كل انواع الفيروسات وبرامج الحماية المزيفة ،،،،وطريقة إزالتها

[منازار]

سأطرح موضوع يبتلى به معظمنا بل جميعنا وهي الفيروسات بعضها يزال ببرامج الحماية وبعضها لا يزال.


ملاحظة: أي أحد من الاخوة اذا صادفه فيروس وازاله ببرامج الحماية يرجى كتابة اسم الفيروس مع اسم برنامج الحماية الذي ازاله

مصدر المعلومات هذا الموقع الرائع

http://www.xp-vista.com

أول فيروس



Rapid Antivirus


معلومات عنه

RapidAntivirus, also known as Rapid Antivirus, is one of the latest counterfeit antispywares that invades our computing experience. Believe it or not, Rapid Antivirus is basically a clone of the notorious Win Antivirus 2008. They literally share the same distribution channel (www.RapidAntivirus.com) and use the same interface. Rapid Antivirus is absolutely spiteful and malicious. It is somewhat ironic to see a fake antivirus application got upgraded, then continue its invasion to our privacy. Rapid Antivirus generates fake and misleading system popup error messages so end-users will be tricked into purchase Rapid Antivirus. Be awared!

طريقة التخلص منه:


أولا عن طريق التاسك بار قم بتوقيف هذا الملف


install_511_mhw0mxwwfhx8fhx8fhw_.exe


ثانيا : ابحث عن هذه الملفات واحذفها

install_511_mhw0mxwwfhx8fhx8fhw_.exe
%profile%\application data\install_511_mhw0mxwwfhx8fhx8fhw_\base.dat
%profile%\application data\install_511_mhw0mxwwfhx8fhx8fhw_\base2.dat
%profile%\application data\install_511_mhw0mxwwfhx8fhx8fhw_\desc.dat
%profile%\application data\install_511_mhw0mxwwfhx8fhx8fhw_\spline.dat
%profile%\application data\rapid antivirus\rapid antivirus.ini
install_511_mhw0mxwwfhx8fhx8fhw_.exe



ثالثاً: افتح RUN

اكتب regedit


واحذف هذه القيمة

HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\run ieupdate

[منازار]

VirusResponse Lab 2009


معلومات عنه

Virus Response Lab 2009, or VirusResponse Lab 2009, or simply VirusResponseLab2009, is a counterfeit anti-spyware / anti-malware software. It is believed that VirusResponse Lab 2009 is a clone of the recent Virus Lab 2009 we have been encountered recenlty. VirusResponse Lab 2009 usually come up after you installed a video codec that come with Trojan, malware and virus.
It is extremely important to remove VirusResponse Lab 2009 from your computer. You can try our recommended SpyHunter* Spyware Detection Utility, which is very intuitive and highly efficient. VirusResponse Lab 2009 can be removed automatically. However, if you are familiar with registry edit and dll files in Windows, we strongly recommend you to try the VirusResponse Lab 2009 manual removal instructions. It might take time and patience, but it is equally effective if you get it right.

طريقة التخلص منه:


قم بتوقيف عمل هذا الملف

VirusResponseLab2009.exe


=================

قم بتعطيل هذا الريجستري

AVLWarning.dll

والطريقة هي
START

RUN

CMD

ثم اكتب
regsvr32 /u AVLWarning.dll




================


قم بحذف الملفات التالية:

VirusResponse Lab 2009 2.1.lnk
AVLWarning.dll
VirusResponseLab2009.exe
c:\Program Files\VirusResponseLab2009
c:\Program Files\VirusResponseLab2009\VirusResponseLab2009.ex e
c:\Program Files\VirusResponseLab2009\AVLWarning.dll
c:\Program Files\VirusResponseLab2009\uninst.exe
c:\Documents and Settings\Adminstrator\Desktop\VirusResponse Lab 2009.lnk
c:\Documents and Settings\Adminstrator\Start Menu\VirusResponse Lab 2009.lnk
c:\Documents and Settings\Adminstrator\Start Menu\Programs\VirusResponse Lab 2009
c:\Documents and Settings\Adminstrator\Start Menu\Programs\VirusResponse Lab 2009 2.1\VirusResponse Lab 2009.lnk


===============

قم بحذف الريجستري التالي:

