« June 2006 | Main | August 2006 »

SpyHeal Removal - How to Remove SpyHeal

July 26, 2006 file found under SpyHeal

SpyHeal, the latest version of SpywareQuake, is a rogue anti-spyware program that secretly installs a trojan onto your computer and pops up false security notifications in attempt to get you to buy the SpyHeal software.

You may be infected with Spy Heal, if you detect C:\Windows\spyheal\spyheal.exe. on your computer.

Remove Spy Heal
Choose Spy Heal detection/removal procedure:

- SpyHeal Automatic Detection with SpyHunter (Fast & Easy)

- SpyHeal Manual Removal (Some technical skills required.)

SpyHeal Image

SpyHeal Manual Removal Instructions

Note: This manual removal process can be difficult. To avoid unnecessary risk of destroying your computer, use SpyHunter Spyware detection toolk to detect SpyHeal.

Detect and delete these Spy Heal processes:
spyheal_setup.exe
spyheal.exe
uninst.exe

Remove these SpyHeal DLL files:
msvcp71.dll
msvcr71.dll

Remove these Spy Heal registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SpywareQuake
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Uninstall\SpywareQuake\UninstallString: "%programfiles%\SpywareQuake\uninst.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Uninstall\SpywareQuake\URLInfoAbout: "http://www.spywarequake.com"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Uninstall\SpywareQuake\Publisher: "SpywareQuake.com"

Detect and remove these SpyHeal files:
uninstall spyheal 2.1.lnk
spyheal.lnk
spyheal 2.1 website.lnk
spyheal 2.1.lnk
blacklist.txt
english.ini
spyheal.url
ref.dat
ref.dat.old

SpyHeal Variants:
spyheal 2.0 , spy heal 2.0
spyheal 2.1 , spy heal 2.1
spyheal v.2.1 , spy heal v.2.1
spyheal v2.1 , spy heal v2.1
spyheal spywarequake
spyheal trojan

External Links:
http://en.wikipedia.org/wiki/Spyware
http://www.antispywarecoalition.org

Posted by Casey at 11:49 AM | Comments (0) | TrackBack

WinFixer Removal - How to Remove WinFixer

July 25, 2006 file found under WinFixer

WinFixer, also known as Virtumonde, is a registry cleaner which pretends to scan and fix registry problems, repair files and hard drive errors. WinFixer may install adware and other programs without your consent. WinFixer can be installed upon visiting www.600pics.com. WinFixer may display pop-ups and uncloseable message boxes. Similar WinFixer programs are ErrorSafe, WinSoftware, and GasBuddies.

You may be infected with WinFixer, if you detect C:\Windows\winfixer\winfixer20.exe. on your computer.

Remove WinFixer
Choose WinFixer detection/removal procedure:

- WinFixer Automatic Detection with SpyHunter (Fast & Easy)

- WinFixer Manual Removal (Some technical skills required.)

WinFixer Image

WinFixer Manual Removal Instructions

Note: This manual removal process can be difficult. To avoid unnecessary risk of destroying your computer, use SpyHunter Spyware detection tool to detect WinFixer.

Detect and delete these WinFixer processes:
winfixer2005setup.exe
winfixer20.exe
winfixerscannerinstall.exe
uwfx5lp_0001_0803netinstaller.exe
uwfx51.exe
setup.exe
df_kme.exe
install.exe
sr.exe
updater.exe
unins000.exe
wfx5.exe

Remove these WinFixer DLL files:
ffwraper.dll
fixcore.dll
ftrec.dll
idletrac.dll
mmfix.dll
oedrop.dll
strres.dll
crxml.dll
pcheck.dll
compcln.dll
df_fixer.dll
df_proxy.dll
ffcom.dll

Remove these WinFixer registry values:
HKEY_CURRENT_USER\software\winsoftware\winfixer2005
HKEY_CURRENT_USER\software\winsoftware\winfixer2005\settings
HKEY_CURRENT_USER\software\winsoftware\winfixer2005\settingsfirstrun
HKEY_CURRENT_USER\software\winsoftware\winfixer2005\settingsinstalldate
HKEY_CURRENT_USER\software\winsoftware\winfixer2005\settingslast_scan_high
HKEY_CURRENT_USER\software\winsoftware\winfixer2005\settingslast_scan_low
HKEY_CURRENT_USER\software\winsoftware\winfixer2005\settingslast_timeout_high
HKEY_CURRENT_USER\software\winsoftware\winfixer2005\settingslast_timeout_low
HKEY_CURRENT_USER\software\winsoftware\winfixer2005\settingslastscanerrorcount
HKEY_CURRENT_USER\software\winsoftware\winfixer2005\settingsoverwriteandbackupfilestopath
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunWinFixer2005
HKEY_LOCAL_MACHINE\software\winsoftware\winfixer2005abbr
HKEY_LOCAL_MACHINE\software\winsoftware\winfixer2005activationcode
HKEY_LOCAL_MACHINE\software\winsoftware\winfixer2005euluwfx5lp_0001_0803
HKEY_LOCAL_MACHINE\software\winsoftware\winfixer2005installpath
HKEY_LOCAL_MACHINE\software\winsoftware\winfixer2005productcode

Detect and remove these WinFixer files:
unins000.dat
up.datdatabase.sav
program.sav
license.rtf
sr.log
trace.log
update.log
support.url
wfx5.url
template.dbx
df_kmd.sys
flash.ini
updater.dat
activate.dat
bnlink.dat
lapv.dat
lock.dat
pv.dat

WinFixer Variants:
Win Fixer, WinFixer 2005,
Win Fixer 2005, WinFixer 2006,
Win Fixer 2006, WinFixer Virus,
Win Fixer Virus, WinFixer Spyware,
Win Fixer Spyware, Downloader.WinFixer2006,
WinFixer Adware.

Posted by Casey at 10:30 AM | Comments (0) | TrackBack