Spyware Removal News

One System Fighter of Many Clones (Removal Instructions)

2009-11-08T14:38:00.000-08:00

System Fighter (SystemFighter) is a sequel of System Veteran and other software of one family. New issues from this family of malware will soon be released at daily basis, if the trend is kept of releasing new clones at increasing frequency. System Fighter is only one of a dozen of clones released during September 2009. Hackers simply put another name and propagate the supposedly new product using the same distribution chains.
TrysWarior is marketed as antispyware. In fact, you need to remove System Fighter as a spyware. It is a common paradox when a declared antispyware that pretends to remove spyware is spyware itself and needs to be removed by true antispyware.
Get rid of System Fighter or any of its clones by true antispyware. Click here to start free Spyware Doctor scan and perform System Fighter removal, as we well removal of any other viruses and malware revealed by the scanner.

System Fighter screenshot:

System Fighter removal tool:

Download System Fighter Remover

System Fighter manual removal guide: Delete System Fighter files:

1 SystemFighter.lnk
2 Homepage.lnk
3 Uninstall.lnk
SystemFighter.exe

Delete System Fighter registry entries:

HKEY_CURRENT_USER\Software\SystemFighter
HKEY_LOCAL_MACHINE\SOFTWARE\SystemFighter
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “zsx1.tmp.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemFighter
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “SystemFighter”

SystemVeteran Removal Help

2009-11-08T05:52:00.000-08:00

Hackers wants users pay for the services of SystemVeteran (System Veteran), but there are no services rendered by this program save the permanent annoyance with misleading alerts and illusion of antispyware presence. Remove SystemVeteran instead of encouraging hackers by purchasing the scamware, or enduring its senseless and misleading scan windows and alerts. In the worst case, users are duped to delete useful files as the rogue indicates a path to them among its scan results, so users may try to delete the findings manually. Get rid of SystemVeteran adware and secure useful files in the memory of your computer system.
We classify SystemVeteran as adware, fake antispyware and crashware. The last classification is based on the fact that SystemVeteran deteriorates host system, the two first – on the description in paragraph above.
Click here to start free system inspection and perform SystemVeteran removal with multi-purposes system security suite that will also find and remove other infection, if any.

SystemVeteran screenshot:

SystemVeteran removal tool:

Download SystemVeteran Remover

SystemVeteran manual removal instructions:
Delete SystemVeteran files:

1 SystemVeteran.lnk
2 Homepage.lnk
3 Uninstall.lnk
SystemVeteran.exe
zsx1.tmp.exe

Delete SystemVeteran registry entries:

HKEY_CURRENT_USER\Software\SystemVeteran
HKEY_LOCAL_MACHINE\SOFTWARE\SystemVeteran
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “zsx1.tmp.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\SystemVeteran
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “SystemVeteran”

MaCatte Antivirus 2009 - dangerous rogue. Removal instructions

2009-11-06T01:09:00.000-08:00

MaCatte Antivirus 2009 (MaCatte Security Center) is far not just a specific adware and counterfeit available for downloading at one website; it should be considered as a wide complex trickery.
According to the very conservative estimate, there are several dozens of cloned websites posed as MlawareCatcher home or official page. These websites are intensively advertised through the banners, links and popups at uncountable number of websites. As a rule, the ads at 100% of those websites are, literally speaking, misleading. That is, they lead user to the website absolutely unrelated to the content of published ad, which is a website devoted exclusively to MaCatte Antivirus 2009. The ad at the website of a third party is thus a dummy ad; for example, users may be interested in the ad inviting them to buy watches, but, since it is a misleading ad, a user is led as it click on it to the website of MaCatte Antivirus 2009.
Once user at a MaCatte Antivirus 2009 website, he can see fake reviews of independent observers and fake comments of grateful imaginary customers. As soon as user is lured to download the software advertised and does he so, the infection is not necessarily to be installed manually as it includes forbidden for legit software executable that performs its automated installation and self-launching. Remove MaCatte Antivirus 2009 as soon as possible, if you have downloaded it. Naturally you need to get rid of MaCatte Antivirus 2009 in case of its sacred downloading with trojan or virus or otherwise, which is also quite possible, if you let the infection run, you will be instantly presented with loads of alerts and a scan show with a number of false positives and so that will go until you eventually remove MaCatte Antivirus 2009. Click here to start free scan and get rid of MaCatte Antivirus 2009 scam.

MaCatte Antivirus 2009 screenshots:

MaCatte Antivirus 2009 removal tool:

Download Spyware Doctor

MaCatte Antivirus 2009 manual removal guide:
Delete MaCatte Antivirus 2009 files:

msc.exe
msca.ico
mstdl.exe
Viruses.dat
msca.ico
mcull.exe
msc.exe
Viruses.dat
WPtect.dll
msca.lnk
msca.lnk

Delete MaCatte Antivirus 2009 registry entries:

HKEY_CURRENT_USER\Software\msca
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{459b6bf8-5320-4c41-8833-85baedf31086}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A73890FC-177F-4198-AE3D-C64F7D9E69D8}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{459b6bf8-5320-4c41-8833-85baedf31086}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{459b6bf8-5320-4c41-8833-85baedf31086}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{459b6bf8-5320-4c41-8833-85baedf31086}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\NetworkNeighborhood\NameSpace\{459b6bf8-5320-4c41-8833-85baedf31086}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce "msca"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "wsc"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "msc"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\msca
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnPost "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnPostRedirect "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnonBadCertRecving "0"

