My Anti Spyware

How to remove Win32.BackDoor-DNM, Spyware.ISpynow, win32.zafi.b, Win32.Netsky.Q, Trojan.Zlob.G (Fake Security Center Alert)

If you are seeing a Security Center Alert that is stating that Windows Firewall has blocked activity of harmful software (Spyware.ISpynow, win32.zafi.b, Win32.Netsky.Q, Trojan.Zlob.G, Win32.BackDoor-DNM), then you have become infected with a trojan that uses this Security Center Alert to trick you into purchasing Perfect Defender 2009 or another rogue antispyware program. Once running, this trojan will display a fake security center alerts that tells you:

Security Center Alert
To help protect your computer, Windows Firewall has blocked activity of harmful software.
Do you want to block this suspicious software?
Name: Spyware.ISpynow
Risk Level: High
Description: iSpynow is a Spyware program that records keystrokes and takes screen shots of the computer, stealing personal financial information.

Security center alert
To help protect your computer, Windows firewall has blocked some features of this program.
Do you want to block this suspicious software?
Name: win32.zafi.b
Risk Level: High

Security Center Alert
To help protect your computer, Windows Firewall has blocked
some features of this program.

Do you want to block this suspicious software?
Name: Win32.BackDoor-DNM
Risk Level: High
Description: DNM is a worm trojan program that records keystrokes and takes screen shots of the computer, stealing personal financial information.

If you are clicking on the enable protection button, then opens up a site asking you to download rogue antispyware program (Perfect Defender 2009) or another rogue antispyware software.
Continue reading How to remove Win32.BackDoor-DNM, Spyware.ISpynow, win32.zafi.b, Win32.Netsky.Q, Trojan.Zlob.G (Fake Security Center Alert)…

How to remove ExtraAntivir (Delete instructions)

ExtraAntivir is a rogue antispyware program. It is look like RapidAntivirus. ExtraAntivir uses scare tactics (fake alerts and false positives) to trick users into buying the fake software.

During installation, ExtraAntivir configures itself to run automatically every time, when you start your PC. Once running, ExtraAntivir will scan your computer and reports false or exaggerated system security threats on the computer that cannot be removed unless you first purchase the software. Also it finds are legitimate programs and labels them as spyware.

Continue reading How to remove ExtraAntivir (Delete instructions)…

How to remove AntiSpywareGuard (Delete instructions)

AntiSpywareGuard is a rogue antispyware program that designed to trick users into buying a fake software by using scare tactics. AntiSpywareGuard is distributed through the use variety of malicious software and pop-ups.

When installed, AntiSpywareGuard configures itself to run automatically every time, when you start your computer. Once running, it will scan your computer and list a large amount of infections, but these “infections” are actually legitimate Windows files. Then, AntiSpywareGuard said that you should purchase the program in order to remove them. Running of it may drastically slow the performance of your computer.

Continue reading How to remove AntiSpywareGuard (Delete instructions)…

How to remove Winweb Security 2008 (Delete instructions)

Winweb Security 2008 is a rogue antispyware application. It being distributed through the spam, keygen sites and trojans. In all cases, reported that the computer is infected and that you must download and install the Winweb Security 2008 to clean your computer. During installation, Winweb Security 2008 configures itself to run automatically every time, when you start your PC.

Once running, Winweb Security 2008 starts scanning the computer and found a lot of trojans and spyware. Then, it said that you should purchase Winweb Security 2008 in order to remove them and protect your PC. Computer users are urged to avoid purchasing this bogus program!

Winweb Security 2008 generates false security alerts such as the following.

Winweb Security Warning
Your PC is still infected with dangerous viruses. Activate
antivirus protection to prevent data loss and to avoid the
theft of your credit card details.
Click here to activate protection.

Winweb Security Warning
Some critical system files of your computer were modified by
malicious program. It may cause system instability and data
loss.
Click here to block unathorised modification by removing
threats (Recommended)

These fake warnings may drastically slow the performance of your computer. Please ignore them. If you are a non-techie computer user then this method of removing Winweb Security 2008 and any associated malware from your computer is for you.
Continue reading How to remove Winweb Security 2008 (Delete instructions)…

How to remove SpywareRemover2009 (Delete instructions)

SpywareRemover2009 also known as SpywareRemover 2009 is a rogue antispyware application. Just like most fake antispyware it will display fake system alerts or fake security alerts informing the user that their computer is infected. This tactic is to trick the user into purchasing the full licensed version. .SpywareRemover 2009 is distributed through the use variety of malicious software and pop-ups found on fake online scanners. In both cases, your computer will display popups with a message stating that your computer is infected with spyware and that you must download and install SpywareRemover 2009 to clean your computer.

