remove-malware.net » Fake Security Programs http://remove-malware.net Got malware you want to get rid of? We know how to remove it! Sun, 05 Sep 2010 13:55:34 +0000 en hourly 1 http://wordpress.org/?v=3.0 How to remove Windows Performance Center fake security program http://remove-malware.net/how-to-remove-windows-performance-center-fake-security-program/ http://remove-malware.net/how-to-remove-windows-performance-center-fake-security-program/#comments Tue, 20 Apr 2010 09:59:21 +0000 admin http://remove-malware.net/?p=6449 Malware Description:
Windows Performance Center is a misleading application whose bad influence on your computer can be unpredictable and definitely disruptive. Windows Performance Center hails from the broad group of malicious programs referred to as fake optimization tools. It infiltrates PCs without users’ consent and authentication. This bypassing stealthy infiltration method is enabled due to the use of a trojan horse that finds and uses some software splits and crawls inside without being detected. This trojan (or trojans) alters some system settings and attains the main result for the malware. It makes your PC act up and grabs control of it. The trojans install Windows Performance Center trial version which will be popping up on you with some fake hardware errors detection alerts, bogus system scanners and tons of other misleading ads that misinform you about the badware invasion of your computer and serious system issues that needs fixing. Well, in fact there actually is a serious problem – but it’s Windows Performance Center itself. This unsafe application does not have the technical ability to find or delete any viruses or repair any system errors, so do not even think of believing it. Also, Windows Performance Center claims to help you ‘make your PC work faster’ but that’s a lie as well. Since it is typical scareware, it only scares people without being able to do anything it promises. One more peculiar fact about Windows Performance Center is the similarity of its GUI as compared with the well-known legitimate Windows Security Center. The hackers decided to borrow some basic design components and take advantage of them hoping that people will be unable to discern the fake one. Let’s move on to Windows Performance Center removal (hopefully you have now realized you can’t let this nasty program reside on your machine). Our research has shown that the rogue security program in question is quite aggressive in terms of resisting any uninstall attempts of its victims. It is not listed on Add/Remove Programs interface, blocks the Task Manager and prevents the user from downloading and executing antivirus utilities. The only method that we found worked is to boot into Safe Mode with the help of F8 key that needs to be hit repeatedly during computer startup. Once you enter Safe Mode, please visit our site and stick to the instructions attached to this post (see below). Good luck getting your computer cleaned up from the Windows Performance Center malware.

Malware Type: Fake Security Programs

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Windows Performance Center Free Scanner and Remover: Download Now

How to remove Windows Performance Center manually:
Manual removal of Windows Performance Center is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

  • %Documents and Settings%\All Users\Start Menu\Programs\Windows Performance Center
  • %Documents and Settings%\All Users\Desktop\Windows Performance Center.lnk

The registry entries that need to be removed are as follows:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Windows Performance Center
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Windows Performance Center”

Please, be aware that manual removal of Windows Performance Center is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal Windows Performance Center, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download Windows Performance Center Automatic Remover

]]> http://remove-malware.net/how-to-remove-windows-performance-center-fake-security-program/feed/ 0 How to remove AntiToolbar fake security program http://remove-malware.net/how-to-remove-antitoolbar-fake-security-program/ http://remove-malware.net/how-to-remove-antitoolbar-fake-security-program/#comments Wed, 30 Dec 2009 19:34:37 +0000 admin http://remove-malware.net/?p=5412 Malware Description:
AntiToolbar (aka Anti Toolbar or AntiToolbar Pro) is a new character of fake security software industry. AntiToolbar suggests people its assistance in terms of cleaning up their computer systems from unwanted add-ons, browser hijackers, tracking cookies etc. That sounds quite commendable but unfortunately AntiToolbar does not stick to promises it makes. AntiToolbar is to be installed manually from its website so you should stay alert and refrain from believing any internet sources recommending you to download and test AntiToolbar software. Once installed and active, AntiToolbar will offer using some of its basic options like scanning your system for errors and other types of insecure activity. The scan reveals deliberately fabricated results though. AntiToolbar tends to trigger popup warning messages that it allegedly found some critical threats which are strongly recommended to be removed. And this ‘removal’ will not go without you having to pay a $29.95 fee for AntiToolbar Pro version first. The above scheme is characteristic of fake security applications, although AntiToolbar appears to be less aggressive with regard to its behavior and only rarely uses obscure trojan-based infiltration techniques. Anyway, we recommend you to stay away from Anti Toolbar application since it’s a potentially unwanted one and may mislead you considerably. If you download AntiToolbar and find it hard to uninstall this software, please follow the instructions below to remove AntiToolbar from your system.

