Wednesday, December 30, 2009

Antivirus PC 2009

Antivirus PC 2009 is a rogue antispyware program.


Screen shoot of Antivirus PC 2009

Once started, Antivirus PC 2009 scans the computer and reports a lot of fake infections. It uses false scan results in order to trick user into purchasing "full" version of the program.

If your computer is infected with this malware then use the Antivirus PC 2009 removal instructions.

Tuesday, December 29, 2009

GreatDefender

GreatDefender is a new rogue antispyware program from WiniGuard family as APCProtect, ProtectPcs, SysDefence, TheDefend, GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SecureKeeper, LinkSafeness, AntiAID, SystemWarrior, SystemFighter, SystemVeteran, BlockProtector, BlockKeeper, BlockScanner, BlockWatcher, SoftBarrier, ShieldSafeness, SoftStronghold, SoftVeteran, SoftCop, SoftSoldier, TrustFighter, TrustSoldier, SafeFighter, TrustCop, SecureWarrior, SecureFighter, SecureVeteran, SecuritySoldier, SaveArmor, SaveDefender, TrustWarrior, SoftSafeness, SafetyKeeper, etc.


Screen shoot of  GreatDefender

GreatDefender is distributed through the use of trojans. Once started, it will simulate a scan and lists a lot of infections. All of these infections are fake!

While running, GreatDefender displays fake Windows Security Center and a lot of fake security alerts.
 




 

If your computer is infected with the rogue, then follow the GreatDefender removal instructions.

SystemCleanerPRO

SystemCleanerPRO is a rogue antispyware program.


Screen shoot of SystemCleanerPRO

The rogue simulates a system scan and reports a lot of infections. All of these infections are fake!

SystemCleanerPRO may also display fake security warnings.

SystemCleanerPRO removal instructions.

Antispyware Shield Pro

Antispyware Shield Pro is a rogue antispyware program.


Screen shoot of  Antispyware Shield Pro

Once installed, Antispyware Shield Pro will start a scan and reports a lot of infections. All of these infections are fake!

Sites used by  Antispyware Shield Pro:
scanner.entiresafescripts.net
wisypay.net

Registry keys and values created by  Antispyware Shield Pro:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antispyware Shield Pro
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Restore
HKEY_CURRENT_USER\Software\Entire Safe Scripts Ltd
HKEY_CURRENT_USER\Software\Entire Safe Scripts Ltd\Antispyware Shield Pro
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\Setup | CheckUpdates = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system | EnableLUA = 0x00000000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antispyware Shield Pro | DisplayName = "Antispyware Shield Pro 1.32"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antispyware Shield Pro | UninstallString = "%ProgramFiles%\Antispyware Shield Pro\uninst.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antispyware Shield Pro | DisplayIcon = "%ProgramFiles%\Antispyware Shield Pro\antispyshield.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antispyware Shield Pro | DisplayVersion = "1.32"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antispyware Shield Pro | URLInfoAbout = "http://systemcleanerspro.net/"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antispyware Shield Pro | Publisher = "Entire Safe Scripts Ltd"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Restore = "C:\Documents and Settings\All Users\Application Data\[RANDOM]\restore.exe"

Files created by  Antispyware Shield Pro:
%ProgramFiles%\Antispyware Shield Pro
%UserProfile%\Start Menu\Programs\Antispyware Shield Pro
%ProgramFiles%\Antispyware Shield Pro\antispyshield.exe
C:\Documents and Settings\All Users\Application Data\F\restore.exe
%ProgramFiles%\Antispyware Shield Pro\License.rtf
%ProgramFiles%\Antispyware Shield Pro\uninst.exe
%UserProfile%\Start Menu\Programs\Antispyware Shield Pro\Antispyware Shield Pro.lnk
%UserProfile%\Start Menu\Programs\Antispyware Shield Pro\Uninstall.lnk
%UserProfile%\Desktop\Antispyware Shield Pro.lnk


If your computer is infected with the rogue, then follow the Antispyware Shield Pro removal instructions.

Sunday, December 27, 2009

Total PC Defender

Total PC Defender (Total PC Defender 2010) is a rogue antispyware program.


Screen shoot of Total PC Defender

Total PC Defender is scam. It displays fake security warnings and false scan results in order to trick user into purchasing so-called "full" version of the program.

If your computer is infected with this malware then use the Total PC Defender removal instructions.

Thursday, December 24, 2009

APCProtect

APCProtect is a rogue antispyware program from WiniGuard family as ProtectPcs, SysDefence, TheDefend, GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SecureKeeper, LinkSafeness, AntiAID, SystemWarrior, SystemFighter, SystemVeteran, BlockProtector, BlockKeeper, BlockScanner, BlockWatcher, SoftBarrier, ShieldSafeness, SoftStronghold, SoftVeteran, SoftCop, SoftSoldier, TrustFighter, TrustSoldier, SafeFighter, TrustCop, SecureWarrior, SecureFighter, SecureVeteran, SecuritySoldier, SaveArmor, SaveDefender, TrustWarrior, SoftSafeness, SafetyKeeper, etc.