HKEY_CURRENT_USER\Software\VirusResponseLab2009
HKEY_CLASSES_ROOT\AVLWarning.WarningBHO.1
HKEY_CLASSES_ROOT\AVLWarning.WarningBHO
HKEY_CLASSES_ROOT\CLSID\{A21C8D81-A9C7-46c6-A488-2A32FA0DAEB6}
HKEY_CLASSES_ROOT\CLSID\{F5734812-E6A1-8833-ECA9-949B5B8A88BF}
HKEY_CLASSES_ROOT\Interface\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91}
HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
HKEY_CLASSES_ROOT\TypeLib\{A8954909-1F0F-41A5-A7FA-3B376D69E226}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\App Paths\VirusResponseLab2009
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{A21C8D81-A9C7-46c6-A488-2A32FA0DAEB6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\VirusResponseLab2009

[منازار]

Bofang.Trojan (Bofang)



معلومات عنه:

Bofang, also known as Bofang.Trojan or Trojan.Bofang, is a “Backdoor Trojan” that gives the invader or attacker a bridge to remotely control your computer. By remotely controlling your computer, it allows them to install all kind of malicious software to your computer. It can also delete and modify files, and put your privacy in danger.

Technically, a Trojan, or Trojan horse, is a piece of software codes or scripts that seems to perform one thing but does something else. It is not a computer virus by itself. However, it can open a door for wealth of computer viruses or spywares to be installed on targeted machines.

طرييقة التخلص منه:


اوقف الملفات التالية:

hu2rcn.exe
braviax.exe
winivstr.exe

من TASKMANAGER




==============


احذف الملفات التالية:


Trojan.Bofang.D
%system%\braviax.exe
%system%\delself.bat
hu2rcn.exe
index.dat
karna.dat
~ie1.exe
05964d9ac9e2f74627330d7d8241c5ba
3079669
5391253
5775181
5831330
5859193
9618b7e414c3ab3200e0280aafe58725
beep.sys
beep.sys_
cru629.dat
hadjajr.ini.old
%system%\winivstr.exe
hu2rcn.exe
%system%\braviax.exe
%system%\winivstr.exe
~ie1.exe




============

احذف الريجستري


HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\run braviax

[منازار]

XP Antispyware 2009



معلومات عنه:

XP Antispyware 2009, also known as Antispyware XP 2009, is one of the latest and hottest counterfeit antispyware that devastates the Internet community. It is believed that Antispyware XP 2009 is simply a clone of Antispyware 2008 XP. Antispyware XP 2009 is not a real Antispyware application. Confused? That’s exactly what their intention is, which is to confuse and distract us. In fact, Antispyware XP 2009 is an useless piece of application to scare the innocent users. Don’t trust it. Antispyware XP 2009 usually come up after you installed a video codec that come with Trojan, malware and virus. Antispyware XP 2009 normally generates fake and misleading system popup error messages so end-users will be tricked into purchase Antispyware XP 2009.

طريقة التخلص منه:


قم بايقاف الملفين التاليين:


AntispywarXP2009.exe
xp_antispyware.exe



================


احذف الملفات التالية:


%profile%\application data\secure solutions\AntispywarXP2009\as2008xp.exe
AntispywarXP2009.exe
setup_100527_3_.exe
%profile%\application data\secure solutions\AntispywarXP2009\as2008xp.exe
setup_100527_3_.exe
AntispywarXP2009.exe
ntdll64.dll
setup.exe
%desktopdirectory%\AntispywarXP2009.lnk
%profile%\application data\microsoft\internet explorer\quick launch\AntispywarXP2009.lnk
%programs%\antispyware 2008\AntispywarXP2009.lnk
ntdll64.dll
setup.exe
antispyware-2009.exe
_scui.cpl
avengn.dll
%program_files%\xp_antispyware\xp_antispyware.exe
%programs%\xp_antispyware\uninstall.lnk
%programs%\xp_antispyware\xp_antispyware.lnk
%system%\_scui.cpl
%program_files%\xp_antispyware\microsoft.vc80.crt\ msvcr80.dll
%program_files%\xp_antispyware\pthreadvc2.dll
%program_files%\xp_antispyware\uninstall.exe
%program_files%\xp_antispyware\wscui.cpl
%program_files%\xp_antispyware\xp_antispyware.cfg
wini10431.exe
xp_antispyware.exe
%desktopdirectory%\xp_antispyware.lnk
%profile%\application data\microsoft\internet explorer\quick launch\xp_antispyware.lnk
%program_files%\xp_antispyware\avengn.dll
%program_files%\xp_antispyware\comp.dat
%program_files%\xp_antispyware\data\daily.cvd
install.exe
%program_files%\xp_antispyware\htmlayout.dll
%program_files%\xp_antispyware\microsoft.vc80.crt\ microsoft.vc80.crt.manifest
%program_files%\xp_antispyware\microsoft.vc80.crt\ msvcm80.dll
%program_files%\xp_antispyware\microsoft.vc80.crt\ msvcp80.dll
%program_files%\xp_antispyware\microsoft.vc80.crt\ msvcr80.dll
%program_files%\xp_antispyware\microsoft.vc80.crt\ msvcp80.dll
%program_files%\xp_antispyware\microsoft.vc80.crt\ msvcm80.dll
%program_files%\xp_antispyware\htmlayout.dll
%program_files%\xp_antispyware\avengn.dll
%program_files%\xp_antispyware\pthreadvc2.dll
%program_files%\xp_antispyware\uninstall.exe
%program_files%\xp_antispyware\xp_antispyware.exe
wini10431.exe
install.exe


