Wednesday, January 20, 2010

How to perform Win32/Cryptor removal

Win32/Cryptor or Trojan.Win32.Cryptor infects computers, which are not properly protected, as a virus exploiting system vulnerabilities or may be downloaded according to trojan scheme. You are strongly recommended to remove Win32/Cryptor, since it restricts Windows functions, e.g. folders navigation may be disabled. Click here to start free system scan and get rid of Win32/Cryptor using Spyware Doctor.

Win32/Cryptor detected by AVG Antivirus:



Win32/Cryptor removal tool:

Win32/Cryptor manual removal instructions:
Delete Win32/Cryptor files:

gaopdxbkwtjirt.dll
gaopdxxyeoopy.dll
Delete Win32/Cryptor registry entries:
HKEY_LOCAL_MACHINE\Software\Win32/Cryptor

Tuesday, January 19, 2010

Remove Antivirus-plus02.com hijacker

Antivirus-plus02.com belongs to the category of websites visiting which is not recommended. It does not mean it contains malicious scripts directly infecting your PC or harming it, but the rogue antispyware is advertised (Antivirus Plus) at the website and there is a risk that, say not you – another user of your PC – will be lured to download and install the adware posed as a free trialware of antispyware; that supposed antispyware is adware and crashware.
In addition, you may need to remove Antivirus-plus02.com hijacker inserted directly into web-browser of your PC limiting its access to legit websites and arranging redirections to Antivirus-plus02.com hijackers; otherwise, the website will be shown to you at a regular basis instead of websites you choose. If the case occurred to you (a single redirection provides a hint), click here to start free scan and perform removal of Antivirus-plus02.com infections, as applicable.

Antivirus-plus02.com screenshot:


Antivirus-plus02.com remover:

Sunday, January 17, 2010

Remove WinSecurity 360 - step-by-step removal guide

WinSecurity 360 (Win Security 360) in no way can be considered as antispyware so that it is incorrect to define it as unfair antispyware, for that would mean WinSecurity 360 is, in principle, able to perform functions of antispyware, but not in full. That is, if WinSecurity 360 was unfair antispyware it would scan computer system and /or protect it from virus attacks but not providing a full scope of protection according to its declared description. Remove WinSecurity 360, for it is not antispyware but a pure counterfeit based on scary movie posed as a free scan. Hackers expect you to pay for a show and have no intention to equip WinSecurity 360 with true scanner. WinSecurity 360 is not unfair antispyware, it is just not antispyware at all; it is a cheap and base imitation of antivirus GUI. Click here to get rid of WinSecurity 360 adware and to perform removal of WinSecurity 360 related parasites, if any detected during Spyware Doctor free scan.

WinSecurity 360 screenshots:





WinSecurity 360 removal tool:

WinSecurity 360 manual removal guide:
Delete WinSecurity 360 files:

vlc.dat
WinSecurity360\WinSecurity360.ini
Win Security 360.lnk
Website.lnk
Win Security 360 Help.lnk
Win Security 360.lnk
sk.lst
Win Security 360 Help.url
Win Security 360.url
WinSecurity360.exe
Delete WinSecurity 360 registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\WinSecurity360

Friday, January 15, 2010

Www1.pcpc-soft-scan.net hijacker removal

An ordinary, as well as an extraordinary user cannot remove Www1.pcpc-soft-scan.net (Pcpc-soft-scan.net) website. A reliable antispyware tool must at least aware you of malware threat at Www1.pcpc-soft-scan.net or just block that website, as well as be able to remove Www1.pcpc-soft-scan.net related adware and hijacker. The adware is what Www1.pcpc-soft-scan.net promotes and prompts you to buy, i.e. the website prompts you to install and activate the program (counterfeit) which it describes in details. Hijacker is one of the ways of redirecting users to Www1.pcpc-soft-scan.net, which is based on infecting web-browser of computer system concerned and then to make it download the said website.
Therefore Www1.pcpc-soft-scan.net removal should be understood as a removal of Www1.pcpc-soft-scan.net related infections, not removal of Www1.pcpc-soft-scan.net website. To get rid of Www1.pcpc-soft-scan.net hijacker, as well as to perform the removal of other Www1.pcpc-soft-scan.net related infections, click here and start free Spyware Doctor scan. Please be aware that redirection (s) to Www1.pcpc-soft-scan.net is a possible sign of hijacked browser.

