Personal Antivirus

Posted by Emma Adrian in Blog Latest Spyware Threats, Recent Articles, Top Spyware Threats on May 4th, 2009 | Leave a comment
TAGS: , ,

What is Personal Antivirus?
Personal Antivirus is a new rogue anti-spyware tool and a clone of General Antivirus and Internet Antivirus Pro. Advertised through the use of Trojans, Personal Antivirus is able to pop up fake security alerts about infections that supposedly inhabit your machine. When you click on these alerts, Personal Antivirus will be installed on your computer and automatically be configured to run when you start Windows. When running, it will scan your computer and display a variety of infections that cannot be removed unless you first purchase the program.

Actually, Personal Antivirus can not remove any actual infections because it’s not developed on a legitimate antivirus engine. On the other hand, though, ignoring Personal Antivirus in your system will soon turn its obsessive pranks into a major system disruption and further malware invasion resulting in getting your privacy violated. Therefore, it’s highly recommended to remove Personal Antivirus once you spot its signs on your computer.

Do you have Personal Antivirus?
If you have enough time and expertise, you can search your computer for Personal Antivirus manually. However, it might take hours to find out all files of Htepo Virus, and it is possible that Personal Antivirus will appear after rebooting, for its hidden files may still be there.

Download automatic scanner for Personal Antivirus
Spyware Cease – the technology-oriented security protection that provides a risk-free computing environment for your home and office – with detection, removal and guard in one intuitive and straight-forward interface. Only Spyware Cease gives you individual fix against the most dangerous spyware problems.

Manual Personal Antivirus removal instructions
WARNING: The manually removal method is for advanced users. Personal Antivirus manually removal can be difficult and time-consuming. There is no guarantee that Personal Antivirus can be completely removed, for there are hundreds of files generated when Personal Antivirus installed on your system. Make sure to back up your computer in case that you make any mistakes and your system does not work.

Follow the instruction below for Personal Antivirus removal manually:

Navigate and stop Personal Antivirus processes:
PerAvir.exe
iv.exe

Navigate and Unregister Personal Antivirus DLL Files:
N/A

Navigate and Remove Personal Antivirus registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Personal Antivirus”

Navigate and Delete Personal Antivirus files:
C:\Documents and Settings\All Users\Desktop\Personal Antivirus.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus
C:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus Home Page.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Personal Antivirus\Purchase License.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Personal Antivirus.lnk
%UserProfile%\Application Data\Personal Antivirus
%UserProfile%\Application Data\Personal Antivirus\settings.ini
%UserProfile%\Application Data\Personal Antivirus\uill.ini
%UserProfile%\Application Data\Personal Antivirus\unins000.exe
%UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk
%UserProfile%\Application Data\Personal Antivirus\db
%UserProfile%\Application Data\Personal Antivirus\db\config.cfg
%UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf
%UserProfile%\Application Data\Personal Antivirus\db\Urls.inf
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
C:\Program Files\Personal Antivirus
C:\Program Files\Personal Antivirus\activate.ico
C:\Program Files\Personal Antivirus\Explorer.ico
C:\Program Files\Personal Antivirus\PerAvir.exe
C:\Program Files\Personal Antivirus\unins000.dat
C:\Program Files\Personal Antivirus\uninstall.ico
C:\Program Files\Personal Antivirus\working.log
C:\Program Files\Personal Antivirus\db
C:\Program Files\Personal Antivirus\db\DBInfo.ver
C:\Program Files\Personal Antivirus\db\ia080614.db
C:\Program Files\Personal Antivirus\db\ia080618x.db
C:\Program Files\Personal Antivirus\Languages
C:\Program Files\Personal Antivirus\Languages\IAEs.lng
C:\Program Files\Personal Antivirus\Languages\IAFr.lng
C:\Program Files\Personal Antivirus\Languages\IAGer.lng
C:\Program Files\Personal Antivirus\Languages\IAIt.lng
%UserProfile%\Application Data\Microsoft\Windows\winlogon.exe
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe

What are the symptoms of Personal Antivirus?

