Posts Tagged ‘2009’

Total secure 2009 fake security virus removal

Tuesday, August 18th, 2009



Total Secure 2009, also known as Total Security 2009 is a rogue anti-spyware, whose purpose is to rob your money and give you a piece of software, which is full of crap. Once it comes in contact with your system, it gives fake warning messages that your system is infected with many malware and spyware.

Don’t take notice of them and purchase Total Secure 2009.

Total Secure 2009 or total security 2009 fake rogue spyware program

Total Secure 2009 or total security 2009 fake rogue spyware program


If you have got any trace of Total Secure 2009 in your system, we recommend that you take immediate action for the removal of Total Secure 2009 before further damage.

Technical Details of TotalSecure 2009
Full name: Total Secure 2009, Total Secure 2009, Total Secure 2009
Date Appeared:
Characteristic: Rogue security program
URL: http://Totalsecure2009. com
Additional sites associated with this scam: Secure-order-box. com, Gettotalsec2008. com, Getdefender2009. com
Do I need to remove Total Secure 2009
You can yourself search your computer manually, but it is not recommended unless you are a tech-geek. To save time and effort, we recommend you to download a FREE Scanner.



How to Uninstall Total Secure 2009 scam manually:
The best way for the removal of Total Secure 2009 is to install a good quality Anti-spyware Program and scan your system for any TotalSecure 2009 infections.

Automatic removal of TotalSecure2009 is always good and complete as compared to any attempts to manually remove Total Secure 2009, which may sometime lead to erroneous results. If you are not completely aware of all the files and registry entries used by this rogue anti-spyware, then we do not recommend you to attempt for the manual removal of TotalSecure2009.

Instructions to get rid of Total Secure 2009
If you really want to remove the Total Secure 2009 infection on your system manually then proceed as follows.

Step 1: Kill the Total Secure 2009 Processes – Learn how to do that

TotalSecure2009.exe
Step 2: Remove Total Secure 2009 files, folders and all associated Total Secure 2009 DLL files: Learn how to do that

wsaozt.dll
dasaozt.dll
wsaszt.dll
xdidczt.dll
dasaszt.dll
xdaszt.dll
wsidczt.dll
dasidczt.dll
dasaomt.dll
wsaont.dll
dasaont.dll
xdaont.dll
wsasnt.dll
wsidcmt.dll
xdasnt.dll
wsidcnt.dll
dasidcnt.dll
xdaozt.dll
xdidcnt.dll
wsaomt.dll
wsidczr.dll
xdaomt.dll
wsasmt.dll
dasasmt.dll
xdasmt.dll
xdaozr.dll
dasidcmt.dll
xdidcmt.dll
wsaozr.dll
dasaozr.dll
wsidcmr.dll
wsaszr.dll
dasaszr.dll
xdaszr.dll
dasidczr.dll
xdidczr.dll
wsaonr.dll
dasaonr.dll
xdaonr.dll
wsasnr.dll
dasasnr.dll
xdasnr.dll
wsidcnr.dll
dasidcnr.dll
xdidcnr.dll
dasasnt.dll
wsaomr.dll
dasaomr.dll
xdaomr.dll
dasasmr.dll
xdasmr.dll
dasidcmr.dll
xdidcmr.dll
wsaozy.dll
dasaozy.dll
xdaozy.dll
wsaszy.dll
dasaszy.dll
wsidczy.dll
dasidczy.dll
xdidczy.dll
wsaony.dll
dasaony.dll
xdaony.dll
dasidcmy.dll
dasasny.dll
wsasmr.dll
xdasny.dll
wsidcny.dll
dasidcny.dll
xdidcny.dll
wsasmy.dll
wsaomy.dll
dasaomy.dll
xdaomy.dll
dasasmy.dll
xdasmy.dll
wsidcmy.dll
xdaszy.dll
xdidcmy.dll
wsasny.dll

Total Secure 2009.lnk
scan.exe
totalsecure.s1
totalsecure.s2
totalsecure.s3
totalsecure.s4
totalsecure.s5
totalsecure.s6
uninstall.exe
Step 3: Uninstall Total Secure 2009 registry entries: Learn how to do that

HKEY_USERS\S-1-5-21-1172441840-534431857-1906119351-500\Software\Microsoft\Windows\CurrentVersion\Run\”TotalSecure2009 = “C:\Program Files\TotalSecure2009\scan.exe”
HKEY_CURRENT_USER\Software\TotalSecure2009
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Total Secure 2009
=======================
Note: Manual removal guide can be confusing if you are a newbie. In that case, manual removal is not recommended. use an auto removal tool instead.
To automatically remove spywares,
use one of these great removal tools

Super Anti Spyware

Malware Bytes anti-malware (mbam.exe)

Spyware Doctor

=======================

System Security 2009 fake virus program removal guide

Monday, July 27th, 2009



Remove System Security 2009 fake rogue spyware
System Security, also known as System Security 2009, (Fake anti virus program / Rogue spyware) is another deadly counterfeit antispyware application that developed to invade our Internet life. (Do not confuse System Security, which is fake softeware, to AE Software Technologies’ System Security 2009 which indeed a legit software). Presumably, System Security is a new verion of Winweb Security, with different name but same destruction. Just like most fake antispywares, System Security simulates the Windows system security alert interface, then issues misleading and exaggerated results to distract and scare the internet users.