SpywareRemover 2009 (more screen shots: 1, 2, 3)

During installation, SpywareRemover 2009 configures itself to run automatically every time, when you start your computer. Immediately after launch, the program starts scanning the computer and found a lot of malware and spyware. Then it alerted that you should purchase SpywareRemover 2009 in order to remove them and protect your PC.

SpywareRemover 2009 generates false security alerts such as the following:

SpywareRemover2009 Alert!
Warning: someones tries to change IE security level for Local Intranet from Custom to Medium!
An undefined process wants access to IE Security Settings. Don’t allow access unless you know changes were initiate by you.

These fake alerts may drastically slow the performance of your computer.
Continue reading How to remove SpywareRemover2009 (Delete instructions)…

How to remove Antivirus Trigger (Delete instructions)

Antivirus Trigger is a rogue antispyware program designed to trick users into buying a fake software by using scare tactics. It is a fresh clone of rogue antispyware called VirusTrigger. Antivirus Trigger uses a Zlob trojan (fake audio and video codec) for the hit on your computer. Once infected, your computer will display fake security alert stating that your computer infected with malware:

System Alert!
Your system might be infected with malicious software that may impact the performance of your computer. Click the icon for a free scan to detect any active spyware applications.

After clicking this, you will be brought to the AntivirusTrigger website.

During installation, Antivirus Trigger configures itself to run automatically every time, when you start your computer. Once running, Antivirus Trigger will scan your computer and list a variety of spyware, malware. Then, it said that you should purchase AntivirusTrigger in order to remove them. Running of the program may drastically slow the performance of your computer.

Continue reading How to remove Antivirus Trigger (Delete instructions)…

How to remove XP Protection Center (Delete instructions)

XP Protection Center is a rogue antispyware program. XP Protection Center installed by a brastk.exe/karna.dat trojan and TDSServ trojan. Once infected, new icon, a red circle with a white X, will appear in the system tray and your computer will display fake security alert:

Your computer is infected!
Windows has detected spyware infection!
It is recommended to use special antispyware tools to pervent data loss. Windows will now download and install the most up-to-date antispyware for you.
Click here to protect your computer from spyware!

After clicking this, a window called XP Protection Center–Installer comes up stating “Please wait, downloading…”. These alerts are a fake and should be ignored!

During installation,XP ProtectionCenter configures itself to run automatically every time, when you start your computer. Once running, XP Protection Center will scan your computer and reports false or exaggerated system security threats on the computer to trick user to buy the paid version of XP Protection Center, in order to remove the potential and reported threats. Do not do it!
Continue reading How to remove XP Protection Center (Delete instructions)…

How to remove brastk.exe/karna.dat trojan (FakeAlert trojan)

brastk.exe/karna.dat are two main components of trojan (trojan.fakealert) that may represent security risk for the infected computer. The trojan.fakealert uses rootkit techniques designed to hide the software presence in the system and also blocks user access to security websites. Once running, this trojan will display a red circle with a white X in your taskbar and a fake security alerts that tells you to install a rogue antispyware application to delete the infection.

Your computer is infected!
Windows has detected a spyware infection!
It’s recommended to use special antispyware tools to pervent (sic) data loss.
Windows will now download and install the most up-to-date antispyware for you.
Click here to protect your computer from spyware!

These alerts are a fake and should be ignored!
Continue reading How to remove brastk.exe/karna.dat trojan (FakeAlert trojan)…

How to use F-Secure Online Virus Scanner

F-Secure Online Virus Scanner is a free service, which you can use to find out if your computer is infected and disinfect your computer if needed. F-Secure Online Scanner will automatically download the necessary components and virus definition databases as it is started.

Continue reading How to use F-Secure Online Virus Scanner…

How to remove VirusTrigger (Delete instructions)

VirusTrigger is a fake (rogue) antispyware program. It is new version of Virus Response Lab 2009. VirusTrigger is automatically installed by a Zlob trojan (fake audio or video codec). Once infected, your computer will display fake security alert:

System Alert!
Your system might be infected with malicious software that may impact the performance of your computer. Click the icon for a free scan to detect any active spyware applications.

Immediately after launch, VirusTrigger starts scanning the computer and found a lot of trojans and spyware.

Continue reading How to remove VirusTrigger (Delete instructions)…