Friday, April 8, 2011

Fast Windows Antivirus 2011 Removal Guide

Fast Windows Antivirus 2011 Removal Guide
Fast Windows Antivirus 2011 is a fake antivirus program that just cheat the user that the computer is infected by malwares and urge the user to purchase the full version of Fast Windows Antivirus 2011. When Fast Windows Antivirus 2011 is installed in the computer accidentally, it will start automatically when Windows boot. Then Fast Windows Antivirus 2011 will scan the computer and WILL SURELY show shat the computer had been infected by malwares. However, the user can only remove the malwares by activating the program by purchasing the full version of Fast Windows Antivirus 2011. In fact, the full version of Fast Windows Antivirus 2011 cannot detect and remove any malware. Fast Windows Antivirus 2011 cannot detect any malware. Do not be cheated by Fast Windows Antivirus 2011.

Fast Windows Antivirus 2011 can be removed by stopping all the processes with random name and name . Then the user has to remove the files of the processes. Finally, the registry settings have to be restored by removing the registry keys stated below.

Fast Windows Antivirus 2011 should be removed immediately!

Fast Windows Antivirus 2011 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"

Remove Folders and Files
%AllUsersProfile%\[random]
%AllUsersProfile%\[random].dll
%AllUsersProfile%\[random].exe
%UserProfile%\Start Menu\Programs\Fast Windows Antivirus 2011\Fast Windows Antivirus 2011.lnk
%UserProfile%\Start Menu\Programs\Fast Windows Antivirus 2011\Uninstall Fast Windows Antivirus 2011.lnk
%UserProfile%\Desktop\Fast Windows Antivirus 2011.lnk
%UserProfile%\Start Menu\Programs\Fast Windows Antivirus 2011\

Thursday, April 7, 2011

BoanSupport Removal Guide

BoanSupport Removal Guide
BoanSupport is a fake antivirus which use fake features to disguise itself that it can detect and remove malware, trojan and viruses. In fact, BoanSupport cannot do anything. BoanSupport can only do a fake scan on the computer and then show pop ups to tell the user that there are many malwares, trojans and viruses in the computer. BoanSupport run automatically when Windows boot. BoanSupport will urge the user to purchase the full version of BoanSupport in order to remove all the detected threats. Do not believe any report given by BoanSupport. BoanSupport cannot detect and remove any trojan, malware or virus.

BoanSupport can be uninstalled by first stopping the processes and then kill all the related files. Finally, restore the registry entries added and modified by BoanSupport.

BoanSupport should be removed immediately!


BoanSupport Removal Guide
Kill Process
(How to kill a process effectively?)
supportcfg.exe
boansupport_setup.exe
boansupportmon.exe
boansupport.exe
uninst.exe

Delete Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BoanSupport
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\BoanSupport.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BoanSupport
HKEY_LOCAL_MACHINE\SOFTWARE\BoanSupport
HKEY_LOCAL_MACHINE\SOFTWARE\BoanSupportPartner

Remove Folders and Files
c:\program files\boansupport\boansupportcfg.exe
c:\documents and settings\{username}\Desktop\boansupport_setup.exe
c:\program files\boansupport\uninst.exe
c:\program files\boansupport\boansupportmon.exe
c:\program files\boansupport
c:\program files\boansupport\boansupport.exe

Alfa Defender Removal Guide

Alfa Defender Removal Guide
Alfa Defender is a fake antivirus program that looks like a legitimate antivirus. In fact, Alfa Defender cannot help protect your PC. Alfa Defender is created to cheat the user to buy the full version of Alfa Defender. When Alfa Defender is accidentally installed in the computer, it will scan the computer automatically when Windows boot and it will surely produce fake report that the computer is infected by malwares. Do not believe the report as Alfa Defender cannot detect and remove any malware.

Alfa Defender can be removed by stopping all the processes with random name and name . Then the user has to remove the files of the processes. Finally, the registry settings have to be restored by removing the registry keys stated below.

Alfa Defender should be removed immediately!


Alfa Defender Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Alfa Defender"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]"

Remove Folders and Files
%temp%\[random]
%temp%\[random].exe

Notepad++ Version: 5.9

Notepad++ is a free (as in "free speech" and also as in "free beer") source code editor and Notepad replacement that supports several languages. Running in the MS Windows environment, its use is governed by GPL License.

Based on the powerful editing component Scintilla, Notepad++ is written in C++ and uses pure Win32 API and STL which ensures a higher execution speed and smaller program size. By optimizing as many routines as possible without losing user friendliness, Notepad++ is trying to reduce the world carbon dioxide emissions. When using less CPU power, the PC can throttle down and reduce power consumption, resulting in a greener environment.

