How to remove AntiAdd (Anti Add) rogue anti-spyware

30.11.2009 | Malware Type: Rogue Anti-Spyware

Malware Description:
AntiAdd (also known as Anti Add) is a brand-new scareware from one of the most rapidly developing family of rogue anti-spywares that includes RESpyWare, AntiAID, REAnti, Secure Keeper and Keep Cop. AntiAdd is being promoted on AntiAdd.com website which appears to be the official online ‘residence’ of this fake security product. The most typical way to catch AntiAdd malady is from a fake online scan you get randomly redirected to. This annoying activity is called forth by trojan-initiated modification of browser settings. When you get AntiAdd on board your machine, it creates tons of random files which are actually harmless but will be later ‘detected’ by AntiAdd as viruses. Additionally, AntiAdd will configure your system to run its executable AntiAdd.exe each time you boot into Windows so do not get surprised to see some odd security scanners at startup. Both AntiAdd alerts and its system scanners are forged – in order to try and persuade you that your computer is at risk. The final thing this scareware displays is some recommendations for you to register your copy of AntiAdd and, of course, pay the corresponding fee for that. Please do not fall victim of AntiAdd scam and remember that it wants your money. AntiAdd is a dangerous program to have on one’s computer so please treat it with caution. If you notice signs of AntiAdd on your PC you should remove this junkware ASAP. Below is a set of simple instructions to uninstall AntiAdd and not let it invade your OS.

How to remove Sysguard2010.com (Sysguard2010.microsoft.com) hijacker

30.11.2009 | Malware Type: Browser Hijackers

Malware Description:
Sysguard2010.com (or Sysguard2010.microsoft.com) is a malicious domain associated with a computer virus called Antivirus System PRO which we earlier referred to the rogue anti-spyware category of malware applications. Sysguard2010.com is an unordinary site (in a bad sense) for a number of reasons. First of all, Sysguard2010.com is not visited in a standard manner – neither via organic search nor through direct URL hitting method. Typically, Sysguard2010.com redirects your web-surfing to its phony warning page which usually has the Sysguard2010.microsoft.com URL in the address bar. Sysguard2010.microsoft.com is a result of the rogue’s activity over your system configuration and Hosts file in particular so you should in no way associate it with Microsoft. Sysguard2010.com warns you of insecure internet activity intercepted and recommends you to push a link for antivirus protection. It’s then that you find yourself on Antivirus System PRO official site that contains not a single word of truth on it. Sysguard2010.com encourages you to buy Antivirus System PRO and use its full version to get your system back to normal and ultimately protected. Yeah right! Sysguard2010.com is a scam, so is Antivirus System PRO. The biggest problem about Sysguard2010.com hijacker is you will keep on getting diverted to that worthless alert page over and over until you actually get rid of the hijacker itself, i.e. remove the related files, get your settings back to correct and eliminate the attendant trojan viruses.

How to remove Royalantivirus.com (Royalantivirus.microsoft.com) hijacker

29.11.2009 | Malware Type: Browser Hijackers

Malware Description:
Royalantivirus.com (Royalantivirus.microsoft.com) has been noticed to impudently redirect PC users’ online surfing lately. So what is Royalantivirus.com and is it dangerous? The truth about Royalantivirus.com is the fact that it’s a component in the vast distribution network being used by Antivirus System PRO malware to propagate and infect new computers throughout the world. Royalantivirus.com hijacker is often encountered with the ‘microsoft.com’ domain mutation which we’ve mentioned already. This one (Royalantivirus.microsoft.com) is not to be associated with Microsoft in any way because it is a hijacker whose URL is a product of Hosts file modifications performed by Antivirus System PRO rogueware. Why would the scareware change the system parameters – you may wonder? The answer is it wants to seem as persuasive as possible hence involves the name of the perfectly reputable corporation as just an instrument for that purpose. When Royalantivirus.com redirects your browser, you will find yourself on a phony alert page that informs you of some unsafe web activity and recommends pushing its button that leads to Antivirus System PRO official site. You should not take the information on Royalantivirus.com for granted. Royalantivirus.com contains a bunch of fake testimonials and misleading product descriptions that encourage you to buy Antivirus System PRO full version. In case you got hit by Royalantivirus.com hijacker, make sure to remove it promptly.