Www1.pcpc-soft-scan.net screenshots:



Www1.pcpc-soft-scan.net removal tool:

Thursday, January 14, 2010

Remove GhostAntivirus - prevent your PC from popups and slowdowns

GhostAntivirus (Ghost Antivirus) is about to be appreciated as the most destructive counterfeit of antivirus released during the winter 2009/2010. Ghost Antivirus removal is strongly recommended to be done in safe mode only and, in most cases, is possible only in safe mode: Ghost Antivirus files are protected from removal in general Windows mode.
Ghost Antivirus preserves tradition of Internet Antivirus Pro family, which is notorious due to its hard oppression of infected computers by its members. It has been concocted, released and is now distributed by the hackers band marinating and developing the said family and, despite of the luck of visual conformity with Internet Antivirus Pro, is the same annoying and destructive thing; in additional, the same trojans are applied for backdoor upload of Ghost Antivirus and Internet Antivirus Pro. The same tool is able to remove Ghost Antivirus and any member of its family. You may need to reboot in safe mode to download it though. Click here to start free system inspection and get rid of Ghost Antivirus and any related parasites using Spyware Doctor.

Ghost Antivirus screenshot:

Ghost Antivirus removal tool:


Ghost Antivirus manual removal instructions:
Delete Ghost Antivirus files:
ghostav.exe
register.ico
unins000.dat
uninst.ico
web.ico
working.log
ghost.sql
Infected.wav
listing.cfg
version.db
WMILib.dll
[random symbols].dll
Ghost Antivirus.lnk
Ghost Antivirus Home Page.lnk
Purchase License.lnk
settings.ini
uill.ini
unins000.exe
Uninstall Ghost Antivirus.lnk
links.txt
properties
times.conf
iGSh.png
iMSh.png
iPSh.png
pguard.ini
services.exe
onin.exe
Delete Ghost Antivirus registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ghost Antivirus_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
HKEY_CURRENT_USER\Software\Microsoft\FTP “SearchDir” = “c:\program files\Ghost Antivirus\”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run “onin”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Ghost Antivirus”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “3P_UDEC”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent “URIAPRO[1.1.3.9]”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe “Debugger” = “?”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe “RealDebugger” = “?”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon “RealLogonType” = “1″

Tuesday, January 12, 2010

Desktop-antivirus.com Removal

Desktop-antivirus.com is another corrupt website serving misleading and destructive software that targets credulous users. Desktop-antivirus.com delivers fake antispyware of similar name; legit websites are linked with Desktop-antivirus.com through ad banners published at those websites, since it is a common practice of not verifying ad content by the publishers mastering legit and fair websites. Naturally many unfair websites also show ad banners and popups advertising Desktop-antivirus.com or rather relevant rogue antispyware.
Remove Desktop-antivirus.com related adware in case you have been lured to download and install it; you may also need to get rid of Desktop-antivirus.com related hijacker as it is another tool that makes your web-browser open Desktop-antivirus.com on regular basis and blocks access to websites marketing antispyware capable of removing Desktop-antivirus.com related infections. Click here to start free scan and perform removal of Desktop-antivirus.com scam and other infections.

Desktop-antivirus.com screenshot:


Desktop-antivirus.com removal tool:

Monday, January 11, 2010

How to remove Guard Pro malware

Guard Pro or GuardPro is a rogue anti-spyware program, which is being installed through the use of Trojans. The number of tactics it uses is typical for such type of fake malicious programs, with the main aim to scare you to be infected with the virus and to purchase the full version of the program. You have to be aware, that the full version won’t bring any gain to your PC, thus our strong recommendation not to spend money for nothing. Among the fake alerts, which have to be ignored are those about infected files (in reality do not exist on your PC) and other numerous infections, scan results, notification about unauthorized connection to Internet etc. In order to get rid of Guard Pro malware please use Spyware Doctor.

Guard Pro screenshot:


Guard Pro removal tool:


Guard Pro manual removal guide:
Delete Guard Pro files:

VH339.exe
VHOOK.ico
VHMELHOOOK
VHJJOOK.cfg
Guard Pro
cookies.sqlite
mozcrt19.dll
sqlite3.dll
BackUp
Quarantine Items
RootLib
Guard Pro.lnk
Delete Guard Pro registry entries:
HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\trial_ca8cf.DocHostUIHandler
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Guard Pro”