Friday, January 30, 2009

Remove Antivirus 360

Antivirus 360 is a rogue spyware removal software. It behaves like a real anti-spyware scanner, but Antivirus 360 displays a fake or exaggerated list of Spyware threats scarying the user.

Antivirus 360 use very aggressive advertising tactics. If the user chooses option to delete 'detected' spyware, it will be immediately asked to buy full version of Antivirus 360 product. This warning box appears many times.

Suggested Antivirus 360 Removal Tool

Wednesday, January 28, 2009

Fake Scanner Site

Fake scanner site is a website, which imitates computer scanning process and displays fake scanning results stating that computer is infected with viruses and/or spyware. Such sites try to scare the user and trick it into purchasing of fake antispyware or antivirus products. Some of fake scanner sites may even secrtly install malware into your computer exploiting browser's security flaws.

Usually, fake scanner site is silently installed in the web browser as a homepage or a Browser Helper Object (BHO) by the trojan program. There are so called Homepage hijackers, Browser hijackers or Search hijackers.

Below is a list of such fraudulent sites, wich will be regularly updated:

protectprivacy18.com
pcantimalwaresolution.com
spywareremover2009plus.com
premiumantiviruspccheck.com
lite-anti-virus-scan.com
stabilitytraceonline.com
av1-scanner.info
liteantivirusproscanner.com
antimalwareonlinescan.com
ie-security.com
antimalwareonlinescan.com
xp-police-av.com
antimalware-online-scanner.com
antimalwareinternetscanner.com
winiguard.org
internetsafetyread.com
antimalware-scanner.com
sg9scanner.com
bestantispywaresecurityscan.com
safetyread.com
webioscan.com
scan4ever.com
pcsecurityscanner.com
netsecurityonline.com
winiguard.net
scan.freescanner-proas2009.com
onlinesecurity-scanner.com
protectionfastscanner.com
defender-review.com
pro-scanner-online.com
anti-virusquickscan.com
anti-virusproscan.com
Anti-virus-defence.com
allinone-scanner.com
virusresponse2009.com
s-avirus2009.com
internet-antivirus-pro.com
pcprivacycleanerpro.com
antispyware-pro-xp.com
antispyware-review.biz
total-secure2009.com
virusremover2008.com
scanner.msscanner.com
pcprivacycleanerpro.com
checksystem-online.com
smartantivirus-2009-buy.com
antispydeluxe.com
scanner.vav-x-scanner.com
pc-security-updates.com
antispyware-review.info
virusremover2008.com
registrydefender.com
windowsscanner-freever.com
avxp-2008.net
asiuoqgusdbaksd.com
antivirusdoc.net


Please do not visit these fake scanner sites. If you notice that one of these sites is installed as a homepage at your web browser without your knowlege, you must check your computer with antivirus or antispyware software immediately.

Monday, January 26, 2009

Downadup worm removal

Downadup (also known as Conficker, Kido or Downandup) is a very dangerous worm malware, which already infected more than 9 millions computers according to some sources. It can be installed from infected USB drive or from the infected computer in the local network. If infected USB drive is plugged in to the computer, the user will see Autorun window, which may look like the following:



If the tricked user choose "Open folder to view files" item, Downadup worm installs itself on the target computer. Once installed it spreads over local network.

Downadup worm disables the following services on the infected computer:
- Windows Security Center Service
- Windows Update Auto Update Service
- Background Intelligence Transfer Service
- Windows Defender
- Error Reporting Service
- Windows Error Reporting Service

The user cannot access various security-related websites from the infected computer because Downadup worm blocks their domains. Downadup worm is able to morph oun code to prevent detection.

Downadup worm cannot be removed manually. Therefore, we recommend to use one of the existing removal tools.

Suggested Downadup worm Removal Tool

Tuesday, January 6, 2009

Scan.freescannerantispyware.com homepage hijacker

Scan.freescannerantispyware.com is a homepage hijacker by a very dangerous Vundo trojan. It redirects user's homepage to http://scan.freescannerantispyware.com/ website, which promotes rogue software. If your browser's homepage was changed to scan.freescannerantispyware.com without your consent or knowledge, it means that your computer infected by Vundo trojan. It makes a security threat. Vundo trojan promotes several fake antispyware programs such as WinFixer, DriveCleaner, SpyAxe, WinAntivirusPro, SysProtect, AntiVirusGold, Spyware Guard 2008 and so on.

Computers infected with scan.freescannerantispyware.com exhibit symptoms such as pop-up advertisements in the infected web browser, desktop background changing, computer performance degrading. User's homepage becomes hijacked to http://scan.freescannerantispyware.com/.

It is very hard to remove scan.freescannerantispyware.com infection manually, because the process requires advanced technical skills. Therefore, we recommend to use one of the existing removal tools.

