Apr 28, 2009

Remove ErrorEasy - Error Easy Removal Instructions

ErrorEasy is new rogue application, successor of well known ErrorFix, RegTool, RegfixPro. ErrorEasy is a kind of software that detects registry problems instead of infected files. ErrorEasy is promoted through the use of Trojan horses that will display fake alerts that will inform you about registry problems. Once installed ErrorEasy will configure itself to run automatically every boot up. Also ErrorEasy will perform full system scan and list you variety of registry problems that cannot be fixed until you first purchase licensed version. But you must remember that all those errors are falsified. Remove ErrorEasy rogue as soon as possible manually or using automatic removal tool.

Type: Rogue Application
Malware Author: Unknown

Threat Level: Critical
Screenshot:


How to remove ErrorEasy manually:
It's possible to remove ErrorEasy manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

c:\Program Files\ErrorEasy Software
c:\Program Files\ErrorEasy Software\ErrorEasy
c:\Program Files\ErrorEasy Software\ErrorEasy\always_skip.xml
c:\Program Files\ErrorEasy Software\ErrorEasy\data.bin
c:\Program Files\ErrorEasy Software\ErrorEasy\License.txt

Remove registry entries:

HKEY_CURRENT_USER\Software\ErrorEasy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ErrorEasy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ErrorEasy"


Please be careful because manual removal of ErrorEasy may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Apr 25, 2009

Remove Advanced Spyware Detect - Advanced Spyware Detect Removal Instructions

Advanced Spyware Detect is application that pretends to be legitimate antispyware tool. But in reality it is another rogue antispyware application that displays nonexistent infections on your computer. Advanced Spyware Detect is promoted through the use of Trojan horses and fake online antimalware scanners. Once Advanced Spyware Detect gets in touch with your system it will configure itself to run automatically every boot up. Also it will perform full system scan and list you variety of infections that cannot be removed until you first purchase licensed version. But you must remember that all detected “infections” in fact are legitimate files. Don’t pay for Advanced Spyware Detect, remove it as soon as possible manually or using automatic removal tool.

Type: Rogue Anti-Spyware
Malware Author: Unknown

Threat Level: Critical
Screenshot:


How to remove Advanced Spyware Detect manually:
It's possible to remove Advanced Spyware Detect manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

c:\Program Files\Advansed Spyware Detector
c:\Program Files\Advansed Spyware Detector\alert.wav
c:\Program Files\Advansed Spyware Detector\asd.chm
c:\Program Files\Advansed Spyware Detector\asd.exe
c:\Program Files\Advansed Spyware Detector\asd.exe.manifest
c:\Program Files\Advansed Spyware Detector\asd.log
c:\Program Files\Advansed Spyware Detector\av.db
c:\Program Files\Advansed Spyware Detector\sqlite3.dll
c:\Program Files\Advansed Spyware Detector\wallpapper.jpg
c:\Documents and Settings\All Users\Start Menu\Programs\Advansed Spyware Detector
c:\Documents and Settings\All Users\Start Menu\Programs\Advansed Spyware Detector\Advansed Spyware Detector Help.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Advansed Spyware Detector\Advansed Spyware Detector.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Advansed Spyware Detector\Uninstall.lnk
%UserProfile%\Desktop\Manual scanner.lnk


Remove registry entries:

HKEY_CURRENT_USER\Software\AdvSpywareDetect
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Start Page" => "http://samorukova.com?id=1228468452073"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Userinit" => "C:\WINDOWS\system32\userinit.exe,C:\Program Files\Advansed Spyware Detector\asd.exe -m"


Please be careful because manual removal of Advanced Spyware Detect may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Apr 20, 2009

Remove WiniBlueSoft - WiniBlueSoft Removal Instructions

WiniBlueSoft is new rogue antispyware product that uses old but effective scare tactics. Under scare tactics we mean – fake security alerts, annoying pop-ups, fake screens of death and fake Windows Security Center alerts. Parasite creates numerous fake infected files with random filenames in order to convince computer users that their PC’s are seriously infected. But you must remember that all those files are not executable and can’t cause any damage to your computer. WiniBlueSoft is promoted through the use of internet advertisements that pretend to be online anti-malware scanners. But in reality this scanners are fake that always list infections, even on absolutely clean systems. Once installed WiniBlueSoft will configure itself to run automatically every time you turn on your computer. Also it will perform full system scan and list you variety of infections that was generated by WiniBlueSoft and cannot be removed until you first purchase licensed version. Typical spyware, remove it as soon as possible manually or using automatic removal tool.

