This virus has a few other names and executable listed below.

• drwatson64ex.exe
• drwatson64
• Paladin Antivirus
• msdtctr.exe
• pavext.dll
• pav.exe
• setupt.exe
• Zlob.Porn.Ad

But luckily it is easy to remove.  Just use the tools below to remove this virus/ trojan!

To remove this, just download the lasted free version of AVG Free or SuperAntiSpyware

Files

%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Paladin Antivirus.lnk
%UserProfile%\Desktop\Paladin Antivirus Support.lnk
%UserProfile%\Desktop\Paladin Antivirus.lnk
%UserProfile%\Start Menu\Programs\Paladin Antivirus
%UserProfile%\Start Menu\Programs\Paladin Antivirus\Paladin Antivirus Support.lnk
%UserProfile%\Start Menu\Programs\Paladin Antivirus\Paladin Antivirus.lnk
%UserProfile%\Start Menu\Programs\Paladin Antivirus\Uninstall Paladin Antivirus.lnk
c:\Program Files\Paladin Antivirus
c:\Program Files\Paladin Antivirus\help.ico
c:\Program Files\Paladin Antivirus\pav.db
c:\Program Files\Paladin Antivirus\pav.exe
c:\Program Files\Paladin Antivirus\pavext.dll
c:\Program Files\Paladin Antivirus\phook.dll
c:\Program Files\Paladin Antivirus\uninstall.exe

Registry

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Paladin Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Paladin Antivirus

Potential Warnings that will appear

Network Intrusion Detected!
Your computer is being attacked from a remote PC.
Process is trying to steal your passwords listed below. It is highly recommended to block this threat now.
You are using a trial version.
It is recommended to purchase a commercial version.

Adware module detected on your PC!
Zlob.Porn.Ad adware has been detected. This adware module advertises websites with explicit content. Be advised of such content being possibly illegal. Please click the button below to locate and remove this threat now.

Good Luck!

Related posts

• No related posts.

It goes by the following names

• RemoveIT Pro
• RemoveIT Pro Enterprise
• bill103.exe
• t0FN6aLCo26Q.exe
• 24rH41.exe
• gs6LlyG0.exe
• ey.exe

To remove this, just download the lasted free version of AVG Free or SuperAntiSpyware

Good Luck!!

Incoming search terms for the article:

Related posts

• No related posts.

To remove this, just download the lasted free version of AVG Free or SuperAntiSpyware

This virus is also know as the

• Win32 Virus
• Win32:Trojan-gen
• 3dcs9.exe

It sometimes includes the files

• herss.exe
• cvasds0.dll
• cvasds1.dll
• cvasds2.dll

Incoming search terms for the article:

Related posts

• No related posts.

But never the less it needs to be removed.

You can remove is simply by using one of the below products . 

To remove this, just download the lasted free versions of AVG Free or SuperAntiSpyware

The virus changes /adds the following registry keys and files and folders!

Registry

HKEY_CURRENT_USER\Software\Personal Security
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Security
HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_LOCAL_MACHINE\SOFTWARE\5FFB10D58FFCF482208906E6A889FD56
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “PSecurity”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “PersonalSec”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “PersSecurity”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “PersonSecurity”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform “WinTSI 01.12.2009

Files and Directories

c:\Program Files\PSecurity\
c:\Program Files\PSecurity\psecurity.exe
C:\Program Files\PersonalSec\
C:\Program Files\PersonalSec\psecurity.exe
C:\program files\PersSecurity\
C:\program files\PersSecurity\psecurity.exe
C:\program files\PersSecurity\system.dat
C:\Program Files\PersonSecurity\
C:\Program Files\PersonSecurity\psecurity.exe
c:\Program Files\Common Files\PSecurityUninstall\
c:\Program Files\Common Files\PSecurityUninstall\Uninstall.lnk
c:\WINDOWS\system32\win32extension.dll
c:\Documents and Settings\All Users\Start Menu\PSecurity
c:\Documents and Settings\All Users\Start Menu\PSecurity\Computer Scan.lnk
c:\Documents and Settings\All Users\Start Menu\PSecurity\Help.lnk
c:\Documents and Settings\All Users\Start Menu\PSecurity\Personal Security.lnk
c:\Documents and Settings\All Users\Start Menu\PSecurity\Registration.lnk
c:\Documents and Settings\All Users\Start Menu\PSecurity\Security Center.lnk
c:\Documents and Settings\All Users\Start Menu\PSecurity\Settings.lnk
c:\Documents and Settings\All Users\Start Menu\PSecurity\Update.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\PSecurity.lnk
%UserProfile%\Desktop\Personal Security.lnk
C:\WINDOWS\system32\win32extension.dll

Incoming search terms for the article:

Related posts

• No related posts.