Cyber Security (CyberSecurity) Removal Guide

2009-11-02T08:04:00.000-08:00

The rogue entitled Cyber Security (CyberSecurity) may unexpectedly appear at your desktop with its front window and alerts in the form of nag screens and fake Windows warnings. Some of the said alerts are banned by host system subject to its high security settings. Remove Cyber Security as soon as you have observed any hint at its presence. Lingering when you need to get rid of Cyber Security results in growing intensity of its alerts and front windows displaying until the system concerned is virtually paralyzed by its endless advertisements.
Cyber Security is also available at a number of websites for downloading by user; moreover, there are plenty of ads in the Internet drawing users to the websites which suggest downloading Cyber Security adware.
Cyber Security’s habits are not predetermined by the way of its installation.
Click here to perform Cyber Security removal by Spyware Doctor which has been tested and proved its ability to remove Cyber Security counterfeit.

Cyber Security screenshot:

Cyber Security removal tool:

Download Spyware Doctor

Cyber Security manual removal guide:
Delete Cyber Security files:

csc.exe
winsource.dll
Help.lnk
Registration.lnk
Cyber Security.lnk

Delete Cyber Security registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Cyber Security
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run “1FD92E3F7C34799BFB075C41DA05D1FE”

Desktop Defender 2010 Removal Information

2009-10-29T02:07:00.000-07:00

Desktop Defender 2010 is no matching to the description at its website and ads, no matter it seems, for the first look, that the application does include all features declared. However, looks can be deceiving; Desktop Defender 2010 is described as an application to provide your system security and privacy. Instead of that, in reality it harms host system deteriorating legit software and polluting the System Registry. Many users posted their requests how to remove Desktop Defender 2010 at various forums and blogs etc., and the main reason why they were eager to get rid of Desktop Defender 2010 was that the rogue was really annoying and there was no option of Desktop Defender 2010 removal according to the procedure provided for Windows.
Therefore, the only way to remove Desktop Defender 2010 is to root it out. Click here to start free Spyware Doctor scan in order to detect every Desktop Defender 2010 entry and thus remove Desktop Defender 2010 completely.

Desktop Defender 2010 screenshot:

Desktop Defender 2010 removal tool:

Download Desktop Defender 2010 Remover

Desktop Defender 2010 manual removal guide:
Delete Desktop Defender 2010 files:

Desktop Defender 2010.lnk
Activate Desktop Defender 2010.lnk
Desktop Defender 2010.lnk
How to Activate Desktop Defender 2010.lnk
Desktop Defender 2010
AF.dll
daily.cvd
Desktop Defender 2010.exe
guide.chm
hjengine.dll
IEAddon.dll
MFC71.dll
MFC71ENU.DLL
msvcp71.dll
msvcr71.dll
pthreadVC2.dll
shellext.dll
siglsp.dll
tdifw_drv_WLH.sys
tdifw_drv_WXP.sys
uninstall.exe
tdifw_drv.sys
log.txt
gedx_ae09.exe
kgn.exe
kilslmd.exex
kn.a.exe

Delete Desktop Defender 2010 registry entries:

HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\antivirus_contextscan
HKEY_CLASSES_ROOT\AppID\{C0E56AC2-9F72-436E-B6E7-AEC28AF9E4EB}
HKEY_CLASSES_ROOT\AppID\IEAddon.DLL
HKEY_CLASSES_ROOT\CLSID\{08EEC6AD-7486-487F-89B7-5A3716DDAE14}
HKEY_CLASSES_ROOT\CLSID\{CCB5551D-8594-4999-85F9-1E3EABCB95AC}
HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\antivirus_contextscan
HKEY_CLASSES_ROOT\Drives\shellex\ContextMenuHandlers\antivirus_contextscan
HKEY_CLASSES_ROOT\IEAddon.StatusBarPane
HKEY_CLASSES_ROOT\IEAddon.StatusBarPane.1
HKEY_CLASSES_ROOT\Interface\{5B184B9D-B7BD-4FEA-8D1F-5E27182206A5}
HKEY_CLASSES_ROOT\TypeLib\{3ED0E410-5C8E-47B6-A75D-D10B886E903C}
HKEY_LOCAL_MACHINE\SOFTWARE\Desktop Defender 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{CCB5551D-8594-4999-85F9-1E3EABCB95AC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\Desktop Defender 2010
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tdifw_drv
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Internet Settings\User Agent\Post Platform "Desktop Defender 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run "Desktop Defender 2010"

ShieldSafeness removal process. Get rid of nasty Shield Safeness popups

2009-10-26T13:29:00.001-07:00

ShieldSafeness (Shield Safeness) is actually not a virus, if to use one system of computer system infections classification. However, in common terms there is no mistake in classifying ShieldSafeness as a virus as there is no strict rule or obvious common recognition that one computer system infections classification is true and the others are confusing.
No matter how you like to identify the rogue you need to remove ShieldSafeness in order to get rid of ShieldSafeness endless ads in the forms of fake system scan, fake system alerts and Internet popups. ShieldSafeness is a nearest clone of SoftStronghold. Those two infections belong to undoubtedly the most numerous group of antispyware counterfeits based on one GUI.
Click here to start free scan in order to detect all rogue residents of your PC and to perform ShieldSafeness removal by Spyware Doctor - verified antispyware.

