My Anti Spyware

How to remove XP Police Antivirus

XP Police Antivirus is a new rogue antivirus/antispyware software that uses security warnings from your Windows taskbar and a fake Windows Security Center popups to trick you into thinking your computer is infected.

During installation, XP Police Antivirus configures itself to run automatically every time, when you start your computer. Once running, XP Police Antivirus will scan your computer and reports false or exaggerated system security threats on the PC to trick you to buy the paid version of the rogue, in order to remove the potential and reported threats.

While the XP Police Antivirus is running you may see false security alerts such as the following.

Trojan Detected!
A piece of malicious code was found in your system which can replicate itself if no action is taken. Click here to have your system cleaned by XP Police Antivirus.

These fake alerts may drastically slow the performance of your computer. Please ignore these alerts. Use the free instructions below to remove XP Police Antivirus and any associated malware from your computer.
Continue reading How to remove XP Police Antivirus…

How to remove IE Security (Delete instructions)

IE Security is a new rogue antispyware program that looks like WinDefender 2009 and Total Secure 2009. IE Security uses fake alerts and false positives to trick you into buying the software. The fake antispyware is distributed through the use variety of malicious software and fake codecs.

During installation, IE Security configures itself to run automatically every time, when you start your PC. Once running, the rogue will scan your computer and reports false or exaggerated system security threats on the computer that cannot be removed unless you first purchase the software. Use the free removal instructions below in order to remove IE Security.
Continue reading How to remove IE Security (Delete instructions)…

How to remove Total Defender (Delete instructions)

Total Defender is a new rogue antispyware software designed to trick you into buying the fake program by using scare tactics. During installation, Total Defender configures itself to run automatically every time, when you start your computer. Once running, it will scan your computer and reports false or exaggerated system security threats on the computer that cannot be removed unless you first purchase the software. Use the instructions below to remove Total Defender for free.
Continue reading How to remove Total Defender (Delete instructions)…

How to remove System Guard 2009 (Delete instructions)

System Guard 2009 is a rogue antispyware program. The fake antispyware is a new clone of Spyware Guard 2009. System Guard 2009 uses fake alerts and false positives to trick you into buying the fake software. The program is distributed through the use trojans and pop-ups found on fake anti-spyware online scanners. During installation, System Guard 2009 is set to start automatically when your computer starts. In addition the program creates a few files:

c:\WINDOWS\reged.exe
c:\WINDOWS\spoolsystem.exe
c:\WINDOWS\sys.com
c:\WINDOWS\syscert.exe
c:\WINDOWS\sysexplorer.exe
c:\WINDOWS\vmreg.dll
c:\WINDOWS\system32\winscenter.exe

These files during the scan will determine as trojans and spyware.

Immediately after launch, System Guard 2009 starts scanning the computer and found a lot of trojans and spyware that cannot be removed unless you first purchase the software. System Guard 2009 may drastically slow the performance of your computer. The program can be safely removed from your computer along with any other trojan infections if the proper steps are taken. If you are a non-techie computer user then this method of removing spyware is for you.
Continue reading How to remove System Guard 2009 (Delete instructions)…

How to remove windowsclick.com redirect [UACd.sys trojan]

Redirect to windowsclick.com site is a result of UACd.sys trojan activity. The trojan horse may represent security risk for the infected computer and uses rootkit-specific techniques designed to hide the software presence in the system.

Once infected, UACd.sys trojan blocks user access to security websites, search results in Google, Yahoo, MSN and other redirect you to windowsclick.com and other non related sites.
Continue reading How to remove windowsclick.com redirect [UACd.sys trojan]…

How to remove Antivirus XP Pro (Delete instructions)

Antivirus XP Pro is rogue antispyware program that uses fake alerts and false positives to trick you into buying the fake antivirus. The software is distributed through the use variety of malicious software and pop-ups found on fake online scanners that tells you that your computer is infected and you should download and install Antivirus XP Pro in order to protect your computer.

During installation, Antivirus XP Pro configures itself to run automatically every time, when you start your PC. Once running, Antivirus XP Pro will scan your computer and list a large amount of infections, but these “infections” are not exist on your computer. A few examples:

C:\Windows\VisualGuard.exe
C:\Windows\xsearch.dll
C:\Windows\Config\PWS-Legmir.dll

Antivirus XP Pro generates false security alerts such as the following:

Your Computer might be at Risk!
Viruses have been detected!
Possible:
- Unauthorized access to your files, documents.
– Stealing from your banking accounts.
– Reading you private correspondence.
– Spam-mailing from your PC.
Highly recommended to destroy them immediately.

These fake alerts may drastically slow the performance of your computer. Please ignore these warnings. Use the free instructions below for removing the Antivirus XP Pro and any associated malware from your PC.
Continue reading How to remove Antivirus XP Pro (Delete instructions)…

How to remove Spyware Protect 2009 (Delete instructions)

Spyware Protect 2009 is a rogue antispyware program that uses fake alerts and false positives to trick you into buying the fake antispyware. Spyware Protect 2009 uses Conficker worm and trojans (trojan Vundo for example) to install itself in your computer.

Once infected, your computer will display numerous fake system alerts or security alerts notifying you about supposed spyware infections. When installing, Spyware Protect 2009 configures itself to run automatically every time, when you start Windows. In addition the fake antispyware creates a few files with random names. These files during the scan will determine as trojans and spyware. Spyware Protect 2009 may drastically slow the performance of your computer.

