WinPC Defender

Posted by elise in Blog Latest Parasite Threats, Latest Spyware News, Latest Spyware Threats, Recent Articles, Top Parasite Threats, Top Spyware Threats on March 24th, 2009 | Leave a comment
TAGS: , , ,

What is WinPC Defender?
WinPC Defender is a rogue spyware remover developed by the family of XP Police Antivirus. With the purpose to ruin and compromise PC system security, this parasite usually pretends as a video codec and enters the system without your knowledge.

Once executed, WinPC Defender will deliver false messages stating that your computer is infected with malware. If you click on the link of the popup messages, you will be directed to Win-pc-defender.com, which is a fraudulent websites involved in the corrupt scheme of promoting WinPC Defender. This parasite also shows up notifications of imaginary security risks, in order to lure PC users into purchasing the full version.

Do you have WinPC Defender?
If you have enough time and expertise, you can search your computer for WinPC Defender manually. However, it might take hours to find out all files of WinPC Defender, and it is possible that WinPC Defender will appear after rebooting, for its hidden files may still be there.

Download automatic scanner for WinPC Defender
Spyware Cease – the technology-oriented security protection that provides a risk-free computing environment for your home and office – with detection, removal and guard in one intuitive and straight-forward interface. Only Spyware Cease gives you individual fix against the most dangerous spyware problems.

Manual WinPC Defender removal instructions
WARNING: The manually removal method is for advanced users. WinPC Defender manually removal can be difficult and time-consuming. There is no guarantee that WinPC Defender can be completely removed, for there are hundreds of files generated when WinPC Defender installed on your system. Make sure to back up your computer in case that you make any mistakes and your system does not work.

Follow the instructions below for WinPC Defender removal manually:

Navigate and stop the WinPC Defender processes:
pcdefender.exe
WinPC Defender.exe

Navigate and delete WinPC Defender files:
WinPCDefender.exe
%UserProfile%\Desktop\Launch WinPC Defender.lnk
%UserProfile%\Local Settings\Temp\delwdef2008.bat
%UserProfile%\Local Settings\Temp\[Random Name].tmp
%ProgramFiles%\WinPC Defender\data.dat
%ProgramFiles%\WinPC Defender\FwHookDrv.sys
%ProgramFiles%\WinPC Defender\HOSTS.hst
%ProgramFiles%\WinPC Defender\Manual.url
%ProgramFiles%\WinPC Defender\options.xml
%ProgramFiles%\WinPC Defender\reserve.dat
%ProgramFiles%\WinPC Defender\rules
%ProgramFiles%\WinPC Defender\Rules.txt
%ProgramFiles%\WinPC Defender\siren.wav
%ProgramFiles%\WinPC Defender\Support.url
%ProgramFiles%\WinPC Defender\svo.scf
%ProgramFiles%\WinPC Defender\temp
%ProgramFiles%\WinPC Defender\Uninstall.exe
%ProgramFiles%\WinPC Defender\Uninstall_st_st_.exe
%ProgramFiles%\WinPC Defender\vfile
%ProgramFiles%\WinPC Defender\WDefDemo.exe
%ProgramFiles%\WinPC Defender\Web.url

Navigate and remove WinPC Defender registry keys
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinPC Defender
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “WinPC Defender”
HKEY_CURRENT_USER\Software\WinPC Defender

What are the symptoms of WinPC Defender?

  • WinPC Defender may change browser settings
  • WinPC Defender may show commercial adverts
  • WinPC Defender may connect itself to the internet
  • WinPC Defender may stay resident in background

How do I keep away from WinPC Defender
Once you have cleaned up WinPC Defender, the most important point to prevent WinPC Defender and future malicious programs from reverting is to stay suspicious of spam E-mail attachment and unknown websites. Here are several ways in which you can help protect your computer against WinPC Defender and other malware:

  • Use a computer firewall
  • Confirm that you have downloaded all the latest critical security updates
  • Adjust Internet Explorer web browser’s security settings
  • Download and install anti-spyware protection, such as, Spyware Cease
  • Surf sites and download programs from the web sites you trust

What is Rogue Anti-spyware Program?
WinPC Defender is a type of Rogue Anti-spyware Program.

Rogue Anti-spyware Software is the software that uses malware to advise or install itself through other malicious viruses or security hole without your permission. Rogue software usually pops up fake system message such as “Warning, your computer is infected! Click here to scan your computer now!” Most of the time, when clicking the “OK” button on the dialog tab, users will be directed to an unknown website that may download more spyware threats. Sometimes, even clicking the close button on the top right may lead to the installation of the rogue software, for the button is actually a link.