Malware Type: Fake Security Programs

Malware Author: SkyLab Software

Threat Level: High

Advice: Immediately remove

AntiToolbar Free Scanner and Remover: Download Now

AntiToolbar Screenshot:

AntiToolbar

How to remove AntiToolbar manually:
Manual removal of AntiToolbar is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

  • %Documents and Settings%\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiToolbar.lnk
  • %Documents and Settings%\Administrator\Local Settings\Temp\Perflib_Perfdata_2d8.dat
  • %Documents and Settings%\All Users\Desktop\AntiToolbar.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\Startup\Toolbar Agent.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\AntiToolbar\AntiToolbar on the Web.url
  • %Documents and Settings%\All Users\Start Menu\Programs\AntiToolbar\AntiToolbar.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\AntiToolbar\Uninstall AntiToolbar.lnk
  • %Program Files%\AntiToolbar\AntiToolbar.exe
  • %Program Files%\AntiToolbar\AntiToolbarAgent.exe
  • %Program Files%\AntiToolbar\InstallExtension.dll
  • %Program Files%\AntiToolbar\unins000.dat
  • %Program Files%\AntiToolbar\unins000.exe

The registry entries that need to be removed are as follows:

  • HKEY_CURRENT_USER\S-1-5-21-1172441840-534431857-1906119351-500
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{11A6DB90-161E-4E1C-9516-75ED6A67033D}_is1

Please, be aware that manual removal of AntiToolbar is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal AntiToolbar, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download AntiToolbar Automatic Remover

]]> http://remove-malware.net/how-to-remove-antitoolbar-fake-security-program/feed/ 0 How to remove DataDoctor 2010 fake security program http://remove-malware.net/how-to-remove-datadoctor-2010-fake-security-program/ http://remove-malware.net/how-to-remove-datadoctor-2010-fake-security-program/#comments Sun, 20 Dec 2009 15:59:30 +0000 admin http://remove-malware.net/?p=5330 Malware Description:
DataDoctor 2010 is a fake optimization tool possessing some traits of a rogue anti-spyware application. DataDoctor 2010 is distributed through the use of misleading internet sources recommending you to download this program to fix your computer problems. When running on your machine, DataDoctor 2010 will typically display falsified registry scanners and lots of other adware components to produce the misleading impression that your computer has a lot of system errors that must be taken care of immediately. DataDoctor 2010 claims to be capable of speeding up your Operating System by deleting junk files and getting Windows registry back to normal. According to DataDoctor 2010 ads, your system problems are severe enough to be eliminated ASAP. Then, DataDoctor 2010 will display more alerts insisting on your installing its commercial copy which, of course, requires a fee to be paid before it can do anything ‘useful’. DataDoctor 2010 is not the program it pretends to be. It tricks you into believing your PC is at risk, and then floods your system with annoying recommendations to buy its licensed copy. Please disregard DataDoctor 2010 ads and keep yourself from following that program’s advice. DataDoctor 2010 wants nothing but your money, so do not even expect any services in return. DataDoctor 2010 must be removed once spotted otherwise it may render your system virtually useless. Please read the passage below for some helpful tips in terms of DataDoctor 2010 removal.

Malware Type: Fake Security Program

Malware Author: Unknown

Threat Level: High

Advice: Immediately remove

DataDoctor 2010 Free Scanner and Remover: Download Now

DataDoctor 2010 Screenshot:

DataDoctor 2010

How to remove DataDoctor 2010 manually:
Manual removal of DataDoctor 2010 is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

