كل انواع الفيروسات وبرامج الحماية المزيفة ،،،،وطريقة إزالتها

[منازار]

INF/Autorun

معلومات عنه:

INF/Autorun is a typical error message that generated by spywares. Most recently this error message is relating to a rogue antispyware such as PCCleanPro. INF/Autorun then issues numerous popups and misleadning messages.

طريقة التخلص منه:


قم بحذف الملفات التالية:

Antivirus XP 2008.lnk
Antivirus XP 2008.exe


قم بحذف الريجستري:


BC37F38C-D37C-46FC-AC8D-93ABBCE72947
FE06810E-CAFB-4F02-A65B-F35190236D02
414B0283-2228-4F26-8BB3-C2211FA99223

[منازار]

Win32/PSW.OnLineGames

معلومات عنه:

Win32/PSW.OnLineGames is a typical error message that generated by spywares. Most recently this error message is relating to a rogue antispyware such as Antivirus XP 2008 or Antivirus 2009. Win32/PSW.OnLineGames then issues numerous popups and misleadning messages.

طريقة التخلص منه:


قم بحذف الملفات التالية:


Antivirus XP 2008.lnk
Antivirus XP 2008.exe



قم بحذف الريجستري التالي:


BC37F38C-D37C-46FC-AC8D-93ABBCE72947
FE06810E-CAFB-4F02-A65B-F35190236D02
414B0283-2228-4F26-8BB3-C2211FA99223

[منازار]

Trojan.Zlod.Worm.W32

معلومات عنه:

Trojan.Zlod.Worm.W32 used to be a real virus, now fake anti-spyware software like IE Defender will display Trojan.Zlod.Worm.W32 as their scan result to trick user to buy the fake anti-spyware program. The fake anti-spyware program usually get installed onto your PC without your permission, through Trojan, malware and virus (or you could get it by installing a fake video codec). fake anti-spyware will display the Trojan.Zlod.Worm.W32 fake system alerts or fake security alerts to trick user to buy the Paid Version of the fake anti-spyware program.

طريقة التخلص منه:


قم بتوقيف الملفات التالية:

stream32a.dll
msvideo.dll
windivx.dll
websrc32.dll
mscfg32.dll
pdswin.dll
ecxwp.dll
pmspl.dll
vipextqtr.dll


قم بحذف الملفات التالية:


mscfg32.dll
cjvy.dll
vtssp.dll
ttvbonvgl.dll
ssqppol.dll
gqagksr.dll
esent9.dll
pmspl.dll
windivx.dll
msvideo.dll
ecxwp.dll
stream32a.dll
websrc32.dll
mlljh.dll
urqnomm.dll



قم بحذف الريجستري:

c4545fc9-26d0-4ccf-b4fb-728aed895dbd
BBB05D9E-0297-404D-A6BF-D8F2876B84A6
F9EAAA11-DF98-4615-A2C7-7D03C86A6BE9
202EBB90-ABD4-46CC-BB5A-4F0ECC67B331
62EA9201-8CC7-4199-AC30-7744F836322E
b166be07-30a4-4d38-b781-44528a630706
D17CFF74-A19C-4C36-821A-E074E4F889CA
15EB9F40-D775-4463-B75B-8687B3C66BB7
E856E05E-1B91-4339-9EFC-9A3308CB5491
B3E45A9B-7756-46A2-AB14-90175CD374F9
69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014
A8565FBC-8D53-4D4F-9BB0-CBC68A22B126
43BA0532-0D69-458A-8C71-AD0F6AE70D19
6D64B03B-3B93-4AF2-BFC6-01264A4C7F2A
6A719349-BDF5-4268-9019-4ACA0C2562D2

[منازار]

Trojan-spy.win32.greenscreen

معلومات عنه:

Trojan-spy.win32.greenscreen is a typical error message that generated by spywares. Most recently this error message is relating to a rogue antispyware such as PCCleanPro. Trojan-spy.win32.greenscreen then issues numerous popups and misleadning messages.

طريقة التخلص منه:

قم بحذف الملفات التالية:

Antivirus 2009.lnk
Antivirus 2009.exe
Antivirus 2008.lnk
Antivirus 2008.exe



قم بحذف الريجستري:

BC37F38C-D37C-46FC-AC8D-93ABBCE72947
FE06810E-CAFB-4F02-A65B-F35190236D02
414B0283-2228-4F26-8BB3-C2211FA99223

[منازار]

Trojan-spy.html.bankfraud.dq

معلومات عنه:

Trojan-spy.html.bankfraud.dq is a typical error message that generated by spywares. Most recently this error message is relating to a rogue antispyware such as PCCleanPro. Trojan-spy.html.bankfraud.dq then issues numerous popups and misleadning messages.

طريقة التخلص منه:


قم بحذف الملفات التالية:


Antivirus 2009.lnk
Antivirus 2009.exe
Antivirus 2008.lnk
Antivirus 2008.exe


قم بحذف الريجستري:


BC37F38C-D37C-46FC-AC8D-93ABBCE72947
FE06810E-CAFB-4F02-A65B-F35190236D02
414B0283-2228-4F26-8BB3-C2211FA99223

[منازار]

AceBot (Ace Bot) Trojan

معلومات عنه:

AceBot, or Ace Bot or AceBot Trojan, is a nasty Internet Hijacker that directly or indirectly promotes rogue antispyware products. AceBot will cause your computer to perform sluggishly or even lead to a complete crash, which makes you believe that the computer is affected by spyware so you would purchase their products. The system Alert message usually states that your have a virus, trojan, or simply stating that your computer is running slow.

