ESGI Support Center http://www.enigmasoftware.com/support Just another WordPress weblog Sat, 27 Sep 2008 14:28:51 +0000 http://wordpress.org/?v=2.0.3 en List of Common Problems After Removal http://www.enigmasoftware.com/support/list-of-common-problems-after-removal/ http://www.enigmasoftware.com/support/list-of-common-problems-after-removal/#comments Sat, 06 Sep 2008 13:46:08 +0000 ESGI Advisor SupportList of Common Problems after Removal http://www.enigmasoftware.com/support/list-of-common-problems-after-removal/ (1) Cannot Change your Internet Explorer Homepage Open SpyHunter, go to the Network Sentry tab, under the Internet Explorer Homepage Protection, check the box that says "Activate Internet Explorer Homepage Protection", check Use and type the webpage you would like to have as your homepage. ]]> window.document.getElementById('post-715').parentNode.className += ' adhesive_post';

If you are still experiencing problems after the removal of a infection, we will provide you with a list of the most common leftover problems below. If you problem is listed below, we cannot fix it automatically but we will give you instructions on how to fix it manually.

(1) Cannot Change your Internet Explorer Homepage

Open SpyHunter, go to the Network Sentry tab, under the Internet Explorer Homepage Protection, check the box that says “Activate Internet Explorer Homepage Protection”, check Use and type the webpage you would like to have as your homepage.

(2) Your background shows a message saying that your computer is infected and you cannot change it

In order to fix the background problem, follow the instructions below.

Go to Start->Control Panel->Display->Desktop Tab->Click Customize Desktop->Web Tab, then uncheck all the boxes under web pages and click OK, then change the background and click Apply and OK.

*** If you DO NOT SEE the DESKTOP TAB, please follow the instructions below.

Click on Start->Run, in the open box type gpedit.msc. A Group Policy Window should pop open. Double click User Configuration, double click Administrative Templates, double click Control Panel, double click Display, on the right part of the window you should see an entry saying Hide Desktop tab. Double click the entry Hide desktop Tab, check the option Enabled. Click Apply then OK. Once again, double click the entry Hide desktop Tab, check the option Disabled. Click Apply then OK. You might want to do the same procedure with the entry Prevent Changing wallpaper, by enabling and disabling it. Close Group Policy window. Go back to display properties and now you should be able to change the background, following the instructions above. If this process does not work or you have Windows XP Home Edition, your user has been permanently damaged and need to be replaced. In this case you only option will be to create a new user.

(3) Cannot access Registry Editing Tool(REGEDIT), Control Panel or Task Manager

In order to fix the Control Panel problem, follow the instructions below.

Open SpyHunter, click Option tab, and check the option “Prompt if any important windows components are disabled” and the option “Prompt if web content is used on desktop” on the bottom of the page. Locate SpyHunter icon on the bottom right hand side of your screen, in the system tray, located next to the system clock. Right-click the SpyHunter icon, choose Exit. Re-open SpyHunter by clicking on the icon on your desktop. SpyHunter will prompt you to restore the feature disabled.

(4)Virus Alert!!! message next to the clock

In order to fix the Virus Alert message next to the clock, follow the instructions below.

1 - Click Start button and choose Run.
2 - In the open box, type regedit.
3 - In the registry editor windows, open the key HKEY_CURRENT_USER\Control Panel\International.
4 - On the right panel, find the key sTimeFormat.
5 - Double click the key and in the Edit String window, change the Value Data to “h:mm:ss tt” (with no
Quotes).
6 - Click Ok, exit the Registry Editor and restart the computer.

(5) Your computer displays a screensaver that is not that one you previously chose

In order to fix the screensaver problem, follow the instructions below.

Go to Start->Control Panel->Display->Screensaver, then choose a different screen saver and click OK.

(6) Missing system tabs, such as Desktop, Screen Saver, All Programs, Drives and etc

Your system user has been damage been damaged by the infection. You have 2 options in order to fix this problem. Option number one is to create a new user and transfer the data from your old user to the new one.

We do not support this option and you can find information on how to create a new user clicking on the link below.

http://www.microsoft.com/windowsxp/using/setup/winxp/accounts.mspx

Option 2 is to either user the application gpedit.msc (ONLY for WINDOWS XP PROFESSIONAL) or use some of the free registry fixes from the link below. We do not support links from the website below, we found them to be useful and reliable, and however you are at your own risk. If you want to follow a safe procedure, we would advise you to choose the option of creating a new user.

http://www.kellys-korner-xp.com/xp_tweaks.htm

(7) When you open a Web page, one or more pictures (graphics or images) may not be displayed. Instead, a red X or a placeholder may appear instead of the pictures

1 - Open Internet Explorer.
2 - Click Tools on the top of the IE window, choose Internet Options.
3 - Click the Advanced tab, and then verify that the Show Pictures check box is selected under Multimedia.
4 - Click OK.

(8) If you cannot execute any .exe file or a program

Windows displays the following message “Windows cannot find (exe program). Make sure you typed the name correctly, and then try again” or windows displays a window requesting you to choose a program from a list of programs, in order to open SpyHunter or any other application, please download the fix below onto your desktop and double click the file xp_exe_fix.reg. This fix will correct the problem and you will be able to normally execute programs again.

http://www.kellys-korner-xp.com/regs_edits/xp_exe_fix.reg

All the best!

]]> http://www.enigmasoftware.com/support/list-of-common-problems-after-removal/feed/ Cannot Activate or Register SpyHunter3 http://www.enigmasoftware.com/support/cannot-activate-or-register-spyhunter3/ http://www.enigmasoftware.com/support/cannot-activate-or-register-spyhunter3/#comments Wed, 04 Jun 2008 22:56:40 +0000 ESGI Advisor Product FAQCannot Activate or Register SpyHunter3 http://www.enigmasoftware.com/support/spyhunter3-will-not-activate/

  • Username and specially Password mistyped.

  • A Firewall program such as Norton Internet Security, McAfee, Zone Alarm, AVG and others that is preventing SpyHunter from accessing the Intenet.

    • Please follow the instruction below to RE-ACTIVATE SpyHunter3. ]]>     window.document.getElementById('post-473').parentNode.className += ' adhesive_post';

    ***NOTE TO USERS: when you receive the confirmation email, you will have 2 sets of username and password. The first set, which is the one that your email is the password, must be used for download ONLY. You MUST use the second set of username and password to activate SpyHunter, which is the one that has your email as the username.

    There are two basic problems that you can encounter when activating SpyHunter3.

    1. Username and specially Password mistyped.

    2. A Firewall program such as Norton Internet Security, McAfee, Zone Alarm, AVG and others that is preventing SpyHunter from accessing the Intenet.

    Please follow the instruction below to RE-ACTIVATE SpyHunter3.

    You DO NOT NEED to RE-PURCHASE SpyHunter3, if prompted.

    In order to properly activate SpyHunter, you MUST DISABLE any FIREWALL software program running on your computer, such as Norton Internet Security, McAfee, Zone Alarm and others. They might interfere with the activation of SpyHunter. You can turn your firewall back on after the activation is complete.

    1. Click the “Options” tab (located on the left side menu of the SpyHunter 3).

    2. Enter you username (Email) and password (OUR SYSTEM IS CASE SENSITIVE) and click “Activate Now” button.

    MAKE SURE YOU ENTER PASSWORD SLOWLY AS YOU WILL NOT BE ABLE TO SEE IT, OTHERWISE IT WILL NOT WORK. Also, make sure there are no spaces before or after your username/email or password. It’s very important that you erase any information previously stored in the username and password fields. Sometimes they get corrupted upon update.

    If after following the instructions above you are still not able to activate SpyHunter3 or you’re getting the error message “No Internet connection is available”, read more on more common SpyHunter activation and/or update problems. You can also open a trouble ticket and one of our technicians will contact you, in order to fix your problem as soon as possible.

    ]]>     http://www.enigmasoftware.com/support/cannot-activate-or-register-spyhunter3/feed/     More Common SpyHunter Activation and Update Problems http://www.enigmasoftware.com/support/more-common-spyhunter-activation-and-update-problems/ http://www.enigmasoftware.com/support/more-common-spyhunter-activation-and-update-problems/#comments Thu, 25 Sep 2008 14:16:32 +0000 ESGI Advisor SupportMore Common SpyHunter Activation and Update Problems http://www.enigmasoftware.com/support/more-common-spyhunter-activation-and-update-problems/
  • Username and/or password are mistyped.
  • A firewall program, such as Norton Internet Security, McAfee, Zone Alarm, Avast! and others, prevents SpyHunter3 from accessing the Intenet.
  • "Work Offline" is checked in the Internet Explorer or Firefox settings. Therefore, when you try to activate or update SpyHunter, you receive the error message "No Internet connection is available".
  • Spybot-S&D or a spyware infection has blocked SpyHunter and/or enigmasoftware.com domain.
    • ]]>     When SpyHunter3 does not activate or update properly, it is often because of a problem on your computer.

