My Anti Spyware

How to remove Personal Defender 2009

Personal Defender 2009 is a rogue antispyware application. It uses the trojans and advertising for the hit on your computer. In both cases, your PC will display false alerts with a warning that you must download and install Personal Defender 2009 to protect your computer.

During installation, it configures itself to run automatically every time, when you start your computer. Once running, Personal Defender 2009 will scan your computer and reports false or exaggerated system security threats on the computer that cannot be removed unless you first purchase the software. Do not do it!

Symptoms in a HijackThis Log:

O4 - HKLM\..\Run: [Personal Defender 2009] “C:\Program Files\Personal Defender 2009\pdefendr.exe”

Use the following instructions to remove PersonalDefender2009.
Continue reading How to remove Personal Defender 2009…

How to remove WinDefender 2009

WinDefender2009 is a rogue antispyware application. Looks like Total Secure 2009. It uses a trojans to advertise itself. After infection, the trojans showed warning that the computer is infected and you should download and install WinDefender 2009 that protects your computer.

During installation, WinDefender 2009 configures itself to run automatically every time, when you start your computer. Immediately after launch, the program starts scanning the computer and found a lot of trojans and spyware. Then, it said that you should purchase WinDefender 2009 in order to remove them and protect your PC. Do not do it!

Symptoms in a HijackThis Log:

O4 - HKCU\..\Run: [WinDefender2009] c:\Program Files\WinDefender\windef.exe

Use the following instructions to remove WinDefender 2009.
Continue reading How to remove WinDefender 2009…

Removal instructions for Real Antivirus

Real Antivirus is a rogue antispyware software. It reports false or exaggerated system security threats on the computer. During installation, it configures itself to run automatically every time, when you start your computer.Immediately after launch, the program starts scanning the computer and found a lot of infected files. Then it said that you should pay for a full license of the application in order to remove the threats.

Symptoms in a HijackThis Log:

O4 - HKCU\..\Run: [RealAV.exe] C:\Program Files\RealAV\RealAV.exe

Use the following instructions to remove Real Antivirus using MalwareBytes Anti-malware.
Continue reading Removal instructions for Real Antivirus…

Cannot open C Drive - How to fix it using Flash Disinfector

The reason that you Cannot open C Drive - is Autorun.inf virus(trojan), which infected your computer. Double-clicking or pressing Enter, to a drive containing autorun.inf in its root directory will activate autorun.inf file. This is used by viruses and trojans spreading on USB flash drives (pen drives).

Flash_Disinfector by sUBs is a free program and can fix your problem. It will remove any autorun.inf files, create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Don’t delete this folder. It will help protect your drives from future infection.

How to use Flash_Disinfector.
Continue reading Cannot open C Drive - How to fix it using Flash Disinfector…

How to remove XP Antispyware 2009

XP Antispyware 2009 is a rogue antispyware program, brother of rogue antispyware application called Antispyware XP 2009. Like brother, it`s distributed via a variety of malicious software and pop-ups found on fake online scanners. In both cases, reported that the computer is infected and that you must download and install the XP Antispyware 2009 to clean your computer.

During installation, it configures itself to run automatically every time, when you start your computer. In addition the program creates some files with random names. Which later during the scan will determine as trojans and spyware. Immediately after launch, the program starts scanning the computer and found a lot of trojans and spyware. Then, XP Antispyware 2009 alerted, that you should purchase it in order to remove them and protect your PC. Do not do it!

Symptoms in a HijackThis Log:

O4 - HKLM\..\Run: [XP Antispyware 2009] “C:\Program Files\XP_AntiSpyware\XP_AntiSpyware.exe” /hide

Use the following instructions to remove XP Antispyware 2009.
Continue reading How to remove XP Antispyware 2009…

How to remove Pro Antispyware 2009

Pro Antispyware 2009 is a rogue antispyware application. It is from the WinSpywareProtect family. The program uses fake online scanners, a variety of malicious software and advertising on the Internet for distribution. If you click on the ads, it will open a site, which immediately appear pop-up with a warning that you are infected and you must download and install Pro Antispyware 2009 to clean your computer.