APCProtect is distributed through the use of trojans. During the system scan, it lists a lot of infections. The scan results are fake, because APCProtect identifies harmless files as dangerous infections.


 Screen shoot of APCProtect

What is more,  APCProtect will display various fake security alerts in order to scare you think that your PC in danger.






Important to know, APCProtect uses fake security alerts and false scan results as method to trick user into purchasing so-called "full" version of the program.

If your computer is infected with the rogue, then follow the APCProtect removal instructions to remove it for free.

Sunday, December 20, 2009

ProtectPcs

ProtectPcs is a new fake security program also known as rogue antispyware from WiniGuard family as SysDefence, TheDefend, GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SecureKeeper, LinkSafeness, AntiAID, SystemWarrior, SystemFighter, SystemVeteran, BlockProtector, BlockKeeper, BlockScanner, BlockWatcher, SoftBarrier, ShieldSafeness, SoftStronghold, SoftVeteran, SoftCop, SoftSoldier, TrustFighter, TrustSoldier, SafeFighter, TrustCop, SecureWarrior, SecureFighter, SecureVeteran, SecuritySoldier, SaveArmor, SaveDefender, TrustWarrior, SoftSafeness, SafetyKeeper, etc.


Screen shoot of  ProtectPcs

While  ProtectPcs is running, you will be shown fake security warnings and fake Windows Security Center.



 

If your computer is infected with the rogue, then follow the ProtectPcs removal instructions.

Malware Defense

Malware Defense is a rogue antispyware program. It is a clone of Anti Malware, which is also rogue antispyware program. The software is installed through the use of trojans.


Screen shoot of Malware Defense

Malware Defense is scam and designed to trick user into purchasing so-called "full" version of the program.

If your computer is infected with this malware then use the Malware Defense removal instructions to uninstall it.

Thursday, December 17, 2009

SysDefence

SysDefence is a rogue anti-spyware application. It looks like a legitimate anti-spyware program, but in reality is designed to trick user into buying "full" version of the bogus software. The program is from WiniGuard family as TheDefend, GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SecureKeeper, LinkSafeness, AntiAID, SystemWarrior, SystemFighter, SystemVeteran, BlockProtector, BlockKeeper, BlockScanner, BlockWatcher, SoftBarrier, ShieldSafeness, SoftStronghold, SoftVeteran, SoftCop, SoftSoldier, TrustFighter, TrustSoldier, SafeFighter, TrustCop, SecureWarrior, SecureFighter, SecureVeteran, SecuritySoldier, SaveArmor, SaveDefender, TrustWarrior, SoftSafeness, SafetyKeeper, etc.



Screen shoot of SysDefence



While running, SysDefence shows fake security alerts:









If your computer is infected with the rogue, then follow the SysDefence removal instructions.

Wednesday, December 16, 2009

System Adware Scanner 2010

System Adware Scanner 2010 is a rogue antispyware program.


Screen shoot of System Adware Scanner 2010 from Bharath's Security Blog

When started, System Adware Scanner 2010 will simulate a scan and reports a lot of threats. All of these threats are fake!

The rogue will also display a lot of fake security warnings.

System Adware Scanner 2010 removal instructions.

TheDefend

TheDefend is a program that looks like an antispyware program, but in reality is designed to trick user into buying "full" version of the bogus software. The program is from WiniGuard family as GuardPcs, IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SecureKeeper, LinkSafeness, AntiAID, SystemWarrior, SystemFighter, SystemVeteran, BlockProtector, BlockKeeper, BlockScanner, BlockWatcher, SoftBarrier, ShieldSafeness, SoftStronghold, SoftVeteran, SoftCop, SoftSoldier, TrustFighter, TrustSoldier, SafeFighter, TrustCop, SecureWarrior, SecureFighter, SecureVeteran, SecuritySoldier, SaveArmor, SaveDefender, TrustWarrior, SoftSafeness, SafetyKeeper, etc.



Screen shoot of TheDefend



TheDefend is classified as a fake antispyware program because:
* installed through trojans and worms
* the scanning process - clever imitation, in reality TheDefend will always find trojans, spyware etc
* the difficulty of removal, that is not possible to remove the software with standard Windows features (Add/Remove programs panel in the Control Panel)
* display nag screens and fake security alerts

If your computer is infected with the rogue, then follow the TheDefend removal instructions.