System Security 2009 usually installed itself onto your PC without your permission, through Vundo Trojan, Virus or fake software. System Security will display fake system alerts or fake security alerts to trick user to buy the paid version of System Security, in order to remove the potential and reported problems. Not only does it cause your machine to slow down dramatically, it would also put your privacy and data in risk.

And Once installed, Security 2009 will be set to start automatically when Windows starts. Once started, the program will scan your computer and list a variety of infections, which cannot be removed unless you first purchase the program. These infections, though, are actually legitimate programs that could cause problems with the proper operation of your computer if deleted. While running, Security 2009 will also display fake security alerts in your Windows taskbar. These security alerts will contain messages stating that Security 2009 detected malware or an attack on your system and that you should register the software to protect yourself. These fake alerts and the false positives found in the scan are just a tactic to scare you into purchasing the software.



Manual System Security Removal Instructions:

Stop System Security Processes:
SystemSecurity.exe
05643921.exe
install.exe

Find and Delete these System Security Files:
systemsecurity.exe
SystemSecurity.lnk
SystemSecurity on the Web.lnk
Uninstall SystemSecurity.lnk
%desktopdirectory%\system security.lnk
%desktopdirectory%\ws\config.udb
%desktopdirectory%\ws\init.udb
%desktopdirectory%\ws\languages\english.lng
%desktopdirectory%\ws\languages\german.lng
%desktopdirectory%\ws\languages\spanish.lng
%desktopdirectory%\ws\systemsecurity.exe
%programs%\system security\system security.lnk
%desktopdirectory%\ws\systemsecurity.exe
05643921.exe
install.exe
%desktopdirectory%\system security 2009.lnk
%programs%\system security\system security 2009 support.lnk
%programs%\system security\system security 2009.lnk

Remove System Security Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run systemsecurity
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 displayicon
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 shortcutpath
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 uninstallstring
=======================
Note: Manual removal guide can be confusing if you are a newbie. In that case, manual removal is not recommended. use an auto removal tool instead.
To automatically remove spywares,
use one of these great removal tools

Super Anti Spyware

Malware Bytes anti-malware (mbam.exe)

Spyware Doctor

=======================

Removing Malware Defender 2009 virus manually

Monday, July 27th, 2009



Malware defender 2009 is a rogue spyware application from the makers of System Guard 2009 and Spyware Guard 2009/2008. It uses the proven method to gather your credit card details by showing a fake windows security center message stating that your PC is infected with various parasites. Also, you are bombed with various popups and fake alerts that try to convince you to buy Malware Defender 2009. If you try scanning PC with this scamware, it will show fake positives: Most of “infected files” are legitimate and necessary system processes. You whould criple your computer if you follow this rogue advice.

You can get Malware defender 2009 by several ways. The first and most popular one is bundled downloads in file sharing networks and infected websites. Fake video codecs might be used to spread this malware as well. And it comes not alone. You will get an additional trojans and rootkits to help Malware defender destroy your PC and force you to give your Credit card details to its maker. We strongly suggest first scanning the PC with legitimate free spyware scanner to check versions of parasites that have infected the system.

Update:
Malware defender 2009 website, Malwaredefender2009.com is hosted in Ukraine, IP 67.43.237.75, on the same ip as SytemGuard2009.com and SystemGuard2009m.com – websites of notorious parasite SystemGuard. You should block these websites, and add the IP address to untrusted list as well. The website itself is registered under non-existing address, proving once more that Malware Defender2009 Can not be trusted.

Malware Defender 2009 is Extremaly dangerous

Malware Defender 2009 is a corrupt Anti-Spyware program
Malware Defender 2009 may spread via Trojans
Malware Defender 2009 may display fake security messages
Malware Defender 2009 may install additional spyware to your computer
Malware Defender 2009 may repair its files, spread or update by itself
Malware Defender 2009 violates your privacy and compromises your security



Manual Malware Defender 2009 removal:

Stop these Malware Defender 2009 processes:
malwaredef.exe
install.exe

Disable these Malware Defender 2009 DLL files::
hdddriver.dll
vifwnhzqoe.dll
wcenter.exe