Type: Rogue Anti-Spyware
Malware Author: Unknown

Threat Level: Critical
Screenshot:


How to remove WiniBlueSoft manually:
It's possible to remove WiniBlueSoft manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

c:\Program Files\WiniBlueSoft Software
c:\Program Files\WiniBlueSoft Software\WiniBlueSoft
c:\Program Files\WiniBlueSoft Software\WiniBlueSoft\always_skip.xml
c:\Program Files\WiniBlueSoft Software\WiniBlueSoft\data.bin
c:\Program Files\WiniBlueSoft Software\WiniBlueSoft\License.txt
c:\Program Files\WiniBlueSoft Software\WiniBlueSoft\main_config.xml
c:\Program Files\WiniBlueSoft Software\WiniBlueSoft\uninstall.exe
c:\Program Files\WiniBlueSoft Software\WiniBlueSoft\WiniBlueSoft.exe
c:\Documents and Settings\All Users\Desktop\WiniBlueSoft.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\WiniBlueSoft
c:\Documents and Settings\All Users\Start Menu\Programs\WiniBlueSoft\Homepage.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\WiniBlueSoft\Uninstall.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\WiniBlueSoft\WiniBlueSoft.lnk
c:\WINDOWS\102959roz2b45.ocx
c:\WINDOWS\10325virusz955.ocx
c:\WINDOWS\10355h9eat227z2.cpl
c:\WINDOWS\111znot-a-v5rus998.dll
c:\WINDOWS\115z1vi9us3e85.ocx
c:\WINDOWS\11797tzoj595.dll
c:\WINDOWS\1197addwaze16915.ocx
c:\WINDOWS\127b95ief305z.ocx
c:\WINDOWS\12946sz5mbot79c.dll
c:\WINDOWS\129cvir1z58.dll
c:\WINDOWS\12bbszy5ar91941.dll
c:\WINDOWS\13323w95mz1b.ocx
c:\WINDOWS\135zvir1929.cpl
c:\WINDOWS\1393z5or9df.ocx
c:\WINDOWS\13951spzmb9t5a2.exe
c:\WINDOWS\14041hackt5zl99.exe
c:\WINDOWS\system32\19199hackt5zl7a1.bin
c:\WINDOWS\system32\19524spyze9.exe
c:\WINDOWS\system32\19544spy6fbz.ocx
c:\WINDOWS\system32\19945hzcktool65b.dll
c:\WINDOWS\system32\19991not-a-v5rzs1c9.exe
c:\WINDOWS\system32\19z43hacktoo965f.exe
c:\WINDOWS\system32\1a59dow9lozder1735.ocx
c:\WINDOWS\system32\1b20z9a5se2186.bin

Remove registry entries:

HKEY_CURRENT_USER\Software\WiniBlueSoft
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WiniBlueSoft
HKEY_LOCAL_MACHINE\SOFTWARE\WiniBlueSoft
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "setup2.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WiniBlueSoft"


Please be careful because manual removal of WiniBlueSoft may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Apr 18, 2009

Remove Personal Antivirus - Personal Antivirus Removal Instructions

Personal Antivirus is a new rogue antispyware application, clone of well known Internet Antivirus Pro that has done a lot of harm to computers worldwide. Parasite uses Trojan horses to get onto your system secretly and without any notification or users approval. This Trojans will also configure Personal Antivirus to run automatically every boot up by adding entries to your registry. Once inside, Personal Antivirus will perform full system scan and list you variety of infections that cannot be removed until you first purchase licensed version. Also Personal Antivirus will flood your system with fake security alerts, annoying pop-ups, fake screens of death. You may notice that your computer start to run slower after Personal Antivirus was installed. That because Personal Antivirus uses too much system recourses.
We strongly recommend you to remove Personal Antivirus as soon as possible manually or using automatic removal tool.

Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical
Screenshot:



How to remove Personal Antivirus manually:
It's possible to remove Personal Antivirus manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

PersonalAntivirus.lnk
PersonalAntivirus.exe


Remove registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “Personal Antivirus”
HKEY_CURRENT_USER\Software\Personal Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\Personal Antivirus


Please be careful because manual removal of Personal Antivirus may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Apr 14, 2009

Remove Virus Sweeper - VirusSweeper Removal Instructions

Virus Sweeper is a new rogue antispyware product from Virusdoctor rogue family. Parasite is a clone of Virusdoctor, VirusMelt, VirusAlarm. Virus Sweeper comes with fake online scanner that detects unexistant infections even on absolutely clean systems. Also parasite uses Trojan horses to promote itself. Once Virus Sweeper gets in touch with your system it will automatically configure itself to run automatically every time you turn on your computer. Also it will perform full system scan and list you variety of infections that cannot be removed until you first purchase licensed version. But remember Virus Sweeper have nothing to do with removing any types of internet infections. Remove Virus Sweeper manually using removal instructions above or using automatic removal tool.

Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical
Screenshot:



How to remove Virus Sweeper manually:
It's possible to remove Virus Sweeper manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

c:\Documents and Settings\All Users\Application Data\7c69f0c
c:\Documents and Settings\All Users\Application Data\7c69f0c\LoopSystem
c:\Documents and Settings\All Users\Application Data\LoopSystem
c:\Documents and Settings\All Users\Application Data\7c69f0c\VSweep.exe
c:\Documents and Settings\All Users\Application Data\7c69f0c\LoopSystem\vd952342.bd
c:\Documents and Settings\All Users\Application Data\LoopSystem\swcfg.ini
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Virus Sweeper.lnk
%UserProfile%\Application Data\Virus Sweeper
%UserProfile%\Application Data\Virus Sweeper\Instructions.ini
%UserProfile%\Desktop\Virus Sweeper.lnk
%UserProfile%\Recent\ANTIGEN.drv
%UserProfile%\Recent\cb.dll
%UserProfile%\Recent\CLSV.dll
%UserProfile%\Recent\energy.exe
%UserProfile%\Recent\exec.dll
%UserProfile%\Recent\fix.sys
%UserProfile%\Recent\PE.exe
%UserProfile%\Recent\PE.sys
%UserProfile%\Recent\ppal.tmp
%UserProfile%\Recent\snl2w.drv
%UserProfile%\Recent\tjd.exe
%UserProfile%\Recent\tjd.tmp
%UserProfile%\Start Menu\Virus Sweeper.lnk
%UserProfile%\Start Menu\Programs\Virus Sweeper.lnk


Remove registry entries:

HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\VSweep.DocHostUIHandler
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "97680312703"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Virus Sweeper"

Please be careful because manual removal of Virus Sweeper may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

Apr 2, 2009

Remove System Protector - SystemProtector Removal Information

System Protector is new rogue antispyware application which was designed with one purpose – to steal money. Parasite is promoted through the use of Trojan horses that will display fake system warnings on your computer. If you click on that warnings Trojan will secretly download and install System Protector onto your board. Once installed, System Protector will configure itself to run automatically every time you turn on your computer, also it will perform full system scan and list you variety of infections that cannot be removed until you first purchase licensed version. But you must remember that licensed version of System Protector differs nothing from trial one, and have nothing to do with removing any types of infections. In fact System Protector is the only serious infection on your computer and we recommend you to remove it as soon as possible manually or using automatic removal tool.

Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical
Screenshot:



How to remove Spyware Protect 2009 manually:
It's possible to remove System Protector manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

%UserProfile%\Application Data\install.exe
%UserProfile%\Application Data\lsascs.exe
%UserProfile%\Application Data\shellex.dll
%UserProfile%\Application Data\Microsoft\windll32.exe
%UserProfile%\Application Data\SpyProtectorSC_Base_new.dat
%UserProfile%\Application Data\SpyProtectorSC_Config.ini
%UserProfile%\Desktop\System Protector.lnk
%UserProfile%\Start Menu\Programs\System Protector\Purchase License.url
%UserProfile%\Start Menu\Programs\System Protector\Support Page.url
%UserProfile%\Start Menu\Programs\System Protector\System Protector.lnk
C:\Program Files\System Protector
C:\WINDOWS\system32\spyprotector.cpl


Remove registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" => 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{107A1D63-2EAA-4694-8ABA-EC209C630D83}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\lsascs.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "System Protector"


Please be careful because manual removal of System Protector may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.
/