  • Personal Antivirus may be advertised through the use of Trojans
  • Personal Antivirus may pop up fake security alerts about infections
  • Personal Antivirus may automatically run when you start Windows
  • Personal Antivirus may cause privacy violated
  • Personal Antivirus may cause the system damage

How do I keep away from Personal Antivirus?
Once you have cleaned up Personal Antivirus, the most important point to prevent Personal Antivirus and future malicious programs from reverting is to stay suspicious of spam E-mail attachment and unknown websites. Here are several ways in which you can help protect your computer against Personal Antivirus and other malware:

  • Use a computer firewall
  • Confirm that you have downloaded all the latest critical security updates
  • Adjust Internet Explorer web browser’s security settings
  • Download and install anti-spyware protection, such as, Spyware Cease
  • Surf sites and download programs from the web sites you trust

What is Rogue Anti-spyware Software?
Personal Antivirus is a type of Rogue Anti-spyware Software.

Rogue Anti-spyware Software is the software that uses malware to advise or install itself through other malicious viruses or security hole without your permission. Rogue software usually pops up fake system message such as “Warning, your computer is infected! Click here to scan your computer now!” Most of the time, when clicking the “OK” button on the dialog tab, users will be directed to an unknown website that may download more spyware threats. Sometimes, even clicking the close button on the top right may lead to the installation of the rogue software, for the button is actually a link.

With the purpose to trick innocent users into the action of paying, rogue software usually counterfeits exaggerated and fake system scanning results and scare users to pay for the removal of the never-existed spyware infections. In fact, the threat is the rogue software itself. Most of them come with a bundle of very harmful spyware programs that hidden in the files themselves.

Total Security

Posted by Emma Adrian in Blog Latest Parasite Threats, Latest Spyware Threats, Recent Articles, Top Parasite Threats, Top Spyware Threats on March 25th, 2009 | 1 Comment
TAGS: , ,

What is Total Security?
Total Security, a clone of another fake anti-spyware tool called Antivirus 360, is a rogue anti-spyware program that usually performs fake system scan and displays various false infections. Total Security may access the system without user’s knowledge and permission, and is usually installed via Trojan viruses. Total Security program is not going to clean your computer from spyware as it claims but might actually expose you to more security threats. Beware of Powerfullantivirusproduct.com, because it’s a noxious website, designed to promote Total Security.

Once installed and running, Total Security will scan your computer, display a variety of infections, and constantly barrage you with nag screens and fake security warnings about problems on your computer. What’s more, Total Security may also show a window labeled Total Security Protection Center that impersonates the legitimate Windows Security Center. This protection center states that your computer has no protection and recommends that you purchase Total Security. All the despicable actions of Total Security are in the attempts to promote users to purchase its useless full version.

Do you have Total Security?
If you have enough time and expertise, you can search your computer for Total Security manually. However, it might take hours to find out all files of Htepo Virus, and it is possible that Total Security will appear after rebooting, for its hidden files may still be there.

Download automatic scanner for Total Security
Spyware Cease – the technology-oriented security protection that provides a risk-free computing environment for your home and office – with detection, removal and guard in one intuitive and straight-forward interface. Only Spyware Cease gives you individual fix against the most dangerous spyware problems.

Manual Total Security removal instructions
WARNING: The manually removal method is for advanced users. Total Security manually removal can be difficult and time-consuming. There is no guarantee that Total Security can be completely removed, for there are hundreds of files generated when Total Security installed on your system. Make sure to back up your computer in case that you make any mistakes and your system does not work.

Follow the instruction below for Total Security removal manually:

Navigate and stop Total Security processes:
%PROGRAMFILES%\TSC\tsc.exe
tsc.exe
Sc2C21UvvM.exe

Navigate and Unregister Total Security DLL Files:
%SYSTEMROOT%\system32\winsource.dll
winsource.dll

Navigate and Remove Total Security registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “1FD92E3F7C34799BFB075C41DA05D1FE”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″
HKEY_CLASSES_ROOT\CLSID\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}
HKEY_CURRENT_USER\Software\1FD92E3F7C34799BFB075C41DA05D1FE

Navigate and Delete Total Security files:
Registration.lnk
Uninstall TSC.lnk
TSC.lnk
Help.lnk
tsc.exe
winsource.dll
Sc2C21UvvM.exe
%PROGRAMFILES%\TSC\tsc.exe
%SYSTEMROOT%\system32\winsource.dll

What are the symptoms of Total Security?