With the purpose to trick innocent users into the action of paying, rogue software usually counterfeits exaggerated and fake system scanning results and scare users to pay for the removal of the never-existed spyware infections. In fact, the threat is the rogue software itself. Most of them come with a bundle of very harmful spyware programs that hidden in the files themselves.

Adware Eradicator

Posted by Emma Adrian in Blog Latest Parasite Threats, Recent Articles, Top Parasite Threats, Top Spyware Threats on March 18th, 2009 | Leave a comment
TAGS: , ,

What is Adware Eradicator?
Adware Eradicator is a rogue anti-spyware program promoted on adwareeradicator.com and other fraudulent web sources. Adware Eradicator imitates online scan and loads incredible amounts of system tray alerts and fabricated security reports. Adware Eradicator usually enters the system by using the Zlob Trojan, which the user may find in malicious websites, typically – porn or warez – in the form of codecs. The other way of getting infected is by manual download and installation.

Once inside and active, Adware Eradicator will flood the user with popups and fake system notifications, supposedly to inform the user of an infection or multiple infections present on the system. Adware Eradicator may change settings of user‘s internet browser and redirect user into parasite promoting website. It warns users about fake infections in hopes to push people into purchasing a full version of Adware Eradicator tool.

Do you have Adware Eradicator?
If you have enough time and expertise, you can search your computer for Adware Eradicator manually. However, it might take hours to find out all files of Htepo Virus, and it is possible that Adware Eradicator will appear after rebooting, for its hidden files may still be there.

Download automatic scanner for Adware Eradicator
Spyware Cease – the technology-oriented security protection that provides a risk-free computing environment for your home and office – with detection, removal and guard in one intuitive and straight-forward interface. Only Spyware Cease gives you individual fix against the most dangerous spyware problems.

Manual Adware Eradicator removal instructions
WARNING: The manually removal method is for advanced users. Adware Eradicator manually removal can be difficult and time-consuming. There is no guarantee that Adware Eradicator can be completely removed, for there are hundreds of files generated when Adware Eradicator installed on your system. Make sure to back up your computer in case that you make any mistakes and your system does not work.

Follow the instruction below for Adware Eradicator removal manually:

Navigate and stop Adware Eradicator processes:
AdwareEradicator.exe

Navigate and Unregister Adware Eradicator DLL Files:
N/A

Navigate and Remove Adware Eradicator registry values:
HKEY_CURRENT_USER\Software\Adware Eradicator
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Adware Eradicator
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\AdwareEradicator.com

Navigate and Delete Adware Eradicator files:
%ProgramFiles%\AdwareEradicator.com
%AllUsersProfile%\Start Menu\Programs\AdwareEradicator.com
Adware Eradicator.lnk

What are the symptoms of Adware Eradicator?

  • Adware Eradicator may be promoted on adwareeradicator.com and other fraudulent web sources
  • Adware Eradicator may display system tray alerts and fabricated security reports
  • Adware Eradicator may enter the system with the help of the Zlob Trojan
  • Adware Eradicator may slow down computer process
  • Adware Eradicator may decrease system performance

How do I keep away from Adware Eradicator?
Once you have cleaned up Adware Eradicator, the most important point to prevent Adware Eradicator and future malicious programs from reverting is to stay suspicious of spam E-mail attachment and unknown websites. Here are several ways in which you can help protect your computer against Adware Eradicator and other malware:

  • Use a computer firewall
  • Confirm that you have downloaded all the latest critical security updates
  • Adjust Internet Explorer web browser’s security settings
  • Download and install anti-spyware protection, such as, Spyware Cease
  • Surf sites and download programs from the web sites you trust

What is Rogue Anti-spyware Software?
Adware Eradicator is a type of Rogue Anti-spyware Software.

Rogue Anti-spyware Software is the software that uses malware to advise or install itself through other malicious viruses or security hole without your permission. Rogue software usually pops up fake system message such as “Warning, your computer is infected! Click here to scan your computer now!” Most of the time, when clicking the “OK” button on the dialog tab, users will be directed to an unknown website that may download more spyware threats. Sometimes, even clicking the close button on the top right may lead to the installation of the rogue software, for the button is actually a link.