  • %ProgramFiles%\DataDoctor 2010\ddreg.dll
  • %ProgramFiles%\DataDoctor 2010\fs.exe
  • %ProgramFiles%\DataDoctor 2010\modules\module.filefix.dll
  • %ProgramFiles%\DataDoctor 2010\modules\module.inetopt.dll
  • %ProgramFiles%\DataDoctor 2010\modules\module.privacy.dll
  • %ProgramFiles%\DataDoctor 2010\modules\module.regclean.dll
  • %ProgramFiles%\DataDoctor 2010\modules\module.shredder.dll
  • %ProgramFiles%\DataDoctor 2010\modules\module.startup.dll
  • %ProgramFiles%\DataDoctor 2010\unins000.dat
  • %ProgramFiles%\DataDoctor 2010\unins000.exe
  • %System%\msvcp71.dll
  • %UserProfile%\Start Menu\Programs\DataDoctor
  • %UserProfile%\Start Menu\Programs\DataDoctor\DataDoctor on the Web.url
  • %UserProfile%\Start Menu\Programs\DataDoctor\Uninstall DataDoctor.lnk
  • %UserProfile%\Start Menu\Programs\DataDoctor\DataDoctor.lnk

The registry entries that need to be removed are as follows:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C6869864-8987-4067-9666-BEA678E823F3}_is1

Please, be aware that manual removal of DataDoctor 2010 is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal DataDoctor 2010, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download DataDoctor 2010 Automatic Remover

]]> http://remove-malware.net/how-to-remove-datadoctor-2010-fake-security-program/feed/ 0 How to remove ErrorSweeper fake security program http://remove-malware.net/how-to-remove-errorsweeper-fake-security-program/ http://remove-malware.net/how-to-remove-errorsweeper-fake-security-program/#comments Tue, 10 Nov 2009 14:50:13 +0000 admin http://remove-malware.net/?p=5002 Malware Description:
ErrorSweeper (alias Error Sweeper) is a fake system optimization tool that promises its victims to fix all Operating System errors and arrange the System Registry in perfect order – but in fact does none of above. ErrorSweeper is distributed through dishonest advertising, misleading online ads and trojan viruses. Having landed onto the targeted computer, ErrorSweeper is very problematic to uninstall because it was programmed to get deeply embedded with the compromised system. When running, Error Sweeper displays a lot of false error detection reports and fabricated scan results in order to confuse the victims and make them actually believe they have tons of system trouble and security risks on their PCs. The free activity of ErrorSweeper goes no further than detecting fake system errors; when it comes to eliminating those ‘problems’, it becomes obvious that ErrorSweeper wants your money. ErrorSweeper should not be allowed to stay on your computer because it’s a potential system-disruptive application and usually deteriorates the PC performance by far. Whenever you come across ErrorSweeper, stay away from it and make sure to remove it ASAP if it’s on your machine already. Please stick to the following guide to secure your system from ErrorSweeper bad influence.

Malware Type: Fake Security Programs

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

ErrorSweeper Free Scanner and Remover: Download Now

ErrorSweeper Screenshot:

ErrorSweeper

How to remove ErrorSweeper manually:
Manual removal of ErrorSweeper is feasible if you have sufficient expertise in working with program files, system processes, .dll files and registry entries.

The associated files to be deleted are listed below:

  • DataBase.ref
  • Microsoft.VC80.CRT.manifest
  • Microsoft.VC80.MFC.manifest
  • symlcsv1.exe
  • ErrorSweeper.exe
  • Launcher.exe
  • Icon.exe
  • msvcp80.dll
  • msvcr80.dll
  • mfc80.dll
  • RegCleaner.dll
  • TCL.dll
  • zlib.dll
  • %UserProfile%\Application Data\ErrorSweeper
  • %ProgramFiles%\ErrorSweeper

The related registry entries to be removed are as follows:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ErrorSweeper
  • HKEY_ALL_USERS\Software\ErrorSweeper
  • HKEY_CLASSES_ROOT\Installer\Features\DBBA78B5AC9F8C949B9E87E5DB128346
  • HKEY_CLASSES_ROOT\Installer\Products\DBBA78B5AC9F8C949B9E87E5DB128346
  • HKEY_CLASSES_ROOT\Installer\UpgradeCodes\6C528F15CCA767C42883C5758DA67728
  • HKEY_LOCAL_MACHINE\SOFTWARE\ErrorSweeper
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5B87ABBD-F9CA-49C8-B9E9-785EBD213864}

Please, be aware that manual removal of ErrorSweeper is a cumbersome procedure and does not ensure complete deletion of the malware, due to the fact that some files might be hidden or may automatically reanimate themselves afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of ErrorSweeper, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download ErrorSweeper Automatic Remover

