Wednesday, July 22, 2009

Turn off or disable Security Center Warning in Windows XPTurn off or disable Security Center Warning in Windows XP

Turn off or disable Security Center Warning in Windows XP
How to Turn off or disable Security Center Warning in Windows XP?
  1. Press Win+R or Click Start and then click Run.
  2. Type services.msc and press Enter.
  3. At the right pane, scroll down until you see Security Center. Right click it and click Stop.
  4. Right click it again and click Properties.
  5. Choose Disabled at Startup Type listbox.
  6. Click OK button.

Turn automatic updating on or offTurn automatic updating on or off

Turn automatic updating on or off
How to turn automatic updating on or off?

Vista or Windows 7
  1. Press Win Key
  2. Type Turn automatic updating on or off and press Enter.
  3. Select Never check for updates (not recommended) under Important Updates listbox.
  4. Press OK button.
Windows XP
  1. Press Win+Break or right click My Computer and click Properties.
  2. Click Automatic Updates tab.
  3. Check Turn off Automatic Updates checkbox.
  4. Press OK button.
  5. You are recommended to Disable Security Center Warning too.
Wednesday, July 8, 2009

WinPC Defender Removal GuideWinPC Defender Removal Guide

WinPC Defender Removal Guide
WinPC Defender is a rogue anti-spyware program. Once executed, WinPC Defender will generate false messages stating that your computer is infected with spyware. The makers of WinPC Defender seek to goad into purchasing their promoted full version of WinPC Defender. WinPC Defender is reported to be a clone of XP Police Antivirus, WinDefender 2009, Total Secure 2009, and IE-Security. WinPC Defender will also display notifications of imaginary security risks in its attempts to get the user to purchase the full version. WinPC Defender may be difficult to remove manually, and may continue to try to recreate itself.

Removal Tool: Remove Fake Antivirus. (Download it here.)

WinPC Defender Removal Guide
Kill Process
(How to kill a process effectively?)
defender.exe
pcdef[1].exe
%USERPROFILE%\AppData\Roaming\pcdefender.exe
pcdefender.exe
WinPC Defender.exe
Ta1HnnaIasEcfgF.exe
install[1].exe

Delete Registry
HKEY_CLASSES_ROOT\TypeLib\{A54DC52D-7AAD-4D40-A126-337211631EDC}
HKEY_CURRENT_USER\Control Panel\don't load "scui.cpl"
HKEY_CURRENT_USER\Control Panel\don't load "wscui.cpl"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "sysav"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "WinPC Defender"
HKEY_CURRENT_USER\Software\WinPC Defender
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39fc2065-c9c7-49cd-8942-44cc2dedc844}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96ad72e4-2e2b-4ffc-a5bb-279c2714af12}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Content"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinPC Defender

Remove Folders and Files
%Program Files%\WinPC Defender
%USERPROFILE%\AppData\Roaming\pcdefender.exe
defender.exe
pcdef[1].exe
pcdefender.exe-removed_skip
pcdefender.exe
ieocx.dll

Antivirus System Pro Removal GuideAntivirus System Pro Removal Guide

Antivirus System Pro Removal Guide
Antivirus System Pro is a rogue anti-spyware program that comes from the same group of hackers that created other fake security applications such as System Guard 2009 and Spyware Protect 2009. Antivirus System Pro comes from either a hoax website or a Trojan horse infection. If infected with this Trojan, you will get bogus popup messages and security alerts that display notices stating that your PC is infected with parasites. The messages are part of a scam to get you to purchase the full Antivirus System Pro application.

Removal Tool: Remove Fake Antivirus. (Download it here.)

Antivirus System Pro Removal Guide
Kill Process
(How to kill a process effectively?)
sysguard.exe
uninstall.exe
Antivirussystempro.exe

Delete Registry
029D18CB-8632-463c-93B7-C210AE50C722
8567EDFA-408C-43e9-B929-4C25C04F5003
BAD4551D-9B24-42cb-9BCD-818CA2DA7B63
E85C18E7-C293-4424-9DD0-B31D8DB27013
HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "system tool"
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus System PRO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Antivirus System PRO"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad "ieModule"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus System PRO

Remove Folders and Files
%SYSTEMROOT%\system32\iehelper.dll
%ProgramFiles%\Antivirus System PRO
%SYSTEMROOT%\sysguard.exe
Tuesday, July 7, 2009

System Security 2009 Removal GuideSystem Security 2009 Removal Guide

System Security 2009 Removal Guide
System Security 2009, a clone of System Security, is a rogue anti-spyware program that displays notifications of imaginary security risks in an attempts to get you to purchase the full version. Once you click on the fake message, it will take you to the System Security 2009's website where you will be prompted to purchase its full version. In reality, System Security 2009 program is not going to clean your computer from spyware but might actually expose you to more security threats.

Removal Tool: Remove Fake Antivirus. (Download it here.)

System Security 2009 Removal Guide
Kill Process
(How to kill a process effectively?)
00308937.exe
05643921.exe
install.exe

Delete Registry
HKEY_LOCAL_MACHINE\Software\00308937
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "00308937"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemSecurity2009

Remove Folders and Files
%UserProfile%\Start Menu\Programs\System Security
%All Users%\Application Data\00308937
%UserProfile%\Desktop\System Security 2009.lnk
%programs%\system security
00308937.exe
05643921.exe
install.exe
Friday, July 3, 2009

AntivirusBEST, Antivirus BEST Removal GuideAntivirusBEST, Antivirus BEST Removal Guide

AntivirusBEST, Antivirus BEST Removal Guide
AntivirusBEST, also known as Antivirus BEST, is a rogue anti-spyware program that installs in your computer system with the help of a Trojan, possibly the popular Trojan Zlob. You may have also downloaded AntivirusBEST from a rogue website, such as Antivirus-Best.com, thinking it would remove your infections.

Removal Tool: Remove Fake Antivirus. (Download it here.)

AntivirusBEST, Antivirus BEST Removal Guide
Kill Process
(How to kill a process effectively?)
abest.exe
svchost.exe
installer.exe

Unregister DLL
qwprotect.dll


Delete Registry
296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD
44B2C9F5-608D-46de-82E1-26C5BCB85193
684A7904-2593-4BBE-A90E-CDAF2AC606AE
AppID\296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD
HKEY_CLASSES_ROOT\AppID\{296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD}
HKEY_CLASSES_ROOT\AppID\{296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD}
HKEY_CLASSES_ROOT\AppID\QWProtect.dll
HKEY_CLASSES_ROOT\CLSID\{44B2C9F5-608D-46de-82E1-26C5BCB85193}
HKEY_CLASSES_ROOT\Interface\{296A8A7F-B5AC-4789-9B33-F32C2F9A6ABD}
HKEY_CLASSES_ROOT\qwprotect.qwprotectbho
HKEY_CLASSES_ROOT\qwprotect.qwprotectbho.1
HKEY_CLASSES_ROOT\TypeLib\{684A7904-2593-4BBE-A90E-CDAF2AC606AE}
HKEY_CURRENT_USER\Software\ABEST\ABEST
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{44b2c9f5-608d-46de-82e1-26c5bcb85193}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{44B2C9F5-608D-46de-82E1-26C5BCB85193}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "AntivirusBEST"

Remove Folders
%AllUsersProfile%\Start Menu\Programs\AntivirusBEST
C:\Documents and Settings\All Users\Application Data\AB
c:\Documents and Settings\All Users\Desktop\AntivirusBEST.lnk