My Anti Spyware

How to remove fake Microsoft Security Essentials Alert

If you are seeing a Microsoft Security Essentials Alert box that states that Unknown Win32/Trojan was detected on your computer, then you have become infected with a trojan FakeAlert that uses this fake alert to trick you into thinking your PC is infected so that you will then install and purchase one of 5 rogue antivirus programs: Red Cross Antivirus, Peak Protection 2010, Pest Detector 4.1, Major Defense Kit, AntiSpySafeguard.

The “Microsoft Security Essentials Alert” trojan come from fake malware online scanners or malicious websites that ask users to download an Adobe Flash Player update or player needed to view a movie online. Continue reading How to remove fake Microsoft Security Essentials Alert…

How to remove HTTPS Tidserv Request (Tidserv trojan removal)

“HTTPS Tidserv Request” or “HTTPS Tidserv Request 2”is a signature which detects your antivirus (Norton 360, Norton Antivirus, etc). It indicates that your computer is infected with a Tidserv trojan. The trojan also known as Backdoor.Tidserv [PCTools], Backdoor.Tidserv.I!inf [Symantec], Rootkit.Win32.TDSS.y [Kaspersky Lab], Patched-SYSFile.a [McAfee], Mal/TDSSRt-A [Sophos], Virus:Win32/Alureon.F [Microsoft].

Continue reading How to remove HTTPS Tidserv Request (Tidserv trojan removal)…

How to remove cls_pack.exe, extrac64_cab.exe and winhlp64.exe trojan (Fake Security Center Alert)

cls_pack.exe, extrac64_cab.exe and winhlp64.exe are components of trojan FakeAlert. Once the trojan is installed and started, it will configure itself to run automatically when Windows loads. Then it will show a Security Center Alert that stats that “Windows Firewall has blocked some features of this program” (Trojan-Downloader.JS.Multi.ca, Net-Worm.Win32.Mytob.t, Net-Worm.Win32.DipNet.d, Rootkit.Win32.Agent.pp) as a method to make you think your computer has a security problem. An example of above alerts:

Security Center Alert
To help protect your computer, Windows Firewall has blocked some features of this program.
Do you want to block this suspicious software?
Name: Rootkit.Win32.Agent.pp
Risk Level: Middle Risk

However, all of these alerts are fake and should be ignored!

Continue reading How to remove cls_pack.exe, extrac64_cab.exe and winhlp64.exe trojan (Fake Security Center Alert)…

How to remove smss32.exe, winlogon32.exe, helper32.dll (Fake Worm.Win32.Netsky Spyware Alert)

Smss32.exe, winlogon32.exe, helper32.dll are components of trojan FakeAlert. Once installed, the trojan will configure itself to run automatically when Windows starts. When the trojan is started, it will display a screen that stats that Worm.Win32.Netsky detected on your computer as an attempt to make you think your computer in danger. The alert is fake and you can safety ignore it.

What is more, the “smss32.exe, winlogon32.exe, helper32.dll” trojan may display a lot of popups, disable Windows Task Manager, change a desktop background, block the ability to run any applications including antivirus and antispyware programs. The trojan will also download and install Internet Security 2010 onto computer automatically without your permission. Internet Security 2010 is a rogue antispyware program, that reports false infections and shows fake security alerts as method to to trick you into purchase so-called “full” version of the software.

Use the removal guide below to remove smss32.exe, winlogon32.exe, helper32.dll and any associated malware from your computer for free.
Continue reading How to remove smss32.exe, winlogon32.exe, helper32.dll (Fake Worm.Win32.Netsky Spyware Alert)…

How to remove settdebugx.exe trojan (Fake Security Center Alert)

settdebugx.exe is a core component of trojan FakeAlert. When the trojan is installed, it will display a Security Center Alert that stats that “Windows Firewall has blocked some features of this program” (Trojan-Downloader.JS.Multi.ca, Net-Worm.Win32.Mytob.t, Net-Worm.Win32.DipNet.d, Rootkit.Win32.Agent.pp) as an attempt to make you think your computer has a security problem. Of course, all of these alerts are fake and should be ignored!

What is more, the trojan will also download and install Malware Defense automatically without your permission. Malware Defense is a rogue antispyware programs, that reports false infections and shows fake security alerts as method to to trick you into purchase so-called “full” version of the software.

If your computer is infected, then use these removal instructions below, which will remove settdebugx.exe trojan and other components of trojan FakeAlert for free.
Continue reading How to remove settdebugx.exe trojan (Fake Security Center Alert)…

How to remove H8SRT trojan (Remove Rootkit.TDSS)

H8SRT trojan is a new version of TDSS trojan, also known as Rootkit.TDSS. The trojan infects your computer through a vulnerability in an already installed programs (mostly in InternetExplorer). It is a very dangerous trojan-rootkit, it uses rootkit-specific techniques designed to hide the software presence in the system.