Immediately after launch, the program starts scanning the computer and found a lot of trojans and spyware.

Spyware Protect 2009 (more screen shoots 1, 2, 3, 4)

Then, it said that you should purchase Spyware Protect 2009 in order to remove them and protect your PC. While the fake antispyware software is running your computer will display fake alerts.

Windows Security alert
Windows reports that computer is infected. Antivirus software
helps to protect your computer against viruses and other
security threats. Click here for the scan your computer. Your
system might be at risk now.

INFILTRATION ALERT

Your computer is being attacked by an Internet
Virus. It could be a password-stealing attack, a
trojan – dropper or simular.

DETAILS

Attack from: 100.53.148.153, port 42733
Attacked port: 14750
Threat: Win32/Nuqel.E

Do you want block this attack?

Please ignore these alerts. Use the free instructions below to remove the rogue antispyware and any associated malware from your computer.
Continue reading How to remove Spyware Protect 2009 (Delete instructions)…

How to remove Spyware Guard 2009 (Delete instructions)

Spyware Guard 2009 is rogue (fake) antispyware program. It is a new version of Spyware Guard 2008. Spyware Guard 2009 uses scare tactics (fake alerts and false positives) to trick users into buying the fake software. This fake antispyware software is automatically installed by a trojan Vundo and trojan TDSSserv. Once infected with these trojans your computer will display fake security alerts stating that your computer is infected with malware and spyware and you should download and install Spyware Guard 2009 in order to protect your computer.

Once installed, Spyware Guard 2009 is set to start automatically when your computer starts. Once running, Spyware Guard 2009 will scan your computer and reports false or exaggerated system security threats on the PC to trick you to buy the paid version of the rogue, in order to remove the potential and reported threats. Please ignore these warnings. Use the free instructions below to remove Spyware Guard 2009 and any associated malware from your computer.
Continue reading How to remove Spyware Guard 2009 (Delete instructions)…

How to remove Flash Disinfector protection (autorun.inf folder)

Flash Disinfector is very good free program created by sUBs for removing autorun.inf trojans and protect your Flash/Pen drives from future infection. For protect your computer, the program will create a hidden folder, named autorun.inf in each partition and every USB drive plugged in when you ran it. This autorun.inf folder contains hidden file “lpt3.This folder was created by Flash_Disinfector”. You cannot remove this file using standard remove function. Read below how to remove this file and autorun.inf folder and uninstall Flash Disinfector protection.
Continue reading How to remove Flash Disinfector protection (autorun.inf folder)…

How to remove Conficker worm (Downadup or Kido)

Win32/Conficker.AA also known W32/Worm.AHGV, Net-Worm.Win32.Kido.bg, Worm:Win32/Conficker, W32/Conficker.worm.gen, Mal/Conficker is a worm that uses Microsoft Windows Server Service RPC Handling Remote Code Execution Vulnerability (MS08-67) in order to spread on other computers in the local network. The worm blocks user access to security websites, deletes all the System Restore points prior to infection, protects itself from deletion by removing all NTFS file permissions,except execute and directory traversal and more. Starting in April 2009, this worm also installs Spyware Protect 2009.
Continue reading How to remove Conficker worm (Downadup or Kido)…

Flash Disinfector – free autorun.inf trojans removal tool

Flash Disinfector is free autorun.inf trojans and USB/Flash disks trojans remover. This is a program designed and developed by sUBs (author of combofix) to clean autorun.inf trojans that are running on the system.
Continue reading Flash Disinfector – free autorun.inf trojans removal tool…

How to remove msqpdxserv.sys trojan (trojan tidserv)

Msqpdxserv.sys trojan also known as W32.Tidserv is a trojan horse that may represent security risk for the infected computer. The trojan uses rootkit-specific techniques designed to hide the software presence in the system.

Once infected it blocks user access to security websites, web pages have a “VIMAX” ad that appears which links thru a b12.adv.net site, search results in Google, Yahoo, MSN and other redirect you to other non related sites. Also Msqpdxserv.sys trojan changes the DNS server options to one of the following fixed IPs: 85.255.115.156, 85.255.112.87, 85.255.115.50, 85.255.112.154.

Msqpdxserv.sys trojan spreads by copying itself to all removable drives as %DriveLetter%\resycled\boot.com, after that the trojan creates %DriveLetter%\autorun.inf file on all removable drives so that it executes whenever the drive is accessed.
Continue reading How to remove msqpdxserv.sys trojan (trojan tidserv)…

How to remove Total Protect 2009 (Delete instructions)

Total Protect 2009 is rogue antispyware program. The fake antispyware uses a trojan to install itself. Once infected with the trojan your computer will display fake security alerts stating that your computer is infected with malware. If you are clicking on the fake alert, then opens up a Total Protect 2009 homesite asking you to purchase the program.

During installation, Total Protect 2009 configures itself to run automatically every time, when you start your computer. Once running, Total Protect 2009 will scan your computer and reports false or exaggerated system security threats on the computer that cannot be removed unless you first purchase the software. Also it finds are legitimate programs and labels them as spyware. Total Protect 2009 uses these false infections and false positives to trick you into buying the program.
Continue reading How to remove Total Protect 2009 (Delete instructions)…