    Here are four of the most common problems SpyHunter customers encounter when activating or updating the program and ways to solve them.

    1. Username and/or password are mistyped.
    2. A firewall program, such as Norton Internet Security, McAfee, Zone Alarm, Avast! and others, prevents SpyHunter3 from accessing the Intenet.
    3. “Work Offline” is checked in the Internet Explorer or Firefox settings. Therefore, when you try to activate or update SpyHunter, you receive the error message “No Internet connection is available”.
    4. Spybot-S&D or a spyware infection has blocked SpyHunter and/or enigmasoftware.com domain.

    If you’re experiencing problems #1, #2 or #3, please follow the instructions below to re-activate SpyHunter3.

    Instructions on How to Successfully Re-Activate SpyHunter3

    NOTE: You DO NOT NEED to RE-PURCHASE SpyHunter3, if prompted.

    1. Disable any firewall software program running on your computer such as Norton Internet Security, McAfee, Zone Alarm, Avast! and others. They might interfere with the activation of SpyHunter. You can turn your firewall back on after the activation is successful.
    2. Make sure that your Internet Explorer or Firefox web browser does not have “Work Offline” checked. If “Work Offline” is checkmarked, it means it is enabled and SpyHunter will not activate. To uncheck the “Work Offline” option, open an Internet Explorer or Firefox window and click File (on the top left corner) and uncheck “Work Offline”.
    3. Next, open SpyHunter3.
    4. Click the Options tab (located on the left side menu of the SpyHunter3).
    5. Enter you username (Email address) and password and click on Activate Now button.

    MAKE SURE YOU ENTER PASSWORD SLOWLY AS YOU WILL NOT BE ABLE TO SEE IT, OTHERWISE IT WILL NOT WORK. Also, make sure there are no spaces before or after your username or password. It’s very important that you erase any information previously stored in the username and password fields. In some cases, username and password fields get corrupted upon update.

    Your SpyHunter3 is now successfully activated on your computer, and you will not need to go through this process again. If after following the instructions above you are still not able to activate SpyHunter3, please let us know and we will have one of our technicians contact you, in order to assist you as soon as possible.

    I have Spybot-S&D or a spyware infection that’s blocked SpyHunter and/or enigmasoftware.com domain.

    If you’re experiencing problem #4, this is because Spybot-S&D or a spyware infection has maliciously blocked our website (enigmasoftware.com) and the ability for SpyHunter’s Update feature to function. This is made possible by inserting lines of command in the Hosts file which can prevent several SpyHunter customers from updating or even accessing our website.

    Even if you uninstall Spybot-S&D or remove the spyware infection, you may still experience activation or updating issues because the restrictions added may still remain on your Hosts file.

    We are addressing this issue with Spybot-S&D in order to have this matter resolved as soon as possible.

    In the meantime, you can fix the SpyHunter activation and/or updating problems, you must clean the hosts file.

    Please follow the instructions below to enable SpyHunter’s “Update” feature.

    Instructions on How to Clean Your Hosts File

    Below are instructions on how to clean your hosts file. Please follow the instructions below even if you do not have Spybot-S&D installed, since the activation and/or updating problems could be caused by a spyware infection.

    1. Open Notepad (Located under All > Programs > Accessories)
    2. Click File and click Open.
    3. In the File Name box, type the following (depending on what operating system you have):

      For Windows XP & Vista type: C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS
      For Windows 2K type: C:\WINNT\SYSTEM32\DRIVERS\HOSTS
      For Win 98\ME type: C:\WINDOWS\HOSTS

    4. Click on Open button.
    5. Click File and click Save As.
    6. In the File Name box, type HOSTS-CLEAN and in the Save as Type, choose the option All Files, and click Save.
    7. Delete all the entries that do not have a # in front of it, except for the entry 127.0.0.1 localhost.

      8. Important: The entry “127.0.0.1 localhost” should be the only entry not deleted.

    8. Click File, click Save and close Notepad.
    9. Click Start (the Windows Flag Button on Vista), and choose RUN. In the open box, type the following (depending on what operating system you have):

      For Windows XP & Vista type: C:\WINDOWS\SYSTEM32\DRIVERS\ETC
      For Windows 2K type: C:\WINNT\SYSTEM32\DRIVERS
      For Win 98\ME type: C:\WINDOWS

    10. Click on the OK button.
    11. In the ETC Window, locate the file named HOSTS, right-click the file HOSTS and choose Rename, and rename it to HOSTS-OLD.
    12. Locate the file named HOSTS-CLEAN, right-click the file HOSTS-CLEAN, choose Rename, and rename it to HOSTS.
    13. Close all the windows and reboot your computer.
    14. Once the computer reboots, open a browser window and go to www.enigmasoftware.com. If you’re able to access enigmasoftware.com, you’ve successfully cleaned your Hosts file. Next step is to check if SpyHunter’s Update feature works. To test if the Update problem has been fixed, open SpyHunter, go to the Update tab and click on the Definitions Update button. A window scanning for new updates should appear and SpyHunter will update in a matter of seconds.

    If after following the instructions above you are still not able to activate or update SpyHunter3, please let us know and we will have one of our technicians contact you, in order to fix your problem as soon as possible.

    ]]>     http://www.enigmasoftware.com/support/more-common-spyhunter-activation-and-update-problems/feed/     XP Protector 2009, Trojan.Downloader.Agent.vsa, SpyDevastator, more - SpyHunter Update v.9.19 http://www.enigmasoftware.com/support/xpprotector2009-trojandownloaderagentvsa-spydevastator-defs-v919/ http://www.enigmasoftware.com/support/xpprotector2009-trojandownloaderagentvsa-spydevastator-defs-v919/#comments Wed, 10 Sep 2008 21:29:59 +0000 Grace Mathews Spyware AlertsXP Protector 2009 Trojan.Downloader.Agent.vsa SpyDevastator - SpyHunter Update v.9.19 http://www.enigmasoftware.com/support/xpprotector2009-trojandownloaderagentvsa-spydevastator-defs-v919/ SpyHunter Spyware Definitions Update: v.9.19 (09/10/2008) SpyHunter Latest Program Update: v.3.5.11 The following new parasites have been added: XP Protector 2009, Trojan.Downloader.Agent.vsa, SpyDevastator, Cleaner 2009 ]]> SpyHunter Spyware Definitions Update: v.9.19 (09/10/2008)
    SpyHunter Latest Program Update: v.3.5.11

    Keep Your SpyHunter Up to Date

    New spyware appear almost every day. Updating your SpyHunter regularly can protect you against newly released spyware, adware, worms, trojans and other malicious threats.

    To use SpyHunter’s Instant Definition Update, which provides the latest spyware definition updates and other program updates, go to SpyHunter > Update > Definitions Update.

    Our Advice: If you currently do not have SpyHunter, it is highly recommended you try SpyHunter’s Spyware Scanner.

    Newly Added Threat List

    The following new parasites have been added to SpyHunter:

    XP Protector 2009 Description

    Spyware Image
    XP Protector 2009 or XPProtector2009, is a rogue anti-spyware application, family of Antivirus XP and Antivirus XP 2008. XP Protector 2009 may be installed by a Trojan with the ability to exploit browser security vulnerabilities or through a spam email that links to XP Protector 2009’s download. Once XP Protector 2009 is installed, it may configure itself to launch automatically on every Windows startup and run its fake computer system scanner. Once the user’s computer is supposedly scanned, XP Protector 2009’s trial version will display a list of imaginary spyware infections found in your computer system. In order to remove the imaginary infections, XP Protector 2009 may urge the user to buy the full XP Protector 2009 program.

    In addition, XP Protector 2009 may display a screen reading “Insecure Internet Activity. Threat of virus attack” while the user attempts to surf the Internet. The user may decide to click on the link provided to purchase XP Protector 2009’s full version or continue to the page “unprotected”. However, all links provided may redirect the user to XP Protector 2009’s website or other malicious websites that sell the full XP Protector 2009 program as a real spyware removal application.

    XP Protector 2009 may cause computer slowdowns. XP Protector 2009 may be difficult to remove since two processes monitor each other, if one process is killed, the other process restarts.

    Trojan.Downloader.Agent.vsa Description

    Trojan.Downloader.Agent.vsa is a trojan created to download and install additional adware and spyware in the user’s computer system. Once Trojan.Downloader.Agent.vsa is installed, it opens a channel through which a large amount of adware and spyware are downloaded and installed. Trojan.Downloader.Agent.vsa is a threat to the user’s personal and financial information.