When installed, it will be configured to start automatically when Windows starts. H8SRT trojan may:
- display many popups and fake security alerts;
- hijack Internet Explorer;
- redirect search results in Google, Yahoo, MSN to non related sites;
- block an access to security websites;
- disable Windows Task Manager, Windows Security Center and Registry editor.

Continue reading How to remove H8SRT trojan (Remove Rootkit.TDSS)…

How to remove richtx64.exe trojan (Fake Security Center Alert)

richtx64.exe is a component of trojan FakeAlert. Once installed, it will display a Security Center Alert that stats that “Windows Firewall has blocked some features of this program” (Trojan-Downloader.JS.Multi.ca, Net-Worm.Win32.Mytob.t, Net-Worm.Win32.DipNet.d, Rootkit.Win32.Agent.pp) as an attempt to make you think your computer has a security problem. Some of the alerts:

Security Center Alert
To help protect your computer, Windows Firewall has blocked some features of this program.
Do you want to block this suspicious software?
Name: Trojan-Downloader.JS.Multi.ca
Risk Level: Middle Risk

Security Center Alert
To help protect your computer, Windows Firewall has blocked some features of this program.
Do you want to block this suspicious software?
Name: Net-Worm.Win32.Mytob.t
Risk Level: Middle Risk

Security Center Alert
To help protect your computer, Windows Firewall has blocked some features of this program.
Do you want to block this suspicious software?
Name: Net-Worm.Win32.DipNet.d
Risk Level: Middle Risk

Security Center Alert
To help protect your computer, Windows Firewall has blocked some features of this program.
Do you want to block this suspicious software?
Name: Rootkit.Win32.Agent.pp
Risk Level: Middle Risk

Of course, all of these alerts are fake and should be ignored!

Continue reading How to remove richtx64.exe trojan (Fake Security Center Alert)…

Remove Worm.Win32.Netsky Fake Spyware Alert (winhelper86.dll, winupdate86.exe, winlogon86.exe trojans)

If you are seeing a Spyware Alert box that stats that Worm.Win32.Netsky detected on your machine, then you have become infected with a trojan that uses this Spyware Alert to trick you into purchasing Advanced Virus Remover, Antivirus 2009 or another rogue antispyware program. Once running, the trojan will display a fake Security alert as shown below:

Security alert
Security Warning!
Worm.Win32.Netsky detected on your machine.
This virus is distributed via the Internet through email and Active-x
objects.
The worm has its own smtp engine which means it gathers
emails from your local computer and re-distributes itself.
In worst cases this worm can allow attachers to access your
computer, stealing passwords and personal data.
Viruses can damage your confidential data and work on your
computer.
Continue working in unprotected mode is very dangerous.

Recommendation: It is necessary to perform a system scan.

Worm.Win32.Netsky detected on your machine – Fake Spyware Alert

Continue reading Remove Worm.Win32.Netsky Fake Spyware Alert (winhelper86.dll, winupdate86.exe, winlogon86.exe trojans)…

How to remove sshnas.dll or sshnas21.dll trojan (Remove trojan FakeAlert)

sshnas.dll or sshnas21.dll is a component of trojan FakeAlert. The trojan come from malicious websites that ask users to download an Adobe Flash Player update or player needed to view a movie online. The filename of the trojan is flash-HQ-plugin. Once started, the trojan will download and install core components: c.exe, msa.exe and sshnas.dll (sshnas21.dll). When downloaded, it will be configured to start automatically when Windows starts. Trojan FakeAlert may display many popups and fake security alerts, hijack Internet Explorer, disable Windows Task Manager and Registry editor.Also it is usually installed in conjunction with a rogue antispyware programs.

If your computer is infected, then use these removal instructions below, which will remove sshnas.dll (sshnas21.dll) trojan and other components of trojan FakeAlert for free.
Continue reading How to remove sshnas.dll or sshnas21.dll trojan (Remove trojan FakeAlert)…

How to remove thefeedwater.com and providefeed.com redirect (Calc.dll trojan)

Thefeedwater.com and providefeed.com are a malicious websites. If your browser is redirected to these sites as well as toseeka.com, asterplex.com, webfindengine.com, clickfreesearch.com, then your computer is infected with Calc.dll and ntuser.dll trojans. Once running, the trojan will displays a lot of popups, fake security warnings and offers to install other potentially unwanted software and rogue antispyware applications. However, all of these warnings should be ignored! Use these free instructions below to remove thefeedwater.com and providefeed.com redirect and any associated malware from your computer.
Continue reading How to remove thefeedwater.com and providefeed.com redirect (Calc.dll trojan)…