With the purpose to trick innocent users into the action of paying, rogue software usually counterfeits exaggerated and fake system scanning results and scare users to pay for the removal of the never-existed spyware infections. In fact, the threat is the rogue software itself. Most of them come with a bundle of very harmful spyware programs that hidden in the files themselves.

Hdrivesweeper

Posted by Emma Adrian in Blog Latest Parasite Threats, Latest Spyware Threats, Recent Articles, Top Parasite Threats on March 13th, 2009 | Leave a comment
TAGS: , ,

What is Hdrivesweeper?
Hdrivesweeper, probably a clone of XpyBurner, is a fake anti-spyware program promoted on several fraudulent websites including hdrivesweeper.com and hdrivesweeperpro.com. Hdrivesweeper tends to be installed onto a computer via Trojan applications when visiting dubious websites or whilst downloading fake video codec from questionable websites. Hdrivesweeper scans the system and reports fake results related with security problems and privacy issues to scare users into purchase its full version.

Do you have Hdrivesweeper?
If you have enough time and expertise, you can search your computer for Hdrivesweeper manually. However, it might take hours to find out all files of Hdrivesweeper, and it is possible that Hdrivesweeper will appear after rebooting, for its hidden files may still be there.

Download automatic scanner for Hdrivesweeper
Spyware Cease – the technology-oriented security protection that provides a risk-free computing environment for your home and office – with detection, removal and guard in one intuitive and straight-forward interface. Only Spyware Cease gives you individual fix against the most dangerous spyware problems.

Manual Hdrivesweeper removal instructions
WARNING: The manually removal method is for advanced users. Hdrivesweeper manually removal can be difficult and time-consuming. There is no guarantee that Hdrivesweeper can be completely removed, for there are hundreds of files generated when Hdrivesweeper installed on your system. Make sure to back up your computer in case that you make any mistakes and your system does not work.

Follow the instruction below for Hdrivesweeper removal manually:

Navigate and stop Hdrivesweeper processes:
Hdrivesweeper.exe
Uninstall.exe

Navigate and Unregister Hdrivesweeper DLL Files:
N/A

Navigate and Remove Hdrivesweeper registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\HDriveSweeper
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HDriveSweeper
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “HDriveSweeper”

Navigate and Delete Hdrivesweeper files:
c:\\Program Files\\HDriveSweeper
c:\\Program Files\\HDriveSweeper\\Base.dat
c:\\Program Files\\HDriveSweeper\\config.udb
c:\\Program Files\\HDriveSweeper\\HDriveSweeper.exe
c:\\Program Files\\HDriveSweeper\\Uninstall.exe
c:\\Program Files\\HDriveSweeper\\Fonts
c:\\Program Files\\HDriveSweeper\\Fonts\\CALIBRIZ.TTF
c:\\Program Files\\HDriveSweeper\\Languages
c:\\Program Files\\HDriveSweeper\\Languages\\English.lng
c:\\Program Files\\HDriveSweeper\\presale
c:\\Program Files\\HDriveSweeper\\presale\\index.html
c:\\Program Files\\HDriveSweeper\\presale\\style.css
c:\\Program Files\\HDriveSweeper\\presale\\img
c:\\Program Files\\HDriveSweeper\\presale\\img\\alert.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\buynow.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\cards.jpg
c:\\Program Files\\HDriveSweeper\\presale\\img\\dark_logo.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\footer_bg.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\page_bottom.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\page_center.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\page_top.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\pixel.gif
c:\\Program Files\\HDriveSweeper\\presale\\img\\retail.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\screen_1.jpg
c:\\Program Files\\HDriveSweeper\\presale\\img\\top.jpg
c:\\Program Files\\HDriveSweeper\\presale\\img\\top_bg.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\top_bg2.jpg
c:\\Program Files\\HDriveSweeper\\presale\\img\\top2-1.jpg
c:\\Program Files\\HDriveSweeper\\presale\\img\\top3.jpg
%UserProfile%\\Start Menu\\Programs\\HDriveSweeper
%UserProfile%\\Start Menu\\Programs\\HDriveSweeper\\HDriveSweeper.lnk
%UserProfile%\\Start Menu\\Programs\\HDriveSweeper\\Support
%UserProfile%\\Start Menu\\Programs\\HDriveSweeper\\Support\\Online Support.lnk
%UserProfile%\\Start Menu\\Programs\\HDriveSweeper\\Support\\Uninstall.lnk
%UserProfile%\\Start Menu\\Programs\\HDriveSweeper\\Support\\User Guide.lnk
c:\\Documents and Settings\\All Users\\Application Data\\5E489D42Bleeping.dat

What are the symptoms of Hdrivesweeper?