During installation, it configures itself to run automatically every time, when you start your computer. Once running, Pro Antispyware 2009 will scan your computer and reports false or exaggerated system security threats on the computer that cannot be removed unless you first purchase the software. Do not do it!

Symptoms in a HijackThis Log:

O2 - BHO: mxlivemedia browser enhancer - {1C2D9A21-18DE-86A7-CCB2-A770588A16CF} - C:\WINDOWS\system32\kcnffqtgrtmhj.dll
O4 - HKLM\..\Run: [royxolvezsjz] C:\WINDOWS\System32\regsvr32.exe /s “C:\WINDOWS\system32\kcnffqtgrtmhj.dll”
O4 - HKCU\..\Run: [Pro Antispyware 2009] “C:\Documents and Settings\All Users\Application Data\Solt Lake Software\Pro Antispyware 2009\proas2009.exe” /autorun

Use the following instructions to remove Pro Antispyware 2009.
Continue reading How to remove Pro Antispyware 2009…

How to remove SpyProtector

SpyProtector is a rogue antispyware application. It uses advertising on the Internet for distribution. If you click on the ads, it will open a site, which immediately appear pop-up with a warning that you are infected. When you click a button on the pop-up it will redirect you a to a fake online antispyware scanner. The result of scanning is one - your computer is infected and you must download and install SpyProtector to clean your computer.

During installation, it configures itself to run automatically every time, when you start your computer. Immediately after launch, the program starts scanning the computer and found a lot of trojans and spyware. Then, SpyProtector alerted, that you should purchase it in order to remove them and protect your PC. Do not do it!

Symptoms in a HijackThis log:

O2 - BHO: Browser Helper Objects - {CBE202A6-3B75-4189-B161-9B4DF370BEE9} - %UserProfile%\Application Data\shellex.dll
O4 - HKLM\..\Run: [Spy Protector] %UserProfile%\Application Data\srcss.exe

Use the following instructions to remove SpyProtector.
Continue reading How to remove SpyProtector…

How to update Java

If your Java is outdate, then you have a risk to infect you computer with spyware, malware and trojans through java security holes.

I would recommend you follow these instructions to update java and protect your computer.
Continue reading How to update Java…

Removal instructions for PC Defender 2008

PC Defender 2008 is a rogue antispyware program. It is from the same family as Winifixer, Antivirus XP 2008, Antimalware2009, XP Protector 2009. It uses spam, fake online scanners, a variety of malicious software and advertising on the Internet for distribution. In all cases, reported that the computer is infected and that you must download and install PC Defender 2008 to clean your computer.

During installation, it configures itself to run automatically every time, when you start your computer. Immediately after launch, the program starts scanning the computer and found a lot of trojans and spyware(2797 on my clean PC). Then, PC Defender 2008 alerted, that you should purchase it in order to remove them and protect your PC. Do not do it!

Symptoms in a HijackThis log:

O4 - HKLM\..\Run: [SMthcpnsj0e1a5] C:\Program Files\thcpnsj0e1a5\thcpnsj0e1a5.exe

Use the following instructions to remove PC Defender 2008.
Continue reading Removal instructions for PC Defender 2008…

How to disable Spybot - Search and Destroy TeaTimer

Spybot - Search and Destroy TeaTimer will prevent HijackThis and Combofix from fixing an infection. You must disable it before the start of the removal of spyware and malware.

To disable Spybot - Search and Destroy TeaTimer:
Continue reading How to disable Spybot - Search and Destroy TeaTimer…

How to remove RapidAntivirus

RapidAntivirus is a fake (rogue) antispyware application. Looks like AntiVir64. The program uses advertising on the Internet for distribution. This advertisement tells that your computer is infected and offers to download and install RapidAntivirus.

During installation, it configures itself to run automatically every time, when you start your computer. Once running, RapidAntivirus will scan your computer and reports false or exaggerated system security threats on the computer that cannot be removed unless you first purchase the software. Also it finds are legitimate programs and labels them as spyware.