]]> http://remove-malware.net/how-to-remove-errorsweeper-fake-security-program/feed/ 0 How to remove WindoFix fake security program http://remove-malware.net/how-to-remove-windofix-fake-security-program/ http://remove-malware.net/how-to-remove-windofix-fake-security-program/#comments Tue, 18 Aug 2009 16:38:02 +0000 admin http://remove-malware.net/?p=4252 Malware Description:
WindoFix (also known as Windo Fix) is a counterfeit security program that uses false positives to scare people into downloading its commercial software version. WindoFix gets distributed through WindoFix.com website and installs under deceptive pretences because it promises to optimize your registry, delete junk files and speed up your computer performance. Well, none of the above promises can be performed by WindoFix since it has been released to perform a somewhat different mission of spoofing people. When you launch WindoFix system scan, it will pretend to detect tons of system errors and other risks like invalid drivers, missing files and .dlls, etc. This is the way for WindoFix to act for making you think you need a system optimizer like itself to repair the detected issues. Most computer users who learn about so many system problems get worried and install the suggested software – and at that point, WindoFix demands the trustful victim to purchase its license and register the fraud product. Do not go following WindoFix prompts because they lead into nowhere. Unless you feel secure having a dangerous fake security program by your side, remove WindoFix scareware ASAP if gets located on your PC.

Malware Type: Fake Security Programs

Malware Author: Unknown

Threat Level: High

Advice: Immediately remove

WindoFix Free Scanner and Remover: Download Now

WindoFix Screenshot:

WindoFix

How to remove WindoFix manually:
Manual removal of WindoFix is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

  • WindoFix.exe
  • unins000.exe
  • unins000.dat
  • WindoFix.lnk
  • WindoFix on the Web.url

The registry entries that need to be removed are as follows:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”WindoFix” = “%ProgramFiles%\WindoFix\WindoFix.exe /fast”
  • HKEY_CURRENT_USER\Software\WindoFix
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0F464999-9928-4B44-B57E-057033961349}_is1

Please, be aware that manual removal of WindoFix is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of WindoFix, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download WindoFix Remover

]]> http://remove-malware.net/how-to-remove-windofix-fake-security-program/feed/ 0 How to remove PC MightyMax 2009 fake security program http://remove-malware.net/how-to-remove-pc-mightymax-2009-rogue-anti-spyware/ http://remove-malware.net/how-to-remove-pc-mightymax-2009-rogue-anti-spyware/#comments Thu, 30 Jul 2009 20:12:34 +0000 admin http://remove-malware.net/?p=4109 Malware Description:
PC MightyMax 2009 (alias PC Mighty Max 2009 or PCMightyMax 2009) is a fake registry cleaner that gets distributed through dirty techniques. Actually, PC MightyMax 2009 is just a somewhat updated version of PC MightyMax which has caused lots of trouble to PC users all over the planet. Typically, PC MightyMax 2009 propagates via browser hijacking tactics that presuppose redirecting people’s online activities to Pcmightymax.net domain where PC MightyMax 2009 is persistently pushed as a tool that prevents PC misbehaviour and fixes Windows problems in the blink of an eye. The truth is – PC MightyMax 2009 is a fraudulent program that cannot possibly remedy one’s computer. PC Mighty Max 2009 has been released to provide great profits to its developers without actually providing any services to the unfortunate customers in return. On its website, PC MightyMax 2009 is claimed to enable free system diagnostics, after which you will find out that the PC has tons of registry errors and other bugs to be exterminated. Then, PC Mighty Max 2009 suggests registering its licensed software to fix the compromised computer. Please, do not get fooled around into purchasing software you don’t need and which, moreover, can ruin your OS if installed. If you happened to catch PC MightyMax 2009 related trojans that hijacked your browser, or if you are getting weird ads from PC MightyMax 2009, please stick to the removal tips listed in the guide below.

Malware Type: Fake Security Programs

Malware Author: PC MightyMax, Inc.

