Tuesday, April 29, 2014

Remove Windows Internet GuardRemove Windows Internet Guard

Remove Windows Internet Guard
Windows Internet Guard is a fake antivirus that disguises itself to cheat the user that it can detect and remove trojans, viruses, malwares and so on. In fact, Windows Internet Guard WILL SURELY state that there are many malwares, trojans and viruses are detected in the system. All of them are lies! Windows Internet Guard will display this types of fake alert to urge the user to purchase the full version of Windows Internet Guard which cannot detect and remove any kind malware, trojan or virus.

Windows Internet Guard can be removed by stopping all of the processes in random file name, delete all the related files and remove the registry keys stated below.

Windows Internet Guard provide fake features such as Home, Firewall, Automatic updates, Antivirus Protection, Anti-Phishing, Advanced Process Control, Autorun Manager, Service Manager, All-in-One Suite, Quick Scan, Deep Scan, Custom Scan, History, Settings, etc. All of them cannot protect the computer from any kind of malware.

Windows Internet Guard should be removed immediately!

Windows Internet Guard Removal Guide
Kill Process
(How to kill a process effectively?)
svc-[random].exe

Delete Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bckd
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bckd "ImagePath" = "123123.sys"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "GuardSoftware" = %AppData%\svc-[random].exe
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%AppData%\svc-[random].exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableVirtualization" = 0
Remove Folders and Files
%AppData%\svc-[random].exe
%AppData%\data.sec

File Location Notes:

%AppData% refers to the current users Application Data folder. By default, this is C:\Documents and Settings\[Current User]\Application Data for Windows 2000/XP. For Windows Vista and Windows 7 it is C:\Users\[Current User]\AppData\Roaming.

Posted by Olzen at 8:00 PM 0 comments
Labels:

Remove Fake Antivirus 1.99Remove Fake Antivirus 1.99

Remove Fake Antivirus is used to remove the most popular fake antiviruses. What is fake antivirus? This is a type of virus/malwares which disguises itself to be an antivirus. It infects your computer when you accidentally click a link in a website which will download the malware into your computer and run automatically when your windows boot. It scan the infected computer and produces fake alert warnings. It convinces you that your computer is in danger and urge you to purchase a useless copy of the fake antivirus. These fake antiviruses must be removed immediately.


Remove Fake Antivirus 1.99 is used to remove:
  1. Windows Prime Shield
  2. AntiVirus Plus 2014
  3. Security Cleaner Pro
  4. Sinergia Cleaner
  5. Titan Antivirus 2013
  6. Antivirus Security Pro
  7. Attentive Antivirus
  8. Antivirus System File
  9. iON Internet Security
  10. Smart Security
  11. PC Defender Plus
  12. Windows Proprietary Advisor
  13. Windows Smart Warden
  14. Home Malware Cleaner
  15. Strong Malware Defender
  16. AV Security 2012
  17. Data Recovery
  18. Wolfram Antivirus
  19. Security Protection
  20. Windows Antivirus 2011
  21. Mega Antivirus 2012
  22. AVG Antivirus 2011
  23. PC Security 2011
  24. ThinkPoint
  25. ThinkSmart
  26. Antivirus 8
  27. Security Tool
  28. My Security Shield
  29. Antivirus 7
  30. Antivirus GT
  31. Defense Center
  32. Protection Center
  33. Sysinternals Antivirus
  34. Security Master AV
  35. CleanUp Antivirus
  36. Security Toolbar
  37. Digital Protection
  38. XP Smart Security 2010
  39. Antivirus Suite
  40. Vista Security Tool 2010
  41. Total XP Security
  42. Security Central
  43. Security Antivirus
  44. Total PC Defender 2010
  45. Vista Antivirus Pro 2010
  46. Your PC Protector
  47. Vista Internet Security 2010
  48. XP Guardian
  49. Vista Guardian 2010
  50. Antivirus Soft
  51. XP Internet Security 2010
  52. Antivir 2010
  53. Live PC Care
  54. Malware Defense
  55. Internet Security 2010
  56. Desktop Defender 2010
  57. Antivirus Live
  58. Personal Security
  59. Cyber Security
  60. Alpha Antivirus
  61. Windows Enterprise Suite
  62. Security Center
  63. Control Center
  64. Braviax
  65. Windows Police Pro
  66. Antivirus Pro 2010
  67. PC Antispyware 2010
  68. FraudTool.MalwareProtector.d
  69. Winshield2009.com
  70. Green AV
  71. Windows Protection Suite
  72. Total Security 2009
  73. Windows System Suite
  74. Antivirus BEST
  75. System Security
  76. Personal Antivirus
  77. System Security 2009
  78. Malware Doctor
  79. Antivirus System Pro
  80. WinPC Defender
  81. Anti-Virus-1
  82. Spyware Guard 2008
  83. System Guard 2009
  84. Antivirus 2009
  85. Antivirus 2010
  86. Antivirus Pro 2009
  87. Antivirus 360
  88. MS Antispyware 2009
  89. IGuardPC or I Guard PC
  90. Additional Guard