  • Hdrivesweeper may be promoted on several fraudulent websites
  • Hdrivesweeper may be installed via Trojan applications
  • Hdrivesweeper may display false scan results and fake security warnings
  • Hdrivesweeper may slow down computer process
  • Hdrivesweeper may decrease system performance

How do I keep away from Hdrivesweeper?
Once you have cleaned up Hdrivesweeper, the most important point to prevent Hdrivesweeper and future malicious programs from reverting is to stay suspicious of spam E-mail attachment and unknown websites. Here are several ways in which you can help protect your computer against Hdrivesweeper and other malware:

  • Use a computer firewall
  • Confirm that you have downloaded all the latest critical security updates
  • Adjust Internet Explorer web browser’s security settings
  • Download and install anti-spyware protection, such as, Spyware Cease
  • Surf sites and download programs from the web sites you trust

What is Rogue Anti-spyware Software?
Hdrivesweeper is a type of Rogue Anti-spyware Software.

Rogue Anti-spyware Software is the software that uses malware to advise or install itself through other malicious viruses or security hole without your permission. Rogue software usually pops up fake system message such as “Warning, your computer is infected! Click here to scan your computer now!” Most of the time, when clicking the “OK” button on the dialog tab, users will be directed to an unknown website that may download more spyware threats. Sometimes, even clicking the close button on the top right may lead to the installation of the rogue software, for the button is actually a link.

With the purpose to trick innocent users into the action of paying, rogue software usually counterfeits exaggerated and fake system scanning results and scare users to pay for the removal of the never-existed spyware infections. In fact, the threat is the rogue software itself. Most of them come with a bundle of very harmful spyware programs that hidden in the files themselves.

Xpy Burner

Posted by elise in Blog Latest Parasite Threats, Latest Spyware News, Latest Spyware Threats, Recent Articles, Top Parasite Threats, Top Spyware Threats on March 13th, 2009 | Leave a comment
TAGS: , , , ,

What is Xpy Burner?
Xpy Burner is a newly-released rogue anti-spyware program that uses intimidation to scare users into purchasing its licensed version. This parasite is usually installed onto PC system without user’s knowledge or content, by using the infamous Trojan Zlob, which is commonly to be found in porn or malicious websites. Trojan Zlob is additionally distinguished as a Video ActiveX Codec.

Once installed onto PC system, Xpy Burner will flood the PC system with unsolicited popup windows, supposedly to report the user of fake infections or security issues that would not be removed unless he purchases Xpy Burner.

Do you have Xpy Burner?
If you have enough time and expertise, you can search your computer for Xpy Burner manually. However, it might take hours to find out all files of Xpy Burner, and it is possible that Xpy Burner will appear after rebooting, for its hidden files may still be there.

Download automatic scanner for Xpy Burner
Spyware Cease – the technology-oriented security protection that provides a risk-free computing environment for your home and office – with detection, removal and guard in one intuitive and straight-forward interface. Only Spyware Cease gives you individual fix against the most dangerous spyware problems.

Manual Xpy Burner removal instructions
WARNING: The manually removal method is for advanced users. Xpy Burner manually removal can be difficult and time-consuming. There is no guarantee that Xpy Burner can be completely removed, for there are hundreds of files generated when Xpy Burner installed on your system. Make sure to back up your computer in case that you make any mistakes and your system does not work.

Follow the instructions below for Xpy Burner removal manually:

Navigate and stop the Xpy Burner processes:
xpyburner.exe
XpyBurner_Setup[1].exe
Uninstall.exe