    SpyDevastator Description

    Spyware Image
    SpyDevastator or Spy Devastator, is a rogue anti-spyware application. SpyDevastator is usually installed in the user’s computer system by a Trojan bundled in a fake video codec download or through a drive-by download. Once infected, the user will receive a large amount of popups and system notifications of imaginary spyware infections. SpyDevastator may also run a fake system scanner and generate a list of imaginary threats found in the user’s computer system. These tactics are used by SpyDevastator in an attempt to scare the user and make him/her believe his/her computer is flooded with spyware. In order to remove the supposed spyware infections, SpyDevastator may urge the user to purchase SpyDevastator’s full version of the program from SpyDevastator’s website or other malicious websites.

    Cleaner 2009 Description

    Spyware Image
    Cleaner 2009 or Cleaner2009, is a rogue anti-spyware application, clone of AntiMalwareSuite. As soon as Cleaner 2009 is installed, it may launch its fake computer system scanner and display fake scan results to trick the user into believing his/her computer is infested with spyware. In addition, the user may receive a large amount of popups and system notifications informing him/her about imaginary spyware infections. Unless the user purchases the full Cleaner 2009 program, he/she will continue to receive these annoying messages. However, all links provided by Cleaner 2009 may redirect to Cleaner 2009’s website or other malicous websites to further download the full Cleaner 2009 program.

    Updated Threat List

    The following parasite threats were updated:


    XPSecurityCenter
    Zlob.Trojan
    WinReanimator
    Trojan.Vapsup
    Virtumonde
    Trojan.Generic
    Internet Antivirus
    Antivirus 2009
    Trojan.Vundo
    Trojan.FakeAlert
    Trojan.Obfuscated.gx

    ]]>     http://www.enigmasoftware.com/support/xpprotector2009-trojandownloaderagentvsa-spydevastator-defs-v919/feed/     Trojan.Downloader.VB, Smart Antivirus 2009, XLG Security Center, more - SpyHunter Update v.9.18 http://www.enigmasoftware.com/support/trojandownloadervb-smartantivirus2009-xlgsecuritycenter-defs-v918/ http://www.enigmasoftware.com/support/trojandownloadervb-smartantivirus2009-xlgsecuritycenter-defs-v918/#comments Tue, 09 Sep 2008 20:15:16 +0000 Grace Mathews Spyware AlertsTrojan.Downloader.VB Smart Antivirus 2009 XLG Security Center - SpyHunter Update v.9.18 http://www.enigmasoftware.com/support/trojandownloadervb-smartantivirus2009-xlgsecuritycenter-defs-v918/ SpyHunter Spyware Definitions Update: v.9.18 (09/09/2008) SpyHunter Latest Program Update: v.3.5.11 The following new parasites have been added: Trojan.Downloader.VB, Smart Antivirus 2009, XLG Security Center, AntivirusDoc, XLG Privacy Control Center ]]> SpyHunter Spyware Definitions Update: v.9.18 (09/09/2008)
    SpyHunter Latest Program Update: v.3.5.11

    Keep Your SpyHunter Up to Date

    New spyware appear almost every day. Updating your SpyHunter regularly can protect you against newly released spyware, adware, worms, trojans and other malicious threats.

    To use SpyHunter’s Instant Definition Update, which provides the latest spyware definition updates and other program updates, go to SpyHunter > Update > Definitions Update.

    Our Advice: If you currently do not have SpyHunter, it is highly recommended you try SpyHunter’s Spyware Scanner.

    Newly Added Threat List

    The following new parasites have been added to SpyHunter:

    Trojan.Downloader.VB Description

    Trojan.Downloader.VB is a trojan created to exploit software vulnerabilities. Once infected by Trojan.Downloader.VB, it may modify the user’s computer registry and place certain files in key system directories to run on every Windows startup.

    In addition, Trojan.Downloader.VB may use the user’s Internet connection to download and install additional malware on the user’s computer system. Trojan.Downloader.VB may also generate popups, causing system slowdowns and threatening user’s privacy. Trojan.Downloader.VB may reduce the user’s Internet speed and cause difficulties while running other applications.

    Smart Antivirus 2009 Description

    Smart Antivirus 2009 or SmartAntivirus2009, is a rogue anti-spyware application related to MS Antivirus 2008 and clone of XPAntivirus and WinAntivirusPro. Smart Antivirus 2009 may have installed in the user’s computer system by a Trojan Zlob or the user may have clicked on a rogue security popup from a domain related to Smart Antivirus 2009. Smart Antivirus 2009’s fake popups may state that the user’s computer is infected with spyware and then launch a rogue online malware scanner. Smart Antivirus 2009 will try to make the user believe he/she is infected with spyware to then offer Smart Antivirus 2009’s full version of the program to remove the spyware found.

    If the user is infected through a Trojan Zlob, he/she may be bombarded by rogue Windows alerts informing the user about spyware infections found in the computer system. These alerts will not dissapear unless the user purchases the full Smart Antivirus 2009 program. However, Smart Antivirus 2009 will not able to locate or remove any spyware infections.

    In addition, Smart Antivirus 2009 may change the user’s desktop background to a rogue security alert and disable access to user’s display properties. Smart Antivirus 2009 may cause damage to Windows operating system and install additional malware. Smart Antivirus 2009 is another scam created to trick users into purchasing a rogue anti-spyware program for $50.00. Smart Antivirus 2009 is known to launch on every Windows startup.

    XLG Security Center Description

    Spyware Image
    XLG Security Center, XLG SecurityCenter or XL Guarder, is a rogue anti-spyware application. XLG Security Center is usually installed by Trojan Zlob through a fake video codec download or the user may have downloaded it from a malicious website. Once infected, Zlob may generate a large amount of fake popups and system notification messages stating that the user’s computer is being threatened by spyware. XLG Security Center will then urge the user to purchase XLG Security Center’s full version of the program to remove the imaginary threats.

    In addition, XLG Security Center may generate a fake system scan and display a list of spyware infections as a result of the scan. If the user decides to purchase the rogue anti-spyware program, he/she will be redirected to XLG Security Center’s website, XLGuarder.com, to further download the full XLG Security Center program. XLG Security Center may hijack the user’s Internet browser and launch on every Windows startup.

    AntivirusDoc Description

    Spyware Image
    AntivirusDoc or Antivirus Doc, is a rogue anti-spyware application, clone of WinAntivirusPro. AntivirusDoc is usually installed by Trojan Zlob or Vundo, or the user may have downloaded it manually from a malicious website. Once Zlob is installed, it may generate an exaggerated amount of popups stating that the user’s computer is infecetd with spyware. In order to remove the imaginary threats, AntivirusDoc will then urge the user to purchase its full version. In addition, AntivirusDoc may run its computer system scan to deceive the user into believing his/her computer is infecetd with spyware.

    The links provided by AntivirusDoc may redirect the user to AntivirusDoc’s homepage, AntivirusDoc.net, where AntivirusDoc’s “full” version of the program is sold as a legitimate spyware removal tool. AntivirusDoc may run on every Windows startup.

    XLG Privacy Control Center Description

    Spyware Image
    XLG Privacy Control Center or XLGPrivacyControlCenter, is a rogue anti-spyware application, clone of XLG Security Center and XLGuarder. XLG Privacy Control Center may have installed in the user’s computer system by Trojan Zlob through a fake video codec installation, spam email or it may have come bundled with other malware software. Once infected, the user will receive a large amount of fake popup adverts and system notification messages informing the him/her about the imaginary threats found on his/her computer. XLG Privacy Control Center will then offer XLG Privacy Control Center’s full version to remove the imaginary spyware infections. XLG Privacy Control Center may also display a rogue icon on the user’s system tray stating that the user’s computer is infected with spyware.

    XLG Privacy Control Center may also launch its rogue system scanner and emulate a computer system scan. XLG Privacy Control Center will then display a list of spyware infections and redirect the user to XLG Privacy Control Center’s website or other malicious websites that distribute XLG Privacy Control Center’s full program as a real spyware removal application.

    XLG Privacy Control Center may launch on every Windows startup. XLG Privacy Control Center may recreate itself, making it difficult to remove manually.