ShieldSafeness screenshot:

ShieldSafeness removal tool:

Download ShieldSafeness Remover

ShieldSafeness manual removal guide:
Delete ShieldSafeness files:

1 ShieldSafeness.lnk
2 Homepage.lnk
3 Uninstall.lnk
ShieldSafeness.exe
uninstall.exe
10359virzs509.cpl
10380ha95tozl126.bin
10623spy65z9.bin
2ed19pyz5re2156.bin
2f53vir193z.bin
2z075t59j48c.exe
unp4.tmp.exe

Delete ShieldSafeness registry entries:

HKEY_CURRENT_USER\Software\ShieldSafeness
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Uninstall\ShieldSafeness
HKEY_LOCAL_MACHINE\SOFTWARE\ShieldSafeness
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run “ShieldSafeness”
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run “unp4.tmp.exe”

Windows System Defender and its notorious family

2009-10-25T06:06:00.000-07:00

Windows System Defender is another rogue of the family that includes such notorious antispyware counterfeits as Windows Guard Pro, Ultimate System Guard and Windows PC Defender. Windows PC Defender is considered to be a direct parent of Windows System Defender. There is no difference but name of the counterfeit between the front windows of Windows PC Defender and Windows System Defender.
While installed Windows System Defender creates files at different folder at the system concerned to present those files as infections found. Therefore, the scan by Windows System Defender is another trick to make users waste their money into activating useless and harmful software. Remove Windows System Defender and be sure that activating the counterfeit you neither defend your system nor get rid of Windows System Defender annoying advertisements.
Click here to run free Spyware Doctor scan and perform Windows System Defender removal.

Windows System Defender screenshot:

Windows System Defender removal tool:

Download Windows System Defender Remover (Spyware Doctor)

Windows System Defender manual removal guide:
Delete Windows System Defender files:

WS83b.exe
8727.mof
mozcrt19.dll
sqlite3.dll
61a60\WSD.ico
vd952342.bd
wsd.cfg
cookies.sqlite
ANTIGEN.dll
cid.dll
ddv.dll
eb.sys
eb.tmp
energy.sys
exec.dll
exec.tmp
FS.exe
kernel32.drv
PE.drv
PE.sys
PE.tmp
ppal.dll
SICKBOY.exe
Windows System Defender.lnk
search.xml

Delete Windows System Defender registry entries:

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\
SearchScopes “URL” => “http://search-gala.com/?&uid=222&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” => “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run “Windows System Defender”

Soft Stronghold hails from russian hackers

2009-10-24T10:08:00.000-07:00

SoftStronghold (Soft Stronghold) is another gift of hackers. Some peculiarities of the adware hint that the hackers have been engaged in other well-known trickeries based on system suite counterfeits. At least, the rogue downloading and installation is provided by trojans, which are known to be downloading agents of elder counterfeits.
Remove SoftStronghold as there is no use to have such annoying and greedy for system resources program code like this. Greedy for system resource means that SoftStronghold was programmed to demand exceeding portion of the resources in order to slow down targeted system and thus convince user of the need to pay for its activation in order to resolve the slow computer problem. The user actually needs to take care of the infected system performance and get rid of SoftStronghold. Click here to run free scan of your computer system and perform SoftStronghold removal.

SoftStronghold screenshot:

SoftStronghold removal tool:

Download SoftStronghold Remover

SoftStronghold manual removal guide:
Delete SoftStronghold files:

1 SoftStronghold.lnk
2 Homepage.lnk
3 Uninstall.lnk
SoftStronghold.exe
uninstall.exe
10246h9zktool4d5.exe
1045ztroj92a.ocx
10520hac5too979z.bin
20151worm9z4.ocx
205z0sp95ad.exe
2069sz5mbot179.dll
akx4.tmp.exe

Delete SoftStronghold registry entries:

HKEY_CURRENT_USER\Software\SoftStronghold
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\SoftStronghold
HKEY_LOCAL_MACHINE\SOFTWARE\SoftStronghold
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “akx4.tmp.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “SoftStronghold”

SoftVeteran - can damage your OS

2009-10-21T12:19:00.000-07:00

SoftVeteran (Soft Veteran) is an exact copy of its numerous forerunners by its skins, behavior and method of I hidden download. Moreover, even its name is not quite original as its first part is a repetition of the name of SoftSoldier malware.
Remove SoftVeteran in order to get rid of SoftVeteran’s irritating ads and to prevent system damage as counterfeits of its family are known to deteriorate computer systems they infect slowing them down by binding RAM and contaminating system registry and by performing pointed deletion of crucially important for certain software files. Click here to start free scan in order to perform SoftVeteran removal.