Tuesday, December 15, 2009

GuardPcs

GuardPcs is a new rogue antispyware program from WiniGuard family as IGuardPc, SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SecureKeeper, LinkSafeness, AntiAID, SystemWarrior, SystemFighter, SystemVeteran, BlockProtector, BlockKeeper, BlockScanner, BlockWatcher, SoftBarrier, ShieldSafeness, SoftStronghold, SoftVeteran, SoftCop, SoftSoldier, TrustFighter, TrustSoldier, SafeFighter, TrustCop, SecureWarrior, SecureFighter, SecureVeteran, SecuritySoldier, SaveArmor, SaveDefender, TrustWarrior, SoftSafeness, SafetyKeeper, etc.


 Screen shoot of GuardPcs

 Like other rogue antispyware programs, GuardPcs reports false infections and shows fake Windows Security Center and fake spyware alerts as method to trick user into purchasing so-called "full" version of the program.


If your computer is infected with the rogue, then follow the GuardPcs removal instructions.

Friday, December 11, 2009

IGuardPc

IGuardPc is a new rogue antispyware program from WiniGuard family as SiteAdware, AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SecureKeeper, LinkSafeness, AntiAID, SystemWarrior, SystemFighter, SystemVeteran, BlockProtector, BlockKeeper, BlockScanner, BlockWatcher, SoftBarrier, ShieldSafeness, SoftStronghold, SoftVeteran, SoftCop, SoftSoldier, TrustFighter, TrustSoldier, SafeFighter, TrustCop, SecureWarrior, SecureFighter, SecureVeteran, SecuritySoldier, SaveArmor, SaveDefender, TrustWarrior, SoftSafeness, SafetyKeeper, etc.


Screen shoot of IGuardPc

IGuardPc reports false infections and displays fake Windows Security Center and fake spyware alerts as method to trick user into purchasing so-called "full" version of the program.







 






If your computer is infected with the rogue, then follow the IGuardPc removal instructions.

Thursday, December 10, 2009

Internet Security 2010

Internet Security 2010 is a rogue antispyware application. It`s a clone of Advanced Virus Remover. Internet Security 2010 is promoted through the use of trojans.


Screen shoot of Internet Security 2010

When started, Internet Security 2010 will perform a scan and reports a lot of threats. All of these threats are fake!

Internet Security 2010 will also display fake system warnings from Windows task bar.


Advanced Virus Remover uses false scan results and fake system warnings as a method to trick user into buying the program.

If your computer is infected with the rogue, then follow the Internet Security 2010 removal instructions.

SiteAdware

SiteAdware is a fresh rogue antispyware program from WiniGuard family as AntiTroy, AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SecureKeeper, LinkSafeness, AntiAID, SystemWarrior, SystemFighter, SystemVeteran, BlockProtector, BlockKeeper, BlockScanner, BlockWatcher, SoftBarrier, ShieldSafeness, SoftStronghold, SoftVeteran, SoftCop, SoftSoldier, TrustFighter, TrustSoldier, SafeFighter, TrustCop, SecureWarrior, SecureFighter, SecureVeteran, SecuritySoldier, SaveArmor, SaveDefender, TrustWarrior, SoftSafeness, SafetyKeeper, etc.



Screen shoot of SiteAdware



Like other rogue antispyware applications, SiteAdware detects false infections and shows fake security alerts as method to trick user into purchasing so-called "full" version of the program.

If your computer is infected with the rogue, then follow the SiteAdware removal instructions.

Tuesday, December 8, 2009

AntiTroy

AntiTroy is a new rogue antispyware program from WiniGuard family as AntiKeep, AntiAdd, RESpyWare, REAnti, KeepCop, SecureKeeper, LinkSafeness, AntiAID, SystemWarrior, SystemFighter, SystemVeteran, BlockProtector, BlockKeeper, BlockScanner, BlockWatcher, SoftBarrier, ShieldSafeness, SoftStronghold, SoftVeteran, SoftCop, SoftSoldier, TrustFighter, TrustSoldier, SafeFighter, TrustCop, SecureWarrior, SecureFighter, SecureVeteran, SecuritySoldier, SaveArmor, SaveDefender, TrustWarrior, SoftSafeness, SafetyKeeper, etc.


 Screen shoot of AntiTroy

Like other rogue antispyware applications, AntiTroy uses false scan results, fake Windows Security Center and fake security alerts as method to trick user into purchasing so-called "full" version of the program.


Screen shoot of fake Windows Security Center



Screen shoot of fake Security Alert

If your computer is infected with the rogue, then follow the AntiTroy removal instructions.

Monday, December 7, 2009

Antivirus Live

Antivirus Live is a rogue antispyware program. It is clone of Antivirus System Pro.