    Updated Threat List

    The following parasite threats were updated:


    PWSteal.LdPinch
    Zlob.Trojan
    Trojan.FakeAlert
    Trojan.Generic
    Adware.ContextProgram.BHO
    Trojan-Downloader.aih
    PC Protection Center 2008
    MSAntivirus 2008
    PCHealthCenter
    XPAntivirus
    Antispyware 2008 XP
    Antivirus 2009
    Windows Antivirus 2008
    Vista Antivirus 2008
    VirusRemover 2008
    PCPrivacyCleaner
    Trojan.Vapsup
    TotalSecure2009
    System Antivirus 2008
    Deskbar
    Trojan.Inject.apd

    ]]>     http://www.enigmasoftware.com/support/trojandownloadervb-smartantivirus2009-xlgsecuritycenter-defs-v918/feed/     Smart Antivirus 2009 Info & Manual Removal Guide http://www.enigmasoftware.com/support/smartantivirus2009-removal/ http://www.enigmasoftware.com/support/smartantivirus2009-removal/#comments Sat, 06 Sep 2008 16:51:06 +0000 Grace Mathews Spyware AlertsSmart Antivirus 2009 Info & Manual Removal Guide http://www.enigmasoftware.com/support/smartantivirus2009-removal/ Smart Antivirus 2009 Description

    Smart Antivirus 2009 or SmartAntivirus2009, is a rogue anti-spyware application related to MS Antivirus 2008 and clone of XPAntivirus and WinAntivirusPro. Smart Antivirus 2009 may have installed in the user's computer system by a Trojan Zlob or the user may have clicked on a rogue security popup from a domain related to Smart Antivirus 2009. Smart Antivirus 2009's fake popups may state that the user's computer is infected with spyware and then launch a rogue online malware scanner. Smart Antivirus 2009 will try to make the user believe he/she is infected with spyware to then offer Smart Antivirus 2009's full version of the program to remove the spyware found. If the user is infected through a Trojan Zlob, he/she may be bombarded by rogue Windows alerts informing the user about spyware infections found in the computer system. These alerts will not dissapear unless the user purchases the full Smart Antivirus 2009 program. However, Smart Antivirus 2009 will not able to locate or remove any spyware infections. In addition, Smart Antivirus 2009 may change the user's desktop background to a rogue security alert and disable access to user's display properties. Smart Antivirus 2009 may cause damage to Windows operating system and install additional malware. Smart Antivirus 2009 is another scam created to trick users into purchasing a rogue anti-spyware program for $50.00. Smart Antivirus 2009 is known to launch on every Windows startup.

    ]]>     Do you have Smart Antivirus 2009?

    This “Smart Antivirus 2009 Removal Guide” article will show you how to identify and remove Smart Antivirus 2009. This guide will be updated as more information is available.

    Smart Antivirus 2009 Detection Test

    Run SpyHunter’s Spyware Scanner to check for Smart Antivirus 2009 infections on your PC.

    Smart Antivirus 2009 Description

    Smart Antivirus 2009 or SmartAntivirus2009, is a rogue anti-spyware application related to MS Antivirus 2008 and clone of XPAntivirus and WinAntivirusPro. Smart Antivirus 2009 may have installed in the user’s computer system by a Trojan Zlob or the user may have clicked on a rogue security popup from a domain related to Smart Antivirus 2009. Smart Antivirus 2009’s fake popups may state that the user’s computer is infected with spyware and then launch a rogue online malware scanner. Smart Antivirus 2009 will try to make the user believe he/she is infected with spyware to then offer Smart Antivirus 2009’s full version of the program to remove the spyware found.

    If the user is infected through a Trojan Zlob, he/she may be bombarded by rogue Windows alerts informing the user about spyware infections found in the computer system. These alerts will not dissapear unless the user purchases the full Smart Antivirus 2009 program. However, Smart Antivirus 2009 will not able to locate or remove any spyware infections.

    In addition, Smart Antivirus 2009 may change the user’s desktop background to a rogue security alert and disable access to user’s display properties. Smart Antivirus 2009 may cause damage to Windows operating system and install additional malware. Smart Antivirus 2009 is another scam created to trick users into purchasing a rogue anti-spyware program for $50.00. Smart Antivirus 2009 is known to launch on every Windows startup.

    Parasite Type: Rogue AntiSpyware Programs

    Smart Antivirus 2009 Method of Automatic Detection

    The removal of spyware such as Smart Antivirus 2009 can be a difficult process. If you regularly run a spyware scan with a good spyware remover, you can automatically detect Smart Antivirus 2009 and other Spyware, Adware, Worms, Trojans and Browser Hijackers.

    To quickly detect Smart Antivirus 2009, follow the instructions below:

    1. Download SpyHunter’s Spyware Scanner Download SpyHunter’s Spyware Scanner.

    2. Select “Start Scan” to run a full system Smart Antivirus 2009 scan.

    3. Reboot your computer.

    4. Run another scan to pick up any remaining Smart Antivirus 2009 infections.

    ** SpyHunter’s Spyware Scanner only allows you to detect Smart Antivirus 2009 and other spyware. In order to remove Smart Antivirus 2009, we advise you to buy the full-version of SpyHunter. Weekly Smart Antivirus 2009 file updates and technical support are available with SpyHunter’s spyware remover.

    Smart Antivirus 2009 Method of Infection

    The following Smart Antivirus 2009 actions occur:

    • The Internet user surfs the Web and visits a questionable website. A large amount of rogue anti-spyware programs like Smart Antivirus 2009 are mostly pushed through adult websites.

    • The Internet user downloads a free video codec, such as Video ActiveX Enhancement 2.07, which comes bundled with Smart Antivirus 2009. Freeware or shareware programs tend to come with other unwanted programs such as Smart Antivirus 2009. Do not install any free software without reading its EULA. By simply reading a program’s EULA, you can determine whether a program you are installing has spyware bundled with it.

    • The Internet user is infected with the rogue anti-spyware program Smart Antivirus 2009. Smart Antivirus 2009 runs a scan on the computer and gives a false spyware report claiming that the computer is infected with spyware. Once the scan is completed, a warning message appears that lists the spyware ‘found’ and the user has to either click on a link or a button to remove it. This deceptive tactic is an attempt to scare the Internet user into clicking on the link or button to purchase Smart Antivirus 2009.

    • The Internet user closes all the fake Windows error messages and warnings and is unaware that Smart Antivirus 2009 is still running its malicious tasks in the background. Smart Antivirus 2009 reloads itself on a timer so if the Internet user closes the program it will only take a few moments until it opens again. The average Internet user does not realize when spyware has infected his/her computer until it is too late and the spyware problem has already spread throughout the computer.

    • Internet user opens web browser and is redirected to a rogue website. Known rogue websites that promote rogue anti-spyware programs are iesecurepages.com, ahomepcsafety.com, securitypills.com, softhomepage.com, asafetyliner.com, puresafetyhere.com, safehomesite.com, instantsafepage.com, safetyonlinepage.com, among others. The Internet user is bombard with websites that pop up messages that tries to push a product on him/her. Ignore such messages! We recommend closing these windows by clicking on the X instead of the ‘OK’ button.

    Smart Antivirus 2009 Symptoms

    The following Smart Antivirus 2009 symptoms occur:

    • Smart Antivirus 2009 displays a fake system alert similar to a Windows notification message.
      A red or green flashing icon appears in your system tray. If you click on the icon, a fake system alert pops up and directs you to a rogue website similar to safetyuptodate.com. In some cases, even when you don’t click on the icon the fake system alert may still pop up.

    • The fake system alert promises to give you a legitimate anti-spyware program that will help you fix spyware problems, but instead it really reports false information to try to trick you into purchasing the program.

    • Smart Antivirus 2009 hijacks or modifies your homepage and displays new desktop shortcuts.
      Smart Antivirus 2009 changes your default homepage to a different homepage and creates new unnecessary shortcuts on your desktop. Sometimes Smart Antivirus 2009 won’t even allow you to change it back to your original homepage. A website you may be redirected to is Smart Antivirus 2009.com or other rogue websites that promote Smart Antivirus 2009.

    • Smart Antivirus 2009 installs a rogue toolbar called Security Toolbar 7.1.
      Security toolbar 7.1 is a rogue toolbar that comes with two green bars, one that says “block adware” and the other “remove spyware”. If you click on either of them you’re directed to a rogue anti-spyware site which can install additional malware.

    • Smart Antivirus 2009 bombards your PC with fake Windows warnings messages.
      Even after you’ve closed all the Smart Antivirus 2009 messages or your PC has been idle for awhile, you’ll still get constant alert popups appearing on your system tray or on your screen.

    Smart Antivirus 2009 Anatomy

    As new Smart Antivirus 2009 spyware components are reported by our customers and our Spyware Threat Research Labs, we will update this section.

    Name: Smart Antivirus-2009.exe
    File Size: 968704
    MD5: ce03f776b8e49323c6a7a5611c0dd1bd

    Name: smart antivirus-2009.exe
    File Size: 1188352
    MD5: 350b30be57123b184f6c171d2bd4e23a

    Name: smart antivirus-2009.exe
    File Size: 1187840
    MD5: 2dc4712f27bc61de5719c3c7c0396525

    Name: sav.exe
    File Size: 404992
    MD5: c7dfa67e339be36c15fe5d490dfe6cb8

    Name: Smart Antivirus-2009.exe
    File Size: 1200640
    MD5: 6bb234eb3d9447a618d6fa4c6f3e666d

    Name: SmartAntivirus2009[1].exe
    File Size: 1425408
    MD5: 81c4ddb86b94a4a982e5a8088cea3a6e

    Name: sa2009_x32.exe
    File Size: 1425408
    MD5: 81c4ddb86b94a4a982e5a8088cea3a6e

    Name: setup.ver1_1000.0_.exe
    File Size: 110592
    MD5: 8482252a4293d5f4ba1f39b77b447920

    Smart Antivirus 2009 Manual Removal Instructions

    Use Caution! Please read the instructions below carefully. Manual removal of Smart Antivirus 2009 is a delicate procedure. Proceed at your own risk. We advise you to backup your system before you manually remove Smart Antivirus 2009.