===================



احذف الريجستري:


HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\run ieupdate
HKEY_CURRENT_USER\software\secure solutions\AntispywarXP2009 lgid
HKEY_CURRENT_USER\software\secure solutions\AntispywarXP2009 lid
HKEY_CURRENT_USER\software\secure solutions\AntispywarXP2009 pid
HKEY_CURRENT_USER\software\secure solutions\AntispywarXP2009\2.1 installtime
HKEY_CURRENT_USER\software\secure solutions\AntispywarXP2009\2.1 start counter
HKEY_CURRENT_USER\software\secure solutions\AntispywarXP2009\2.1\config

[منازار]

Banker.Trojan (Banker)


معلومات عنه:

Banker, also known as Banker.Trojan or Trojan.Banker, is a “Backdoor Trojan” that gives the invader or attacker a bridge to remotely control your computer. By remotely controlling your computer, it allows them to install all kind of malicious software to your computer. It can also delete and modify files, and put your privacy in danger.

Technically, a Trojan, or Trojan horse, is a piece of software codes or scripts that seems to perform one thing but does something else. It is not a computer virus by itself. However, it can open a door for wealth of computer viruses or spywares to be installed on targeted machines.

طريقة التخلص منه:


قم بايقاف الملفات التالية:


hu2rcn.exe
braviax.exe
winivstr.exe



===================
احذف الملفات التالية:

Trojan.Banker.D
%system%\braviax.exe
%system%\delself.bat
hu2rcn.exe
index.dat
karna.dat
~ie1.exe
05964d9ac9e2f74627330d7d8241c5ba
3079669
5391253
5775181
5831330
5859193
9618b7e414c3ab3200e0280aafe58725
beep.sys
beep.sys_
cru629.dat
hadjajr.ini.old
%system%\winivstr.exe
hu2rcn.exe
%system%\braviax.exe
%system%\winivstr.exe
~ie1.exe




=================

احذف الريجستري:

HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\run braviax

[منازار]

Internet Antivirus Pro



معلومات عنه:

Internet Antivirus Pro, also known as InternetAntivirusPro, is a rogue antispyware application that created to destroy and decay our computer experience. We are unsure of its origin but it’s definitely as destructive as the previous variants. Internet Antivirus Pro is fake and malicious and destructive, with the intent of screwing up your computers. Generally, Internet Antivirus Pro usually comes up after you installed a video codec that come with Trojan, malware and virus. Internet Antivirus Pro normally generates fake and misleading system popup error messages so end-users will be tricked into purchase Internet Antivirus Pro.

It is extremely important to remove all the components of of the Internet Antivirus Pro and all the malware and trojans that it might have come bundled with (such as zlob.trojan, trojan.vundo and Trojan.Downloader). To effectively and safely remove Internet Antivirus Pro, we have created a manual removal instructions. Be sure to back the data up before proceeding. Good luck!