SoftVeteran screenshot:

SoftVeteran removal tool:

Download SoftVeteran Remover

SoftVeteran manual removal instructions:
Delete SoftVeteran files:

1 SoftVeteran.lnk
2 Homepage.lnk
3 Uninstall.lnk
jqd4.tmp.exe
SoftVeteran.exe
uninstall.exe
1051zhreat910265.ocx
10555hzcktool91c.exe
1057download952240z.ocx

Delete SoftVeteran registry entries:

HKEY_CURRENT_USER\Software\SoftVeteran
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
\Uninstall\SoftVeteran
HKEY_LOCAL_MACHINE\SOFTWARE\SoftVeteran
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “jqd4.tmp.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “SoftVeteran”

Conflicker.B Spam Trojan comes from spam

2009-10-20T05:52:00.000-07:00

Conflicker.B Spam Trojan, Generic FakeAlert.a, TrojanDownloader:Win32/FakeRean, Adware/AntivirusPro2010, Mal/EncPk-KP, Trojan.FakeAV, TROJ_FAKEAV.BLV, Win32:Trojan-gen Generic15.CWZ, Trojan.Downloader.FakeAV.DV are the names designating one and same trojan downloader. There are several reviews at reliable websites in the web describing that troajn. The malware observers have named this trojan according to the subject of spam message, which is a start point of this trojan trickery. The subject of the massage reads as follows: “Conflicker.B Infection Alert”. Therefore, the related trojan is referred to as Conflicker.B Infection Trojan.
The best way to remove Conflicker.B Infection Trojan is to avoid downloading Conflicker.B Infection Trojan as you might have been invited by the spam massage which has been dispatched to millions of mailboxes. The massage is undersigned by Microsoft Windows Agent. It is understood that was not Microsoft that approved, or was responsible for, the spamming. It was the same hackers who developed and distributed Antivirus Pro 2010 who spammed the Conflicker.B Infection Alert.
The main predestination of Conflicker.B Infection Trojan is to drop Antivirus Pro 2010 adware into targeted computer system. Once the adware implanted, the trojan supports it generating fake alerts, which prompt a user of infected PC to buy full version of Antivirus Pro 2010.
To get rid of Conflicker.B Infection Trojan covering all possible infections downloaded thanking to its assistance or in no relation to it, click here to start the trojan of Conflicker.B Infection removal.

Conflicker.B Spam Trojan removal tool:

Download Conflicker.B Spam Trojan Remover (Spyware Doctor)

Conflicker.B Spam Trojan manual removal guide:
Delete Conflicker.B Spam Trojan files:

seres.exe
svcst.exe
lizkavd.exe

Delete Conflicker.B Spam Trojan registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\AntivirusPro_2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\lizkavd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntivirusPro_2010
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “zip;.rar;.cab;.txt;.exe;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mov;.mp3;.wav”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “SaveZoneInformation” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer “ForceClassicControlPanel” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = “no”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “mserv”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “svchost”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\lizkavd\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Antivirus Pro 2010″

Remove Active Security by Invulnerable Active Security Removal Tool

2009-10-19T04:29:00.000-07:00

Active Security (ActiveSecurity) removal is avoided by hiding its files and distributing them into different locations and by disabling software capable of performing Active Security removal. That is, Active Security installation is performed in unfair way as part of its files are dropped into the folders other than that specified by user and there is a special program code, a part of Active Security installation, which only role is to disable antispyware tools probably able to remove Active Security.
Active Security is a new member of Protection System malware family. Its nearest relative is SystemScout adware released approximately at one time with it.
Active Security impersonates antispyware. It has already been mentioned above that Active Security turns off true antispyware; click here to get rid of Active Security by antispyware invulnerable to blocking by Active Security

Active Security screenshot:

Active Security removal tool:

Download Active Security Remover

Active Security manual removal guide:
Delete Active Security files:

asecurity.exe
core.cga
coreext.dll
help.ico
uninstall.exe
Active Security ReadMe.txt
Active Security Support.lnk
Active Security.lnk
Active Security Support.lnk
Active Security.lnk
Uninstall Active Security.lnk
4otjesjty.mof
c.dat
creg.dat

Delete Active Security registry entries:

HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINE\SOFTWARE\Active Security
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\Active Security
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run "Active Security"

SoftSoldier (Soft Soldier) Removal Tips

2009-10-16T23:19:00.000-07:00

SoftSoldier (Soft Soldier) is a new private soldier in the troops of Wini family. Wini family is a largest family of antispyware counterfeits ever. There are several dozens of malware families, which consist of clones, but there have been no families but Wini family contaminating Internet with new and new releases with astonishing stability at a pace of up to 7 new clones a week.
Complete SoftSoldier removal might require you to get rid of SoftSoldier satellites at once, especially where the adware has been downloaded and installed with trojan. Failure to perform SoftSoldier removal means that you have to stare at its annoying that are often accompanied with system freezes arranged by SoftSoldier. That is how SoftSoldier attempts to frighten users to pay for its activation in order that the dummy threats it supposedly discovered could be removed.
Click here to start free scan and remove SoftSoldier completely and in soft mode that avoids any system / data damaging.