    If you are still having problems with Smart Antivirus 2009 after completing these instructions, we recommend you download SpyHunter’s Spyware Detection Tool to safely remove Smart Antivirus 2009.

    To manually remove Smart Antivirus 2009, follow these removal steps:

    Step 1: How to Kill Smart Antivirus 2009 files using Process Explorer.

    • 1a. How to Kill Smart Antivirus 2009 Processes.

      1. Download and install Process Explorer.

      2. Open Process Explorer.

      3. Locate the Smart Antivirus 2009 processes listed below.

      4. To kill an Smart Antivirus 2009 process, right-click the Smart Antivirus 2009 process and choose the option “Kill Process Tree”.

      5. Kill the following Smart Antivirus 2009 processes:
        setup.ver1_1000.0_.exe
        sa2009_x32.exe
        SmartAntivirus2009[1].exe
        SmartAntivirus2009.exe

    • Step 2: How to Delete Smart Antivirus 2009 Registry Keys and Values.

      1. Right-click on your Desktop > select “New” option > select “Text Document” (.txt file) option.

      2. Rename the .txt file as a .reg file and call it “Delete_Registry_
        Smart Antivirus 2009_Entities.reg”        . This renamed .reg file is a command that creates a shortcut to your Windows registry and allows you to easily delete registry values.

      3. Right-click and select the “Edit” option.

      4. Copy and paste the Smart Antivirus 2009 keys listed below.

      5. In the menu bar, go to “File” > select “Save” > then click the “X” button to close the file.

      6. Double-click on the .reg file.

      7. When the message box appears saying “Are you sure you want to add the information in C:DOCUME~1%username%DesktopDELETE~1.REG to the registry?”, click the “Yes” button.

      8. When the message box appears saying “Information in C:DOCUME~1
        %username%DesktopDELETE~1.REG has been successfully entered into the registry.”        , click the “OK” button.

      9. The Smart Antivirus 2009 registry keys have been deleted from your registry.

      10. Copy and paste the following Smart Antivirus 2009 keys:

    • Step 3: How to Delete Smart Antivirus 2009 Directories.

      1. To locate Smart Antivirus 2009 directories, go to “Start” > “My Computer” > “Local Disk (C:)” > “Program Files” > “Show the contents of this folder”.

      2. Search and delete the Smart Antivirus 2009 directories listed below.

      3. Right-click on the Smart Antivirus 2009 folder and select “Delete”. option.

      4. When the message box appears saying “Are you sure you want to remove the folder [FOLDERNAME] and move all its contents to the Recycle Bin?”, click the “Yes” button.

      5. When the message box appears saying “Renaming, moving or deleting [FOLDERNAME] could make some programs not work. Are you sure you want to do this?”, click the “Yes” button.

      6. Search and delete the following Smart Antivirus 2009 directories:
        %UserProfile%\Start Menu\Programs\Smart Antivirus 2009
        %ProgramFiles%\smart antivirus 2009

    • Step 4: How to Restore Original Default Home Page.

      1. Go to “Start” > “Control Panel” > “Internet Options”.

      2. Click on the General Tab > click the Use Default button under Home Page.

      3. Click “Apply” and then click the “OK” button.

      4. Open a Web browser to verify that your default homepage has been restored.

    • Step 5: How to Remove the Smart Antivirus 2009 Icons.

      1. If the Smart Antivirus 2009 icons still remain on your Desktop, you can drag and drop them to the “Recycle Bin”.

      2. Reboot your computer to make sure all changes made for the removal of Smart Antivirus 2009 are complete. If your computer still has issues, you should scan your computer for Smart Antivirus 2009 with a spyware scanner.

    Submit Smart Antivirus 2009 To Our Spyware Threat Research Labs

    Since Smart Antivirus 2009 spyware components change constantly, you may come across application issues that prevent you from removing Smart Antivirus 2009 completely.

    You can report Smart Antivirus 2009 spyware components by using SpyHunter’s Free Support Log System. Our Support Log System takes snapshots of all the points of execution on your operating system, allowing us to precisely identify each and any problem.

    We encourage you to post your Support Logs on this article so we can help you come up with a custom fix.

    Below are the instructions on how to generate Support Logs using SpyHunter.

    Open SpyHunter > click on the “Generate Support Log” button > click on the “Copy to Clipboard” button to save your Support Logs > Post your Support Logs to this article.

    Disclaimer

    Warning!! Enigma Software Group can not be held responsible for any problems that may occur by using the information contained within this Smart Antivirus 2009 removal guide. By following any of these Smart Antivirus 2009 removal instructions, you agree to be bound by the disclaimer. If you do not agree, do not follow these Smart Antivirus 2009 removal instructions. We make no guarantees that these Smart Antivirus 2009 removal instructions will completely remove Smart Antivirus 2009. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means. In order to effectively clean and secure your computer, we recommend you purchase our spyware remover SpyHunter or seek professional help from a computer expert.


    ESG Support Center

    ]]>     http://www.enigmasoftware.com/support/smartantivirus2009-removal/feed/     Total Secure 2009, IntelligentAdvisor, Spyware Preventer, more - SpyHunter Update v.9.16 http://www.enigmasoftware.com/support/totalsecure2009-intelligentadvisor-spywarepreventer-defs-v916/ http://www.enigmasoftware.com/support/totalsecure2009-intelligentadvisor-spywarepreventer-defs-v916/#comments Thu, 04 Sep 2008 20:03:50 +0000 Grace Mathews Spyware AlertsTotal Secure 2009 IntelligentAdvisor Spyware Preventer - SpyHunter Update v.9.16 http://www.enigmasoftware.com/support/totalsecure2009-intelligentadvisor-spywarepreventer-defs-v916/ SpyHunter Spyware Definitions Update: v.9.16 (09/04/2008) SpyHunter Latest Program Update: v.3.6 The following new parasites have been added: Total Secure 2009, IntelligentAdvisor, Spyware Preventer, AdvancedPrivacySuite, AdvancedPrivacyGuard, Trojan.Shutdowner.em, Trojan.Agent.abas, Trojan.Agent.pnt, Trojan.Agent.wcc, Andromeda Antivirus, XPert Antivirus Enterprise ]]> SpyHunter Spyware Definitions Update: v.9.16 (09/04/2008)
    SpyHunter Latest Program Update: v.3.6

    Keep Your SpyHunter Up to Date

    New spyware appear almost every day. Updating your SpyHunter regularly can protect you against newly released spyware, adware, worms, trojans and other malicious threats.

    To use SpyHunter’s Instant Definition Update, which provides the latest spyware definition updates and other program updates, go to SpyHunter > Update > Definitions Update.

    Our Advice: If you currently do not have SpyHunter, it is highly recommended you try SpyHunter’s Spyware Scanner.

    Newly Added Threat List

    The following new parasites have been added to SpyHunter:

    Total Secure 2009 Description

    Total Secure 2009, TotalSecure2009 or TotalSecure 2009, is a rogue anti-spyware application. Total Secure 2009 may be installed in the user’s computer system through a fake video codec download bundled with a Trojan triggered by a Browser Helper Object (BHO) or through security weaknesses in the user’s computer system. Total Secure 2009 is also known to install through spam emails and other malware.

    Once Total Secure 2009 is installed, the user may receive false warning messages stating that the user’s computer is infected with a large amount of spyware. In addition, Total Secure 2009 may scan the user’s computer and generate fake scan results stating that Total Secure 2009 has detected a large amount of spyware and that in order to remove them the user must buy its product. Total Secure 2009 is clone of IE Antivirus, IEDefender, Malware Bell and Files Secure.

    IntelligentAdvisor Description

    IntelligentAdvisor is a rogue anti-spyware application. IntelligentAdvisor is usually installed by Trojan Zlob bundled in a fake video codec or through the MP3z program. Once Zlob is installed, the user will be receiving large amount of popups and alert adverts stating that the user’s computer is infected with spyware. IntelligentAdvisor may also use its fake system scanner to persuade the user into purchasing IntelligentAdvisor’s full version of the program to remove the imaginary threats.

    Unlike other rogue anti-spyware programs, IntelligentAdvisor is able to block user’s access to Internet and hijack his/her personal data.