Publisher : http://notepad-plus-plus.org/
Download Notepad++ Version: 5.9

Wednesday, April 6, 2011

Windows Spyware Protection Removal Guide

Windows Spyware Protection Removal Guide
Windows Spyware Protection is a fake antivirus program that try to pretend to be a real antivirus which can remove malware. However, Windows Spyware Protection does not kill any malware from any computer. Windows Spyware Protection infects the computer by installing malware into the computer which will try to disguise itself like a real antivirus which can detect and remove malwares and viruses. After installation complete, Windows Spyware Protection will scan the computer and will surely state that the computer is infected by malwares and urge the user to buy the full version of Windows Spyware Protection. In fact, full version of Windows Spyware Protection cannot detect and remove any trojan, malware or virus.

Windows Spyware Protection can be removed by using Emsisoft HiJackFree to stop the processes and kill the files from the hard drive. Then, the user has to restore the registry entries added and modified by Windows Spyware Protection. Finally, all the file related to Windows Spyware Protection must be deleted from the hard drive. All of them has been shown in the removal guide below.

Windows Spyware Protection should be removed immediately!

Windows Spyware Protection Removal Guide
Kill Process
(How to kill a process effectively?)
CB130_287.exe

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "0" = "msseces.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun ""1" = "MSASCui.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Spyware Protection"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "2" = "ekrn.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "3" = "egui.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "4" = "avgnt.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "6" = "avscan.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "7" = "avgfrw.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "8" = "avgui.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "9" = "avgtray.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "10" = "avgscanx.exe"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "5" = "avcenter.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "11" = "avgcfgex.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "12" = "avgemc.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "13" = "avgchsvx.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "14" = "avgcmgr.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "15" = "avgwdsvc.exe"

Remove Folders and Files
%UserProfile%\Application Data\Windows Spyware Protection\Instructions.ini
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Spyware Protection.lnk
%UserProfile%\Start Menu\Programs\Windows Spyware Protection.lnk
%UserProfile%\Desktop\Windows Spyware Protection.lnk
%UserProfile%\Start Menu\Windows Spyware Protection.lnk
%UserProfile%\Application Data\Windows Spyware Protection
%UserProfile%\Application Data\Windows Spyware Protection\cookies.sqlite
C:\Documents and Settings\All Users\Application Data\23077d\CB130_287.exe

Windows Security 2011 Removal Guide

Windows Security 2011 Removal Guide
Windows Security 2011 is a fake antivirus program that try to trick the user to buy the full version of Windows Security 2011 by using fake scan results. Windows Security 2011 installs itself into the computer without confirmation of the user unless the user set the UAC level to the highest level. Windows Security 2011 start itself when the computer boot and scan the computer automatically and produce fake scan result and keep on warning the users to buy the full version of Windows Security 2011. Windows Security 2011 is delivered via criminal websites and trojan infections. Windows Security 2011 cannot detect and remove any malware, trojan or virus..

Windows Security 2011 can be removed by using Emsisoft HiJackFree by stopping the process (Windows Security 2011.exe) and delete the files at the same time. Then, remove the autorun setting set by Windows Security 2011.

Windows Security 2011 should be removed immediately.


Windows Security 2011 Removal Guide
Kill Process
(How to kill a process effectively?)
Uninstall.exe
Windows Security 2011.exe

Delete Registry
HKEY_CURRENT_USER\Software\Windows Security 2011
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Security 2011"
HKEY_LOCAL_MACHINE\SOFTWARE\Windows Security 2011
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows Security 2011

Remove Folders and Files
locate the files from the autorun settings and delete all of them
Uninstall.exe
Windows Security 2011.exe
%UserProfile%\Desktop\Windows Security 2011.lnk
%UserProfile%\Start Menu\Programs\Windows Security 2011.lnk

Vista Protection 2011 Removal Guide

Vista Protection 2011 Removal Guide
Vista Protection 2011 is a fake antivirus program that WILL SURELY warning the user that the computer has been used as spamming machine. In fact, the computer is clean, is not used as spamming machine, however, Vista Protection 2011 try to convince the user by displaying the alert so that the user will purchase the full version of Vista Protection 2011. Vista Protection 2011 cannot detect any malware and remove any malwares. Vista Protection 2011 will start automatically when Windows boot. The user has to terminate the process, delete the registry settings and remove the folders and files of Vista Protection 2011 to remove it completely.

Vista Protection 2011 can be removed by stopping all the processes with random name and name . Then the user has to remove the files of the processes. Finally, the registry settings have to be restored by removing the registry keys stated below.

Vista Protection 2011 should be removed immediately!

Vista Protection 2011 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]"

Remove Folders and Files
%AppData%\Local\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Roaming\Microsoft\Windows\Template\st3e0ilfioi3684m2nt3ps2b6lru
%AllUsersProfile%\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Local\[random].exe
%Temp%\t3e0ilfioi3684m2nt3ps2b6lru