  • Total Security may perform fake system scan and display various false infections
  • Total Security may be installed via Trojan viruses and promoted on Powerfullantivirusproduct.com
  • Total Security may impersonate the legitimate Windows Security Center to scare users
  • Total Security may slow down computer process
  • Total Security may decrease system performance

How do I keep away from Total Security?
Once you have cleaned up Total Security, the most important point to prevent Total Security and future malicious programs from reverting is to stay suspicious of spam E-mail attachment and unknown websites. Here are several ways in which you can help protect your computer against Total Security and other malware:

  • Use a computer firewall
  • Confirm that you have downloaded all the latest critical security updates
  • Adjust Internet Explorer web browser’s security settings
  • Download and install anti-spyware protection, such as, Spyware Cease
  • Surf sites and download programs from the web sites you trust

What is Rogue Anti-spyware Software?
Total Security is a type of Rogue Anti-spyware Software.

Rogue Anti-spyware Software is the software that uses malware to advise or install itself through other malicious viruses or security hole without your permission. Rogue software usually pops up fake system message such as “Warning, your computer is infected! Click here to scan your computer now!” Most of the time, when clicking the “OK” button on the dialog tab, users will be directed to an unknown website that may download more spyware threats. Sometimes, even clicking the close button on the top right may lead to the installation of the rogue software, for the button is actually a link.

With the purpose to trick innocent users into the action of paying, rogue software usually counterfeits exaggerated and fake system scanning results and scare users to pay for the removal of the never-existed spyware infections. In fact, the threat is the rogue software itself. Most of them come with a bundle of very harmful spyware programs that hidden in the files themselves.

TrackZapper

Posted by Emma Adrian in Blog Latest Parasite Threats, Latest Spyware Threats, Recent Articles, Top Parasite Threats, Top Spyware Threats on March 24th, 2009 | 1 Comment
TAGS: , ,

What is TrackZapper?
TrackZapper is a rogue spyware program that gives exaggerated reports that the computer contains adware and spyware, with the aim to frighten you into purchasing the program. Track Zapper offers “TrackZapper Spyware-Adware Remover”, “TrackZapper SystemCleanser”, “TrackZapper Personal Firewall”, “TrackZapper Shredder”, “TrackZapper Privacy Guard”, “TrackZapper Anti Spam Filter”, “TrackZapper Popup Killer and Ads Filter” and “TrackZapper Phishing Zapper” tools. Actually, this parasite is not able to remove or detect effectively anything, and it just attempts to steal your money and open your computer to a variety of serious security problems which include surprise downloads and intrusive hacking attempts.

Do you have TrackZapper?
If you have enough time and expertise, you can search your computer for TrackZapper manually. However, it might take hours to find out all files of Htepo Virus, and it is possible that TrackZapper will appear after rebooting, for its hidden files may still be there.

Download automatic scanner for TrackZapper
Spyware Cease – the technology-oriented security protection that provides a risk-free computing environment for your home and office – with detection, removal and guard in one intuitive and straight-forward interface. Only Spyware Cease gives you individual fix against the most dangerous spyware problems.

Manual TrackZapper removal instructions
WARNING: The manually removal method is for advanced users. TrackZapper manually removal can be difficult and time-consuming. There is no guarantee that TrackZapper can be completely removed, for there are hundreds of files generated when TrackZapper installed on your system. Make sure to back up your computer in case that you make any mistakes and your system does not work.