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

PC MightyMax 2009 Free Scanner and Remover: Download Now

PC MightyMax 2009 Screenshot:

PC MightyMax 2009

How to remove PC MightyMax 2009 and affiliated threats manually:
Manual removal of PC MightyMax 2009 is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

  • %Program Files%\PC MightyMax\
  • %Program Files%\PC MightyMax\pcmm.exe
  • %Program Files%\PC MightyMax\ExeAfter.exe
  • %Documents and Settings%\Administrator\Start Menu\Programs\PC MightyMax\
  • %Documents and Settings%\Administrator\Application Data\Microsoft\Installer\

The registry entries that need to be removed are as follows:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache “ExeAfter.exe”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache “pcmm.exe”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders “%Documents and Settings%\Administrator\Application Data\Microsoft\Installer\{94D5AF0F-E6EE-4A75-BE31-9C9C9A87AD45}\”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders “%Documents and Settings%\Administrator\Start Menu\Programs\PC MightyMax\”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders “%Program Files%\PC MightyMax\”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “PCMMRealtime”
  • HKEY_CURRENT_USER\Software\Microsoft\Installer\Features\F0FA5D49EE6E57A4EB13C9C9A978DA54
  • HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\F0FA5D49EE6E57A4EB13C9C9A978DA54
  • HKEY_CURRENT_USER\Software\Microsoft\Installer\UpgradeCodes\713B41478A517224DA270783641C4644
  • HKEY_CURRENT_USER\Software\PC MightyMax
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\713B41478A517224DA270783641C4644
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{94D5AF0F-E6EE-4A75-BE31-9C9C9A87AD45}
  • HKEY_LOCAL_MACHINE\SOFTWARE\PC MightyMax

Please, be aware that manual removal of PC MightyMax 2009 is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of PC MightyMax 2009, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download PC MightyMax 2009 Remover

]]> http://remove-malware.net/how-to-remove-pc-mightymax-2009-rogue-anti-spyware/feed/ 2 How to remove Contraviro fake security program http://remove-malware.net/how-to-remove-contraviro-rogue-anti-spyware/ http://remove-malware.net/how-to-remove-contraviro-rogue-anti-spyware/#comments Sun, 21 Jun 2009 18:35:37 +0000 admin http://remove-malware.net/?p=3798 Malware Description:
Contraviro is a counterfeit anti-spyware program emanating from the same group insecure applications as the infamous UnVirex. Sticking to the conventional principles of rogue anti-spywares functioning, Contraviro makes it on board a new host computer through security exploits or via insecure online downloads. In either case, it’s Trojans that “contribute” to successful installation of Contraviro unregistered version onto random computers. Having penetrated into a system or network, Contraviro will create a number of its own registry values in the System Registry thus stuffing it up to slow down the compromised computer considerably. When Contraviro is running, it will as well issue bogus scanners that pretend to check your machine for insecure activity and do report malicious applications in great numbers. However, the risks reported by Contraviro scanners and alerts are all either harmless and legitimate Windows entities or non-existent programs you needn’t fear. In any case, it’s strongly advised to ignore the detections claimed by Contraviro, or else you may end up paying for Contraviro licensed version which is a scam. One more trick about Contraviro is the fact that it tends to install a specific dll known as Layered Service Provider (LSP) in your system. FYI: LSP is a program that controls outbound traffic to secure your online activities. The bad thing is that deleting Contraviro rogue anti-spyware the wrong way is likely to uninstall the LSP as well, which will definitely result in loss of network access. So please stick to the removal guide below to remove the exotic-named rogue anti-spyware product called Contraviro and get your system back to normal.

Malware Type: Fake Security Programs

Malware Author: Unknown

Threat Level: High

Advice: Immediately remove

Contraviro Free Scanner and Remover: Download Now

Contraviro Screenshot:

Contraviro

How to remove Contraviro manually:
Manual removal of Contraviro is feasible if you have sufficient expertise in working with program files, system processes, .dll files and registry entries.