Remove these Malware Defender 2009 Registry Entries:
HKEY_CLASSES_ROOT\CLSID\{3F0691F1-70E6-44A9-938A-1DC356674878}
HKEY_CLASSES_ROOT\CLSID\{8B2C743A-D44A-4A93-8233-ABEE8BF8ED62}
HKEY_LOCAL_MACHINE\SOFTWARE\Malware Defender 2009
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\Malware Defender 2009

HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run “updater”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Run “malwaredef”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
\CurrentVersion\ShellServiceObjectDelayLoad “DriversLoad”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\ShellServiceObjectDelayLoad “HardwareDrivers”

Remove these Malware Defender 2009 files:
c:\Program Files\Malware Defender 2009
c:\Program Files\Malware Defender 2009\conf.cfg
c:\Program Files\Malware Defender 2009\malwaredef.exe
c:\Program Files\Malware Defender 2009\mbase.vdb
c:\Program Files\Malware Defender 2009\quarantine.vdb
c:\Program Files\Malware Defender 2009\queue.vdb
c:\Program Files\Malware Defender 2009\uninstall.exe
c:\Program Files\Malware Defender 2009\vbase.vdb
c:\Program Files\Malware Defender 2009\quarantine
c:\WINDOWS\reged.exe
c:\WINDOWS\spoolsystem.exe
c:\WINDOWS\sys.com
c:\WINDOWS\syscert.exe
c:\WINDOWS\sysexplorer.exe
c:\WINDOWS\vmreg.dll
c:\WINDOWS\system32\wcenter.exe
c:\Documents and Settings\All Users\Application Data\Microsoft\Media Index\Drivers
c:\Documents and Settings\All Users\Application Data\Microsoft\win.exe
c:\Documents and Settings\All Users\Application Data\Microsoft\Media Index\svchos.exe
c:\Documents and Settings\All Users\Application Data\Microsoft\Media Index\t.id
c:\Documents and Settings\All Users\Application Data\Microsoft\Media Index\Drivers\c.cgm
c:\Documents and Settings\All Users\Application Data\Microsoft\Media Index\Drivers\hdddriver.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Media Index\Drivers\vifwnhzqoe.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\install.exe
%UserProfile%\Start Menu\Programs\Malware Defender 2009
C:\Windows\System32\wcenter.exe

=======================
Note: Manual removal guide can be confusing if you are a newbie. In that case, manual removal is not recommended. use an auto removal tool instead.
To automatically remove spywares,
use one of these great removal tools

Super Anti Spyware

Malware Bytes anti-malware (mbam.exe)

Spyware Doctor

=======================

Core Guard 2009 virus removal

Monday, July 27th, 2009



Remove Fake Core Guard 2009 popups
CoreGuard Antivirus 2009, or Core Guard Antivirus 2009, is a fake anti-spyware application that uses deceptive methods to swindle a computer user into purchasing a full version of the CoreGuard Antivirus 2009 program. CoreGuard Antivirus 2009 may be installed by a Trojan horse infection or from a web site that advertises the CoreGuard Antivirus 2009 application.

Surprisingly, CoreGuard Antivirus 2009 is programmed to detect and remove security applications already installed on your computer. CoreGuard Antivirus 2009 makes you think that it is doing you a favor by removing a security program because it could supposedly cause a conflict with CoreGuard Antivirus 2009. Some of the known applications that CoreGuard Antivirus 2009 attempts to remove are, Norton Internet Security, F-Secure and Avast. Other malicious activities could be performed by CoreGuard Antivirus 2009 without your knowledge.
CoreGuard Antivirus 2009 may display fake alert notifications on your screen including the following message:

“User’s activity loggers detected!
It’s strongly recommended to remove detected threats right now!
Most of the viruses and worms on your PC because of visiting pornosites or warez/torrent sites.”

You should never trust the message above, nor should you ever purchase the CoreGuard Antivirus 2009 application. It is strongly recommended that you remove CoreGuard Antivirus 2009 from your system immediately.



How to manually remove Core Guard 2009
Stop CoreGuard Antivirus 2009 system processes:
Coreguard 2009.exe
c:\Program Files\Coreguard Antivirus 2009\Coreguard 2009.exe
c:\Program Files\Coreguard Antivirus 2009\Uninstall.exe

Unregister CoreGuard Antivirus 2009 DLLs:
c:\Program Files\Coreguard Antivirus 2009\CoreExt.dll
c:\Program Files\Coreguard Antivirus 2009\firewall.dll

