It generates fake spyware detection messages and security warnings and may redirect you to misleading web-sites that simulates malware detections. Remember that XPert Antivirus may damage sensitive data, install additional malware and slow computers perfomance. Download Spyware Doctor + antivirus to get rid of this nasty rogue application.

XPert Antivirus screenshot:



XPert Antivirus automatical remover:

XPert Antivirus manual removal instructions:
Delete XPert Antivirus files:
XPA.cpl
XPA.exe
XPA0.dat
XPA1.dat
XPA.cpl
XPert Antivirus Enterprise.lnk
Delete XPert Antivirus registry entries:
HKEY_CURRENT_USER\Software\AntiVirus
HKEY_CURRENT_USER\Software\XAE
HKEY_CLASSES_ROOT\.key
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run “Antivirus”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Run “Antivirus”

Thursday, August 21, 2008

Remove MS Antivirus 2008 - MSAntivirus Removal Tool

MS Antivirus 2008 (MSAntivirus 2008) is the latest rogue antispyware product from Antivirus XP 2008 family. The instalation of MS Antivirus 2008 is often performed by Zlob.Trojan or through browser backdoors. MS Antivirus 2008 will load on every operational system startup and will display a large number of unwanted pop-up advertisements, including the ones with fake security notifications that user's computer is infected with different malware. It is also reported that MS Antivirus 2008 may appear difficult to remove manually because it can recreate itself. We recomend to download Spyware Doctor + Antivirus to remove MS Antivirus 2008 fake antispyware.

MS Antivirus 2008 screenshot:


MS Antivirus 2008 automatical remover:

MS Antivirus 2008 manual removal instructions:
Delete MS Antivirus 2008 files:
MSA
MSA.cpl
MSA.exe
msa0.dat
msa1.dat
MSAntivirus.lnk
Delete MS Antivirus 2008 registry entries:
HKEY_CURRENT_USER\Software\AntiVirus
HKEY_CURRENT_USER\Software\MSA
HKEY_CLASSES_ROOT\.key
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run "Antivirus"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Run "Antivirus"

Remove “Warning! Win32/Adware.Virtumonde” popup

“Warning! Win32/Adware.Virtumonde” popup is a sign of malware presence. Do not trust experts saying “we have program to remove “Warning! Win32/Adware.Virtumonde” error message or that it is essential to perform timely removal of “Warning! Win32/Adware.Virtumonde” alert. They can give you antispyware capable only to eliminate pop-ups, but the roots would remain untouched. One day sooner or later comes when you are wandering how it comes to this, all pop-ups have been eliminated long time ago but system has been crushed suddenly!? The problem is clear – you uploaded wrong medicine. “Warning! Win32/Adware.Virtumonde” alerts is annoying itself, but you need not just eliminate it by blocking pop-ups, complex malware removal is to be performed. It is recommended to remove “Warning! Win32/Adware.Virtumonde” alert and related malware (and unrelated, too) using Spyware Doctor + antivirus.

“Warning! Win32/Adware.Virtumonde” message text:
WARNING! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer.
Warning! Win32/Adware.Virtumonde
Warning! Win32/privacyremover.M64


“Warning! Win32/Adware.Virtumonde” popup screenshot:


“Warning! Win32/Adware.Virtumonde” popup removal tool:


“Warning! Win32/Adware.Virtumonde” popup manual removal instructions:
Delete infector files:
XP-Guard.lnk
XPGuardSetup.exe
XPGuard\XP-Guard Web Site.lnk
XPGuard\XP-Guard.lnk
XP-Guard Web Site.url
XP-Guard.exe
Delete registry entries:
414B0283-2228-4F26-8BB3-C2211FA99223
BC37F38C-D37C-46FC-AC8D-93ABBCE72947
FE06810E-CAFB-4F02-A65B-F35190236D02

Wednesday, August 20, 2008

AntivirDoc - new rogue. Be aware!

AntivirDoc is a new rogue anti-spyware that use trojan horse to generate large number of unwanted ads and fake security warning in order to force you to download and purchase full version of this useless program. AntivirDoc may cause your computer to slow down dramatically, it would also put your privacy and data in risk. We recomend to download Spyware Doctor + antivirus to get rid of this annoying malware.