The files to be deleted are listed below:

  • %Program Files%\Contraviro
  • %Program Files%\Contraviro\Contraviro.exe
  • %Program Files%\Contraviro\daily.cvd
  • %Program Files%\Contraviro\Drvfltip.sys
  • %Program Files%\Contraviro\hjengine.dll
  • %Program Files%\Contraviro\IEAddon.dll
  • %Program Files%\Contraviro\main.cvd
  • %Program Files%\Contraviro\MFC71.dll
  • %Program Files%\Contraviro\MFC71ENU.DLL
  • %Program Files%\Contraviro\msvcp71.dll
  • %Program Files%\Contraviro\msvcr71.dll
  • %Program Files%\Contraviro\pthreadVC2.dll
  • %Program Files%\Contraviro\shellext.dll
  • %Program Files%\Contraviro\siglsp.dll
  • %Program Files%\Contraviro\uninstall.exe
  • %Documents and Settings%\All Users\Start Menu\Programs\Contraviro
  • %Documents and Settings%\All Users\Desktop\Contraviro.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\Contraviro.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\Contraviro\Contraviro.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\Contraviro\How to Register Contraviro.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\Contraviro\Register Contraviro.lnk
  • %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Contraviro.lnk

The associated registry entries to be removed are as follows:

  • HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\antivirus_contextscan
  • HKEY_CLASSES_ROOT\AppID\{C0E56AC2-9F72-436E-B6E7-AEC28AF9E4EB}
  • HKEY_CLASSES_ROOT\AppID\IEAddon.DLL
  • HKEY_CLASSES_ROOT\CLSID\{08EEC6AD-7486-487F-89B7-5A3716DDAE14}
  • HKEY_CLASSES_ROOT\CLSID\{CCB5551D-8594-4999-85F9-1E3EABCB95AC}
  • HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\antivirus_contextscan
  • HKEY_CLASSES_ROOT\Drives\shellex\ContextMenuHandlers\antivirus_contextscan
  • HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\antivirus_contextscan
  • HKEY_CLASSES_ROOT\Interface\{5B184B9D-B7BD-4FEA-8D1F-5E27182206A5}
  • HKEY_CLASSES_ROOT\TypeLib\{3ED0E410-5C8E-47B6-A75D-D10B886E903C}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Contraviro
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CCB5551D-8594-4999-85F9-1E3EABCB95AC}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Contraviro
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform “Contraviro”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Contraviro”

Please, be informed that manual removal of Contraviro is a cumbersome procedure and does not always ensure complete deletion of the malware, since some files might be hidden or may automatically reanimate themselves afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Contraviro which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download Contraviro Automatic Remover

]]> http://remove-malware.net/how-to-remove-contraviro-rogue-anti-spyware/feed/ 0 How to remove Wind Optimizer fake security program http://remove-malware.net/how-to-remove-wind-optimizer-fake-security-program/ http://remove-malware.net/how-to-remove-wind-optimizer-fake-security-program/#comments Wed, 10 Jun 2009 12:54:47 +0000 admin http://remove-malware.net/?p=3703 Malware Description:
Wind Optimizer (aka WindOptimizer) is a fake optimization utility that promises to get one’s system in order but in fact only reports non-existent errors to scare the unsuspecting PC users. Junding by the essential characteristic features of Wind Optimizer, it refers to the same category of malwares as Personal Antivirus and General Antivirus rogue anti-spywares – which makes Wind Optimizer automatically a potentially invasive and system-disruptive application. If installed on your computer, Wind Optimizer will display absolutely exaggerated error detection reports. Wind Optimizer recommends removing junk files and thus optimizing the performance of your system. Too bad Wind Optimizer GUI doesn’t say the detected bugs are imaginary or completely harmless files which in no way deteriorate the system parameters and the processing capacity. In the meanwhile, Wind Optimizer will gradually make your computer slower as it proceeds in your system because it consumes much of the CPU resources when running. Additionally, Wind Optimizer will weaken your system protective shield and make the computer exposed to the disruptive impact of the outer threats. It’s strongly recommended to remove Wind Optimizer if you find it installed on your PC.

Malware Type: Fake Security Programs

Malware Author: Unknown

Threat Level: High

Advice: Immediately remove

Wind Optimizer Free Scanner and Remover: Download Now

Wind Optimizer Screenshot:

Wind Optimizer

How to remove Wind Optimizer manually:
Manual removal of Wind Optimizer is feasible if you have sufficient expertise in working with program files, system processes, .dll files and registry entries.