Remove CoreGuard Antivirus 2009 files:
Coreguard 2009.exe
Uninstall Coreguard Antivirus 2009.lnk
Coreguard 2009.lnk
Coreguard Antivirus 2009
%UserProfile%\Start Menu\Programs\Coreguard Antivirus 2009
%UserProfile%\Desktop\Coreguard 2009.lnk
%UserProfile%\Start Menu\Programs\Coreguard Antivirus 2009\Coreguard 2009.lnk
%UserProfile%\Start Menu\Programs\Coreguard Antivirus 2009\Uninstall Coreguard Antivirus 2009.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Coreguard 2009.lnk
c:\Program Files\Coreguard Antivirus 2009
c:\Program Files\Coreguard Antivirus 2009\Coreguard 2009.exe
c:\Program Files\Coreguard Antivirus 2009\Uninstall.exe
c:\Program Files\Coreguard Antivirus 2009\blacklist.cga
c:\Program Files\Coreguard Antivirus 2009\core.cga
c:\Program Files\Coreguard Antivirus 2009\CoreExt.dll
c:\Program Files\Coreguard Antivirus 2009\firewall.dll
c:\Program Files\Coreguard Antivirus 2009\Help
c:\Program Files\Coreguard Antivirus 2009\Help\reg.html
c:\Program Files\Coreguard Antivirus 2009\Help\support.png
c:\Program Files\Coreguard Antivirus 2009\Help\unreg.html
c:\Program Files\Coreguard Antivirus 2009\Help\images
c:\Program Files\Coreguard Antivirus 2009\Help\images\plus_circle.png
c:\Program Files\Coreguard Antivirus 2009\Help\images\warn.png
c:\Program Files\Coreguard Antivirus 2009\Help\images\delete.png
c:\Program Files\Coreguard Antivirus 2009\Help\images\tick.png
c:\Program Files\Coreguard Antivirus 2009\Help\images\info.png
c:\Program Files\Coreguard Antivirus 2009\Help\images\buttons
c:\Program Files\Coreguard Antivirus 2009\Help\images\buttons\online.gif
c:\Program Files\Coreguard Antivirus 2009\Help\images\buttons\offline.gif
c:\Program Files\Coreguard Antivirus 2009\Help\images\buttons\voice.gif

Remove CoreGuard Antivirus 2009 registry values:
HKEY_CURRENT_USER\Software\CoreGuard
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Coreguard Antivirus 2009?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Coreguard Antivirus 2009
=======================
Note: Manual removal guide can be confusing if you are a newbie. In that case, manual removal is not recommended. use an auto removal tool instead.
To automatically remove spywares,
use one of these great removal tools

Super Anti Spyware

Malware Bytes anti-malware (mbam.exe)

Spyware Doctor

=======================

Antivirus Doktor 2009 removal

Monday, July 27th, 2009



Antivirus Doktor 2009 is yet another fake security program. The only thing that makes AntivirusDoktor different from other rogue programs is its language. Antivirus Doktor2009 is dedicated to German users

Antivirus Doktor 2009 is designed to look like a regular anti-spyware tool. It also tricks users by loading fabricated security alerts and scan reports. AntivirusDoktor2009 shouldn’t be trusted. It is installed by trojans without even notifying people about such an action. AntivirusDoktor 2009 is also distributed on fraudulent and malicious websites such as antivirus-doktor.com.

Do not buy Antivirus Doktor 2009! It is presented as universal computer security tool while it’s actually a computer parasite and a fraud. Remove Antivirus Doktor 2009 as soon as you notice its presence on your PC.

Antivirus Doktor 2009 is a Rogue Antispyware software
Antivirus Doktor 2009 is installed without your permission.
Antivirus Doktor 2009 reputation online is terrible.
The official website of Antivirus Doktor 2009 is poorly built and lacks basic information.
The payments website of Antivirus Doktor 2009 is suspicious.
Performance of the program is poor.

How to manually remove Antivirus Doktor 2009
To remove Antivirus Doktor 2009 spyware you must block Antivirus Doktor 2009 sites, stop and remove processes, unregister DLL files, search and delete all other Antivirus Doktor 2009 files and registry utility. Follow the Antivirus Doktor 2009 detection and removal instructions below.

The most typical software removal method is to remove Antivirus Doktor 2009 by using “Add or Remove Programs” service. However there may be hidden Antivirus Doktor 2009 files, running processes and registries in your computer, so Antivirus Doktor 2009 may recreate all other files after reboot.


Antivirus Doktor 2009 manual removal instructions
Block Antivirus Doktor 2009 sites:
antivirus-doktor.com

Stop and remove Antivirus Doktor 2009 processes:
AntivirusDoktor2009.exe
Locate and delete Antivirus Doktor 2009 registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntivirusSystem 2009
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “AntivirusSystem 2009″

Detect and delete other Antivirus Doktor 2009 files:
%UserProfile%\Application Data\AntivirusSystem 2009\
%UserProfile%\Application Data\AntivirusSystem 2009\settings.ini
%UserProfile%\Application Data\AntivirusSystem 2009\uill.ini
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusSystem 2009.lnk

%UserProfile%\Desktop\AntivirusDoktor2009.exe
%UserProfile%\Desktop\AntivirusSystem 2009.lnk
%UserProfile%\Start Menu\AntivirusSystem 2009.lnk
%UserProfile%\Start Menu\Programs\AntivirusSystem 2009.lnk

