Computer Security

How to dismiss Pro Antispyware 2009 ? (Removal Tips )

admin — Mon, 05 Jan 2009 11:36:08 +0000

Pro Antispyware 2009 is a Fake security product or rogue Antispyware. It tricks the internet users and for voirs scan and make them purchase legal version of softwares. Generally Pro antispyware is sponsored by Vondo or Zlob or by some drive-by-download or when you visit any malicious site. Displays fake messages and pop ups to fool the user which means system is been infected and need urgent virus scan.

Pro Antispyware 2009 malware process to kill :
Press Ctrl+Shift+Esc.
This will open Your Windows Task Manager > Process Tab.
Now click process tab and view the different process respectively.
Here you can find all the processes currently running on your system. Select the malicious Processes and press End Process.
Save your settings.

C:\Documents and Settings\All Users\Application Data\Solt Lake Software\Pro Antispyware 2009\proas2009.exe
or

delete the files associated with Pro antispyware 2009

proas2009.exe
Pro anti spyware dll files to be deleted

Click on Start > Run.
Type cmd and press ok, to open the Command Prompt.
Here you type regsvr32 /u [dll_name] and press enter to unregister the DLL.
If you accidentally do something wrong, you can register it again by using regsvr32 [dll_name].
C:\WINDOWS\system32\gisyflngpshcvuakv.dll
Pro anti spyware registry entries to be deleted
Click on Start menu > Run.
Type reg edit, press ok.
Now navigate through the menu on the left pane to the desired registry entry, and delete or modify it as required.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\uzymaulreqvtfzbe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “mfhsornwnduy”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDA08241-09F3-2DBE-22B1-5B44B581231C}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FDA08241-09F3-2DBE-22B1-5B44B581231C}
HKEY_CURRENT_USER\Software\{EBFF3366-F653-ACA1-0798-E062A58FA824}
HKEY_CURRENT_USER\Software\Solt Lake Software
HKEY_CLASSES_ROOT\CLSID\{FDA08241-09F3-2DBE-22B1-5B44B581231C}

How to dump Antivirus 2010 ?

admin — Mon, 05 Jan 2009 11:32:19 +0000

Anti-virus 2010 is fake antivirus software or rogue security softwares.This fake antivirus is generally sponsored through malicious web site or links . Often it genrates free scan messages or pop ups.

Antivirus 2010, also known as Antivirus2010, is a direct copy of the notorious rogue antispyware application called Antivirus 2009. Antivirus 2010 normally generates fake and misleading system popup error messages such as “STOP: 0×000000D1 (0×0000000, 0xF73120AE, 0xC0000008, 0xC000000) A spyware application has been detected and Windows has been shut down to prevent damage to your computer”.

Infected files associated with antivirus 2010 must be deleted ( Inclusive malware process)

Press Ctrl+Shift+Esc.
This will open Your Windows Task Manager > Process Tab.
Now click process tab and view the different process respectively.
Here you can find all the processes currently running on your system. Select the malicious Processes and press End Process.
Save your settings.

svchost.exe
IEDefender.dll
wingamma.exe
AV2010.lnk
AV2010.lnk
Uninstall.lnk
AV2010.exe
AV2010install.exe
AV2010install_0011.exe
AV2010[1].exe
Antivirus2010.exe
winsrc.dll
ieupdates.exe
%program_files%\Antivirus 2010\AV2010.exe
%startmenu%\Antivirus 2010\Antivirus 2010.lnk
%startmenu%\Antivirus 2010\uninstall Antivirus 2010.lnk
%desktopdirectory%\Antivirus 2010.lnk
%program_files%\Antivirus 2010\AV2010.exe
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus 2010.lnk
%UserProfile%\Desktop\Antivirus 2010.lnk
%UserProfile%\Start Menu\Antivirus 2010\Antivirus 2010.lnk
%UserProfile%\Start Menu\Antivirus 2010\Uninstall Antivirus 2010.lnk
%ProgramFiles%\Antivirus 2010\AV2010.exe
%System%\scui.cpl
Infected files associated with antivirus 2010
Press Ctrl+Shift+Esc.
This will open Your Windows Task Manager > Process Tab.
Now click process tab and view the different process respectively.
Here you can find all the processes currently running on your system. Select the malicious Processes and press End Process.
Save your settings.
-c:\WINDOWS\system32\IEDefender.dll
c:\Documents and Settings\All Users\Desktop\AV2010.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\AV2010
c:\Documents and Settings\All Users\Start Menu\Programs\AV2010\Uninstall.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\AV2010\AV2010.lnk
c:\Program Files\AV2010
Antivirus 2010 registry values to be deleted :

Click on Start menu > Run.
Type reg edit, press ok.
Now navigate through the menu on the left pane to the desired registry entry, and delete or modify it as required.
HKEY_CURRENT_USER\Software\AV2010
HKEY_CLASSES_ROOT\AppID\
{3C40236D-990B-443C-90E8-B1C07BCD4A68}
HKEY_CLASSES_ROOT\AppID\IEDefender.DLL
HKEY_CLASSES_ROOT\CLSID\
{FC8A493F-D236-4653-9A03-2BF4FD94F643}
HKEY_CLASSES_ROOT\IEDefender.IEDefenderBHO
HKEY_CLASSES_ROOT\IEDefender.IEDefenderBHO.1
HKEY_CLASSES_ROOT\Interface\
{7BC7565C-5062-43CE-8797-DC2C271140A9}
HKEY_CLASSES_ROOT\TypeLib\
{705FD64B-2B7B-4856-9337-44CA1DA86849}
HKEY_LOCAL_MACHINE\SOFTWARE\
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC8A493F-D236-4653-9A03-2BF4FD94F643}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0012
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0013
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\s

How to delete Pc Security Scanner .com ? Removal Steps

admin — Mon, 05 Jan 2009 11:22:01 +0000

Pc security scanner.com is another clone of antivirus 2009. It is fake scanner and generates fake tricks to convince the users . Pc security scanner is generally responsible to hijack the browser i.e its manipulates the browser settings and diverts it page to fake antivirus 2009 or sometimes to another malicious web sites.
This directly helps other Trojans to enter into the system without users or authors knowledge. Once downloaded or installed effects the system performance in terms of speed and corrupts the browser settings.

Infected files associated with pc scanner .com
( Inclusive Malware Process)
Press Ctrl+Shift+Esc.

This will open Your Windows Task Manager > Process Tab.
Now click process tab and view the different process respectively.
Here you can find all the processes currently running on your system. Select the malicious Processes and press End Process.
Save your setting
shlwapi.dll
wininet.dll
av2009.exe
Antivirus2009.exe
Antivirus 2009.lnk
Uninstall Antivirus 2009.lnk
Pc scanner.com registry values to be deleted
Click on Start menu > Run.
Type reg edit, press ok.
Now navigate through the menu on the left pane to the desired registry entry, and delete or modify it as required.
HKEY_CURRENT_USER\Software\Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\75319611769193918898704537500611
HKEY_CLASSES_ROOT\CLSID\{037C7B8A-151A-49E6-BAED-CC05FCB50328}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “ieupdate”