Suggested scan.freescannerantispyware.com Removal Tool

Antivirus-proscan.com removal

Antivirus-proscan.com is a homepage hijacker by a very dangerous Vundo trojan. It redirects user's homepage to http://www.antivirus-proscan.com/ website, which promotes rogue software. If your browser's homepage was changed to antivirus-proscan.com without your consent or knowledge, it means that your computer infected by Vundo trojan. It makes a security threat. Vundo trojan promotes several fake antispyware programs such as WinFixer, DriveCleaner, SpyAxe, WinAntivirusPro, SysProtect, AntiVirusGold, Spyware Guard 2008 and so on.

Computers infected with antivirus-proscan.com exhibit symptoms such as pop-up advertisements in the infected web browser, desktop background changing, computer performance degrading. User's homepage becomes hijacked to http://www.antivirus-proscan.com/.

It is very hard to remove antivirus-proscan.com infection manually, because the process requires advanced technical skills. Therefore, we recommend to use one of the existing removal tools.

Suggested antivirus-proscan.com Removal Tool

Websafetyguide.com homepage hijacker

Websafetyguide.com is a homepage hijacker by a very dangerous Vundo trojan. It redirects user's homepage to http://www.websafetyguide.com/ website, which promotes rogue software. If your browser's homepage was changed to websafetyguide.com without your consent or knowledge, it means that your computer infected by Vundo trojan. It makes a security threat. Vundo trojan promotes several fake antispyware programs such as WinFixer, DriveCleaner, SpyAxe, WinAntivirusPro, SysProtect, AntiVirusGold, Spyware Guard 2008 and so on.

Computers infected with websafetyguide.com exhibit symptoms such as pop-up advertisements in the infected web browser, desktop background changing, computer performance degrading. User's homepage becomes hijacked to http://www.websafetyguide.com/.

It is very hard to remove websafetyguide.com infection manually, because the process requires advanced technical skills. Therefore, we recommend to use one of the existing removal tools.

Suggested websafetyguide.com Removal Tool

How to remove sgviralscan.com hijacker

Sgviralscan.com is a homepage hijacker by a very dangerous Vundo trojan. It redirects user's homepage to http://www.sgviralscan.com/ website, which promotes rogue software. If your browser's homepage was changed to sgviralscan.com without your consent or knowledge, it means that your computer infected by Vundo trojan. It makes a security threat. Vundo trojan promotes several fake antispyware programs such as WinFixer, DriveCleaner, SpyAxe, WinAntivirusPro, SysProtect, AntiVirusGold and so on.

Computers infected with sgviralscan.com exhibit symptoms such as pop-up advertisements in the infected web browser, desktop background changing, computer performance degrading. User's homepage becomes hijacked to http://www.sgviralscan.com/.

It is very hard to remove sgviralscan.com infection manually, because the process requires advanced technical skills. Therefore, we recommend to use one of the existing removal tools.

Suggested sgviralscan.com Removal Tool

Helper-security.com homepage hijacker

Helper-security.com is a homepage hijacker by a very dangerous Vundo trojan. It redirects user's homepage to http://www.helper-security.com/ website, which promotes rogue software. If your browser's homepage was changed to helper-security.com without your consent or knowledge, it means that your computer infected by Vundo trojan. It makes a security threat. Vundo trojan promotes several fake antispyware programs such as WinFixer, DriveCleaner, SpyAxe, WinAntivirusPro, SysProtect, AntiVirusGold and so on.

Computers infected with Helper-security.com exhibit symptoms such as pop-up advertisements in the infected web browser, desktop background changing, computer performance degrading. User's homepage becomes hijacked to http://www.Helper-security.com/.

It is very hard to remove Helper-security.com infection manually, because the process requires advanced technical skills. Therefore, we recommend to use one of the existing removal tools.

Suggested Helper-security.com Removal Tool

How to remove Vundo trojan

Vundo trojan (also known as Virtumonde or Virtumondo) is a trojan malware that cause popups and advertising for rogue antispyware programs, and other misbehavior. It secretly infects computer by exploiting browser security vulnerabilities.

Popups produced by Vundo usually advertise fraudulent programs such as WinFixer, DriveCleaner, SpyAxe, WinAntivirusPro, and so on.

Computers infected by Vundo trojan exhibit symptoms such as:
- The infected web browser popups advertisements.
- The desktop background is changed to the image of a window saying that computer is infected.
- Vundo may attempt to prevent the user from removing it.
- Vundo may disable the Windows task manager or Windows registry editor.
- Computer performance may degrade.
- Internet Explorer browser homepage is hijacked to one of the following websites: helper-security.com, sgviralscan.com, websafetyguide.com, antivirus-proscan.com, scan.freescannerantispyware.com, etc.

It is very hard to remove Vundo trojan manually, because the process requires advanced technical skills. Therefore, we recommend to use one of the existing removal tools.

Suggested Vundo Removal Tool