To Remove the Dr Guard Virus, please complete the following steps.

To remove this, just download the lasted version of AVG Free or SuperAntiSpyware

The Dr Guard Virus also installs the Asr64_ldm.exe trojan.  This will also be removed using SuperAntiSpyware!

The DR Guard, DR. Guard of DrGuard virus/malware has been noted as taking the below action

DrGuard can also be called 

Incoming search terms for the article:

Related posts

• No related posts.

To fix this problem, you need another pc to either burn an iso onto a cd, or build a bootable USB.

Hirens Boot CD is an amazing collection of freeware tools that can help with most problems on your PC.

You will need to use the password reset tool on the CD/USB, but i would not recommend trying to change the password, just set the password to blank.

You can download Hirens Boot CD Here

This is an amazing tool, use it carefully.

Incoming search terms for the article:

Related posts

• No related posts.

DriveImage XML is a great tool, not the best looking but can be used to clone a drive and schedule backups using Microsoft Scheduler.

You can download DriveImage XML here.  It is free for home use

XXClone is a basic but great drive to drive cloning tool.  It does exactly what it says on the tin.

You can download XXClone it here

Shadow Copy is more of a file copying program rather than a drive cloner, it copies the entire content of the drive to another, including those files that are in use by windows using VSS. It is a useful tool, but it will not make a bootable drive after a copy.

 You can download Shadow Copy Here

The pay alternatives i would suggest are Norton Ghost and Acronis.  Acronis is my favorite, i will write a post all about acronis i the future.

Have Fun!!

Incoming search terms for the article:

Related posts

• No related posts.

The most common three codecs that i believe you need are listed with links to the sites below.  I would only suggest downloading the codec, not the player.  Then using the player in this post Click here to read about a great Media Player

• Divx Codec
• Xvid Codec
• AC3 Codec

You dont need both the Divx and Xvid codec, normally just one will do, but both wont hurt.  It is also best to reboot after you have installed them, even though they say you dont need to.

Have Fun!!

Incoming search terms for the article:

Related posts

• No related posts.

This virus can also block the internet and change a lot of basic but annoying settings on your computer.

So to get rid of the virus, first of all i would suggest you turn of the internet. Now if you have a spare computer or a friends computer download SuperAntiVirus or SpyBot Search and Destroy, copy them onto a CD or USB stick and install them on the infected computer. If required, reconnect the computer to the internet to download the updates. 

You can download Spybot Here

You can Donwload SuperAntiSpyware Here

If the computer will not allow you to connect to the internet, you will need to change your Internet Explorere Proxy settings.  This is very simply done, just open Internet Explorer, goto tools, then the Connection tab, click on the Lan Settings button and deselect the ‘use a proxy server for….’.  Now press OK and OK again.  You should now be able to surf the internet.  

Below are a list of the files and registry entries %userprofile% is a windows variable, it means in XP c:\documents and settings\<username> and in Vista or Win 7 c:\users\<username>

Antivirus Soft Files

Windows XP:

%UserProfile%\Local Settings\Application Data\<random>\
%UserProfile%\Local Settings\Application Data\<random>\<random>sysguard.exe
%UserProfile%\Local Settings\Application Data\<random>\<random>sftav.exe

Vista and Windows 7:

%UserProfile%\AppData\Local\<random>\
%UserProfile%\AppData\Local\<random>\<random>sysguard.exe
%UserProfile%\AppData\Local\<random>\<random>sftav.exe

Associated Antivirus Soft Registry Info

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “<random>”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “<random>”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
HKEY_CURRENT_USER\Software\avsoft

Incoming search terms for the article:

Related posts

• No related posts.

This virus also creates hidden folder and files on your PC.  It creates the files in the following locations (%system% is the system folder i.e. c:\windows\)

All of the below are hidden.

%System%\lowsec\local.ds
%System%\lowsec\user.ds

%System%\lowsec\user.ds.lll

To remove this, just download the lasted version of AVG Free or SuperAntiSpyware

The Virus / trojan is also know as

• HeurEngine.UnknownThreat
• Packed.Generic.287
• Generic.dx!nmx, Mal/VB-Gen
• PE_Patch.UPX

Good Luck!

Incoming search terms for the article:

Related posts

• How to remove Sysconfig32.exe virus? (0)
• How to remove a Virus, Spyware or Malware from your computer (1)
• How to remove XP Internet Security 2010 Antivirus Vista 2010 or Win 7 Antispyware 2010 (4)
• Free Anti Virus and Anti Spam (4)