 Screen shoot of Antivirus Live from bharath-m-narayan.blogspot.com

Like other rogue antispyware programs, Antivirus Live uses false positives and fake security alerts in order to trick user into buying so-called "full" version of the program.

Antivirus Live removal instructions.

Friday, December 4, 2009

PC Live Guard

PC Live Guard is a new rogue antispyware application from Virus Doctor scareware family as Live PC Care, Additional Guard, System Defender, Enterprise Suite, Windows Enterprise Suite, Volcano Security Suite, Windows Enterprise Defender, Windows PC Defender, Omega AntiVir, Windows Protection Suite, Windows System Suite, Windows Security Suit, etc.

PC Live Guard uses trojans to install itself. During installation, the fake security program will create a few harmless files and configure itself to run automatically.

Once runnig,  PC Live Guard will perform a fake scan and reports previously created files as infections.


Screen shoot of PC Live Guard false scan results

Furthermore, PC Live Guard shows fake system alerts and nag screens.





PC Live Guard is scam, it displays false positives and generates fake system alerts in order to trick user into buying so-called "full" version of the program.

If your computer is infected with the rogue, then follow the PC Live Guard removal instructions.

Thursday, December 3, 2009

Live PC Care

Live PC Care is a rogue antispyware program from Virus Doctor scareware family as Additional Guard, System Defender, Enterprise Suite, Windows Enterprise Suite, Volcano Security Suite, Windows Enterprise Defender, Windows PC Defender, Omega AntiVir, Windows Protection Suite, Windows System Suite, Windows Security Suit, etc.


Screen shoot of Live PC Care scan resuts

While  Live PC Care is running, it will display nag screens and fake security alerts.








Live PC Care will also hijack Internet Explorer.



If your computer is infected with the rogue, then follow the Live PC Care removal instructions.

AntiKeep

AntiKeep is a new rogue antispyware program from WiniGuard family as AntiAdd, RESpyWare, REAnti, KeepCop, SecureKeeper, LinkSafeness, AntiAID, SystemWarrior, SystemFighter, SystemVeteran, BlockProtector, BlockKeeper, BlockScanner, BlockWatcher, SoftBarrier, ShieldSafeness, SoftStronghold, SoftVeteran, SoftCop, SoftSoldier, TrustFighter, TrustSoldier, SafeFighter, TrustCop, SecureWarrior, SecureFighter, SecureVeteran, SecuritySoldier, SaveArmor, SaveDefender, TrustWarrior, SoftSafeness, SafetyKeeper, etc.


The rogue is installed throght the use of malware and lists previously created files as spyware, malware and trojans.


Screen shoot of AntiKeep false scan results


AntiKeep also shows a screen that looks like legitimate Windows Security Center.


Screen shoots of fake Windows Security Center

AntiKeep uses false scan results, fake Windows Security Center and fake Spyware alerts as method to trick user into buying so-called "full" version of the program.

AntiKeep removal instructions.




Tuesday, December 1, 2009

Personal Security

Personal Security is a rogue antispyware program. Its a clone of Cyber Security.


Screen shoot of Personal Security



Screen shoot of fake Security Center

Personal Security displays false positives and generates fake security alerts in order to trick user into buying so-called "full" version of the program.





Monday, November 30, 2009

AntiAdd

AntiAdd is a new rogue antispyware program from WiniGuard family as RESpyWare, REAnti, KeepCop, SecureKeeper, LinkSafeness, AntiAID, SystemWarrior, SystemFighter, SystemVeteran, BlockProtector, BlockKeeper, BlockScanner, BlockWatcher, SoftBarrier, ShieldSafeness, SoftStronghold, SoftVeteran, SoftCop, SoftSoldier, TrustFighter, TrustSoldier, SafeFighter, TrustCop, SecureWarrior, SecureFighter, SecureVeteran, SecuritySoldier, SaveArmor, SaveDefender, TrustWarrior, SoftSafeness, SafetyKeeper, etc.

AntiAdd installed through  the use of trojans and reports false scan results to trick user into buying the full version of software!


Screen shoot of AntiAdd false scan results

AntiAdd shows fake Windows Security Center, nag screens and fake security alerts.






 



AntiAdd is designed only for one to trick user into buying so-called "full" version of software.

AntiAdd removal instructions.

Saturday, November 28, 2009

Fake Antivir Antivirus

Antivir is not Avira Antivir. This name uses fake antivirus program, clone of Alpha Antivirus, which is also a fake antivirus program. It is installed from fake online malware scanners.


Screen shoot of fake online malware scanner


Fake Antivir uses false scan results and fake security alerts as method to trick user into buying so-called "full" paid version of the software.


Screen shoot of Antivir scan process

The Fake Antivir also blocks some Windows program and hijack Internet Explorer.




Please use these Antivir removal guidelines  to remove this infection.