Nov 29, 2008

Remove Secure Expert Cleaner - Secure Expert Cleaner Removal Instructions

Secure Expert Cleaner (SecureExpertCleaner) is a latest rogue antispyware program. Secure Expert Cleaner uses Trojan horse to get into your computer undetected and install itself without any permission. Secure Expert Cleaner pretend to be software that will remove all threats from your computer, protect your data and privacy. But in fact Secure Expert Cleaner is complete scam , main propose of which is to scare computer users and trick them into purchasing licensed version for about 50$. It displays fake scan results, security alerts, annoying pop-ups and advise computer users to register application. Also when Secure Expert Cleaner is installed it can secretly install more malware into your computer.
We advise you to remove Secure Expert Cleaner manually or using our automatical removal tool.

Type:
Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical

Screenshot:



How to remove Secure Expert Cleaner manually:
It's possible to remove Secure Expert Cleaner manually , but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:


* CleanerInstaller[1].exe
* SecureExpertCleaner_Installer_Dual_En.exe
* %program_files%\secureexpertcleaner\sec.exe
* %program_files%\secureexpertcleaner\reminder.exe
* %program_files%\secureexpertcleaner\unins000.exe
* %program_files%\secureexpertcleaner\reminder.exe


Remove registry entries:

* HKEY_LOCAL_MACHINE\software\sec
* HKEY_CURRENT_USER\software\sec
* HKEY_LOCAL_MACHINE\software\sec frun
* HKEY_CURRENT_USER\software\sec producttid
* HKEY_LOCAL_MACHINE\software\sec producttid
* HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\3p_usec_is1 urlupdateinfo
* HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\3p_usec_is1 norepair
* HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\3p_usec_is1 nomodify
* HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\3p_usec_is1 urlinfoabout
* HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\3p_usec_is1 installlocation
* HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\3p_usec_is1 installdate
* HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\3p_usec_is1 uninstallstring
* HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\3p_usec_is1 helplink


Please be careful because manual removal of Secure Expert Cleaner may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Nov 28, 2008

Remove Extra Antivir - Extra Antivir Removal Instructions

Extra Antivir (ExtraAntivir) is one of latest counterfeit antispyware program from same family as well known Rapid Antivirus. Extra Antivir has two versions - 2.0 and 2.8. Extra Antivir may be installed by Trojan ( usually Vundo). The term Trojan refers to the fact that Extra Antivir is installed without users approval or knowlage. Once Extra Antivir is in your computer it will configure itself to run automatically each time you turn on your computer. Once started, the program will perform security scan and then list variety of spyware and malware. Important to mention that Extra Antivir mark legitime files (cmd.exe, regmon.exe, mbam.exe) as dangerous threats. Also Extra Antivir will generate a lot of pup-ups,security alerts. All these are made to scare computer users, and push them into buying licensed version.
Extra Antivir is a scam and shouldn’t be trusted, downloaded and installed.

Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: High


Screenshot:



How to remove Extra Antivir manually:
It's possible to remove Extra Antivir manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

* %UserProfile%\Application Data\Extra Antivir
* %UserProfile%\Application Data\Extra Antivir\Extra Antivir.ini
* %UserProfile%\Application Data\install_511_MHwzNnwxMDAwMDAwMDAwfHx8fHx8fHw_\base.dat
* %UserProfile%\Application Data\install_511_MHwzNnwxMDAwMDAwMDAwfHx8fHx8fHw_\base2.dat
* %UserProfile%\Application Data\install_511_MHwzNnwxMDAwMDAwMDAwfHx8fHx8fHw_\Desc.dat
* %UserProfile%\Application Data\install_511_MHwzNnwxMDAwMDAwMDAwfHx8fHx8fHw_\spline.dat


Remove registry entries:

HKEY_CURRENT_USER\Software\Extra Antivir


Please be careful because manual removal of Extra Antivir may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Remove Winweb Security 2008 - Winweb Security 2008 Removal Instructions

Winweb Security 2008 pretend to be all-in-one security solution that will easily remove all threats from your computer, protect your data and privacy. But in fact Winweb Security 2008 is useless piece of software that steal your money. It loads plenty of pop-ups, system alerts, slows computer’s performance. Winweb Security 2008 could be installed from the www.winwebsecurity.com website, or by Trojan horses (Vundo,Zlob). If you’r your computer is infected with Winweb Security 2008 you may notice that it loads plenty of pop-ups, states falsified spyware scan results. All this made to trick computer users into purchasing full version of Winweb Security 2008. Also Winweb Security 2008 can dramatically slow your computer performance, redirect your web browser to winwebsecurity.com. The funniest thing is that payments page on that web site isn’t working.

Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical

Screenshot:



How to remove Winweb Security 2008 manually:
It's possible to remove Winweb Security 2008 manually , but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

* C:\Documents and Settings\All Users\Application Data\WinwebSecurity\WinwebSecurity.exe

Remove registry entries:

* HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\Browser Helper Objects\{D5DF7C9D-6069-4552-8B0C-D02A912FC889}
* HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WinwebSecurity


Please be careful because manual removal of Winweb Security 2008 may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Nov 26, 2008

Remove AntiSpyware Guard - AntiSpyware Guard Removal Instructions

AntiSpyware Guard is yet another representative of rogue anti-spyware programs, clone of AntiSpyGuard. It is advertised with a help of Trojan’s (usually Vundo or Zlob), other malware. Once AntiSpyware Guard is in your computer it will load falsified and exaggerated spyware scan results, stating that your computer is seriously infected by different types of spyware and malware. Also it’ll generate fake security alerts. All this tricks is made with one purpose – to push computer users into buying licensed version of AntiSpyware Guard for $51.45. Important to notice that AntiSpyware Guard can easily hijack your web browser and redirect it to websites that sell AntiSpyware Guard software.

Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: High


Screenshot:


How to remove AntiSpyware Guard manually:
It's possible to remove AntiSpyware Guard manually , but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

* %ProgramFiles%\AntiSpywareGuard\BL.dat
* %ProgramFiles%\AntiSpywareGuard\WL.dat
* %ProgramFiles%\AntiSpywareGuard\asg.exe
* %ProgramFiles%\AntiSpywareGuard\asg.ini


Remove registry entries:

* HKEY_CURRENT_USER\Software\AntiSpywareGuard
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiSpywareGuard
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”AntiSpywareGuard”=”\Program Files\AntiSpywareGuard\asg.exe”


Please be careful because manual removal of AntiSpyware Guard may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Nov 25, 2008

Remove SpywareRemover 2009 - SpywareRemover 2009 Removal Instructions

SpywareRemover 2009 is another representative of so widely spread nowadays fake anti-spyware software. SpywareRemover 2009 is advertised through browser exploits and Trojan horses, deceptive advertising found on misleading web sites, viruses, infected software. Main vendor of SpywareRemover 2009 is spywareremover2009pro.com. It is important to notice that this website don’t provide any information about SpywareRemover 2009 developers.
As we already discovered that SpywareRemover 2009 uses Trojan horses to get into your computer, we need to add that this penetration is made without any users permission.
Once SpywareRemover 2009 get in touch with your system it will generate a lot of annoying popups to scare you, and trick into buying licensed version. Also SpywareRemover 2009 can dramatically slow your computer and put your data and privacy on risk. So don’t lose time, remove SpywareRemover 2009 as soon as possible.

Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: High

Screenshot:



How to remove SpywareRemover 2009 manually:
It's possible to remove SpywareRemover 2009 manually , but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

* InstUp.exe
* mfc80.dll
* msvcm80.dll
* msvcr80.dll
* msvcp80.dll
* UserAgent.dll
* Updater.dll


The processes that need to be killed :

* InstUp.exe
* PaymentPage.exe
* unins000.exe
* SR.exe


Please be careful because manual removal of SpywareRemover 2009 may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Nov 24, 2008

Remove Antivirus Trigger - Antivirus Trigger Removal Instructions

Antivirus Trigger is one of latest threats in the web. Antivirus Trigger is a clone of famous scamware Virus Trigger. Nothing new, just a name. Antivirus Trigger uses Zlob or Vundo Trojan while getting on your system, so it means that penetration will be undetected. Usually you have opportunity to “get” that Trojan while installing video codec needed to watch certain online videos. Once Antivirus Trigger is in your computer it’ll generate fake security alerts, and if you click on them you will be brought to website that promote Antivirus Trigger scam. If you install Antivirus Trigger it’ll automatically run spyware scan and it’ll list a lot of threats that cannot be removed until you purchase “licensed” version of Antivirus Trigger. Also AntivirusTrigger identify legitimate programs as malware. In addition Antivirus Trigger can seriously slow your computer.

Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical

Screenshot:


How to remove Antivirus Trigger manually:
It's possible to remove Antivirus Trigger manually , but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

* AntivirusTriggerBinWarning.dll
* AntivirusTriggerBinWarning.dll
* AntivirusTrigger.exe
* AntivirusTriggerBin.exe

Remove registry entries:

* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “AntivirusTrigger”
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus Trigger


Please be careful because manual removal of Antivirus Trigger may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Remove XP Protection Center - XP Protection Center Removal Instructions

XP Protection Center is more than typical rogue anti-spyware software that are widely spread on the web nowadays. Instead of peaceful and friendly name and all typical abilities it also capable of deleting some system files in C disk that can seriously damage your system. XP Protection Center uses misleading web sites and Trojans that generate fake security alerts on your computer to promote itself. This alerts usually state that your computer is seriously infected and you must download and install XP Protection Center in order to remove all threats and protect your computer. Once program is installed it will perform scan, and will find variety of threats. It is important to mention that XP Protection Center find real threats, but installed by this program. And if you want to remove all “detected” parasites, you must buy licensed version of XP Protection Center. Also XP Protection Center can hijack your web browser and display warning stating that your computer is infected while browsing the web.

Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical

Screenshot:



How to remove XP Protection Center manually:

It's possible to remove XP Protection Center manually , but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

* Uninstall XPProtectionCenter.lnk

* XPProtectionCenter.lnk
* XPProtectionCenter.exe
* c:\Program Files\XPProtectionCenter\Uninstall.exe
* c:\Program Files\XPProtectionCenter\AVEngn.dll
* c:\Program Files\XPProtectionCenter\htmlayout.dll
* c:\Program Files\XPProtectionCenter\pthreadVC2.dll


Remove registry entries:

* HKEY_LOCAL_MACHINE\SOFTWARE\XPProtectionCenter
* HKEY_CURRENT_USER\Control Panel\don’t load “scui.cpl”
* HKEY_CURRENT_USER\Control Panel\don’t load “wscui.cpl”
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “XP Protection Center”


Please be careful because manual removal of XP Protection Center may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Nov 21, 2008

Remove Rapid Antivirus - Rapid Antivirus Removal Instructions

Rapid Antivirus is one of latest rogue anti-spyware program. Rapid Antivirus is a clone of Win Antivirus 2008 (Power Antivirus 2009, Antivirus 2009, Vista Antivirus 2009). Basically Rapid Antivirus uses Zlob or Vundo trojans to install itself into your computer without any notification. Usually this Trojans pretend to be video codec needed to watch online video.
Once Rapid Antivirus is installed in your computer it will run automatical spyware scan. A lot of threats will be result of that scan, and you know, the only way to remove them all is to purchase licensed version of Rapid Antivirus. Also we must mention that Rapid Antivirus could steal your data, slow computer perfomance, redirect your web browser to web sites that push other malware.

Type: Rogue Anti-Spyware
Malware Author: SpySheriff Group
Threat Level: Critical

Screenshot:



How to remove Smart Antivirus 2009 manually:

It's possible to remove Rapid Antivirus manually , but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

* %UserProfile%\Application Data\Rapid Antivirus
* %UserProfile%\Application Data\install_511_MHw0MXwwfHx8fHx8fHw_
* %UserProfile%\Application Data\install_511_MHw0MXwwfHx8fHx8fHw_\base.dat
* %UserProfile%\Application Data\install_511_MHw0MXwwfHx8fHx8fHw_\base2.dat
* %UserProfile%\Application Data\install_511_MHw0MXwwfHx8fHx8fHw_\Desc.dat
* %UserProfile%\Application Data\install_511_MHw0MXwwfHx8fHx8fHw_\spline.dat
* %UserProfile%\Application Data\Rapid Antivirus\Rapid Antivirus.ini

Remove registry entries:

* HKEY_CURRENT_USER\Software\Rapid Antivirus
* HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run ieupdate


Please be careful because manual removal of Rapid Antivirus may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Nov 20, 2008