Follow the instruction below for TrackZapper removal manually:

Navigate and stop TrackZapper processes:
SpyRem.exe
unins000.exe
update.exe

Navigate and Unregister TrackZapper DLL Files:
Core.dll

Navigate and Remove TrackZapper registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4222FB6A-87F1-4867-8639-3B07B79B2EA2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{509F840C-8FBE-4B39-8135-7AE4F77211BE}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7E0EA78D-E2BD-4DC4-8139-3C80FEA5388C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BE09D09-4A7B-4CC9-A729-A0142C7DF45B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{921064A0-DA49-40B6-B8CE-0E9F3C925E2D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B46BB0D4-73BC-426F-822D-06CF4D5D5AE9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCAF88BD-430E-4735-84DA-87B2BCA2420E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DE9BE0B6-6282-45C1-89E0-6DC449033B23}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F01F5B97-4493-47C7-881E-17C065B899EC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1AE04A0C-8523-47DE-AA0C-1A752BAC0C3C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{23E12DDE-E63E-4D03-B92A-5A9FBD2AAC56}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{250191B9-C470-4496-BE0B-328A9828B13F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{335F2B2A-95EE-4D5E-964C-92DB7CD9AB4F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3CF06A51-25CB-4AC1-8B2B-68939764841B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3DC35E00-E545-4874-8F22-8509077849FE}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4A10974A-BE32-4C5D-959C-7CB2A2EC7A47}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6EBFEFE7-4A25-43E9-8DA9-1B2050D6B40F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{79534873-72F1-4EF4-80B1-81DC825FB29A}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7A571EF3-BA6F-4883-8089-ED150079D1E8}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{853958CB-4ABD-4425-90E8-481BF6F50BE3}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E64C74F7-7A0B-4CDB-A948-0BBB54AF4D76}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E9BE9673-6933-45D7-8478-7A521DA5CF0F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EA8AF03F-D635-4007-9430-A82DAE65F7A1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F8D7C39B-B275-44D3-9758-08DC48A52124}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{5466CEC7-55DE-4245-A6B6-CFA8CCCB89DC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.Backup
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.Error
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.Loading
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.Remove
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.Scan
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.Shield
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.ThreadControl
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.ThreadLaunch
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.Worker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TZ Spyware Remover_is1
HKEY_USERS\S-1-5-21-1343024091-1336601894-839522115-500\Software\TZ Spyware Remover
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\TZ Spyware Remover

Navigate and Delete TrackZapper files:
C:\Documents and Settings\Administrator\Desktop\TZ Spyware Remover.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\TrackZapper.com\TZ Spyware Remover\Help.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\TrackZapper.com\TZ Spyware Remover\TZ Spyware-Adware Remover.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\TrackZapper.com\TZ Spyware Remover\Uninstall.lnk
C:\Program Files\TrackZapper.com\TZ Spyware Remover\Box.tz
C:\Program Files\TrackZapper.com\TZ Spyware Remover\DataBase.ini
C:\Program Files\TrackZapper.com\TZ Spyware Remover\DB.tz
C:\Program Files\TrackZapper.com\TZ Spyware Remover\DB1.tz
C:\Program Files\TrackZapper.com\TZ Spyware Remover\DB2.tz
C:\Program Files\TrackZapper.com\TZ Spyware Remover\DB3.tz
C:\Program Files\TrackZapper.com\TZ Spyware Remover\DB4.tz
C:\Program Files\TrackZapper.com\TZ Spyware Remover\DB5.tz
C:\Program Files\TrackZapper.com\TZ Spyware Remover\English.inf
C:\Program Files\TrackZapper.com\TZ Spyware Remover\English.jpg
C:\Program Files\TrackZapper.com\TZ Spyware Remover\folders.tz
C:\Program Files\TrackZapper.com\TZ Spyware Remover\guard.tz
C:\Program Files\TrackZapper.com\TZ Spyware Remover\Help.chm
C:\Program Files\TrackZapper.com\TZ Spyware Remover\home.tz
C:\Program Files\TrackZapper.com\TZ Spyware Remover\Progress.tz
C:\Program Files\TrackZapper.com\TZ Spyware Remover\Purchase.tz
C:\Program Files\TrackZapper.com\TZ Spyware Remover\scanning.tz
C:\Program Files\TrackZapper.com\TZ Spyware Remover\Splash.spl
C:\Program Files\TrackZapper.com\TZ Spyware Remover\update.cli
C:\Program Files\TrackZapper.com\TZ Spyware Remover\unins000.dat
C:\Program Files\TrackZapper.com\TZ Spyware Remover\Core.dll
C:\Program Files\TrackZapper.com\TZ Spyware Remover\SpyRem.exe
C:\Program Files\TrackZapper.com\TZ Spyware Remover\unins000.exe
C:\Program Files\TrackZapper.com\TZ Spyware Remover\update.exe

What are the symptoms of TrackZapper?