We strongly recommend you to use spyware remover to track Antivirus Doktor 2009 and automaticaly remove Antivirus Doktor 2009 processes, registries and files as well as other spyware threats.
=======================
Note: Manual removal guide can be confusing if you are a newbie. In that case, manual removal is not recommended. use an auto removal tool instead.
To automatically remove spywares,
use one of these great removal tools

Super Anti Spyware

Malware Bytes anti-malware (mbam.exe)

Spyware Doctor

=======================

Xp Antivirus 2008 xp antispyware removal

Monday, July 27th, 2009



What is Xp antivirus 2008/ Vista antivirus 2008-2009?

XP Antivirus Protection AKA: XPAntivirus is fake antivirus software program. This program is typically known to infect a computer just after performing an install of specific video codec. This corrupted video codec is usually distributed with a Trojan, Malware and Virus. It is crucial to remove all the components of XP Antivirus and all malware and trojans such as zlob.trojan, trojan.vundo and trojan.downloader that may have been installed along with it. The following tutorial explains how to remove this XP Antivirus Protection.

Simply, It’s a virus designed to extort money from you by demanding you pay for the “full version”. to remove the viruses that it has “detected”.

Learn how to remove antivirus 360
How to remove XP Antivirus Protection:

Step 1 : Use Windows File Search Tool to Find Antivirus 2009 Path

1. Go to Start > Search > All Files or Folders.
2. In the “All or part of the the file name” section, type in “Antivirus 2009″ file name(s).
3. To get better results, select “Look in: Local Hard Drives” or “Look in: My Computer” and then click “Search” button.
4. When Windows finishes your search, hover over the “In Folder” of “Antivirus 2009″, highlight the file and copy/paste the path into the address bar. Save the file’s path on your clipboard because you’ll need the file path to delete Antivirus 2009 in the following manual removal steps.
5. “Antivirus 2009″ files can be found in the directory path(s): 6. %AllUsersProfile%\Application Data\SoftLand Ltd\Antivirus 2009 %ProgramFiles%\Antivirus 2009 XP %UserProfile%\Start Menu\Antivirus2009y %ProgramFiles%\Win Antivirus 2009 %AppData%\Antivirus2009y %ProgramFiles%\Antivirus2009y %ProgramFiles%\ANTIVIRUS 2009

Step 2 : Use Windows Task Manager to Remove Antivirus 2009 Processes

1. To open the Windows Task Manager, use the combination of CTRL+ALT+DEL or CTRL+SHIFT+ESC.
2. Click on the “Image Name” button to search for “Antivirus 2009″ process by name.
3. Select the “Antivirus 2009″ process and click on the “End Process” button to kill it.
4. Remove the “Antivirus 2009″ processes files:
5. lwpwer.exe xpa_2009.exe Antivirus-2009.exe av2009xp.exe Win Antivirus 2009.exe AntvrsInstall[1].exe AntvrsInstall.exe Antvrs.exe
Read more about How to kill Antivirus 2009 Processes


Now, the Step 3:

Navigate to Start-> Run, type cmd in the box and click Open
In the command window, type regsvr32 /u shlwapi.dll and press Enter
Next type regsvr32 /u wininet.dll and press Enter
Next Press Ctrl + Shift + ESC

Right click on antivirus.exe from the processes window and select the option to end process
Right click on antivirusUpdate.exe from the processes window and select the option to end process
Navigate to Start-> Search, then click on Files and Folders. Search for and delete the following files:
antivirus.exe
antivirusUpdate.exe
shlwapi.dll
wininet.dll
antivirus 2009.lnk
Uninstall antivirus 2009.lnk
antivirus 2009
antivirus.lnk
Uninstall antivirus.lnk
antivirus on the Web.lnk
antivirus.url
Navigate to Start-> Run, type regedit in the box and click Open
Delete antivirus 2009 in the following path: HKEY_USERS\Software\

And Also Look for the following
Step 4 : Detect and Delete Other Antivirus 2009 Files

1. To open the Windows Command Prompt, go to Start > Run > type cmd and then press the “OK” button.
2. Type in “dir /A name_of_the_folder” (for example, C:\Spyware-folder), which will display the folder’s content even the hidden files.
3. To change directory, type in “cd name_of_the_folder”.
4. Once you have the file you’re looking for type in “del name_of_the_file”.
5. To delete a file in folder, type in “del name_of_the_file”.
6. To delete the entire folder, type in “rmdir /S name_of_the_folder”.
7. Select the “Antivirus 2009″ process and click on the “End Process” button to kill it.
8. Remove the “Antivirus 2009″ processes files:
Restart your PC and everything should be back to normal
=======================
Note: Manual removal guide can be confusing if you are a newbie. In that case, manual removal is not recommended. use an auto removal tool instead.
To automatically remove spywares,
use one of these great removal tools