Navigate and delete Xpy Burner files:
c:\Program Files\XpyBurner
c:\Program Files\XpyBurner\base.dat
c:\Program Files\XpyBurner\config.udb
c:\Program Files\XpyBurner\Uninstall.exe
c:\Program Files\XpyBurner\XpyBurner.exe
c:\Program Files\XpyBurner\Fonts
c:\Program Files\XpyBurner\Fonts\segoeui.ttf
c:\Program Files\XpyBurner\Languages
c:\Program Files\XpyBurner\Languages\English.ini
c:\Program Files\XpyBurner\Languages\German.ini
c:\Program Files\XpyBurner\Languages\Spanish.ini
c:\Program Files\XpyBurner\presale
c:\Program Files\XpyBurner\presale\index.html
c:\Program Files\XpyBurner\presale\orig_files
c:\Program Files\XpyBurner\presale\orig_files\arrow000.gif
c:\Program Files\XpyBurner\presale\orig_files\bodybg00.gif
c:\Program Files\XpyBurner\presale\orig_files\buy00000.jpg
c:\Program Files\XpyBurner\presale\orig_files\cards000.jpg
c:\Program Files\XpyBurner\presale\orig_files\footerbg.jpg
c:\Program Files\XpyBurner\presale\orig_files\footerlo.jpg
c:\Program Files\XpyBurner\presale\orig_files\kor00000.jpg
c:\Program Files\XpyBurner\presale\orig_files\logo0000.jpg
c:\Program Files\XpyBurner\presale\orig_files\marker00.gif
c:\Program Files\XpyBurner\presale\orig_files\mb000000.jpg
c:\Program Files\XpyBurner\presale\orig_files\per00000.gif
c:\Program Files\XpyBurner\presale\orig_files\per-gor0.gif
c:\Program Files\XpyBurner\presale\orig_files\presale_.css
c:\Program Files\XpyBurner\presale\orig_files\pusto000.gif
c:\Program Files\XpyBurner\presale\orig_files\sg000000.jpg
c:\Program Files\XpyBurner\presale\orig_files\wp000000.jpg
c:\Documents and Settings\All Users\Application Data\4D4F0157Bleeping.dat
%UserProfile%\Start Menu\Programs\XpyBurner
%UserProfile%\Start Menu\Programs\XpyBurner\XpyBurner.lnk
%UserProfile%\Start Menu\Programs\XpyBurner\Support
%UserProfile%\Start Menu\Programs\XpyBurner\Support\Online Support.lnk
%UserProfile%\Start Menu\Programs\XpyBurner\Support\Uninstall.lnk
%UserProfile%\Start Menu\Programs\XpyBurner\Support\User Guide.lnk

Navigate and remove Xpy Burner registry keys
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XpyBurner
HKEY_LOCAL_MACHINE\SOFTWARE\XpyBurner
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “XpyBurner”

What are the symptoms of Xpy Burner?

  • Xpy Burner may change browser settings
  • Xpy Burner may show commercial adverts
  • Xpy Burner may connect itself to the internet
  • Xpy Burner may hide from the user

How do I keep away from Xpy Burner
Once you have cleaned up Xpy Burner, the most important point to prevent Xpy Burner and future malicious programs from reverting is to stay suspicious of spam E-mail attachment and unknown websites. Here are several ways in which you can help protect your computer against Xpy Burner and other malware:

  • Use a computer firewall
  • Confirm that you have downloaded all the latest critical security updates
  • Adjust Internet Explorer web browser’s security settings
  • Download and install anti-spyware protection, such as, Spyware Cease
  • Surf sites and download programs from the web sites you trust

What is Rogue Anti-spyware Software?
Xpy Burner is a type of Rogue Anti-spyware Software.

Rogue Anti-spyware Software is the software that uses malware to advise or install itself through other malicious viruses or security hole without your permission. Rogue software usually pops up fake system message such as “Warning, your computer is infected! Click here to scan your computer now!” Most of the time, when clicking the “OK” button on the dialog tab, users will be directed to an unknown website that may download more spyware threats. Sometimes, even clicking the close button on the top right may lead to the installation of the rogue software, for the button is actually a link.

With the purpose to trick innocent users into the action of paying, rogue software usually counterfeits exaggerated and fake system scanning results and scare users to pay for the removal of the never-existed spyware infections. In fact, the threat is the rogue software itself. Most of them come with a bundle of very harmful spyware programs that hidden in the files themselves.

My Supervisor2009

Posted by elise in Blog Latest Parasite Threats, Latest Spyware News, Latest Spyware Threats, Recent Articles, Top Parasite Threats, Top Spyware Threats on March 12th, 2009 | 1 Comment
TAGS: , , , ,

What is My Supervisor2009?
My Supervisor2009 is a rogue anti-spyware program consisting of fake privacy scanner, registry cleaner and auto-run manager. Like most anti-spyware programs, My Supervisor2009 will display a fake system scan and show up a list of various fake results, in order to scare the users to buy its full version. This program also claims to be the most effective anti-spyware remover, which is able to detect and terminate all threats from the infected machine. However, My Supervisor2009 is actually a dangerous parasite that may take up system resources and crash your PC.

After installing onto PC system, My Supervisor2009 automatically runs system scan whenever Windows system startup. Then it floods the system with fake popped up alerts and messages. Once clicking on the link on the popup windows, you may be redirected to its purchase page.