    Spyware Preventer Description

    Spyware Image
    Spyware Preventer or SpywarePreventer, is a rogue anti-spyware application related to XPert Antivirus Enterprise and MS Antivirus 2008. Spyware Preventer is usually installed by a Trojan Zlob through a browser security exploit or the user may have downloaded it from a rogue website. Spyware Preventer is known to use scare tactics to push the user into purchasing the full Spyware Preventer version of the program.

    Once Zlob is installed, the user may be bombarded with popups and fake system alerts stating that the user’s computer system is infected with spyware. In order to remove these infections, Spyware Preventer will offer its full version to remove the imaginary threats. In addition, Spyware Preventer is able to emulate a computer system scan and display a list of spyware results. If teh user is tricked into clicking on any of these messages, he/she will be redirected to a rogue website that sells Spyware Preventer for $40-$80 fee.

    AdvancedPrivacySuite Description

    Spyware Image
    AdvancedPrivacySuite, Advanced Privacy Suite, AdvancedPrivacy Suite or Advanced PrivacySuite, is a rogue anti-spyware application, clone of AdvancedPrivacyGuard. AdvancedPrivacySuite is often installed by a Trojan Zlob or Vundo found on a fake video or audio codec. Once installed, AdvancedPrivacySuite may emulate a computer system scan and display fake scan results to trick the user into thinking his/her computer is flooded with spyware. AdvancedPrivacySuite will then offer its full AdvancedPrivacySuite version of the program to remove the imaginary threats.

    The user may also be bombarded with fake popups and system alert messages stating that the user’s computer is infected with spyware. AdvancedPrivacySuite may launch on every Windows startup, causing processing power slow downs.

    AdvancedPrivacyGuard Description

    Spyware Image
    AdvancedPrivacyGuard or Advanced Privacy Guard, is a rogue anti-spyware application, clone of AdvancedPrivacySuite. AdvancedPrivacyGuard is usually installed by a Trojan Zlob or Vundo found on a fake video or audio codec. Once AdvancedPrivacyGuard is installed, it may run its fake computer system scan and display fake scan results to trick the user into thinking his/her computer is flooded with spyware. AdvancedPrivacyGuard will then offer its full AdvancedPrivacyGuard version of the program to remove the imaginary threats.

    In addition, the user may also be bombarded with fake popups and system alert messages stating that the user’s computer is infected with spyware. AdvancedPrivacySuite may launch on every Windows startup, causing processing power slow downs.

    Trojan.Shutdowner.em Description

    Trojan.Shutdowner.em is a Trojan known to shut down Windows. Trojan.Shutdowner.em may have installed through a security breach in the user’s computer system. Once Trojan.Shutdowner.em is installed, it may shut down Windows after a specific interval of time. Due to Trojan.Shutdowner.em’s malicious activities, the user’s data may be loss.

    Trojan.Agent.abas Description

    Trojan.Agent.abas is a Trojan created to infiltrate in the user’s computer and allow the entrance of adware and spyware into its system. Once installed, Trojan.Agent.abas hijacks the computer and opens security holes, which makes the computer vulnerable and exposes the user’s personal and financial data to remote hackers. In addition, Trojan.Agent.abas may allow third parties to execute programs and download additional malware such as rogue anti-spyware programs. Trojan.Agent.abas may also generate a large numbers of popup adverts. Trojan.Agent.abas is a threat to the security of the user’s personal and financial data.

    Trojan.Agent.pnt Description

    Trojan.Agent.pnt is a Trojan created to infiltrate in the user’s computer and allow the entrance of adware and spyware into its system. As soon as Trojan.Agent.pnt infects the user’s computer, it opens a loophole, allowing downloads and installations of spyware and adware. Due to Trojan.Agent.pnt’s fraudulent activities, the user’s personal and financial information may be at risk.

    Trojan.Agent.wcc Description

    Trojan.Agent.wcc is a Trojan that may install secretly in order to infect computers with malware. Trojan.Agent.wcc creates a security-free hole on the user’s computer system, making the computer vulnerable. Trojan.Agent.wcc may break into the user’s system and grant access to remote hackers to download and install additional spyware and rogue applications without the user’s knowledge and consent. These applications may generate a large amount of fake alerts.

    Andromeda Antivirus Description

    Spyware Image
    Andromeda Antivirus, AndromedaAntivirus, AndromedaAV, Andromeda AntiVirus 2009 or AndromedaAntiVirus 2009, is a rogue anti-spyware application known to trick users into thinking they are infected with spyware. Andromeda Antivirus is often installed in the user’s computer system by a Trojan Zlob through browser security breaches in the computer system. Once infected, the user may be bombarded by fake popups and system notifications stating that the user’s computer is infected with spyware. If the user decides to click on any of these messages, he/she may be redirected to a rogue website and then pushed to purchase the full Andromeda Antivirus version. In addition, Andromeda Antivirus is able to simulate a computer system scan and display a fake scan report to scare the user with numerous spyware threats. Andromeda Antivirus is clone of MS Antivirus 2008.

    XPert Antivirus Enterprise Description

    Spyware Image
    XPert Antivirus Enterprise, XPert Antivirus Enterprise 2008, XPertAntivirus or XPert Antivirus, is a rogue anti-spyware application usually installed by a Trojan Zlob found bundled in a fake video codec download. Once infected by Zlob, the user may receive popups and fake system notifications of imaginary spyware infections. XPert Antivirus Enterprise is also able to run its fake system scanner and generate a list of spyware results. These mechanisms are used by XPert Antivirus Enterprise only to scare the user into thinking he/she is infected with spyware. If the user is deceived into clicking on any of these messages he/she will be redirected to a malicious website that sells rogue XPert Antivirus Enterprise’s full version of the program. XPert Antivirus Enterprise is a clone of AntivirusXP2008, AntiVirXP08, XPAntivirus, XP Antivirus 2008, Antivirus 2008 and Antivirus 2009.

    Updated Threat List

    The following parasite threats were updated:


    AntiSpyCheck
    Zlob.Trojan
    Trojan.Vapsup
    Trojan.Generic
    Virtumonde
    Windows Antivirus 2008
    Trojan.FakeAlert
    PurityScan
    Trojan.Qhost.abh
    Antivirus 2008
    Trojan.Agent-DF
    AntivirusXP 2008
    Trojan-Downloader.Agent.gfg
    Antivirus2008Pro
    SmitFraud
    Trojan.FraudLoad.abk
    Trojan.Downloader.Exchanger
    Power Antivirus 2009
    MSAntivirus 2008

    Updated Cookie Threats

    The following cookie threats were updated:


    MomsHDFilms
    PlusSluts
    Chubby-Amateurs
    XXXVoyeurXXX
    2008Adult2008

    ]]>     http://www.enigmasoftware.com/support/totalsecure2009-intelligentadvisor-spywarepreventer-defs-v916/feed/     Email-Worm.Zhelatin.agg, Trojan.Refpron, Trojan-PSW.OnLineGames, more - SpyHunter Update v.9.15 http://www.enigmasoftware.com/support/emailwormzhelatinagg-trojanrefpron-trojanpswonlinegames-defs-v915/ http://www.enigmasoftware.com/support/emailwormzhelatinagg-trojanrefpron-trojanpswonlinegames-defs-v915/#comments Mon, 01 Sep 2008 16:34:02 +0000 Grace Mathews Spyware AlertsEmail-Worm.Zhelatin.agg Trojan.Refpron Trojan-PSW.OnLineGames - SpyHunter Update v.9.15 http://www.enigmasoftware.com/support/emailwormzhelatinagg-trojanrefpron-trojanpswonlinegames-defs-v915/ SpyHunter Spyware Definitions Update: v.9.15 (09/01/2008) SpyHunter Latest Program Update: v.3.5.11 The following new parasites have been added: Email-Worm.Zhelatin.agg, Trojan.Refpron, Trojan-PSW.OnLineGames, Trojan.Downloader.Small.aces ]]> SpyHunter Spyware Definitions Update: v.9.15 (09/01/2008)
    SpyHunter Latest Program Update: v.3.5.11

    Keep Your SpyHunter Up to Date

    New spyware appear almost every day. Updating your SpyHunter regularly can protect you against newly released spyware, adware, worms, trojans and other malicious threats.

    To use SpyHunter’s Instant Definition Update, which provides the latest spyware definition updates and other program updates, go to SpyHunter > Update > Definitions Update.

    Our Advice: If you currently do not have SpyHunter, it is highly recommended you try SpyHunter’s Spyware Scanner.

    Newly Added Threat List

    The following new parasites have been added to SpyHunter:

    Email-Worm.Zhelatin.agg Description

    Email-Worm.Zhelatin.agg is an email worm able to propagate itself via spam email attachments. Email-Worm.Zhelatin.agg may install in the user’s computer system and be able to hide itself using rootkit mechanisms. Email-Worm.Zhelatin.agg is able to hide itself and avoid being detected. In addition, Email-Worm.Zhelatin.agg is able to add the user’s computer to an IRC Botnet and send spam emails to all the addresses found in the user’s computer.

