Kreslavsky IT blog » Spyware http://www.kreslavsky.com News, guides, and tips to antivirus programmes, scripts, and security Sun, 29 Jan 2012 04:57:38 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 Online Virus Scan Sites http://www.kreslavsky.com/2009/06/online-virus-scan-sites.html http://www.kreslavsky.com/2009/06/online-virus-scan-sites.html#comments Wed, 17 Jun 2009 07:05:15 +0000 Gil Kreslavsky http://www.kreslavsky.com/2009/06/online-virus-scan-sites.html

List of available Online Virus Scanners.

]]> http://www.kreslavsky.com/2009/06/online-virus-scan-sites.html/feed 3 Sensor abilities of Windows 7 http://www.kreslavsky.com/2008/12/sensor-abilityes-of-windows-7.html http://www.kreslavsky.com/2008/12/sensor-abilityes-of-windows-7.html#comments Fri, 12 Dec 2008 19:18:11 +0000 Gil Kreslavsky http://www.kreslavsky.com/?p=476

Despite the skepticism of many experts about Windows 7, Microsoft programmers now can boast a range of specialized software for the upcoming operating system with capabilities that are a couple of years ago could only dream of.

Particular attention is paid technology developers and computer user interaction. For example, users of Windows 7 by using only one finger will have the opportunity to upload media content to mobile devices such iPod, iPhone, phones based or Android.

Watching the possibilities of this new operating system, the question arises – why humans use keyboard and mouse, if he has his hands? That’s why Microsoft programmers and PQ-DVD decided to go further and allow each home user to evaluate sensory management to work with media content – to sort photos, watching video.

Submitted video shows what you can do with your own hands is much easier and faster than using mouse and keyboard. However, to realize these opportunities may require a very powerful PC, not to mention the touch panel.

]]> http://www.kreslavsky.com/2008/12/sensor-abilityes-of-windows-7.html/feed 0 Manual Remove of Winspywareprotectscan.exe http://www.kreslavsky.com/2008/07/manual-remove-of-winspywareprotectscanexe.html http://www.kreslavsky.com/2008/07/manual-remove-of-winspywareprotectscanexe.html#comments Wed, 16 Jul 2008 08:58:22 +0000 Gil Kreslavsky http://www.kreslavsky.com/?p=151

Risk Level : Very High ( Dangerous )

Symptoms

Pop up balloon warning messages claiming that your PC is infected.

* “Critical System Error”,
* “Your computer is infected”,

Search and kill the following processes

* antivirus.v.1.0.0, WinSpywareProtect.EXE, WinSpywareProtectSetup.exe

Remove Scan.Winspywareprotectscan.com files & dlls files

* antivirus.v.1.0.0,
* WinSpywareProtect.EXE,
* WinSpywareProtectSetup.exe

Remove/Modify corrupt Registry Entries

HKEY_LOCAL_MACHINESOFTWAREWinSpywareProtect
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersion
UninstallWinSpywareProtect
HKEY_ALL_USERSSoftwareAdsl Software Limited
HKEY_CLASSES_ROOTTacOnlyOne

Use Shield Deluxe 2008 – Antivirus & Anti-Spyware to scan yor computer for other threats

]]> http://www.kreslavsky.com/2008/07/manual-remove-of-winspywareprotectscanexe.html/feed 0 Remove Virusheat.com trojan http://www.kreslavsky.com/2008/02/remove-virusheatcom-trojan.html http://www.kreslavsky.com/2008/02/remove-virusheatcom-trojan.html#comments Sun, 17 Feb 2008 16:37:00 +0000 Gil Kreslavsky http://www.kreslavsky.com/2008/02/remove-virusheatcom-trojan/

Virus Heat is a Trojan.Win32 . More or less, it does degrade performance of computers and generate annoying pop up witch send you to virusheat.com.

Virus Heat Manual Removal Process:

1. Go to Control Panel >Add or Remove Programs and uninstall Virus Heat

2. Close all programs.

3. Go to >Start>Run >regedit find and delete key

“HKEY_LOCAL_MACHINESOFTWAREMicrosoft

WindowsCurrentVersionUninstallVirus Heat”

4. Restart the computer.

5. Stop Virus Heat process

6. Find and delete the following infected files from your system. Don’t worry if you don’t find these files. Just proceed to next step. Virus Heat 3.9.exe, wuuawkz.dll , iinqyl.dll

7. Go to C:Program Files folder and delete the “Virus Heat” folder (if you can’t delete it, reboot your computer to safe mode then delete the folder.

8. After all steps go to http://siri.geekstogo.com/SmitfraudFix.php and download last version of Smitfraudfix.exe

9. Reboot the computer in safe mode and run the utility.

]]> http://www.kreslavsky.com/2008/02/remove-virusheatcom-trojan.html/feed 2 W32.BAGLE virus – wintems.exe hldrrr.exe srosa.sys http://www.kreslavsky.com/2008/02/wintermsexe-hldrrrexe.html http://www.kreslavsky.com/2008/02/wintermsexe-hldrrrexe.html#comments Sat, 09 Feb 2008 19:53:00 +0000 Gil Kreslavsky http://www.kreslavsky.com/2008/02/wintemsexe-hldrrrexe-srosasys/

W32.BAGLE virus – wintems.exe hldrrr.exe srosa.sys

I must say that with all my of experience that one was one of the hardest to remove ..
It disables your current antivirus software, prohibit you from accessing system in safe mode , and changes names each time it starts.

So.. Here are the steps

Go to http://www.majorgeeks.com/GMER_d5198.html and download GMER
Run the tool and when it finds wintems.exe process kill him..

  1. Run regedit go to HKEY_CURRENT_USERSoftwareMicrosoftWindowsShellNoRoamMUICache and see all entries regarding “C:WINDOWSsystem32drivers” .
  2. In Explorer window Go to> tools>folder options>view and select show hidden files
  3. Browse to your C:WINDOWSsystem32drivers .. find drivers folder and try to delete all files listed in HKEY_CURRENT_USERSoftwareMicrosoftWindowsShellNoRoamMUICache
  4. Scan your system with panda online scanner (the only one that actually cleans , not only detects
  5. Install anti virus program, download last updates and do a full scan to your system

Of course there is always an option to reapply service pack or do a reinstall to your system.

The problem is solved !

Thanks to Eran Amir

]]> http://www.kreslavsky.com/2008/02/wintermsexe-hldrrrexe.html/feed 23