Archive for the ‘Virus Removal’ Category

Security Tool is a rogue antivirus program that displays a fake alert and  false security reports. This spayware will be installed on your system without your permission through the use of Trojans when you visit some websites. It configures itself to start when you turn on the computer. The scan and security report is not true. Do Not believe the scan and don’t buy this software.

One of the big issue with Security Tool that will not allow you to run any program and will terminate it and displays that it is infected with a Worm or Trojan. There is nothing wrong with the program, but Security Tool is controlling this program just to push you to buy this fake anti-virus. You may see this warrning message:

 Spyware.IEMonster activity detected. This is spyware that attempts to steal passwords from Internet Explorer, Mozilla Firefox, Outlook and other programs. Click here to remove it immediately withSecurityTool. 

OR

 Security Tool Warning Some critical system files of your computer were modified by malicious program. It may cause system instability and data loss.
Click here to block unauthorised modification by removing threats (Recommended)

One of the most important things is to keep yourself calm and to do computer virus removal when you are relaxed. You can do manual removal and clean out your computer from this Spyware by following these instructions:

- Kill processes:
4946550101.exe

- Delete registry values:
HKEY_CURRENT_USER\Software\Security Tool
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “4946550101″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “SecurityTool”
HKEY_CURRENT_USER\Software\Vista Antivirus 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SecurityTool
HKEY_LOCAL_MACHINE\SOFTWARE\SecurityTool

- Search and delete these files:
%System Root%\Samples
%User Profile%\Local Settings\Temp
%Program Files%\SecurityTool
%Documents and Settings%\All Users\Start Menu\Programs\SecurityTool
%Documents and Settings%\All Users\Application Data\SecurityTool
%UserProfile%\Application Data\4946550101 
doguzeri.dll, 4946550101.bat, 4946550101.cfg, 4946550101.exe, Security Tool.lnk, Security Tool.lnk

 Do you need computer help? Computer repair Toronto provides high quality computer repair, laptop repair and virus removal services in Toronto area.

Antivirus Live is a rogue antispyware software. It is very similar to the Antivirus System Pro. Antivirus Live is a fake spyware removal tools that spread with the help of Trojans or other malicious software. Once installed, Antivirus Live will scan your computer and display fake security alerts, the scan results it detects are all fake. Antivirus Live will ask you to pay for a full version of the software to remove these infections. Antivirus Live is a scam, Do Not buy this fake antivirus, just ignore this message. This rogue also blocks all the programs especially the antivirus. You may get this warning message when you try to run any program “Application cannot be executed”. The rogue will also hijack Internet Explorer and change proxy Settings to redirect you to the Antivirus Live site.

 Antivirus Live removal instructions:

You should repair the proxy settings of Internet Explorer. Run Internet Explorer, Click Tools -> Internet Options. Select Connections Tab and click to LAN Settings Tab. Uncheck “Use a proxy server” box. Click OK. Click Apply. Click OK.

 Restart the computer into Safe Mode with Networking using your administrator account.

 Kill processes:

Run task manager and kill the process ” sysguard.exe”

Delete registry values:

Click Start -> Run -> type regedit -> Enter. Search for these values using Ctrl+F and delete them:

HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random]”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random]”

 Search and delete these files:

%UserProfile%\Local Settings\Application Data\<random>\
%UserProfile%\Local Settings\Application Data\<random>\<random>sysguard.exe
C:\Documents and Settings\user\Local Settings\Application Data\ovugbs\rwjrsysguard.exe
C:\Documents and Settings\user\Local Settings\Application Data\lqtwnu\wqcmsysguard.exe

 If you couldn’t remove Antivirus Live, virus removal Toronto will help you to remove Antivirus Live online or onsite at very reasonable prices.

Computer Repair Toronto

No matter where you are in Toronto, computer repair services are not far away.  If you are unable to come to us, no problem, we will send a professional computer repair technician to fix the problem in your home or office anywhere in Toronto.

Antivirus System Pro is a rogue anti-virus appears to be a real anti-virus. It uses false scan results and fake security alerts. This fake anti-spyware comes through infected attachments or from infected links. When Antivirus System Pro is installed, it will be configured to run automatically when you start up your computer. the fake anti-virus scans your computer and reports false information that your PC is infected with Spyware that do not actually exist. When you click on “remove”, it will open a webpage to buy the software. Do not buy it or provide any credit card information, they will steal your money. In some cases it redirects your google search and only open the scam page to purchase the program.You cannot find this program in add and remove programs nor in the start menue. The only way to remove this virus is manually. If you would like to do virus removal by your self, please back up your files first.

Now we will go step by step how to remove Antivirus System Pro from your computer:

1. Kill the process “Antivirussystempro.exe” using Task Manager.
2. Search for “Antivirussystempro”, “575.exe”, “sysguard.exe”, “iehelper.dll” and delete all files.
3. Find “Antivirus System PRO” folder in Programs Files and delete it.
4. Remove Antivirus System PRO registry values:

HKEY_CURRENT_USER\Software\AvScan
HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\drvoediw
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\drvoediw
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus System PRO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Antivirus System PRO”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus System PRO
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “system tool”
HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}

Do you find it difficult to remove Antivirus System Pro? Computer virus removal Toronto will help you to remove and clean up your computer from all kind of viruses and spyware.

Computer Repair Toronto

No matter where you are in Toronto, computer repair services are not far away.  If you are unable to come to us, no problem, we will send a professional computer repair technician to fix the problem in your home or office anywhere in Toronto.