Remove Smart Antivirus 2009 - Smart Antivirus 2009 Removal Instructions

Smart Antivirus 2009 is a new rogue anti-spyware program successor of well known MS Antivirus. Smart Antivirus 2009 uses two methods to trick computer users into purchasing full version of this useless software. First is promoting with a help of fake security alerts and pop-up's stating that your computer is seriously infected. And after clicking on that pop-ups you will be automatically redirected to Smart Antivirus 2009 download page as the only cure. Also Smart Antivirus 2009 uses Trojan horse's to scare computer users, and to convince them to download and purchase Smart Antivirus 2009. These Trojan horses usually shows fake Windows security alerts stating that your computer is seriously infected.
After installation, Smart Antivirus 2009 will automatically run system scan that will state that your computer is seriously infected. Smart Antivirus 2009 also will change your desktop background to fake security alert, and you wouldn't be able to access into your desktop properties because Smart Antivirus 2009 will block this function.
As you see Smart Antivirus 2009 is very dangerous malware, so we strongly recommend you to remove it as soon as possible.

Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical


Screenshot:


How to remove Smart Antivirus 2009 manually:

It's possible to remove Smart Antivirus 2009 manually , but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

* \UserProfile\Desktop\Smart Antivirus-2009.lnk
* \UserProfile\Local Settings\Temp\win14_32.dll
* \UserProfile\Start Menu\Programs\Smart Antivirus 2009\Smart Antivirus-2009.lnk
* \UserProfile\Application Data\Microsoft\Internet Explorer\Quick Launch\Smart Antivirus-2009.lnk
* \Program Files\Smart Antivirus 2009\Smart Antivirus-2009.exe
* \Program Files\Smart Antivirus 2009\vscan.tsi
* \Program Files\Smart Antivirus 2009\zlib.dll


Remove registry entries:

* HKEY_CURRENT_USER\Software\Smart Antivirus 2009
* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Smart Antivirus-2009.exe”


Please be careful because manual removal of Smart Antivirus 2009 may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Nov 16, 2008

Remove Virus Trigger - Virus Trigger Removal Tool

Virus Trigger is another representative of dangerous rogue anti-spyware family. The main feature of this threat is that it uses Trojan horse to install itself on your computer undetected and without any permission . Once Virus Triger inside your computer, it will generate numerous pop-up's and fake system scans that states various infection detected on your computer. And the only solution is to purchase "licensed" version of Virus Trigger for about 50 $.
As you see, Virus Trigger uses same typical tactics as other fake anti-spyware programs.
We recommend you to remove Virus Trigger as soon as possible manually or using our automatical removal tool.

Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical




How to remove Virus Trigger manually:

It's possible to remove Virus Trigger manually , but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

* uninst.exe
* VirusTriggerBin.exe
* VirusTriggerBinWarning.dll
* VirusTrigger 2.1.lnk
* nuqjici.dll


Remove registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “VirusTrigger”

Please be careful because manual removal of Virus Trigger may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Nov 12, 2008

Remove Antivirus 2009 - Antivirus 2009 Removal Instructions

Antivirus 2009 is a new rogue anti-spyware program, direct clone of famous Antivirus 2008 fake software. Antivirus 2009 uses Zlob or Vundo Trojans to install itself on your computer. Very often this Trojans came with fake videocodecs that are needed to watch online video on adult and other doubtful web-sites. Antivirus 2009 generates a lot of fake system pop-up messages in order to trick computer users into purchasing “full” commercial version of this program. But remember that after purchasing Antivirus 2009 you’ll get nothing but a piece of useless software that can also download and install more and more malware. Another feature of Antivirus 2009 is that it can behave like hijacker, and redirect your internet browser to malicious websites that sell malware.

Type: Rogue Anti-Spyware
Malware Author: versoftware
Threat Level: Critical

Screenshot:




How to remove AntivirusPro 2009 manually:

It's possible to remove Antivirus 2009 manually , but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

* av2009.exe
* Antivirus2009.exe
* shlwapi.dll
* wininet.dll
* Antivirus 2009.lnk
* Uninstall Antivirus 2009.lnk


Remove registry entries:

* HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
* HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
* HKEY_CURRENT_USER\Software\Antivirus


Please be careful because manual removal of Antivirus 2009 may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Nov 10, 2008

Remove AntivirusPro 2009 - Antivirus Pro 2009 Removal Tool

AntivirusPro 2009 is a new rogue anti-spyware software. Like it’s predecessors (AntiSpywareXP 2009,XP Antispyware 2009) it spreads with a help of pop-ups which lead to fake online spyware scanners. Once scan is finished, you will be informed that your computer is seriously infected by different types of threats. And the only way to remove threats is to download and install AntivirusPro 2009.
Once AntivirusPro 2009 is installed it’ll configure itself to run automatical scan everytime you turn your computer on. AntivirusPro 2009 have dangerous ability to show that legitimate programs are infected, and removal of that “infection” can cause system problems, even Windows crush.
So we recommend you to remove AntivirusPro 2009 as soon as possible.

Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical

Screenshot:



How to remove AntivirusPro 2009 manually:

It's possible to remove AntivirusPro 2009 manually , but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

* AVP2009.exe
* AntivirusPro2009.exe
* AntivirusPro2009.lnk
* UninstallAntivirusPro2009.lnk
* \Program Files\AntivirusPro2009
* \Program Files\AVP2009\avp2009.cpl
* \Program Files\AVP2009\avp2009.exe
* \Program Files\AVP2009\avp2009.dat
* \Program Files\AVP2009\AVP20091.dat
* \WINDOWS\system32\AVP2009.cpl
* \Documents and Settings\Administrator\Desktop\AntivirusPro2009.lnk


Remove registry entries:

* HKEY_CURRENT_USER\Software\AntiVirus
* HKEY_CURRENT_USER\Software\AVP2009
* HKEY_CLASSES_ROOT\.key
* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Antivirus”
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Antivirus”


Please be careful because manual removal of AntivirusPro 2009 may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Nov 6, 2008

Trojan-Keylogger.WIN32.Fung Removal Tool & Removal Instructions

Trojan-Keylogger.WIN32.Fung is not real keylogger, it is designed to scare computer users all over the world and convince them that they must download and install Personal Defender 2009. The main feature of Trojan-Keylogger.WIN32.Fung is that it’s security messages is very similar to Windows Security Center . And inexperienced computer users could easily fall in this trap, and purchase useless Personal Defender 2009.

Type: Rogue Anti-Spyware, Trojan horse
Country: Russian Federation
Threat Level: Critical

Screenshot:



How to remove Trojan-Keylogger.WIN32.Fung manually:

It's possible to remove Trojan-Keylogger.WIN32.Fung manually , but you have to be very experienced in dealing with registry entries, program files and .dll files

The files to be deleted:

* %UserProfile\Application Data\Google\sccmsk.dll
* %UserProfile\Application Data\Google\mupd1_2_1165664.exe
* %UserProfile\Application Data\Google\mupd1_2_1711951.exe


Remove registry entries:

* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “asus32″
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PDefender
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Personal Defender 2009″


Please be careful because manual removal of Trojan-Keylogger.WIN32.Fung may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Nov 3, 2008

Remove Antispyware 2008 XP - Antispyware 2008 XP Removal tool

AntiSpyware XP 2009 is extremely dangerous rogue anti-spyware program which spreads over internet with the speed of light. AntiSpyware XP 2009 shows fake security alerts to scare pc users and convince them that the only way to delete harmful infections is to purchase full version of AntiSpyware XP 2009. But after buying software for about 50 $ you’ll get nothing. So, we recommend you to get rid of AntiSpyware XP 2009 as soon as possible.

Type: Rogue Anti-Spyware, Trojan horse
Country: Russian Federation
Threat Level: Critical

Screenshot:




How to remove AntiSpyware XP 2009 manually:

It's possible to remove AntiSpyware XP 2009 manually , but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

* \AntiSpywareXP2009\AntiSpywareXP2009.cfg
* \AntiSpywareXP2009\AntiSpywareXP2009.exe
* \AntiSpywareXP2009\AVEngn.dll
* \AntiSpywareXP2009\htmlayout.dll
* \AntiSpywareXP2009\pthreadVC2.dll
* \WINDOWS\orezytoni.lib
* \WINDOWS\orybug.sys
* \WINDOWS\uxuwel.bat
* \system32\_scui.cpl
* \system32\eqakok.bat
* \system32\icumodypah._dl
* \system32\ygawufyx._sy


Remove registry entries:

* HKEY_LOCAL_MACHINE\SOFTWARE\AntiSpywareXP2009
* HKEY_CURRENT_USER\Control Panel\don’t load “scui.cpl”
* HKEY_CURRENT_USER\Control Panel\don’t load “wscui.cpl”
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “AntiSpywareXP 2009″
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiSpywareXP2009


Please be careful because manual removal of AntiSpyware XP 2009 may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.
/