The files to be deleted are listed below:

  • %Documents and Settings%\All Users\Start Menu\Programs\Wind Optimizer
  • %Documents and Settings%\All Users\Start Menu\Programs\Wind Optimizer\Purchase License.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\Wind Optimizer\Uninstall Wind Optimizer.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\Wind Optimizer\Wind Optimizer Home Page.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\Wind Optimizer\Wind Optimizer.lnk
  • %UserProfile%\Application Data\Wind Optimizer
  • %UserProfile%\Application Data\Wind Optimizer\updateloadlist.ini
  • %UserProfile%\Application Data\Wind Optimizer\db
  • %UserProfile%\Application Data\Wind Optimizer\db\Settings.ini
  • %UserProfile%\Application Data\Wind Optimizer\db\Urls.inf
  • %UserProfile%\Desktop\WOSetup.exe.txt
  • %UserProfile%\Desktop\WOSetup.tmp.txt
  • %Program Files%\Wind Optimizer
  • %Program Files%\Wind Optimizer\activate.ico
  • %Program Files%\Wind Optimizer\Contig.exe
  • %Program Files%\Wind Optimizer\Explorer.ico
  • %Program Files%\Wind Optimizer\log_09062009.wlg
  • %Program Files%\Wind Optimizer\unins000.dat
  • %Program Files%\Wind Optimizer\unins000.exe
  • %Program Files%\Wind Optimizer\uninstall.ico
  • %Program Files%\Wind Optimizer\vista.manifest
  • %Program Files%\Wind Optimizer\vista.res
  • %Program Files%\Wind Optimizer\WindOptimizer.exe
  • %Program Files%\Wind Optimizer\WO_install.iss
  • %Program Files%\Wind Optimizer\WO_install.new.iss
  • %Program Files%\Wind Optimizer\WODefragmenter.exe
  • %Program Files%\Wind Optimizer\WOIsnce.db
  • %Program Files%\Wind Optimizer\db

The associated registry entries to be removed are as follows:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wind Optimizer_is1
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Wind Optimizer”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AutoUpdateDisableNotify”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “InternetSettingsDisableNotify”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “UacDisableNotify”

Please, be informed that manual removal of Wind Optimizer is a cumbersome procedure and does not always ensure complete deletion of the malware, since some files might be hidden or may automatically reanimate themselves afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Wind Optimizer, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download Wind Optimizer Automatic Remover

]]> http://remove-malware.net/how-to-remove-wind-optimizer-fake-security-program/feed/ 0 How to remove VSCodec PRO fake security program http://remove-malware.net/how-to-remove-vscodec-pro-fake-security-program/ http://remove-malware.net/how-to-remove-vscodec-pro-fake-security-program/#comments Thu, 28 May 2009 18:32:22 +0000 admin http://remove-malware.net/?p=3539 Malware Description:
VSCodec PRO (aka VS Codec PRO) is corrupt software that aims to encourage people to purchase its licensed version. VSCodec PRO is marketed as media optimization program (video codec) that allegedly improves the quality of multimedia which is played on one’s computer. However, the truth about VSCodec PRO is that it’s a fake codec that tends to apply dirty tactics to promote itself onto potential host computers. VSCodec PRO is distributed through trojans that, once on a target PC, display bogus notifications stating media system on your PC is corrupt and advising to update your video codec as soon as possible to handle the problems. Clicking on those fake alerts will redirect you to Vscodec-pro.com website that hosts VSCodec PRO scareware. Just like any other counterfeit security software, VSCodec PRO uses intimidating and brainwashing techniques to spoof people into installing and purchasing its licensed version. Do not get tricked this way and refrain from downloading any programs on Vscodec-pro.com – it’s a fraudulent website and should not be trusted, neither should the promoted software. VSCodec PRO rotation is a purely commercial project with malicious after-taste. Please, do not get tricked by VSCodec PRO and abstain from letting it into your system. If you have come across any strange pop-ups recommending you to update your video codec and redirecting you to unwanted websites, make sure you check your system for VSCodec PRO trialware which is probably concealing itself inside your system. If detected, VSCodec PRO must be immediately removed from your computer.

Malware Type: Fake Security Programs

Malware Author: Unknown

Threat Level: High

Advice: Immediately remove

VSCodec PRO Free Scanner and Remover: Download Now

VSCodec PRO Screenshot:

VSCodec PRO

How to remove VSCodec PRO manually:
Manual removal of VSCodec PRO is feasible if you have sufficient expertise in working with program files, system processes, .dll files and registry entries.