طرييقة التخلص منه:




قم بايقاف الملفات التالية:

iavir.exe
iavir[1].exe
iavirInstall.exe
InternetAntivirusPro.exe
iv.exe




=======================


قم بحذف الملفات التالية:


iv.exe
iavir.exe
InternetAntivirusPro.exe
%ProgramFiles%\IA\InternetAntivirusPro.exe
%ProgramFiles%\Internet Antivirus Pro\activate.ico
%ProgramFiles%\Internet Antivirus Pro\cookies.log
%ProgramFiles%\Internet Antivirus Pro\db\config.cfg
%ProgramFiles%\Internet Antivirus Pro\db\DBInfo.ver
%ProgramFiles%\Internet Antivirus Pro\db\ia080614.db
%ProgramFiles%\Internet Antivirus Pro\Explorer.ico
%ProgramFiles%\Internet Antivirus Pro\IAUpdater.exe
%ProgramFiles%\Internet Antivirus Pro\IAvir.exe
%ProgramFiles%\Internet Antivirus Pro\Scanner.log
%ProgramFiles%\Internet Antivirus Pro\unins000.dat
%ProgramFiles%\Internet Antivirus Pro\uninstall.ico
%ProgramFiles%\Internet Antivirus Pro\working.log



==================



قم بحذف الريجستري التالي:


HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\Internet Antivirus Pro
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run\”Internet Antivirus Pro” = “”C:\program files\Internet Antivirus Pro\IAvir.exe” /s”
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\RunOnce\”3P_UDEC_IA:” = “”[Installer Path]\IAInstall.exe” 0;C;”
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer\Run\”iv:” = “”"C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe”"”

[منازار]

Antivirus 2010



معلومات عنه:

Antivirus 2010, also known as Antivirus2010, is a direct copy of the notorious rogue antispyware application called Antivirus 2009. Yes, this nasty fake antispyware is back with a new mask. Don’t let it fool you. Antivirus 2010 is created by those ruthless people who try to ruin the integrity of our computing experience. It is somewhat ironic to see a fake antivirus application got upgraded. Guess we are living in an usual world and nothing really surprises us anymore. Maybe the new U.S. President would fix all these messes. Let’s keep our fingers cross! Generally, Antivirus 2010 usually comes up after you installed a video codec that come with Trojan, malware and virus. Antivirus 2010 normally generates fake and misleading system popup error messages such as “STOP: 0×000000D1 (0×0000000, 0xF73120AE, 0xC0000008, 0xC000000) A spyware application has been detected and Windows has been shut down to prevent damage to your computer”. What this does is to trick the innocent people like you to spend money and purchase Antivirus 2010, which is the real spyware itself. Don’t fall into the trap!

طريقة التخلص منه:


قم بايقاف الملفات التالية:

AV2010.exe
AV2010[1].exe
AV2010Install.exe
Antivirus2010.exe
Antivirus 2010.lnk
Uninstall Antivirus.lnk




================


قم بحذف الملفات التالية:


AV2010.exe
AV2010install.exe
AV2010install_0011.exe
AV2010[1].exe
Antivirus2010.exe
winsrc.dll
ieupdates.exe
%program_files%\Antivirus 2010\AV2010.exe
%startmenu%\Antivirus 2010\Antivirus 2010.lnk
%startmenu%\Antivirus 2010\uninstall Antivirus 2010.lnk
%desktopdirectory%\Antivirus 2010.lnk
%program_files%\Antivirus 2010\AV2010.exe
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus 2010.lnk
%UserProfile%\Desktop\Antivirus 2010.lnk
%UserProfile%\Start Menu\Antivirus 2010\Antivirus 2010.lnk
%UserProfile%\Start Menu\Antivirus 2010\Uninstall Antivirus 2010.lnk
%ProgramFiles%\Antivirus 2010\AV2010.exe
%System%\scui.cpl



===================


قم بحذف الريجستري


HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\run ieupdate

[منازار]

Antivirus Adva




معلومات عنه:

AntivirusAdvance, also known as Antivirus Advance, is yet another clone of the annoying Antivirus 2008/2009 series, which is a counterfeit antispyware that devastates the computer world today. Antivirus Advance is a variant of Antivirus 2008, XP Antivirus or WinAntivirusPro. Antivirus Advance usually come up after you installed a video codec that come with Trojan, malware and virus. Antivirus Advance normally generates fake and misleading system popup error messages so end-users will be tricked into purchase Antivirus Advance.