Super Anti Spyware

Malware Bytes anti-malware (mbam.exe)

Spyware Doctor

=======================

Fake Win Web Security 2008 removal guide

Monday, July 27th, 2009



Also Known As:
System Security (other)
Winweb Security (other)
FakeAlert-WinwebSecurity.gen (McAfee)
Mal/FakeAV-AK (Sophos)
Troj/FakeVir-LB (Sophos)
Adware/AntiSpywarePro2009 (Panda)
Adware/UltimateCleaner (Panda)
Adware/Xpantivirus2008 (Panda)
Win32/Adware.SystemSecurity (ESET)
Win32/Adware.WinWebSecurity (ESET)
AntiVirus2008 (Symantec)
SecurityRisk.Downldr (Symantec)
W32/AntiVirus2008.AYO (Norman)

Winweb Security Descriptions:

Winweb Security, also known as Winweb Security 2008 or simply Win Web Security, nevertheless it is just another new counterfeit anti-spyware software that created to ruin the Internet community. Just like most fake antispywares, Winweb Security 2008 issues misleading and exaggerated results. Winweb Security 2008 usually installed itself onto your PC without your permission, through Vundo Trojan, Virus or fake software. WinwebSecurity2008 will display fake system alerts or fake security alerts to trick user to buy the paid version of WinwebSecurity2008 , in order to remove the potential and reported problems. Not only does it cause your machine to slow down dramatically, it would also put your privacy and data in risk.

Manual Winweb Security 2008 Removal Instructions:
Stop Winweb Security 2008 Processes:

WinwebSecurity2008.exe
WinwebSecurity.exe


Find and Delete these Winweb Security 2008 Files:

c:\Program Files\WinwebSecurity2008\WinwebSecurity2008.exe
c:\Program Files\WinwebSecurity2008\WinwebSecurity2008.url
c:\Program Files\WinwebSecurity2008\uninst.exe
c:\Program Files\WinwebSecurity2008\Lang
c:\Program Files\WinwebSecurity2008\Lang\English.ini
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\WinwebSecurity2008 1.32.lnk
%UserProfile%\Desktop\WinwebSecurity2008.lnk
%UserProfile%\My Documents\WinwebSecurity2008
%UserProfile%\My Documents\WinwebSecurity2008\SDBHO.dll
%UserProfile%\My Documents\WinwebSecurity2008\sdcfg.dat
%UserProfile%\My Documents\WinwebSecurity2008\Logs
%UserProfile%\My Documents\WinwebSecurity2008\Quarantine
%UserProfile%\Start Menu\Programs\WinwebSecurity2008
%UserProfile%\Start Menu\WinwebSecurity2008 1.32.lnk
%UserProfile%\Start Menu\Programs\WinwebSecurity2008\WinwebSecurity2008 1.32.lnk
%UserProfile%\Start Menu\Programs\WinwebSecurity2008\WinwebSecurity2008 Website.lnk
c:\Program Files\WinwebSecurity2008
c:\Program Files\WinwebSecurity2008\blacklist.txt
c:\Program Files\WinwebSecurity2008\msvcp71.dll
c:\Program Files\WinwebSecurity2008\msvcr71.dll
c:\Program Files\WinwebSecurity2008\sdev.sgn

Remove Winweb Security 2008 Registry Values:

528A3CF7-AAF9-42FE-A5D0-2A8EDA9E299E
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “WinwebSecurity2008?
=======================
Note: Manual removal guide can be confusing if you are a newbie. In that case, manual removal is not recommended. use an auto removal tool instead.
To automatically remove spywares,
use one of these great removal tools

Super Anti Spyware

Malware Bytes anti-malware (mbam.exe)

Spyware Doctor

=======================

Spyware Protect 2009 removal guide

Monday, July 27th, 2009



Spyware Protector 2009 is another scam, fake anti-spyware application. Like many similar rogue programs, SpywareProtector 2009 is designed to steal money from users. It uses scare tactics and other similar methods to trick user and make him believe that his computer is seriously infected.
Spyware Protector 2009 comes to the computer with a help of trojans or other similar viruses. Also it can be downloaded and installed from scammers’ website, but this is less common case. Once SpywareProtector2009 enters the system, it starts computer scan automatically and produces many pop-up windows with fake information about system’s security problems, errors and other infections. In such a situation cyber-thieves recommend to use their counterfeit product called Spyware Protector 2009. It should also be noted that it is paid.
It is essential that you remove Spyware Protection 2009 and all of it’s files from your computer before you make the big mistake of spending your money on this ineffective program. Because Spyware Protection 2009 does not remove parasites or protect your computer in anyway, it should not be purchased or even installed for that matter. It is recommended that you use a good spyware detection tool to identify the Spyware Protection 2009 program on your system so it may be removed safely.