The files to be deleted are listed below:

  • %WINDOWS%\system32\wextract.exe
  • %UserProfile%\Application Data\VSCodecPRO
  • %UserProfile%\Application Data\VSCodecPRO\uill.ini
  • %UserProfile%\Application Data\VSCodecPRO\Autorun.ico
  • %UserProfile%\Application Data\VSCodecPRO\Process.ico
  • %UserProfile%\Application Data\VSCodecPRO\Service.ico
  • %UserProfile%\Application Data\VSCodecPRO\settings.ini

The associated registry entries to be removed are as follows:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “VSCodecPRO”
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Image File Execution Options\taskmgr.exe

Please, be informed that manual removal of VSCodec PRO is a cumbersome procedure and does not always ensure complete deletion of the malware, since some files might be hidden or may automatically reanimate themselves afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of VSCodec PRO, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download VSCodec PRO Automatic Remover

]]> http://remove-malware.net/how-to-remove-vscodec-pro-fake-security-program/feed/ 0 How to remove System Cleaner and Hardware Doctor fake security program http://remove-malware.net/how-to-remove-system-cleaner-and-hardware-doctor-fake-security-program/ http://remove-malware.net/how-to-remove-system-cleaner-and-hardware-doctor-fake-security-program/#comments Sun, 24 May 2009 09:06:04 +0000 admin http://remove-malware.net/?p=3505 Malware Description:
System Cleaner and Hardware Doctor (aka System Cleaner) is an infamous fake security product that has been rapidly spreading throughout the online world lately. System Cleaner and Hardware Doctor is marketed as a “2 in 1” solution that claims to protect one’s privacy and secure the internet activities; and, on the other hand, also servers as a system optimization tool that prevents HDD crashes and diagnoses the hardware. Too bad none of the above alleged capabilities of System Cleaner and Hardware Doctor is true. System Cleaner and Hardware Doctor propagates mainly via browser-hijacking techniques, i.e. it uses trojan viruses to redirect people’s web-surfing to its numerous affiliate websites that recommend purchasing the program. System Cleaner and Hardware Doctor is currently using the following malicious websites to get promoted: advanced-anti-virus.com, advanced-antivirus.com, antimalwarewarrior2009.com, antispyware-solutions.com, antiviral-softtools.com, antivirus-buy1.com, antivirus-cs1.com, antivirus-research-lab.com, antivirusmaster2009.com. Please, avoid the above websites and check your system for browser-hijackers if you hit one of them at least once. When installed and active, System Cleaner and Hardware Doctor will usually use fabricated scanners and fake alerts to tell you how affected your computer is. As a way to resolve these “detected” issues, System Cleaner and Hardware Doctor will offer its “licensed” version which demands payment; and that’s exactly what the program is about – to spoof people into wasting their money for purchasing the worthless commercial version of System Cleaner and Hardware Doctor. Please, refrain from installing that program and check your system for its presence if you suspect to be having it on board.

Malware Type: Fake Security Programs

Malware Author: Unknown

Threat Level: High

Advice: Immediately remove

System Cleaner and Hardware Doctor Free Scanner and Remover: Download Now

System Cleaner and Hardware Doctor Screenshot:

System Cleaner and Hardware Doctor

How to remove System Cleaner and Hardware Doctor manually:
Manual removal of System Cleaner and Hardware Doctor is feasible if you have sufficient expertise in working with program files, system processes, .dll files and registry entries.

The files to be deleted are listed below:

  • %UserProfile%\Start Menu\Programs\SystemCleaner and HardwareDoctor
  • %UserProfile%\Desktop\SystemCleanerandHardwareDoctor.exe
  • %Program Files%\Common Files\System\Uninstall\SystemCleanerandHardwareDoctor.lnk

The associated registry entries to be removed are as follows:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run“System Cleaner and Hardware Doctor”

Please, be informed that manual removal of System Cleaner and Hardware Doctor is a cumbersome procedure and does not always ensure complete deletion of the malware, since some files might be hidden or may automatically reanimate themselves afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of System Cleaner and Hardware Doctor which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download System Cleaner and Hardware Doctor Automatic Remover

]]> http://remove-malware.net/how-to-remove-system-cleaner-and-hardware-doctor-fake-security-program/feed/ 0