SoftSoldier screenshot:

SoftSoldier removal tool:

SoftSoldier Remover Download

SoftSoldier manual removal instructions:
Delete SoftSoldier files:

softSoldier.exe
uninstall.exe
10158vzrus952.ocx
1025znot-9-virus53b.cpl
102909ir5s31z.cpl
bfaz5r891.dll
SoftSoldier.lnk
1 SoftSoldier.lnk
2 Homepage.lnk
3 Uninstall.lnk
zwh4.tmp.exe

Delete SoftSoldier registry entries:

HKEY_CURRENT_USER\Software\SoftSoldier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\SoftSoldier
HKEY_LOCAL_MACHINE\SOFTWARE\SoftSoldier
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “SoftSoldier”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “zwh4.tmp.exe”

Trust Fighter Free Removal

2009-10-13T09:59:00.000-07:00

There are plenty of infections probably residing at your computer system, but none of them would be mentioned in the scan by Trust Fighter (TrustFighter). In fact, the scan by Trust Fighter is not a scan at all as a scan implies monitoring objects in the memory of a PC concerned while there is no such monitoring during the process posed by Trust Fighter as its scan. Remove Trust Fighter as a sort of scareware, which only aim is to scare you into paying the appropriate activation fee. Its scan is just a show in which all names of infections are fabricated.
Trust Fighter removal, if you are going to get rid of Trust Fighter scam entirely, requires that you delete every relevant Trust Fighter entry. Click here to start free scan in order to locate all components of the malware and to remove Trust Fighter entirely, as well as to identify, locate and remove other infections.

Trust Fighter screenshot:

Trust Fighter removal tool:

Download Trust Fighter Remover

Trust Fighter manual removal guide:
Delete Trust Fighter files:

Delete Trust Fighter files:
TrustSoldier.exe
uninstall.exe
10025hacktoo970az.cpl
10486virz935a.cpl
10917zpamb9t75c.cpl
9a2stealz125.dll
9b0zdownloa5er1685.cpl
9z25vir2635.dll
TrustSoldier.lnk
1 TrustSoldier.lnk
2 Homepage.lnk
3 Uninstall.lnk
626ac87.exe

Delete Trust Fighter registry entries:

HKEY_CURRENT_USER\Software\TrustFighter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\TrustFighter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\
Image File Execution Options\svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\TrustFighter
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “lil6.tmp.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “TrustFighter”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
\Image File Execution Options\svchost.exe “GlobalFlag” “0×02000100″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\
Image File Execution Options\svchost.exe “VerifierDlls” = “d3d550c.dll”

Remove Windows Smart Security Malicious Ads

2009-10-12T23:08:00.000-07:00

Windows Smart Security attempts to scare users into paying for its activation using its adware and online advertisements. The online ads by Windows Smart Security are supported by online popup ads at third parties websites and by browser hijacker downloaded by credulous users duped by fake codec or similar trickery. The backdoor trojan downloader is downloaded in the same way. That backdoor downloader downloads and installs adware of Windows Smart Security without user’s authorization. There is also option for manual downloading and installing the adware as users are lured to do so with online ads.
Once rogue is installed, you are advised to remove Windows Smart Security. Failure to get rid of Windows Smart Security will let the rogue show its scaring ads such as fake scan, fake blue screen of death and fake security warnings. Some of its ads, in particular, the fake blue screen of death, are accompanied with sudden system reboot that result in losses of current data.
Click here to start free Spyware Doctor scan and perform safe and fast Windows Smart Security removal.

Windows Smart Security screnshot:

Windows Smart Security removal tool:

Download Windows Smart Security Remover

Windows Smart Security manual removal instructions:
Delete Windows Smart Security files:

hl11734594
hl11734594.exe
pchl11734594ins
Windows Smart Security 2009.lnk

Delete Windows Smart Security registry entries:

HKEY_CLASSES_ROOT\CLSID\
{425882B0-B0BF-11CE-B59F-00AA006CB37D}
HKEY_LOCAL_MACHINE\SOFTWARE\hl11734594
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Uninstall\SystemSecurity2009
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “hl11734594″

Windows Enterprise Defender Removal Instructions

2009-10-11T10:11:00.000-07:00

Windows Enterprise Defender is the latest rogue security tool. Windows Enterprise Defender does not monitor host system for infections at all. Instead of that, it either creates them during its installation or, even simpler, scares users with imaginary names. Windows Enterprise Defender is often described as malware downloaded and installed by trojan. We must add to this description of Windows Enterprise Defender downloading technique the fact that there are lots of ads online prompting users to download and install trial version of Windows Enterprise Defender. Therefore, another way for Windows Enterprise Defender to get installed is online ads duping users to download its demo or to get the full version at once for which they need to pay. You need to get rid of Windows Enterprise Defender even if you believe you can afford one-time bribe of few dozens dollars just to make this annoying thing quiet. If you settle the fee, then you will be prompted in even more annoying way to pay for updates, life-time service or another counterfeit. Click here to stop the trickery through the safe and fast Windows Enterprise Defender removal.