طريقة التخلص منه:


قم بايقاف الملفات التالية:

aav2008.exe
aavsetup.exe
Antivirus Advance.lnk
Uninstall Antivirus.lnk
Antivirus Advance.exe



قم بحذف الملفات التالية:

aav2008.exe
aavsetup.exe
Antivirus Advance.exe
Antivirus Advance.lnk
Uninstall Antivirus Advance.lnk




قم بحذف الريجستري:

HKEY_CURRENT_USER\Software\Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run\”Antivirus” = “%ProgramFiles%\Antivirus Advance\Antvrs.exe”

[منازار]

Comodo Trust Toolbar



معلومات عنه:

ComodoTrustToolbar, or Comodo Trust Toolbar, is another annoying toolbar that installed onto your PC without your permission, through Trojan, malware and virus (or you could get it by installing a fake video codec), then ComodoTrustToolbar directly or indirectly promotes rogue antispyware products. The ComodoTrustToolbar will cause your computer to perform sluggishly, which makes you believe that your computer is affected by spyware so you would purchase their products.

طريقة التخلص منه:


قم بحذف الملف التالي:


ComodoTrustToolbar.exe




قم بحذف الريجستري:


HKEY_CURRENT_USER\Software\ComodoTrustToolbar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\ComodoTrustToolbar

[منازار]

Mighty Cleaner Removal


نبذة عنه:

Mighty Cleaner, also known as MightyCleaner, is new counterfeit registry cleaning software that created to invade your privacy and ruin the Internet community. Just like most fake antispywares, Mighty Cleaner issues misleading and exaggerated results. It disguises as a good software yet it’s the culprit behind disaster. Mighty Cleaner usually installed itself onto your PC without your permission, through Vundo Trojan, Virus or fake software. MightyCleaner will display fake system alerts or fake security alerts to trick user to buy the paid version of MightyCleaner , in order to remove the potential and reported problems. Not only does it cause your machine to slow down dramatically, it would also put your privacy and data in risk.

طريقة التخلص منه:



قم بايقاف الملف التالي:

MightyCleaner .exe




============

قم بحذف الملفات التالية:


c:\Program Files\MightyCleaner\MightyCleaner.exe
c:\Program Files\MightyCleaner\MightyCleaner.url
c:\Program Files\MightyCleaner\uninst.exe
c:\Program Files\MightyCleaner\Lang
c:\Program Files\MightyCleaner\Lang\English.ini
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\MightyCleaner 1.32.lnk
%UserProfile%\Desktop\MightyCleaner.lnk
%UserProfile%\My Documents\MightyCleaner
%UserProfile%\My Documents\MightyCleaner\SDBHO.dll
%UserProfile%\My Documents\MightyCleaner\sdcfg.dat
%UserProfile%\My Documents\MightyCleaner\Logs
%UserProfile%\My Documents\MightyCleaner\Quarantine
%UserProfile%\Start Menu\Programs\MightyCleaner
%UserProfile%\Start Menu\MightyCleaner 1.32.lnk
%UserProfile%\Start Menu\Programs\MightyCleaner\MightyCleaner 1.32.lnk
%UserProfile%\Start Menu\Programs\MightyCleaner\MightyCleaner Website.lnk
c:\Program Files\MightyCleaner
c:\Program Files\MightyCleaner\blacklist.txt
c:\Program Files\MightyCleaner\msvcp71.dll
c:\Program Files\MightyCleaner\msvcr71.dll
c:\Program Files\MightyCleaner\sdev.sgn


================


قم بحذف الريجستري


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run “MightyCleaner”

[منازار]

Spyware Guard 2008

Spyware Guard 2008, also known as SpywareGuard2008, is new counterfeit anti-spyware software that created to invade yoru privacy and ruin the Internet community. Just like most fake antispywares, Spyware Guard 2008 issues misleading and exaggerated results. Spyware Guard 2008 usually installed itself onto your PC without your permission, through Vundo Trojan, Virus or fake software. SpywareGuard2008 will display fake system alerts or fake security alerts to trick user to buy the paid version of SpywareGuard2008 , in order to remove the potential and reported problems. Not only does it cause your machine to slow down dramatically, it would also put your privacy and data in risk.