  • TrackZapper may display exaggerated reports and warnings
  • TrackZapper may be advertised via scare tactics to mislead users
  • TrackZapper may slow down computer process
  • TrackZapper may decrease system performance

How do I keep away from TrackZapper?
Once you have cleaned up TrackZapper, the most important point to prevent TrackZapper and future malicious programs from reverting is to stay suspicious of spam E-mail attachment and unknown websites. Here are several ways in which you can help protect your computer against TrackZapper and other malware:

  • Use a computer firewall
  • Confirm that you have downloaded all the latest critical security updates
  • Adjust Internet Explorer web browser’s security settings
  • Download and install anti-spyware protection, such as, Spyware Cease
  • Surf sites and download programs from the web sites you trust

What is Rogue Anti-spyware Software?
TrackZapper is a type of Rogue Anti-spyware Software.

Rogue Anti-spyware Software is the software that uses malware to advise or install itself through other malicious viruses or security hole without your permission. Rogue software usually pops up fake system message such as “Warning, your computer is infected! Click here to scan your computer now!” Most of the time, when clicking the “OK” button on the dialog tab, users will be directed to an unknown website that may download more spyware threats. Sometimes, even clicking the close button on the top right may lead to the installation of the rogue software, for the button is actually a link.

With the purpose to trick innocent users into the action of paying, rogue software usually counterfeits exaggerated and fake system scanning results and scare users to pay for the removal of the never-existed spyware infections. In fact, the threat is the rogue software itself. Most of them come with a bundle of very harmful spyware programs that hidden in the files themselves.

Adware Eradicator

Posted by Emma Adrian in Blog Latest Parasite Threats, Recent Articles, Top Parasite Threats, Top Spyware Threats on March 18th, 2009 | Leave a comment
TAGS: , ,

What is Adware Eradicator?
Adware Eradicator is a rogue anti-spyware program promoted on adwareeradicator.com and other fraudulent web sources. Adware Eradicator imitates online scan and loads incredible amounts of system tray alerts and fabricated security reports. Adware Eradicator usually enters the system by using the Zlob Trojan, which the user may find in malicious websites, typically – porn or warez – in the form of codecs. The other way of getting infected is by manual download and installation.

Once inside and active, Adware Eradicator will flood the user with popups and fake system notifications, supposedly to inform the user of an infection or multiple infections present on the system. Adware Eradicator may change settings of user‘s internet browser and redirect user into parasite promoting website. It warns users about fake infections in hopes to push people into purchasing a full version of Adware Eradicator tool.

Do you have Adware Eradicator?
If you have enough time and expertise, you can search your computer for Adware Eradicator manually. However, it might take hours to find out all files of Htepo Virus, and it is possible that Adware Eradicator will appear after rebooting, for its hidden files may still be there.

Download automatic scanner for Adware Eradicator
Spyware Cease – the technology-oriented security protection that provides a risk-free computing environment for your home and office – with detection, removal and guard in one intuitive and straight-forward interface. Only Spyware Cease gives you individual fix against the most dangerous spyware problems.

Manual Adware Eradicator removal instructions
WARNING: The manually removal method is for advanced users. Adware Eradicator manually removal can be difficult and time-consuming. There is no guarantee that Adware Eradicator can be completely removed, for there are hundreds of files generated when Adware Eradicator installed on your system. Make sure to back up your computer in case that you make any mistakes and your system does not work.