Do you have My Supervisor2009?
If you have enough time and expertise, you can search your computer for My Supervisor2009 manually. However, it might take hours to find out all files of My Supervisor2009, and it is possible that My Supervisor2009 will appear after rebooting, for its hidden files may still be there.

Download automatic scanner for My Supervisor2009
Spyware Cease – the technology-oriented security protection that provides a risk-free computing environment for your home and office – with detection, removal and guard in one intuitive and straight-forward interface. Only Spyware Cease gives you individual fix against the most dangerous spyware problems.

Manual My Supervisor2009 removal instructions
WARNING: The manually removal method is for advanced users. My Supervisor2009 manually removal can be difficult and time-consuming. There is no guarantee that My Supervisor2009 can be completely removed, for there are hundreds of files generated when My Supervisor2009 installed on your system. Make sure to back up your computer in case that you make any mistakes and your system does not work.

Follow the instructions below for My Supervisor2009 removal manually:

Navigate and stop the My Supervisor2009 processes:
unins000.exe
MSup1bf7.exe

Navigate and delete My Supervisor2009 files:
%UserProfile%\\Desktop\\ProcessManager.lnk
%UserProfile%\\Desktop\\AutorunManager.lnk
%UserProfile%\\Desktop\\ServiceManager.lnk
%UserProfile%\\Desktop\\My Supervisor.lnk
%UserProfile%\\Application Data\\My Supervisor\\Process.ico
%UserProfile%\\Application Data\\My Supervisor\\Autorun.ico
%UserProfile%\\Application Data\\My Supervisor\\Service.ico
%UserProfile%\\Application Data\\My Supervisor\\uill.ini
%UserProfile%\\Application Data\\My Supervisor\\settings.ini
%UserProfile%\\Application Data\\My Supervisor
%Documents and Settings%\\All Users\\Application Data\\Data Files\\config.cfg
%Documents and Settings%\\All Users\\Application Data\\Data Files
%Documents and Settings%\\All Users\\Application Data\\2dcb\\Data Files
%Documents and Settings%\\All Users\\Application Data\\2dcb\\unins000.dat
%Documents and Settings%\\All Users\\Application Data\\2dcb\\working.log
%Documents and Settings%\\All Users\\Application Data\\2dcb\\sqlite3.dll
%Documents and Settings%\\All Users\\Application Data\\2dcb\\mozcrt19.dll
%Documents and Settings%\\All Users\\Application Data\\2dcb\\unins000.exe
%Documents and Settings%\\All Users\\Application Data\\2dcb\\MSup1bf7.exe
%Documents and Settings%\\All Users\\Application Data\\2dcb

Navigate and remove My Supervisor2009 registry keys
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “URWSWR[]”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\My Supervisor_is1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “My Supervisor”

What are the symptoms of My Supervisor2009?

  • My Supervisor2009 may change browser settings
  • My Supervisor2009 may show commercial adverts
  • My Supervisor2009 may connect itself to the internet
  • My Supervisor2009 may hide from the user

How do I keep away from My Supervisor2009
Once you have cleaned up My Supervisor2009, the most important point to prevent My Supervisor2009 and future malicious programs from reverting is to stay suspicious of spam E-mail attachment and unknown websites. Here are several ways in which you can help protect your computer against My Supervisor2009 and other malware:

  • Use a computer firewall
  • Confirm that you have downloaded all the latest critical security updates
  • Adjust Internet Explorer web browser’s security settings
  • Download and install anti-spyware protection, such as, Spyware Cease
  • Surf sites and download programs from the web sites you trust

What is Rogue Anti-spyware Software?
My Supervisor2009 is a type of Rogue Anti-spyware Software.

Rogue Anti-spyware Software is the software that uses malware to advise or install itself through other malicious viruses or security hole without your permission. Rogue software usually pops up fake system message such as “Warning, your computer is infected! Click here to scan your computer now!” Most of the time, when clicking the “OK” button on the dialog tab, users will be directed to an unknown website that may download more spyware threats. Sometimes, even clicking the close button on the top right may lead to the installation of the rogue software, for the button is actually a link.

With the purpose to trick innocent users into the action of paying, rogue software usually counterfeits exaggerated and fake system scanning results and scare users to pay for the removal of the never-existed spyware infections. In fact, the threat is the rogue software itself. Most of them come with a bundle of very harmful spyware programs that hidden in the files themselves.