طريقة التخلص منه:



قم بايقاف الملفات التالية:

SpywareGuard.exe
syscert.exe
spoolsystem.exe
reged.exe





===============


قم بحذف الملفات التالية:


%Windìr%\reged.exe
%Windìr%\spoolsystem.exe
%Windìr%\sys.com
%Windìr%\syscert.exe
%Windìr%\sysexplorer.exe
%Windìr%\vmreg.dll
%UserProfile%\Desktop\Spyware Guard 2008.lnk
%UserProfile%\Start Menu\Programs\Spyware Guard 2008\Spyware Guard 2008.lnk
%UserProfile%\Start Menu\Programs\Spyware Guard 2008\Uninstall.lnk
%ProgramFiles%\Spyware Guard 2008\conf.cfg
%ProgramFiles%\Spyware Guard 2008\mbase.vdb
%ProgramFiles%\Spyware Guard 2008\quarantine.vdb
%ProgramFiles%\Spyware Guard 2008\queue.vdb
%ProgramFiles%\Spyware Guard 2008\spywareguard.exe
%ProgramFiles%\Spyware Guard 2008\uninstall.exe
%ProgramFiles%\Spyware Guard 2008\vbase.vdb
%UserProfile%\Application Data\Microsoft\Internet Explorer\olesys.dll


=================


قم بحذف الريجستري


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run “SpywareGuard2008″

[منازار]

Total Secure 2009

معلومات عنه:

Total Secure 2009, also known as TotalSecure 2009, or simply TotalSecure2009, is the latest counterfeit anti-spyware software that created to destroy the Internet community. If you remember it correctly, Total Secure 2009 is a variant of FilesSecure. Just like most fake antispywares, Total Secure 2009 issues misleading and exaggerated results. Total Secure 2009 usually installed itself onto your PC without your permission, through Vundo Trojan, Virus or fake software. Total Secure 2009 will display fake system alerts or fake security alerts to trick user to buy the paid version of Total Secure 2009, in order to remove the potential and reported problems. Not only does it cause your machine to slow down dramatically, it would also put your privacy and data in risk.

طريقة التخلص منه:


قم بايقاف الملفات التالية:

TotalSecure2009.exe
scan.exe


=====================


قم بحذف الملفات التالية:

%ProgramFiles%\TotalSecure2009\scan.exe
%ProgramFiles%\TotalSecure2009\totalsecure.s1
%ProgramFiles%\TotalSecure2009\totalsecure.s2
%ProgramFiles%\TotalSecure2009\totalsecure.s3
%ProgramFiles%\TotalSecure2009\totalsecure.s4
%ProgramFiles%\TotalSecure2009\totalsecure.s5
%ProgramFiles%\TotalSecure2009\totalsecure.s6
%ProgramFiles%\TotalSecure2009\uninstall.exe
%UserProfile%\Desktop\Total Secure 2009.lnk
%UserProfile%\Start Menu\Programs\Total Secure 2009.lnk


======================



قم بحذف الريجستري

HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\run TotalSecure2009

[منازار]

VirusRL2009


معلومات عنه:

VirusRL2009.exe, or VirusRL2009, is an infected .exe file for a counterfeit anti-spyware software called Virus Response Lab 2009. It is believed that VirusRL2009 is a clone of the recent Virus Lab 2009 we have been encountered recenlty. VirusRL2009 usually come up after you installed a video codec that come with Trojan, malware and virus.

طريقة التخلص منه:


قم بايقاف الملف التالي:

VirusRL2009.exe



==============

قم بتعطيل الريجستري


AVLWarning.dll



=============


قم بحذف الملفات التالية:

VirusRL2009 2.1.lnk
AVLWarning.dll
VirusRL2009.exe
c:\Program Files\VirusRL2009
c:\Program Files\VirusRL2009\VirusRL2009.exe
c:\Program Files\VirusRL2009\AVLWarning.dll
c:\Program Files\VirusRL2009\uninst.exe
c:\Documents and Settings\Adminstrator\Desktop\VirusRL2009.lnk
c:\Documents and Settings\Adminstrator\Start Menu\VirusRL2009.lnk
c:\Documents and Settings\Adminstrator\Start Menu\Programs\VirusRL2009
c:\Documents and Settings\Adminstrator\Start Menu\Programs\VirusRL2009 2.1\VirusRL2009.lnk


============


قم بحذف الريجستري


HKEY_CURRENT_USER\Software\VirusRL2009
HKEY_CLASSES_ROOT\AVLWarning.WarningBHO.1
HKEY_CLASSES_ROOT\AVLWarning.WarningBHO
HKEY_CLASSES_ROOT\CLSID\{A21C8D81-A9C7-46c6-A488-2A32FA0DAEB6}
HKEY_CLASSES_ROOT\CLSID\{F5734812-E6A1-8833-ECA9-949B5B8A88BF}
HKEY_CLASSES_ROOT\Interface\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91}
HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
HKEY_CLASSES_ROOT\TypeLib\{A8954909-1F0F-41A5-A7FA-3B376D69E226}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\App Paths\VirusRL2009
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{A21C8D81-A9C7-46c6-A488-2A32FA0DAEB6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\VirusRL2009

.