Follow the instruction below for Adware Eradicator removal manually:

Navigate and stop Adware Eradicator processes:
AdwareEradicator.exe

Navigate and Unregister Adware Eradicator DLL Files:
N/A

Navigate and Remove Adware Eradicator registry values:
HKEY_CURRENT_USER\Software\Adware Eradicator
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Adware Eradicator
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\AdwareEradicator.com

Navigate and Delete Adware Eradicator files:
%ProgramFiles%\AdwareEradicator.com
%AllUsersProfile%\Start Menu\Programs\AdwareEradicator.com
Adware Eradicator.lnk

What are the symptoms of Adware Eradicator?

  • Adware Eradicator may be promoted on adwareeradicator.com and other fraudulent web sources
  • Adware Eradicator may display system tray alerts and fabricated security reports
  • Adware Eradicator may enter the system with the help of the Zlob Trojan
  • Adware Eradicator may slow down computer process
  • Adware Eradicator may decrease system performance

How do I keep away from Adware Eradicator?
Once you have cleaned up Adware Eradicator, the most important point to prevent Adware Eradicator and future malicious programs from reverting is to stay suspicious of spam E-mail attachment and unknown websites. Here are several ways in which you can help protect your computer against Adware Eradicator and other malware:

  • Use a computer firewall
  • Confirm that you have downloaded all the latest critical security updates
  • Adjust Internet Explorer web browser’s security settings
  • Download and install anti-spyware protection, such as, Spyware Cease
  • Surf sites and download programs from the web sites you trust

What is Rogue Anti-spyware Software?
Adware Eradicator is a type of Rogue Anti-spyware Software.

Rogue Anti-spyware Software is the software that uses malware to advise or install itself through other malicious viruses or security hole without your permission. Rogue software usually pops up fake system message such as “Warning, your computer is infected! Click here to scan your computer now!” Most of the time, when clicking the “OK” button on the dialog tab, users will be directed to an unknown website that may download more spyware threats. Sometimes, even clicking the close button on the top right may lead to the installation of the rogue software, for the button is actually a link.

With the purpose to trick innocent users into the action of paying, rogue software usually counterfeits exaggerated and fake system scanning results and scare users to pay for the removal of the never-existed spyware infections. In fact, the threat is the rogue software itself. Most of them come with a bundle of very harmful spyware programs that hidden in the files themselves.

Hdrivesweeper

Posted by Emma Adrian in Blog Latest Parasite Threats, Latest Spyware Threats, Recent Articles, Top Parasite Threats on March 13th, 2009 | Leave a comment
TAGS: , ,

What is Hdrivesweeper?
Hdrivesweeper, probably a clone of XpyBurner, is a fake anti-spyware program promoted on several fraudulent websites including hdrivesweeper.com and hdrivesweeperpro.com. Hdrivesweeper tends to be installed onto a computer via Trojan applications when visiting dubious websites or whilst downloading fake video codec from questionable websites. Hdrivesweeper scans the system and reports fake results related with security problems and privacy issues to scare users into purchase its full version.

Do you have Hdrivesweeper?
If you have enough time and expertise, you can search your computer for Hdrivesweeper manually. However, it might take hours to find out all files of Hdrivesweeper, and it is possible that Hdrivesweeper will appear after rebooting, for its hidden files may still be there.

Download automatic scanner for Hdrivesweeper
Spyware Cease – the technology-oriented security protection that provides a risk-free computing environment for your home and office – with detection, removal and guard in one intuitive and straight-forward interface. Only Spyware Cease gives you individual fix against the most dangerous spyware problems.

Manual Hdrivesweeper removal instructions
WARNING: The manually removal method is for advanced users. Hdrivesweeper manually removal can be difficult and time-consuming. There is no guarantee that Hdrivesweeper can be completely removed, for there are hundreds of files generated when Hdrivesweeper installed on your system. Make sure to back up your computer in case that you make any mistakes and your system does not work.