How to remove Antivirus PRO rogue anti-spyware

29.11.2009 | Malware Type: Rogue Anti-Spyware

Malware Description:
Antivirus PRO (aka Antivirus PRO v 2.0.7 or Antivirus PRO 2010) is the newest rogue representing the same family as the devastating Spyware Protect 2009 and Antivirus System PRO. The similarity of Antivirus PRO to the above-mentioned rogue anti-spywares is confirmed by the almost identical GUIs and, as a thorough analysis shows, similar distribution trends. Antivirus PRO uses tricky methods to install onto your system. These are mostly trojan-initiated techniques that lie in attaching the malware code to misleadingly legit downloads or online updates. However, you may also catch Antivirus PRO unknowingly and without performing any action as the Antivirus PRO trialware trojans turn out way too stealthy for your genuine antivirus software to intercept. When on board your computer system, Antivirus PRO almost paralyzes your OS by corrupting the Windows registry and creating numerous harmful files on the system32 and other directories. Antivirus PRO spins its corrupt ‘cobweb’ throughout your system affecting the critical processes in a bad way. Antivirus PRO will trigger a lot of popup warnings, system tray alerts and alleged security scanners which are all absolutely fabricated hence not trusty. Antivirus PRO just wants to sell its licenses by producing the impression that you have a real badly infected computer that needs urgent antivirus help. Antivirus PRO is not what you might first think it is. Antivirus PRO is a vicious computer parasite so remove Antivirus PRO (Antivirus PRO v 2.0.7 or Antivirus PRO 2010) immediately.

How to remove Browsersecurityaddon.com hijacker

28.11.2009 | Malware Type: Browser Hijackers

Malware Description:
Browsersecurityaddon.com is an unsafe domain that jeopardizes your online surfing and computer activities on the whole. Browsersecurityaddon.com has to do with the Antivir rogue anti-spyware program and is being actively used as a part of Antivir malware schemes. Please take a look at the snapshots below – these are all snapshots of Browsersecurityaddon.com with different URL tails. The first one encountered by Browsersecurityaddon.com victims comes with the /block.php extension – it’s the phony warning page that notifies you of the detection of web security trouble on your PC. Clicking on any of Browsersecurityaddon.com buttons makes you hit another page where you will be persistently asked to install and register Antivir Antivirus. It’s very important to refrain from believing Browsersecurityaddon.com warnings and keep yourself from installing and buying Antivir which is an absolute scam. Browsersecurityaddon.com just tries to swindle you and get hold of some of your credit card savings. With Browsersecurityaddon.com hijacker on your computer, you can hardly surf the web like you did before because of the browser redirects that occur way too often for you to use the internet normally. Besides, chances are Antivir scareware might be already on your computer if Browsersecurityaddon.com is diverting your browser. Only the rogue may be remaining obscure while running on the background of your system processes. So please stay away from Browsersecurityaddon.com and Antivir. If infected with either or both of them, you should take immediate measures to protect your PC against their bad influence.

How to remove Prowebantimalware.com hijacker

28.11.2009 | Malware Type: Browser Hijackers

Malware Description:
Prowebantimalware.com is one of the first browser hijackers supporting the brand-new rogue anti-spyware called Antivir. Prowebantimalware.com is acting by messing with one’s online activities, which is exhibited through compelled browser redirects to a phony online scanner page. Prowebantimalware.com uses trojans in order to modify the Hosts file and browser configuration on the system this hijacker infects. As a result, the unsuspecting computer user will encounter interference with his/her browsing expressed via random hits to Prowebantimalware.com with a fixed URL appendix that leads to the bogus scanner mentioned above. Prowebantimalware.com appears to mimic the user’s My Computer interface. It’s only after a thorough analysis of Prowebantimalware.com GUI that it becomes obvious it’s a fake one. The drive names may not be as your actual ones, not to mention the bizarre scan progress indicator that runs inside Prowebantimalware.com window, whereas it should never show up inside the genuine GUI of that kind. To sum it all up, Prowebantimalware.com is a misleading website and an annoying browser hijacker assisted by trojans. So if you come across Prowebantimalware.com and its browser diverting pranks make sure to refrain from clicking any buttons there and remove this hijacker ASAP. And do not trust Antivir rogue as it wants nothing but your money.

How to remove RESpyWare rogue anti-spyware

27.11.2009 | Malware Type: Rogue Anti-Spyware

Malware Description:
RESpyWare is another rogue from the WiniGuard group of scareware tools such as REAnti, AntiAID, Secure Keeper and Keep Cop. Typically, RESpyWare spreads through trojan viruses that attach themselves to fake codec downloads or flash updates of doubtful origin. It’s that trojan to blame for secret download of RESpyWare badware onto one’s PC without the user’s knowledge and permission. Having got inside the system, RESpyWare drops a number of odd-named files whose function is to act as dummy system entities which RESpyWare later ‘detects’ as dangerous infections. RESpyWare performs frequent security scans that actually report the above-mentioned files labeling them as malware. After this, RESpyWare requests you to buy its registered copy in exchange for PC security services which lie in removing all the purportedly found virus threats. You must have figured out by now that RESpyWare is not a true antivirus program – it is a complete hype. RESpyWare has been designed to rip people off by compelling them to buy its full version. So you definitely do not need RESpyWare on your machine – it can’t help you with spyware removal and can only make things worse. Please stick to the following instructions to uninstall RESpyWare step by step.