Windows Enterprise Defender screenshot:

Windows Enterprise Defender removal tool:

Download Windows Enterprise Defender Remover

Windows Enterprise Defender manual removal instructions:
Delete Windows Enterprise Defender files:

83.mof
mozcrt19.dll
sqlite3.dll
unins000.dat
WED.ico
WindowsEDefender.exe
WEDDSys\vd952342.bd
wed.cfg
Windows Enterprise Defender.lnk
cookies.sqlite
cb.sys
ddv.dll
eb.sys
energy.exe
pal.sys
PE.drv
ppal.exe
tempdoc.tmp
search.xml

Delete Windows Enterprise Defender registry entries:

HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WindowsEDefender.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes "URL"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "[xSP_2:61a6083b6194a2314e3dd54cf9615e36_7]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "876902803"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Enterprise Defender"

SafeFighter Removal Guide

2009-10-08T01:31:00.000-07:00

SafeFighter is a rogue antispyware of great vitality. Like a weed of your PC, it strikes root easily once implanted. It is good to remove SafeFighter by professional software and not only because you need to find and remove SafeFighter in all its entries and tracks to make your system as robust as before the intrusion of the rogue. Another important to get rid of SafeFighter using reliable antispyware is that the ad ware of SafeFighter is often downloaded by trojan and the fact of SafeFighter installation indicates vulnerability of your system for other infections. Click here to examine your system and to perform SafeFighter removal using Spyware Doctor.

SafeFighter screnshot:

SafeFighter removal tool:

Download SafeFighter Remover

SafeFighter manual removal instructions:
Delete SafeFighter files:

1 SafeFighter.lnk
2 Homepage.lnk
3 Uninstall.lnk
1aa456a.exe
SafeFighter.exe
uninstall.exe
10450tr9j4z5.ocx
10516hacktzol9f5.bin
105bs9ezl2345.exe
135095irusaz9.bin
13571sp5mbot6e9z.exe
13658tro9536z.ocx

Delete SafeFighter registry entries:

HKEY_CURRENT_USER\Software\SafeFighter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Uninstall\SafeFighter
HKEY_LOCAL_MACHINE\SOFTWARE\SafeFighter
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run “1aa456a.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run “SafeFighter”

Remove TrustCop that lies

2009-10-07T07:49:00.000-07:00

TrustCop lies when it names the infections it has found as those infections are neither harmless nor useful entries. TrustCop creates them itself for a meticulous user could make sure they do exist. Sometimes it concocts a blend of names just made up by jackers and names made up by them and used to denominate the above neither harmless nor useful entries. Remove TrustCop as a true infection.
The rogue is a clone that belongs to one of the biggest, if not the biggest, family of fake antispyware clones. It is propagated with trojan. The trojan automatically uploads and installs TrustCop and also hijack web-browser settings to popup TrustCop ads. Users are eager to get rid of TrustCop due to its annoying way of reminding them that they need to pay the activation fee to get its full-fledged version, but they do not realize the need to remove TrustCop as its activities affect host system and often result in slow computer problem. Click here to start free scan and perform TrustCop removal.

TrustCop screenshot:

TrustCop removal tool:

Download TrustCop Remover

TrustCop manual removal instructions:
Delete TrustCop files:

TrustCop.exe
uninstall.exe
10134spamb9zb95.dll
1015zpyware2930.dll
10753tzo5931.bin
288995acktool3z1.dll
28935virus54z.ocx
28a6d9wnlzader1957.exe
TrustCop
1 TrustCop.lnk
2 Homepage.lnk
3 Uninstall.lnk
ca85mxcq.exe

Delete TrustCop registry entries:

HKEY_CURRENT_USER\Software\TrustCop
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\TrustCop
HKEY_LOCAL_MACHINE\SOFTWARE\TrustCop
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “ca85mxcq.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “TrustCop”

Statements and Deeds of Home Personal Antivirus

2009-10-01T06:36:00.000-07:00

A typical dodge of Home Personal Antivirus is to state there is a security leak at your computer which it has just exposed. As you click on this notification you will be prompted to pay the activation fee for Home Personal Antivirus upgrade to full version capable of resolving the issue.
Remove Home Personal Antivirus and do not make the mistake of following the suggestions of rascals whose only aim is to get you pay for their counterfeits.
Home Personal Antivirus is a member of notorious family of fake antispyware. Its closest parent is XP Deluxe Antivirus while the first malware of this family is XP Police Antivirus.
Programs of this family are known as system parasites that create the malfunctions of legit software and facilitate system freezes and decrease of speed. Get rid of Home Personal Antivirus to avoid any damage. Click here and start Home Personal Antivirus removal initiating free Spyware Doctor scan.

Home Personal Antivirus screenshot:

Home Personal Antivirus removal tool:

Download Home Personal Antivirus Remover

Home Personal Antivirus manual removal instructions:
Delete Home Personal Antivirus files:

Home Personal Antivirus.lnk
Home Personal Antivirus
BtCoreIf64.dll
homeav.exe
Microsoft.VC80.CRT.manifest
msvcm80.dll
msvcp80.dll
msvcr80.dll
null_antivirus.dll
pthreadVC2.dll
unistall.exe
daily.zvd

Delete Home Personal Antivirus registry entries:

HKEY_CURRENT_USER\Software\Home Personal Antivirus
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Uninstall\Home Personal Antivirus
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “HomeAV”

Internetsecurityscan.com Hijacker Removal Instructions

2009-09-29T00:43:00.000-07:00

Internetsecurityscan.com is another web-address that users without great computer system armor are strongly recommended to avoid visiting. However, users are typically drawn at http://internetsecurityscan.com either by Internet traps such as popups and misleading banner ads or by internal advertisement agent, a browser hijacker. Internetsecurityscan.com is known to be currently engaged into pushing AlphaAntivirus rogue antispyware. If you have ever been redirected to Internetsecurityscan.com you may already need to remove Internetsecurityscan.com related infections, which are the above mentioned counterfeit (it may be replaced with another parasite) and browser hijacker. There is one tool to get rid of Internetsecurityscan.com infections at once. Click here to start complex system scan and perform the removal of Internetsecurityscan.com relevant parasites, as well as to expose and eliminate other malware and viruses possibly harming your system.