    Trojan.Refpron Description

    Trojan.Refpron is a Trojan created to infiltrate in the user’s computer and allow the entrance of adware and spyware into the its system. Once installed, Trojan.Refpron hijacks the computer and opens security holes, which makes the computer vulnerable and exposes your personal and financial data to remote hackers. In addition, Trojan.Refpron may allow third parties to execute programs and download additional malware such as rogue anti-spyware programs. Trojan.Refpron may also generate a large numbers of popup adverts. Trojan.Refpron is a very dangerous threat to the security of the user’s personal and financial data.

    Trojan-PSW.OnLineGames Description

    Trojan-PSW.OnLineGames is a Trojan designed to steal usernames and passwords from online games and send them to a remote server. Trojan-PSW.OnLineGames is able to monitor all your keystrokes including personal and financial information (banking website passwords, credit card numbers, and more). Trojan-PSW.OnLineGames may launch on every Windows startup.

    Trojan.Downloader.Small.aces Description

    Trojan.Downloader.Small.aces is a Trojan created to hijack and infect user’s computer with malware. Once installed, Trojan.Downloader.Small.aces may open a conduit by which large amounts of spyware and and unwanted malware applications can be installed to the computer system. These applications may generate a large amount of fake alerts. Due to the malicious activities of Trojan.Downloader.Small.aces, user’s personal and financial information may be at risk of being stolen by a third party. Trojan.Downloader.Small.aces is a dangerous threat to your personal and financial information.

    Updated Threat List

    The following parasite threats were updated:


    Zlob.Trojan
    Trojan.Generic
    Trojan.FakeAlert
    MSAntivirus 2008
    Internet Antivirus
    Trojan.Downloader.Agent-BN
    Trojan.Dropper-Delf
    Trojan-Downloader.Agent.gfg
    Antivirus 2008
    AntiSpyCheck
    MSAntivirus 2008
    Windows Antivirus 2008
    Antivirus 2009
    Power Antivirus 2009
    Trojan.Crypt.XPACK
    Virtumonde
    WinAntivirusPro

    ]]>     http://www.enigmasoftware.com/support/emailwormzhelatinagg-trojanrefpron-trojanpswonlinegames-defs-v915/feed/     Trojan.Downloader.OGC, MaxAntiSpy, Trojan.ExplorerHijack, more - SpyHunter Update v.9.13 http://www.enigmasoftware.com/support/trojandownloaderogc-maxantispy-trojanexplorerhijack-defs-v913/ http://www.enigmasoftware.com/support/trojandownloaderogc-maxantispy-trojanexplorerhijack-defs-v913/#comments Tue, 26 Aug 2008 05:35:27 +0000 Grace Mathews Spyware AlertsTrojan.Downloader.OGC MaxAntiSpy Trojan.ExplorerHijack - SpyHunter Update v.9.13 http://www.enigmasoftware.com/support/trojandownloaderogc-maxantispy-trojanexplorerhijack-defs-v913/ SpyHunter Spyware Definitions Update: v.9.13 (08/26/2008) SpyHunter Latest Program Update: v.3.5.11 The following new parasites have been added: Trojan.Downloader.OGC, MaxAntiSpy, Trojan.ExplorerHijack, Internet Antivirus, Trojan.Downloader.Small.uoy, Trojan.Agent.yde, Trojan.Crypt.gh, Trojan.Downloader.Agent.xjf, WinProtector ]]> SpyHunter Spyware Definitions Update: v.9.13 (08/26/2008)
    SpyHunter Latest Program Update: v.3.5.11

    Keep Your SpyHunter Up to Date

    New spyware appear almost every day. Updating your SpyHunter regularly can protect you against newly released spyware, adware, worms, trojans and other malicious threats.

    To use SpyHunter’s Instant Definition Update, which provides the latest spyware definition updates and other program updates, go to SpyHunter > Update > Definitions Update.

    Our Advice: If you currently do not have SpyHunter, it is highly recommended you try SpyHunter’s Spyware Scanner.

    Newly Added Threat List

    The following new parasites have been added to SpyHunter:

    Trojan.Downloader.OGC Description

    Trojan.Downloader.OGC is a Trojan downloader that may install secretly in order to infect computers with malware. Trojan.Downloader.OGC infects computers through security exploits and other deceptive methods. Trojan.Downloader.OGC breaks into the user’s system and grants access to a third party who can then use your Internet connection to download additional malware and spyware infections. Due to Trojan.Downloader.OGC’s fraudulent activities, the user’s personal and financial information may be at risk.

    MaxAntiSpy Description

    Spyware Image
    MaxAntiSpy, Max AntiSpy or Max Anti Spy, is a rogue anti-spyware application from Russian Federation. MaxAntiSpy is often bundled with the Trojan Zlob which is found on fake video codecs. MaxAntiSpy can also be found on rogue websites that provide a trial for the user to download and detect imaginary spyware threats. Once Zlob is installed, it will generate an enormous amount of fake popups and system notifications stating that the user’s computer is infected with spyware. In order to remove them, the user is supposed to download MaxAntiSpy’s commercial version.

    If the user is tricked into clicking on any of the messages displayed, he/she will be redirected to maxantispy.com where he/she will be forced to purchase MaxAntiSpy’s commercial version. MaxAntiSpy will allege it’s able to remove the spyware found on the user’s computer system, however, this is just another mechanism to push the user into buying its full version.

    MaxAntiSpy’s trial version is also able to generate a computer system scan and display erroneous results to scare the user.

    Trojan.ExplorerHijack Description

    Trojan.ExplorerHijack is a Trojan created to infiltrate in the user’s computer and allow the entrance of adware and spyware into the its system. As soon as Trojan.ExplorerHijack infects the user’s computer, it opens a loophole, allowing downloads and installations of spyware and adware. Trojan.ExplorerHijack also allows access to your personal and financial information to third parties. Trojan.ExplorerHijack is a very dangerous threat to the security of your personal and financial data.

    Internet Antivirus Description

    Spyware Image
    Internet Antivirus or InternetAntivirus, is a rogue anti-spyware program. Internet Antivirus may install in the user’s computer system through Trojan Zlob or the user may have downloaded the trial version from a corrupt website.

    Once Internet Antivirus is installed, it will issue popups and system alert messages stating that the system is flooded with spyware. In order to remove the supposed threats, the user must purchase Internet Antivirus’s commercial version of the program. All links provided by rogue Internet Antivirus may redirect the user to Internet-Antivirus.com or other rogue websites where Internet Antivirus’s commercial version is sold for $49.95. Internet Antivirus may also use its fake system scanner to generate a fake scan report. Internet Antivirus’s scan results will generate a list of spyware infections supposedly found in the user’s computer system.

    Trojan.Downloader.Small.uoy Description

    Trojan.Downloader.Small.uoy is a Trojan created to hijack and infect user’s computer. Trojan.Downloader.Small.uoy creates a security-free hole on the user’s computer system, making the computer vulnerable. Trojan.Downloader.Small.uoy may give access to remote hackers to download and install additional spyware and rogue applications without the user’s knowledge and consent. These applications may generate a large amount of fake alerts. Due to the malicious activities of Trojan.Downloader.Small.uoy, user’s personal and financial information may be at risk of being stolen by a third party.

    Trojan.Agent.yde Description

    Trojan.Agent.yde is a Trojan downloader installed through a security exploit or other dubious mechanisms. Trojan.Agent.yde installs in the user’s computer system and opens a conduit, facilitating the download of large amounts of adware and spyware. Trojan.Agent.yde may endanger the user’s personal and financial information.

    Trojan.Crypt.gh Description

    Trojan.Crypt.gh is a Trojan created to infiltrate in the user’s computer and allow the entrance of adware and spyware into the its system. Once installed, Trojan.Crypt.gh hijacks the computer and opens security holes, which makes the computer vulnerable and exposes your personal and financial data to remote hackers. In addition, Trojan.Crypt.gh may allow third parties to execute programs and download additional malware such as rogue anti-spyware programs. Trojan.Crypt.gh may also generate a large numbers of popup adverts. Trojan.Crypt.gh is considered a threat to the security of your personal and financial data.

    Trojan.Downloader.Agent.xjf Description

    Trojan.Downloader.Agent.xjf is a Trojan that may install secretly in order to infect computers with malware. Once installed, Trojan.Downloader.Agent.xjf may open a conduit by which large amounts of adware and spyware can be installed to the computer system. Trojan.Downloader.Agent.xjf breaks into the user’s system and grants access to a third party who can then take control of the computer, steal personal information or damage the system. Trojan.Downloader.Agent.xjf is a very dangerous threat to the security of the user’s personal and financial data.