How to remove Trojan-Im.Win32.agent.ae infection

27.11.2009 | Malware Type: Trojan Horses

Malware Description:
Trojan-Im.Win32.agent.ae (alias Im.Win32.agent.ae) is a generic detection for a computer parasite that is a potentially unwanted application. Trojan-Im.Win32.agent.ae is known to be a tiny yet quite hazardous trojan virus that spreads through security exploits, browser vulnerabilities or by getting mapped to removable media. Trojan-Im.Win32.agent.ae presents a risk to the compromised system in a few ways. First of all, it stays resident on the background, which means Trojan-Im.Win32.agent.ae is quite hard to detect. Also, Trojan-Im.Win32.agent.ae can infect all computers on the network so it’s quite a contaminant. In addition, Trojan-Im.Win32.agent.ae can open up security gateways for other malware to easily enter the targeted Operating System. This trojan virus adds some registry information of its own thus making the PC exposed to outer risks like spyware, keyloggers, trojans and worms. Since Trojan-Im.Win32.agent.ae is capable of recording the user’s keystrokes, it presents an additional risk as a potential privacy violation instrument being used by remote cyber criminals. Consequently, with Trojan-Im.Win32.agent.ae on board your machine, your private data like credit card details can be accessed by other individuals for fraudulent purposes. It is highly recommended to remove Trojan-Im.Win32.agent.ae infection as quickly as possible if it’s on your computer.

How to remove Trojan:W32/Inject infection

27.11.2009 | Malware Type: Trojan Horses

Malware Description:
Have you received system tray alerts about the detection of Trojan:W32/Inject infection lately? Well, it means you’ve got some malware on your PC to handle. Now, let us specify in a little more detail. Trojan:W32/Inject is a detection of a hazardous trojan virus which is a part of the deceptive activities of the rogue anti-spyware called Antivir. It’s Antivir scareware that tends to frighten its victims by generated false threat detection reports, one of such alerts being about Trojan:W32/Inject. As a matter of fact, Trojan:W32/Inject is an actual computer parasite that obscurely modifies the Windows Registry and contributes to the identity theft. That’s true but Trojan:W32/Inject is being currently used more as a fake detection. These phony alerts tell you the following: “Trojan:W32/Inject Activity Detected” (please see the relevant snapshot below). Please bear in mind that Trojan:W32/Inject is just a method that facilitates Antivir dirty practices. In case you’ve been flooded with those “Trojan:W32/Inject Activity Detected” warnings, make sure to stay sober and refrain from clicking them otherwise you will be persistently asked to purchase Antivir which is allegedly able to protect your computer against Trojan:W32/Inject and similar threats. You should treat Trojan:W32/Inject with caution and check your computer for additional infections if you’ve been receiving ads like the one being described herein. Please review the guide below to learn how to defend your system from Trojan:W32/Inject and its affiliate rogue anti-spyware Antivir.

How to remove Antivir rogue anti-spyware

27.11.2009 | Malware Type: Rogue Anti-Spyware

Malware Description:
Antivir is a hazardous rogue anti-spyware infection that propagates throughout the web space via phony online virus scanners and exaggerated popup ads. Antivir appears to have a GUI that is a close resemblance of some previously known scareware applications of high severity so we assume Antivir might be a representative of the same virus family as the nasty Alpha Antivirus. Antivir does not ask for user approval while infiltrating his/her computer – that’s a major hazard emanating from any rogueware application since their intrusion turns out completely unexpected and the potential victim might be unprotected against such an invasion. Having gotten on board its new host computer, Antivir modifies the Registry information so that the compromised Operating System gets configured to run Antivir executable Antivir.exe each time the PC starts. When launched this way, Antivir will issue a great number of misleading ads and scanners that all tell you how badly infected your machine is and advise you do install the ‘right’ software to handle this. In other words, Antivir forges the detection of computer parasites on your computer so that you eventually get brainwashed into installing its licensed version. Antivir can hardly do anything expect deceiving people so please treat this program with extreme caution. Antivir can go as far as to ruin your system and hence make you lose your personal data. Please review the security guidelines below to protect your computer against Antivir impostor hazard.