Internetsecurityscan.com screenshot:

Internetsecurityscan.com removal tool:

Download Internetsecurityscan.com Remover

Security Soldier (SecuritySoldier) manual removal instructions

2009-09-28T06:45:00.001-07:00

Security Soldier is an old new trickery, another release of one of the biggest family of clones. The rogue has been detected right after the counterfeit named TrustWarrior exposure. Security Soldier is advertised through the same misleading links which used to lead user to websites devoted to TrustWarrior; now, they are leading users to websites devoted to Security Soldier.
Another way of Security Soldier’s promotion is the dropping of browser hijacker that makes affected browser open Security Soldier’s website. Hackers design is that users are lured with those ads to download and install adware that will then annoy and frighten users at their territory impersonating activities of true antispyware.
If you are going to remove Security Soldier, get ready to perform removal of Security Soldier’s dlls and corresponding registry entries. The task to get rid of Security Soldier is thus rather for professional software, especially if the above hijacker was installed. Click here to start free scan and perform Security Soldier removal with due accuracy in a safe way covering any other infections at once.

Security Soldier screenshot:

Security Soldier removal tool:

Download Free Security Soldier Remover

Security Soldier manual removal instructions:
Delete Security Soldier files:

License.txt
securitysoldier.exe
uninstall.exe
102z6w59m3c4.cpl
1044zhackt9ol5b2.dll
10683v9rzs656.cpl
10915hief309z.cpl
SecuritySoldier.lnk
1 SecuritySoldier.lnk
2 Homepage.lnk
3 Uninstall.lnk

Delete Security Soldier registry entries:

HKEY_CURRENT_USER\Software\SecuritySoldier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\SecuritySoldier
HKEY_LOCAL_MACHINE\SOFTWARE\SecuritySoldier
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root
\LEGACY_SECURITYSOLDIERSVC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\
SecuritySoldierSvc
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “SecuritySoldier”

Alpha Antivirus Removal Tips

2009-09-24T00:39:00.000-07:00

Dodge of Alpha Antivirus is a scam that starts far before the adware of Alpha Antivirus. You would never get infected with Alpha Antivirus, if you were not treated with misleading online ads or you system was not affected through malicious scripts of unreliable websites. If you just remove Alpha Antivirus adware and keep browsing Internet unprotected, a chance to get another infection like that is great.
As lots of people complained they downloaded and installed Alpha Antivirus themselves being duped with its online ads, we may consider Alpha Antivirus a rather manually downloaded and installed adware. However, trojans have been detected which role was to download and install Alpha Antivirus (naturally, without any user’s authorization and notification).
Irrespective of the way it has been installed Alpha Antivirus is set to run automatically upon each Windows warming-up. In particular, it says hello to user with its front window which is then transformed into scan progress and scan results tables. The scan supposedly performed by Alpha Antivirus is a poor fabrication. You should not believe in the infections Alpha Antivirus fabricates and better get rid of Alpha Antivirus once you are confident that the rogue is installed at your computer system. Click here to start free Spyware Doctor scan to detect malware and viruses and perform Alpha Antivirus removal.

Alpha Antivirus screenshot:

Alpha Antivirus removal tool:

Download Alpha Antivirus Remover

Alpha Antivirus manual removal instructions:
Delete Alpha Antivirus files:

AlphaAV.exe
msnaoladdon.dll
Alpha Antivirus.lnk
NetFilter.exe
ndisapi.dll
NDISRD.sys

Delete Alpha Antivirus registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “AlphaAV”
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “Alpha Antivirus”
HKEY_LOCAL_MACHINE\Software\Alpha Antivirus
HKEY_CURRENT_USER\Software\Alpha Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Alpha Antivirus
%UserProfile%\Desktop\Alpha Antivirus.lnk

SoftSafeness (Soft Safeness) removal recommendations

2009-09-17T03:34:00.000-07:00

SoftSafeness (Soft Safeness) is a concoction of hackers who have developed and distributed a great number of counterfeits like this; most of them are clones of SoftSafeness. From these clones it inherited trojans and system of Internet ads through which users are lured to download and install trialware of SoftSafeness, which is adware by its actual performance. The closest clone of SoftSafeness and its parental program is SafetyKeeper. One can hardly tell it from SoftSafeness if to ignore the name.
Remove SoftSafeness to get rid of its irritating misleading ads. Naturally the counterfeit is a counterfeit, so it does not care about finding viruses and malware as declared; its only and main business is to frighten and dupe users into paying the activation, and endless subsequent, fees. Get rid of SoftSafeness instead of watching its senseless and meddlesome ads. Click here to start free scan and perform SoftSafeness removal.