Related files: SpywareProtector2009.exe

Spyware Protector 2009 properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Auto removal of SpywareProtector 2009 using software: Download Super anti spyware(FREE) to remove SpywareProtector 2009

Spyware Protector 2009 manual removal:
Step 1 : Use Windows File Search Tool to Find Spyware Protection 2009 Path
Go to Start > Search > All Files or Folders.
In the “All or part of the the file name” section, type in “Spyware Protection 2009″ file name(s).
To get better results, select “Look in: Local Hard Drives” or “Look in: My Computer” and then click “Search” button.
When Windows finishes your search, hover over the “In Folder” of “Spyware Protection 2009″, highlight the file and copy/paste the path into the address bar. Save the file’s path on your clipboard because you’ll need the file path to delete Spyware Protection 2009 in the following manual removal steps.

Step 2 : Use Windows Task Manager to Remove Spyware Protection 2009 Processes
To open the Windows Task Manager, use the combination of CTRL+ALT+DEL or CTRL+SHIFT+ESC.
Click on the “Image Name” button to search for “Spyware Protection 2009″ process by name.
Select the “Spyware Protection 2009″ process and click on the “End Process” button to kill it.
Remove the “Spyware Protection 2009″ processes files:
seeukluba.exe
skaaanret.exe
aazalirt.exe
ronitfst.exe


Step 3 : Use Registry Editor to Remove Spyware Protection 2009 Registry Values
To open the Registry Editor, go to Start > Run > type regedit and then press the “OK” button.
Locate and delete the entry or entries whose data value (in the rightmost column) is the spyware file(s) detected earlier.
To delete “Spyware Protection 2009″ value, right-click on it and select the “Delete” option.
Locate and delete “Spyware Protection 2009″ registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “sysguardn”
HKEY_CURRENT_USER\Software\AvScan

Step 4 : Detect and Delete Other Spyware Protection 2009 Files
To open the Windows Command Prompt, go to Start > Run > type cmd and then press the “OK” button.
Type in “dir /A name_of_the_folder” (for example, C:\Spyware-folder), which will display the folder’s content even the hidden files.
To change directory, type in “cd name_of_the_folder”.
Once you have the file you’re looking for type in “del name_of_the_file”.
To delete a file in folder, type in “del name_of_the_file”.
To delete the entire folder, type in “rmdir /S name_of_the_folder”.
Select the “Spyware Protection 2009″ process and click on the “End Process” button to kill it.
Remove the “Spyware Protection 2009″ processes files:
Uninstall Spyware Protection 2009.lnk
Spyware Protection 2009.lnk
seeukluba.exe
skaaanret.exe
aazalirt.exe
ronitfst.exe
=======================
Note: Manual removal guide can be confusing if you are a newbie. In that case, manual removal is not recommended. use an auto removal tool instead.
To automatically remove spywares,
use one of these great removal tools

Super Anti Spyware

Malware Bytes anti-malware (mbam.exe)

Spyware Doctor

=======================

Remove Safe Guard 2009 virus

Monday, July 27th, 2009



Safeguard 2009 is a rogue antispyware program that looks like MS AntiSpyware 2009. Safeguard 2009 is distributed through the fake.alert trojan that displays fake security alerts, pop-ups found on fake anti-spyware online scanners. During installation, the software is set to start automatically when your computer starts and may drastically slow the performance of your computer.

Immediately after launch, System Guard 2009 starts scanning the computer and found a lot of trojans and spyware that cannot be removed unless you first purchase the software. The program also generates false security alerts, looks like Windows Security Center alerts, that recommends that you register SafeGuard 2009 in order to remove trojans and spyware found on your PC. If you are a non-techie computer user then this method of removing Safeguard 2009 and any associated malware from your computer is for you.

Symptoms in a HijackThis Log.
O4 – HKCU\..\Run: [Safeguard 2009] “C:\Documents and Settings\All Users\Application Data\SafeguardSoft Ltd\Safeguard 2009\sf2009.exe” /autorun

Use the following instructions to remove Safeguard 2009 (Uninstall instructions).
Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.
Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select “Perform Quick Scan”, then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.