(all of them are fake antivirus which are
viruses or trojans) and other fake antivirus from your computer.

Remove Fake Antivirus is used to remove
fake antivirus which are viruses or trojans.

CLICK HERE TO DOWNLOAD
Latest updated :
Link I Link II
md5: cd4ad05b8d35029372278825ab46adf1
Pad File 1: rfa.xml
Pad File 2: rfa.xml

Recent Posts
Posted by Olzen at 7:30 PM 62 comments
Labels:
Wednesday, April 2, 2014

Remove Windows Internet WatchdogRemove Windows Internet Watchdog

Remove Windows Internet Watchdog
Windows Internet Watchdog is a fake antivirus program that look like a legitimate antivirus such as Kaspersky Antivirus which can protect the computer from the attack of viruses, malwares or trojans. However, Windows Internet Watchdog cannot detect and remove any kind of virus, malware or trojan on the computer. When Windows Internet Watchdog is installed in the computer, it will start automatically when Windows boot and then will do a fake scan on the computer and will surely scare the user with pop ups which show that the computer has been infected by a lot of malwares, viruses and trojans. Do not believe any pop ups shown by Windows Internet Watchdog. Windows Internet Watchdog will recommend the user to purchase the full version of Windows Internet Watchdog in order to remove all the detected threats. Do not buy Windows Internet Watchdog as it can do nothing.

Windows Internet Watchdog provide fake features such as Firewall, Automatic updates, Antivirus Protection, Anti-Phishing, Advanced Process Control, Autorun Manager, Service Manager, All-in-One Suite, Quick Scan, Deep Scan, Custom Scan, History, Settings, etc. All of them cannot protect computer from any kind of malwares.

Windows Internet Watchdog can be removed by stop processes and kill all files with random name in the hard drives. The user also must remove the autorun setting added by Windows Internet Watchdog. These can be done by using Emsisoft HiJackFree.

Windows Internet Watchdog should be removed immediately!

Windows Internet Watchdog Removal Guide
Kill Process
(How to kill a process effectively?)
svc-[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "MS-SEC" = %AppData%\svc-[random].exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "ZSFT" = %AppData%\svc-[random].exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKEY_LOCAL_MACHINE\Software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bckd "ImagePath" = 22.sys
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = 1
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%AppData%\svc-[random].exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableVirtualization" = 0

Remove Folders and Files
%AppData%\data.sec
%UserProfile%\Desktop\Windows Internet Watchdog.lnk
%AllUsersProfile%\Start Menu\Programs\Windows Internet Watchdog.lnk
File Location Notes:

%UserProfile% refers to the current user's profile folder. By default, this is C:\Documents and Settings\[Current User] for Windows 2000/XP, C:\Users\[Current User] for Windows Vista/7/8, and c:\winnt\profiles\[Current User] for Windows NT.

%AllUsersProfile% refers to the All Users Profile folder. By default, this is C:\Documents and Settings\All Users for Windows 2000/XP and C:\ProgramData\ for Windows Vista, Windows 7, and Windows 8.

%AppData% refers to the current users Application Data folder. By default, this is C:\Documents and Settings\[Current User]\Application Data for Windows 2000/XP. For Windows Vista and Windows 7 it is C:\Users\[Current User]\AppData\Roaming.
Posted by Olzen at 9:53 AM 0 comments
Labels:
Subscribe to: Posts (Atom)