[منازار]

eKerberos


معلومات عنه:

eKerberos, also known as iKerberos Protector or PC e-Kerberos, is new counterfeit anti-spyware software that created to invade yoru privacy and ruin the Internet community. Just like most fake antispywares, PC e-Kerberos issues misleading and exaggerated results. PC e-Kerberos usually installed itself onto your PC without your permission, through Vundo Trojan, Virus or fake software. eKerberos will display fake system alerts or fake security alerts to trick user to buy the paid version of eKerberos , in order to remove the potential and reported problems. Not only does it cause your machine to slow down dramatically, it would also put your privacy and data in risk.

طريقة التخلص منه:



قم بايقاف الملف التالي:

eKerberos .exe




============


قم بحذف الملفات التالية:

%ProgramFiles%\eKerberos\eKerberos.exe
%ProgramFiles%\eKerberos\Hook.dll
%ProgramFiles%\eKerberos\RES\Skin\background.cauti on.bmp
%ProgramFiles%\eKerberos\RES\Skin\background.clock .bmp
%ProgramFiles%\eKerberos\RES\Skin\background.demom ode.bmp
%ProgramFiles%\eKerberos\RES\Skin\background.demon otice.bmp
%ProgramFiles%\eKerberos\RES\Skin\background.optio ns.registration.bmp
%ProgramFiles%\eKerberos\RES\Skin\background.optio ns.settings.bmp
%ProgramFiles%\eKerberos\RES\Skin\background.regis tration.bmp
%ProgramFiles%\eKerberos\RES\Skin\buylong.active.b mp
%ProgramFiles%\eKerberos\RES\Skin\buylong.deactive .bmp
%ProgramFiles%\eKerberos\RES\Skin\buylong.normal.b mp
%ProgramFiles%\eKerberos\RES\Skin\buylong.pressed. bmp
%ProgramFiles%\eKerberos\RES\Skin\buyshort.active. bmp
%ProgramFiles%\eKerberos\RES\Skin\buyshort.deactiv e.bmp
%ProgramFiles%\eKerberos\RES\Skin\buyshort.normal. bmp
%ProgramFiles%\eKerberos\RES\Skin\buyshort.pressed .bmp
%ProgramFiles%\eKerberos\RES\Skin\cancellong.activ e.bmp
%ProgramFiles%\eKerberos\RES\Skin\cancellong.deact ive.bmp
%ProgramFiles%\eKerberos\RES\Skin\cancellong.norma l.bmp
%ProgramFiles%\eKerberos\RES\Skin\cancellong.press ed.bmp
%ProgramFiles%\eKerberos\RES\Skin\cancelshort.acti ve.bmp
%ProgramFiles%\eKerberos\RES\Skin\cancelshort.norm al.bmp
%ProgramFiles%\eKerberos\RES\Skin\cancelshort.pres sed.bmp
%ProgramFiles%\eKerberos\RES\Skin\checkbox.checked .bmp
%ProgramFiles%\eKerberos\RES\Skin\checkbox.uncheck ed.bmp
%ProgramFiles%\eKerberos\RES\Skin\close.active.bmp
%ProgramFiles%\eKerberos\RES\Skin\close.deactive.b mp
%ProgramFiles%\eKerberos\RES\Skin\close.normal.bmp
%ProgramFiles%\eKerberos\RES\Skin\close.pressed.bm p
%ProgramFiles%\eKerberos\RES\Skin\closeapp.active. bmp
%ProgramFiles%\eKerberos\RES\Skin\closeapp.deactiv e.bmp
%ProgramFiles%\eKerberos\RES\Skin\closeapp.normal. bmp
%ProgramFiles%\eKerberos\RES\Skin\closeapp.pressed .bmp
%ProgramFiles%\eKerberos\RES\Skin\deny.active.bmp
%ProgramFiles%\eKerberos\RES\Skin\deny.deactive.bm p
%ProgramFiles%\eKerberos\RES\Skin\deny.normal.bmp
%ProgramFiles%\eKerberos\RES\Skin\deny.pressed.bmp
%ProgramFiles%\eKerberos\RES\Skin\oklong.active.bm p
%ProgramFiles%\eKerberos\RES\Skin\oklong.deactive. bmp
%ProgramFiles%\eKerberos\RES\Skin\oklong.normal.bm p
%ProgramFiles%\eKerberos\RES\Skin\oklong.pressed.b mp
%ProgramFiles%\eKerberos\RES\Skin\okshort.active.b mp
%ProgramFiles%\eKerberos\RES\Skin\okshort.normal.b mp
%ProgramFiles%\eKerberos\RES\Skin\okshort.pressed. bmp
%ProgramFiles%\eKerberos\RES\Skin\permit.active.bm p
%ProgramFiles%\eKerberos\RES\Skin\permit.deactive. bmp
%ProgramFiles%\eKerberos\RES\Skin\permit.normal.bm p
%ProgramFiles%\eKerberos\RES\Skin\permit.pressed.b mp
%ProgramFiles%\eKerberos\RES\Skin\registration.act ive.bmp
%ProgramFiles%\eKerberos\RES\Skin\registration.dea ctive.bmp
%ProgramFiles%\eKerberos\RES\Skin\risk.normal.grey .bmp
%ProgramFiles%\eKerberos\RES\Skin\risk.normal.red. bmp
%ProgramFiles%\eKerberos\RES\Skin\settings.active. bmp
%ProgramFiles%\eKerberos\RES\Skin\settings.deactiv e.bmp
%ProgramFiles%\eKerberos\RES\Skin\switch.active.bm p
%ProgramFiles%\eKerberos\RES\Skin\switch.deactive. bmp
%ProgramFiles%\eKerberos\RES\Skin\switch.normal.bm p
%ProgramFiles%\eKerberos\RES\Skin\switch.pressed.b mp
%ProgramFiles%\eKerberos\SkinActive.xml
%ProgramFiles%\eKerberos\uninstall.exe