When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.
Safeguard 2009 creates the following files.
%APPDATA%\SafeguardSoft Ltd\Safeguard 2009\sf2009.exe
%APPDATA%\SafeguardSoft Ltd\Safeguard 2009\BASE
%APPDATA%\SafeguardSoft Ltd\Safeguard 2009\DELETED
%APPDATA%\SafeguardSoft Ltd\Safeguard 2009\LOG
%APPDATA%\SafeguardSoft Ltd\Safeguard 2009\LOG\20090206129351795.log
%APPDATA%\SafeguardSoft Ltd\Safeguard 2009\SAVED
%UserProfile%\Start Menu\Programs\Safeguard 2009\Safeguard 2009.lnk
Softwares and tools suggessted for safeguard 2009 removal:
=======================
Note: Manual removal guide can be confusing if you are a newbie. In that case, manual removal is not recommended. use an auto removal tool instead.
To automatically remove spywares,
use one of these great removal tools

Super Anti Spyware

Malware Bytes anti-malware (mbam.exe)

Spyware Doctor

=======================

Fake antivirus 2009 Removal guide

Monday, July 27th, 2009



XP Antivirus Protection AKA: XPAntivirus 2009 or 2010 is fake antivirus software program. This program is typically known to infect a computer just after performing an install of specific video codec. This corrupted video codec is usually distributed with a Trojan, Malware and Virus. It is crucial to remove all the components of XP Antivirus and all malware and trojans such as zlob.trojan, trojan.vundo and trojan.downloader that may have been installed along with it. The following tutorial explains how to remove this XP Antivirus Protection.

Simply, It’s a virus designed to extort money from you by demanding you pay for the “full version”. to remove the viruses that it has “detected”.

How to remove XP Antivirus Protection:

Step 1 : Use Windows File Search Tool to Find Antivirus 2009 Path

1. Go to Start > Search > All Files or Folders.
2. In the “All or part of the the file name” section, type in “Antivirus 2009″ file name(s).
3. To get better results, select “Look in: Local Hard Drives” or “Look in: My Computer” and then click “Search” button.
4. When Windows finishes your search, hover over the “In Folder” of “Antivirus 2009″, highlight the file and copy/paste the path into the address bar. Save the file’s path on your clipboard because you’ll need the file path to delete Antivirus 2009 in the following manual removal steps.
5. “Antivirus 2009″ files can be found in the directory path(s): 6. %AllUsersProfile%\Application Data\SoftLand Ltd\Antivirus 2009 %ProgramFiles%\Antivirus 2009 XP %UserProfile%\Start Menu\Antivirus2009y %ProgramFiles%\Win Antivirus 2009 %AppData%\Antivirus2009y %ProgramFiles%\Antivirus2009y %ProgramFiles%\ANTIVIRUS 2009

Step 2 : Use Windows Task Manager to Remove Antivirus 2009 Processes

1. To open the Windows Task Manager, use the combination of CTRL+ALT+DEL or CTRL+SHIFT+ESC.
2. Click on the “Image Name” button to search for “Antivirus 2009″ process by name.
3. Select the “Antivirus 2009″ process and click on the “End Process” button to kill it.
4. Remove the “Antivirus 2009″ processes files:
5. lwpwer.exe xpa_2009.exe Antivirus-2009.exe av2009xp.exe Win Antivirus 2009.exe AntvrsInstall[1].exe AntvrsInstall.exe Antvrs.exe
Read more about How to kill Antivirus 2009 Processes


Now, the Step 3:

Navigate to Start-> Run, type cmd in the box and click Open
In the command window, type regsvr32 /u shlwapi.dll and press Enter
Next type regsvr32 /u wininet.dll and press Enter
Next Press Ctrl + Shift + ESC

Right click on antivirus.exe from the processes window and select the option to end process
Right click on antivirusUpdate.exe from the processes window and select the option to end process
Navigate to Start-> Search, then click on Files and Folders. Search for and delete the following files:
antivirus.exe
antivirusUpdate.exe
shlwapi.dll
wininet.dll
antivirus 2009.lnk
Uninstall antivirus 2009.lnk
antivirus 2009
antivirus.lnk
Uninstall antivirus.lnk
antivirus on the Web.lnk
antivirus.url
Navigate to Start-> Run, type regedit in the box and click Open
Delete antivirus 2009 in the following path: HKEY_USERS\Software\

And Also Look for the following
Step 4 : Detect and Delete Other Antivirus 2009 Files

1. To open the Windows Command Prompt, go to Start > Run > type cmd and then press the “OK” button.
2. Type in “dir /A name_of_the_folder” (for example, C:\Spyware-folder), which will display the folder’s content even the hidden files.
3. To change directory, type in “cd name_of_the_folder”.
4. Once you have the file you’re looking for type in “del name_of_the_file”.
5. To delete a file in folder, type in “del name_of_the_file”.
6. To delete the entire folder, type in “rmdir /S name_of_the_folder”.
7. Select the “Antivirus 2009″ process and click on the “End Process” button to kill it.
8. Remove the “Antivirus 2009″ processes files:
Restart your PC and everything should be back to normal
=======================
Note: Manual removal guide can be confusing if you are a newbie. In that case, manual removal is not recommended. use an auto removal tool instead.
To automatically remove spywares,
use one of these great removal tools

Super Anti Spyware

Malware Bytes anti-malware (mbam.exe)

Spyware Doctor

=======================