Symptoms in a HijackThis Log:

O4 - Startup: Rapid Antivirus.lnk = C:\Program Files\Rapid Antivirus\Rapid Antivirus.exe

Use the following instructions to remove RapidAntivirus.
Continue reading How to remove RapidAntivirus…

Removal instructions for Antivirus 2010

Antivirus 2010 is fake antispyware program from the same family as eAntivirusPro, AntiMalware 2009, Micro Antivirus 2009, Vista Antivirus 2008, Antispyware 2008 XP, System Antivirus 2008, Internet Antivirus, Smart Antivirus 2009, MS Antivirus, Advanced Antivirus, Power Antivirus, XPert Antivirus. Like other rogue antispyware programs, it uses malicious programs and advertising on the Internet for distribution. This advertisement tells that your computer is infected and offers to download and install Antivirus 2010. Also the program may use trojans for invisible installation on your computer. During installation, it configures itself to run automatically every time, when you start your computer.

Immediately after launch, the program starts scanning the computer and found a lot of trojans and spyware.

Then, it said that you should purchase Antivirus 2010 in order to remove them and protect your PC. Do not do it!

Symptoms in a HijackThis Log:

O2 - BHO: IEDefenderBHO - {FC8A493F-D236-4653-9A03-2BF4FD94F643} - C:\Windows\System32\IEDefender.dll
O4 - HKLM\..\Run: [Windows Gamma Display] C:\Windows\System32\wingamma.exe /adjustment

Use the following instructions to remove Antivirus 2010.
Continue reading Removal instructions for Antivirus 2010…

How to remove AntispywareXP 2009

Antispyware XP 2009 is a rogue antispyware application. It is distributed via fake online scanners and a variety of malicious software. In both cases, reported that the computer is infected and that you must download and install the program to clean your computer. During installation, it configures itself to run automatically every time, when you start your computer. In addition the program creates some files with random names(for example):

C:\Documents and Settings\user\Application Data\fotupawa._dl
C:\Documents and Settings\user\Application Data\kiseg.pif
C:\Documents and Settings\user\Cookies\ifidyborof.bin
C:\WINDOWS\osipo.pif
C:\Documents and Settings\user\Local Settings\Application Data\ixaxal.ban
C:\Program Files\Common Files\over.com
C:\Documents and Settings\user\Application Data\epekuxu._dl
C:\Documents and Settings\user\Local Settings\Temporary Internet Files\pulywor.dl
C:\WINDOWS\umames.bin
C:\Program Files\Common Files\atog.dll
C:\Documents and Settings\All Users\Application Data\tuwe.exe
C:\Documents and Settings\user\Local Settings\Application Data\evasyw.ban
C:\Documents and Settings\user\Application Data\amyvawose.vbs
C:\Documents and Settings\user\Cookies\pugolizam.pif
C:\Documents and Settings\All Users\Application Data\ybedavo.dl
C:\Documents and Settings\user\Cookies\peponi.pif
C:\Documents and Settings\user\Application Data\tykavowoj.ban
C:\Documents and Settings\user\Cookies\ukekug.vbs
C:\WINDOWS\ylawanyve.bin
C:\Documents and Settings\All Users\Application Data\some.inf

Which later during the scan will determine as trojans and spyware.

Immediately after launch, the program starts scanning the computer and found a lot of trojans and spyware. Then, it said that you should purchase AntispywareXP 2009 in order to remove them and protect your PC. Do not do it!

Symptoms in a HijackThis Log:

O4 - HKLM\..\Run: [AntiSpywareXP 2009] “C:\Program Files\AntiSpywareXP2009\AntiSpywareXP2009.exe” /hide

Use the following instructions to remove AntiSpywareXP2009.
Continue reading How to remove AntispywareXP 2009…

Removal instructions for SpywareGuard2008

SpywareGuard2008 is a rogue antispyware application. The software was found being advertised on a fake online antispyware scanners. If you have the misfortune to run the rogue anti-spyware program, SpywareGuard2008 is set to start automatically when your computer starts. It then scans your computer for supposed spyware and malware and displays a list of the items found. It is quite funny, though, as it finds its own components and labels them as spyware as shown in the image below.

If you get infected with this rogue antispyware app, please do not be fooled into buying it. Instead use the instructions below to remove the software.

Symptoms in a HijackThis Log:

O4 - HKCU\..\Run: [spywareguard] C:\Program Files\Spyware Guard 2008\spywareguard.exe

Use the following instructions to remove SpywareGuard2008.
Continue reading Removal instructions for SpywareGuard2008…