===========


قم بحذف الريجستري


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run “eKerberos”

[منازار]

Spy Defender Pro


معلومات عنه:

Spy Defender Pro, also known as SpyDefenderPro, is new counterfeit anti-spyware software that created to invade yoru privacy and ruin the Internet community. From first glance, Spy Defender Pro might be essentially a clone of the previously-known Virtual PC Guard, though we don’t have evidences of it. Just like most fake antispywares, Spy Defender Pro issues misleading and exaggerated results. Spy Defender Pro usually installed itself onto your PC without your permission, through Vundo Trojan, Virus or fake software. SpyDefenderPro will display fake system alerts or fake security alerts to trick user to buy the paid version of SpyDefenderPro , in order to remove the potential and reported problems. Not only does it cause your machine to slow down dramatically, it would also put your privacy and data in risk.

طريقة التخلص منه:


قم بايقاف الملف التالي:

SpyDefenderPro .exe


قم بحذف الملفات التالية:

c:\Program Files\SpyDefenderPro\SpyDefenderPro.exe
c:\Program Files\SpyDefenderPro\SpyDefenderPro.url
c:\Program Files\SpyDefenderPro\uninst.exe
c:\Program Files\SpyDefenderPro\Lang
c:\Program Files\SpyDefenderPro\Lang\English.ini
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyDefenderPro 1.32.lnk
%UserProfile%\Desktop\SpyDefenderPro.lnk
%UserProfile%\My Documents\SpyDefenderPro
%UserProfile%\My Documents\SpyDefenderPro\SDBHO.dll
%UserProfile%\My Documents\SpyDefenderPro\sdcfg.dat
%UserProfile%\My Documents\SpyDefenderPro\Logs
%UserProfile%\My Documents\SpyDefenderPro\Quarantine
%UserProfile%\Start Menu\Programs\SpyDefenderPro
%UserProfile%\Start Menu\SpyDefenderPro 1.32.lnk
%UserProfile%\Start Menu\Programs\SpyDefenderPro\SpyDefenderPro 1.32.lnk
%UserProfile%\Start Menu\Programs\SpyDefenderPro\SpyDefenderPro Website.lnk
c:\Program Files\SpyDefenderPro
c:\Program Files\SpyDefenderPro\blacklist.txt
c:\Program Files\SpyDefenderPro\msvcp71.dll
c:\Program Files\SpyDefenderPro\msvcr71.dll
c:\Program Files\SpyDefenderPro\sdev.sgn



قم بحذف الريجستري

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run “SpyDefenderPro”