SoftSafeness screenshot:

SoftSafeness removal tool:

Download SoftSafeness Remover

SoftSafeness manual removal instructions:
Delete SoftSafeness files:

1 SoftSafeness.lnk
2 Homepage.lnk
3 Uninstall.lnk
ozn695m5.exe
SoftSafeness.exe
uninstall.exe
10081not-z-vi5us3999.dll
10191spy595z.dll
1039sz5c5.dll
2fz7downloader2985.ocx
2z118w95m312.cpl
2z125spambot679.exe

Delete SoftSafeness registry entries:

HKEY_CURRENT_USER\Software\SoftSafeness
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftSafeness
HKEY_LOCAL_MACHINE\SOFTWARE\SoftSafeness
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SOFTSAFENESSSVC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SoftSafenessSvc
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “ozn695m5.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “SoftSafeness”

Scanonlinesite.info Removal Information

2009-09-15T07:00:00.000-07:00

Scanonlinesite.info is only one of many websites forming malware distribution network. Why do you need to be alerted of it? There are two reasons: first of all, it may be sponsored by various browser hijackers and consequently you need to remove Scanonlinesite.info related hijacker in order to set your browser free. Further on, Scanonlinesite.info itself poses indirect challenge to your computer system as it lures users into downloading and installing malware with dangerous for computer systems program codes, which are hardly removable manually. If you have downloaded software advertised at Scanonlinesite.info, please be aware it is a sort of malware that you need to remove. Get rid of Scanonlinesite.info related infections as early as possible or else you might need to reinstall affected software and lose important personal data. Click here to start free Spyware Doctor scan and perform timely removal of Scanonlinesite.info related infections or at least make sure there is nothing to remove from your computer.

Scanonlinesite.info screenshot:

Scanonlinesite.info removal tool:

Download Scanonlinesite.info Remover

SafetyKeeper Removal is the Only Way to eliminate its Senseless Irritating Ads

2009-09-10T12:21:00.000-07:00

SafetyKeeper (Safety Keeper) is another tool which function is to bother and frighten user until they remove SafetyKeeper adware. The deed of activation and updating, for which corresponding fee is requested, will only redouble the advertisement flow of SafetyKeeper. The above flow consists of alerts and nag screens. The main nag screen, a front window of SafetyKeeper, is displayed at the beginning of every Windows session and quickly transforms into scan window. Solely false positives are the results of SafetyKeeper scan displayed in a great number to scare users into buying the counterfeit. Remove SafetyKeeper and avoid wasting your money into donating hackers and facilitating the cloning of new malware. Click here to start free scan and detect all infections of your system to get rid of SafetyKeeper and other parasites, as appropriate.

SafetyKeeper screenshot:

SafetyKeeper removal tool:

Download SafetyKeeper Remover

SafetyKeeper manual removal instructions:
Delete SafetyKeeper files:

SafetyKeeper.lnk
1 SafetyKeeper.lnk
2 Homepage.lnk
3 Uninstall.lnk
SafetyKeeper.exe
uninstall.exe
1059ztr9j470.bin
1155backdoor929z.ocx
118019ot-a-virus5ez.exe
gbn976rl.exe
90a3t5ief225z.ocx
9207znot-a-v5rus2f7.bin
923bspyw5rez493.exe
925855ot-a-virus31z.exe
gbn976rl.exe

Delete SafetyKeeper registry entries:

HKEY_CURRENT_USER\Software\SafetyKeeper
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\SafetyKeeper
HKEY_LOCAL_MACHINE\SOFTWARE\SafetyKeeper
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\
LEGACY_SAFETYKEEPERSVC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\
SafetyKeeperSvc
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Run "gbn976rl.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run "SafetyKeeper"

Personal Guard 2009 propagated by Trojan (Removal Instructions)

2009-09-08T18:27:00.000-07:00

Personal Guard 2009 (PersonalGuard 2009) is actively distributed by means of trojan. The trojan is to be downloaded manually by user and you may have done that if you have ever been requested, for instance, to download codec for online movies viewing and so you fulfilled the request. As you perhaps have already understood, it is a Personal Guard 2009 trojan-downloader disguised as codec.
The popularity of above method of hidden installation does not mean Personal Guard 2009 cannot be downloaded and installed by user manually. There are plenty of websites, which offer you to download Personal Guard 2009. These websites, in their turn, are actively promoted through the ad banners, links and popups at third party websites which do not bear any responsibility for ads content they publish at their resource. Remove Personal Guard 2009 adware and downloader (if applicable) if you are going to get rid of Personal Guard 2009 ads; otherwise, intensity of misleading ads will be increasing until your system cannot run at all due to overall capture of its resources by Personal Guard 2009. Needless to say, Personal Guard 2009 ads are very bothering as such.
Click here to start free scan and perform Personal Guard 2009 removal using Spyware Doctor.

Personal Guard 2009 screenshot:

Personal Guard 2009 removal tool:

Download Personal Guard 2009 Remover

Personal Guard 2009 manual removal guide:
Delete Personal Guard 2009 files:

Personal Guard 2009.lnk
Uninstall.lnk
config.cnf
mainbase.adb
personalguard.exe
q.adb
queue.vdb
uninstall.exe
virusbase.adb

Delete Personal Guard 2009 registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Personal Guard 2009
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\Personal Guard 2009
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run “Personal Guard 2009″