AntivirDoc's web-site screenshot:


AntivirDoc automatical remover:


AntivirDoc manual removal instructions:
Delete AntivirDoc files:

AntiVirusDoc.pif
AntiVirusDoc.exe
AntiVirusDoc.lnk
Delete AntivirDoc registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\AntivirusDoc

Monday, August 11, 2008

Internet Antivirus - fake software with aggressive behaviour

Internet Antivirus is the latest rogue anti-spyware with aggressive behaviour. You may have been infected with Internet Antivirus by a Trojan horse or through system security backdoors. After installation Internet Antivirus will start issuing its scare tactics in an attempt to lure you into buying the supposed virus\spyware remover. Moreover, Internet Antivirus may change some system settings, slow your PC and cause critical system errors and slowdowns. Be aware of Internet Antivirus 2008 and try to remove it as soon as possible. Download Spyware Doctor + antivirus or use manual removal instructions.

Internet Antivirus screenshots:





Internet Antivirus automatical remover:


Internet Antivirus manual removal instructions:
Delete Internet Antivirus files:

InternetAntivirus.exe
activate.ico
cookies.log
Explorer.ico
IAUpdater.exe
IAvir.exe
Scanner.log
unins000.dat
uninstall.ico
working.log
db\config.cfg
db\DBInfo.ver
db\ia080614.db
Languages
Internet Antivirus.lnk
Internet Antivirus Home Page.lnk
Purchase License.lnk
settings.ini
uill.ini
unins000.exe
Uninstall Internet Antivirus.lnk
iv.exe
Delete Internet Antivirus registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer\Run "iv"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Internet Antivirus"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "3P_UDEC_IA"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\Internet Antivirus_is1

Saturday, August 9, 2008

AntiSpyCheck - remover and manual removal instructions

AntiSpyCheck is a rogue anti-spyware program that infects users computer using trojan horses and system security holes. AntiSpyCheck will display security warnings and spyware detection messages to trick users into buying "full" version of AntiSpyCheck. AntiSpyCheck malware should not be trusted, it may damage your computer and cause critical system errors and Windows crahses. Download AntiSpyCheck remover (Spyware Doctor + antivirus) to get rid of this nasty malware.

AntiSpyCheck screenshot:


AntiSpyCheck automatical remover:


AntiSpyCheck manual removal instructions:
Delete AntiSpyCheck files:

ad-protect.exe,
AntiSpyCheck.exe,
spamdet.dll
Delete AntiSpyCheck registry entires:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ad-protect.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\spamdet.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{9DA1990B-9BCA-4c80-AEFB-11A40FA849F9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C628512D-A058-4BD4-B47B-B036F45FA02B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99A753C6-E429-46BD-989E-DD4A21CD059D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BBBD3E11-D201-46C9-8471-091D33159287}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2608046-DD09-A225-01BF-70C1EDD8B2E8}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2C1986A-FBEC-4472-AABF-6D42F08DBC8E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D7ABE914-B8CF-4602-9145-6BDAAEDA21AA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3210E86-46A8-5973-963F-0EF4CF226A0C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{214345B8-BB69-498D-A168-29F58F15D806}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CF231820-9904-4A37-B5B0-C87EF6F6CC82}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D2C1986A-FBEC-4472-AABF-6D42F08DBC8E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F51BC478-D997-4C56-988D-79D9EEAAD1EC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FD4DCB8B-C33A-4E70-A351-6FAB7E1071A4}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{32BD20FD-41FD-47FB-9BC9-28DCBD7D55D7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{5AA883DB-7CFD-4737-B3C3-C671595ECCE5}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Addin
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Addin.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Server
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Server.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\spamdet.SpamDetector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\spamdet.SpamDetector.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AntiSpyCheck.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiSpyCheck
HKEY_LOCAL_MACHINE\SOFTWARE\AntiSpyCheck
HKEY_CURRENT_USER\Software\Microsoft\Office\Outlook\Addins\Ad-Protect.Addin.1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\
Start Menu\Programs\AntiSpyCheck