    WinProtector Description

    Spyware Image
    WinProtector or WinProtector 3.8, is a rogue anti-spyware program, family of Antivirus 2008, XP Antivirus Protection and Antivirus 2009. WinProtector is usually downloaded and installed without user’s knowledge and consent by a Trojan (found on fake video codecs used to view porn videos) through browser security holes, or other dubious mechanisms. WinProtector was created to mislead users with false positives scan results and alerts. Once WinProtector is installed, it starts scanning the user’s computer and will generate exaggerated notifications of imaginary security and privacy risks. WinProtector displays these results in an attempt to deceive users into purchasing WinProtector’s commercial version for $29.95-79.95. In addition, WinProtector may change the user’s Internet Explorer browser behavior by altering the user’s search results. WinProtector may run on every Windows startup and has the ability to recreate itself.

    Updated Threat List

    The following parasite threats were updated:


    AntiSpyCheck
    IE Antivirus
    Antivirus 2009
    Antivirus 2008
    Antispyware 2008 XP
    XPAntivirus
    Zlob.Trojan
    Trojan-Downloader.Agent.gfg
    Vista Antivirus 2008
    Windows Antivirus 2008
    VirusRemover 2008
    WinReanimator
    PCPrivacyCleaner
    Trojan.FakeAlert
    System Antivirus 2008
    Advanced Antivirus
    Ultimate Antivirus 2008
    Win Antivirus 2008
    Antivirus Master

    ]]>     http://www.enigmasoftware.com/support/trojandownloaderogc-maxantispy-trojanexplorerhijack-defs-v913/feed/     Antivir64, XP-Guard, Infostealer.Onlinegame, more - SpyHunter Update v.9.12 http://www.enigmasoftware.com/support/antivir64-xpguard-infostealeronlinegame-defs-v912/ http://www.enigmasoftware.com/support/antivir64-xpguard-infostealeronlinegame-defs-v912/#comments Mon, 25 Aug 2008 20:33:33 +0000 Grace Mathews Spyware AlertsAntivir64 XP-Guard Infostealer.Onlinegame - SpyHunter Update v.9.12 http://www.enigmasoftware.com/support/antivir64-xpguard-infostealeronlinegame-defs-v912/ SpyHunter Spyware Definitions Update: v.9.12 (08/25/2008) SpyHunter Latest Program Update: v.3.5.11 The following new parasites have been added: Antivir64, XP-Guard, Infostealer.Onlinegame, Trojan-Downloader.Agent.ablq, Trojan-Dropper.Small.bsy, Trojan-Downloader.Agent.yuv, Trojan-Downloader.Small.abkn, MS Antivirus 2008 ]]> SpyHunter Spyware Definitions Update: v.9.12 (08/25/2008)
    SpyHunter Latest Program Update: v.3.5.11

    Keep Your SpyHunter Up to Date

    New spyware appear almost every day. Updating your SpyHunter regularly can protect you against newly released spyware, adware, worms, trojans and other malicious threats.

    To use SpyHunter’s Instant Definition Update, which provides the latest spyware definition updates and other program updates, go to SpyHunter > Update > Definitions Update.

    Our Advice: If you currently do not have SpyHunter, it is highly recommended you try SpyHunter’s Spyware Scanner.

    Newly Added Threat List

    The following new parasites have been added to SpyHunter:

    Antivir64 Description

    Spyware Image
    Antivir64 or Antivir 64, is a rogue anti-spyware program and clone of Power Antivirus 2009 and Antispyware2008. Antivir64 may have been installed by a Trojan (Zlob, Vundo or Downloader) found on fake video codec downloads. Once the Trojan is installed, it may generate imaginary system notifications stating that the user’s computer is infected with spyware. In order to remove the imaginary infections, Antivir64 will offer Antivir64’s full version of the program. Antivir64’s rogue messages may redirect the user to Antivir64’s website (scanner.antivir64.com) to further download the full Antivir64 program. Antivir64 may also use its fake system scan to emulate a computer system scan and generate erroneous scan results.

    XP-Guard Description

    XP-Guard, XP-Guard 2.1 or XPGuard, is a rogue anti-spyware application. XP-Guard may be installed by a Trojan called Zlob through a fake video codec or via computer system’s security breaches. Once installed, XP-Guard will simulate malware detections on the user’s computer system, generating fake notifications in an attempt to trick the user into buying the full XP-Guard commercial version. If a notification is clicked, the user will be redirected to XP-Guard’s website (XP-Guard.com) or other rogue websites that promote rogue softwares to clean the supposed threats. These scare tactics are only used by XP-Guard to sell its product. XP-Guard may seem a trustworthy program, however, it’s just a scam to download and install additional adware and spyware and steal the user’s money.

    Infostealer.Onlinegame Description

    Infostealer.Onlinegame is a Trojan designed to steal usernames and passwords from online games. Infostealer.Onlinegame may also open a browser security conduit in the user’s computer system through which spyware may be installed. Infostealer.Onlinegame is known to steal prvate information from World of Warcraft, MapleStory,Yahoo Messenger and MSN Games.

    Trojan-Downloader.Agent.ablq Description

    Trojan-Downloader.Agent.ablq is a Trojan created to hijack the user’s computer and open a conduit, allowing downloads and installations of spyware and adware. Trojan-Downloader.Agent.ablq may break into the user’s computer system and grant access to a third party who can then take control of the computer, steal personal information or damage the system.

    Trojan-Dropper.Small.bsy Description

    Trojan-Dropper.Small.bsy is a Trojan that infects computers via a security exploits. Once installed, Trojan-Dropper.Small.bsy may hijack the user’s computer and open a security exploit, which makes the computer vulnerable and exposes the user’s personal and financial data. Trojan-Dropper.Small.bsy may also download malware and unwanted softwares on a user’s computer. Due to Trojan-Dropper.Small.bsy’s malicious activities, a large numbers of popup adverts may be generated and interfere with the user’s workflow.

    Trojan-Downloader.Agent.yuv Description

    Trojan-Downloader.Agent.yuv is a Trojan created to hijack and infect user’s computer. Trojan-Downloader.Agent.yuv creates a security-free hole on the user’s computer system, making the computer vulnerable. Trojan-Downloader.Agent.yuv needs the aid of other spyware or viruses to spread itself and advertise corrupt anti-spyware applications. Trojan-Downloader.Agent.yuv may give access to remote hackers to download and install additional spyware and rogue applications without the user’s knowledge and consent. These applications may generate a large amount of fake alerts. Due to the malicious activities of Trojan-Downloader.Agent.yuv, user’s personal and financial information may be at risk of being stolen by a third party. Trojan-Downloader.Agent.yuv is a dangerous threat to your personal and financial information.

    Trojan-Downloader.Small.abkn Description

    Trojan-Downloader.Small.abkn is a Trojan downloader installed through a security exploit or other dubious mechanisms. Trojan-Downloader.Small.abkn uses your Internet connection to download additional malware and spyware infections on your machine. Once Trojan.BHO.abo installs in the user’s computer system, it created a security breach through which spyware and unwanted malware applications are downloaded and installed. Trojan.BHO.abo allows third parties to access user’s personal and financial information. The installed rogue applications may generate exaggerated amount of adverts. Trojan-Downloader.Agent.ndt may endanger the user’s personal and financial data.

    MS Antivirus 2008 Description

    Spyware Image
    MS Antivirus 2008 is a rogue anti-spyware program that comes from the same family as other rogue programs such as Windows Antivirus 2008, Antivirus 2008, System Antivirus 2008, Vista Antivirus 2008 and other clones. While MS Antivirus 2008 may look like it is a worth-while program for spyware removal, we have discovered that it is not. The user may wonder how MSAntivirus2008, MS Antivirus 2008, or MS Antivirus was installed onto his/her computer system without his/her actions. Usually this is done through a Trojan such as Zlob which is sometimes downloaded through a fake video codec, through spam emails or even through other malware or spyware. MS Antivirus 2008 is also known to display several popup alerts that tend to disrupt the user at times when using his/her computer.

    Updated Threat List

    The following parasite threats were updated:


    AntiSpyCheck
    IE Antivirus
    Antivirus 2009
    Antivirus 2008
    Antispyware 2008 XP
    XPAntivirus
    Zlob.Trojan
    Trojan-Downloader.Agent.gfg
    Vista Antivirus 2008
    Windows Antivirus 2008
    VirusRemover 2008
    WinReanimator
    PCPrivacyCleaner
    Trojan.FakeAlert
    System Antivirus 2008
    Advanced Antivirus
    Ultimate Antivirus 2008
    Win Antivirus 2008
    Antivirus Master

    ]]>     http://www.enigmasoftware.com/support/antivir64-xpguard-infostealeronlinegame-defs-v912/feed/