Follow the instruction below for Hdrivesweeper removal manually:

Navigate and stop Hdrivesweeper processes:
Hdrivesweeper.exe
Uninstall.exe

Navigate and Unregister Hdrivesweeper DLL Files:
N/A

Navigate and Remove Hdrivesweeper registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\HDriveSweeper
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HDriveSweeper
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “HDriveSweeper”

Navigate and Delete Hdrivesweeper files:
c:\\Program Files\\HDriveSweeper
c:\\Program Files\\HDriveSweeper\\Base.dat
c:\\Program Files\\HDriveSweeper\\config.udb
c:\\Program Files\\HDriveSweeper\\HDriveSweeper.exe
c:\\Program Files\\HDriveSweeper\\Uninstall.exe
c:\\Program Files\\HDriveSweeper\\Fonts
c:\\Program Files\\HDriveSweeper\\Fonts\\CALIBRIZ.TTF
c:\\Program Files\\HDriveSweeper\\Languages
c:\\Program Files\\HDriveSweeper\\Languages\\English.lng
c:\\Program Files\\HDriveSweeper\\presale
c:\\Program Files\\HDriveSweeper\\presale\\index.html
c:\\Program Files\\HDriveSweeper\\presale\\style.css
c:\\Program Files\\HDriveSweeper\\presale\\img
c:\\Program Files\\HDriveSweeper\\presale\\img\\alert.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\buynow.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\cards.jpg
c:\\Program Files\\HDriveSweeper\\presale\\img\\dark_logo.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\footer_bg.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\page_bottom.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\page_center.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\page_top.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\pixel.gif
c:\\Program Files\\HDriveSweeper\\presale\\img\\retail.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\screen_1.jpg
c:\\Program Files\\HDriveSweeper\\presale\\img\\top.jpg
c:\\Program Files\\HDriveSweeper\\presale\\img\\top_bg.png
c:\\Program Files\\HDriveSweeper\\presale\\img\\top_bg2.jpg
c:\\Program Files\\HDriveSweeper\\presale\\img\\top2-1.jpg
c:\\Program Files\\HDriveSweeper\\presale\\img\\top3.jpg
%UserProfile%\\Start Menu\\Programs\\HDriveSweeper
%UserProfile%\\Start Menu\\Programs\\HDriveSweeper\\HDriveSweeper.lnk
%UserProfile%\\Start Menu\\Programs\\HDriveSweeper\\Support
%UserProfile%\\Start Menu\\Programs\\HDriveSweeper\\Support\\Online Support.lnk
%UserProfile%\\Start Menu\\Programs\\HDriveSweeper\\Support\\Uninstall.lnk
%UserProfile%\\Start Menu\\Programs\\HDriveSweeper\\Support\\User Guide.lnk
c:\\Documents and Settings\\All Users\\Application Data\\5E489D42Bleeping.dat

What are the symptoms of Hdrivesweeper?

  • Hdrivesweeper may be promoted on several fraudulent websites
  • Hdrivesweeper may be installed via Trojan applications
  • Hdrivesweeper may display false scan results and fake security warnings
  • Hdrivesweeper may slow down computer process
  • Hdrivesweeper may decrease system performance

How do I keep away from Hdrivesweeper?
Once you have cleaned up Hdrivesweeper, the most important point to prevent Hdrivesweeper and future malicious programs from reverting is to stay suspicious of spam E-mail attachment and unknown websites. Here are several ways in which you can help protect your computer against Hdrivesweeper and other malware:

  • Use a computer firewall
  • Confirm that you have downloaded all the latest critical security updates
  • Adjust Internet Explorer web browser’s security settings
  • Download and install anti-spyware protection, such as, Spyware Cease
  • Surf sites and download programs from the web sites you trust

What is Rogue Anti-spyware Software?
Hdrivesweeper is a type of Rogue Anti-spyware Software.

Rogue Anti-spyware Software is the software that uses malware to advise or install itself through other malicious viruses or security hole without your permission. Rogue software usually pops up fake system message such as “Warning, your computer is infected! Click here to scan your computer now!” Most of the time, when clicking the “OK” button on the dialog tab, users will be directed to an unknown website that may download more spyware threats. Sometimes, even clicking the close button on the top right may lead to the installation of the rogue software, for the button is actually a link.

With the purpose to trick innocent users into the action of paying, rogue software usually counterfeits exaggerated and fake system scanning results and scare users to pay for the removal of the never-existed spyware infections. In fact, the threat is the rogue software itself. Most of them come with a bundle of very harmful spyware programs that hidden in the files themselves.