طريقة التخلص منه:


(Tools>Internet Options>Advanced>Reset)

[منازار]

Win32/Qhost

معلومات عنه:

Win32/Qhost is a typical error message that generated by spywares. Most recently this error message is relating to a rogue antispyware such as Antivirus XP 2008. Win32/Qhost then issues numerous popups and misleadning messages.

طريقة التخلص منه:

قم بحذف الملفات التالية:

Antivirus XP 2008.lnk
Antivirus XP 2008.exe


قم بحذف الريجستري:

BC37F38C-D37C-46FC-AC8D-93ABBCE72947
FE06810E-CAFB-4F02-A65B-F35190236D02
414B0283-2228-4F26-8BB3-C2211FA99223

[منازار]

WebSpyShield (Web Spy Shield)

معلومات عنه:

WebSpyShield, also known as Web Spy Shield, is the latest counterfeit antispyware that created to mislead and annoy the innocent web surfers. WebSpyShield usually come up after you installed a video codec that come with Trojan, malware and virus. WebSpyShield normally generates fake and misleading system popup error messages so end-users will be tricked into purchase WebSpyShield.

طريقة التخلص منه:


قم بايقاف الملف التالي:
WebSpyShield.exe


قم بحذف الملفات التالية:

WebSpyShield.exe
%UserProfile%\Local Settings\Temp\[RANDOM NAME].tmp
%UserProfile%\Start Menu\Programs\WebSpyShield\
%UserProfile%\Start Menu\Programs\WebSpyShield\Uninstall.lnk
%UserProfile%\Start Menu\Programs\WebSpyShield\WebSpyShield.lnk
%ProgramFiles%\WebSpyShield\
%ProgramFiles%\WebSpyShield\Uninstall.exe
%ProgramFiles%\WebSpyShield\WebSpyShield.dll
%ProgramFiles%\WebSpyShield\WebSpyShield.exe
%Windir%\system32\netsupp.dll



قم بحذف الريجستري:

HKEY_CLASSES_ROOT\.key
HKEY_CURRENT_USER\Software\WebSpyShield
HKEY_CURRENT_USER\Software\Antivirus

[منازار]

XPScanner (XPScanner.exe)

معلومات عنه:

XPScanner , or simply XPScanner.exe, is a nasty file that relates to the notorious XP Antivirus, which is one of the latest counterfeit antispywares that devastates the wolrd wide web. XP Antivirus 2008 usually come up after you installed a video codec that come with Trojan, malware and virus. XP Antivirus 2008 normally generates fake and misleading system popup error messages so end-users will be tricked into purchase XP Antivirus 2008. It is very important to remove all the components of of the XPScanner and all the malware and trojans that it might have come bundle with (such as zlob.trojan, trojan.vundo and Trojan.Downloader). To effectively remove XPScanner, we have created a manual removal instructions which is easy to understand.

طريقة التخلص منه:


قم بايقاف الملفات التالية:

XPAntivirus.exe
XPAntivirusUpdate.exe
xpa.exe
xpa2008.exe
xpscanner.exe



قم بحذف الملفات التالية:

XPAntivirus.exe
XPAntivirusUpdate.exe
xpa.exe
xpa2008.exe
xpscanner.exe
Uninstall XPAntivirus.lnk
XPAntivirus on the Web.lnk
XPAntivirus.url
shlwapi.dll
wininet.dll
XP antivirus
XPAntivirus.lnk
XPScanner.lnk
Uninstall XPScanner.lnk



قم بحذف الريجستري:

HKEY_USERS\Software\XP antivirus

[منازار]

Trojan.Win32.ZlobDldr

معلومات عنه:

Trojan.Win32.ZlobDldr, also known as Zlob.Trojan or Trojan.Zlob, is a “Backdoor Trojan” that gives the invader or attacker a bridge to remotely control your computer. By remotely controlling your computer, it allows them to install all kind of malicious softwares to your computer. It can also delete and modify files, and put your privacy in danger.

طريقة التخلص منه:

قم بتوقيف الملف التالي:

TrojanWin32ZlobDldr.exe


قم بحذف الملفات التالية:

yronl.dll
isadd.dll


قم بحذف الريجستري:

TrojanWin32ZlobDldr.exe
yronl.dll
isadd.dll

[منازار]

MS Antivirus

معلومات عنه:

MS Antivirus, also known as MSAntivirus, or MS Antivirus 2008, is not from Microsoft. Please keep this in mind. MS Antivirus is a copy of Vista Antivirus 2008 or its variants. MS Antivirus is a counterfeit antispyware that devastates the computer world. MS Antivirus usually come up after you installed a video codec that come with Trojan, malware and virus. MS Antivirus normally generates fake and misleading system popup error messages so end-users will be tricked into purchase MS Antivirus.

طريقة التخلص منه:


قم بايقاف الملفات التالية:

msa.exe
msantivirus.exe



قم بحذف الملفات التالية:

msa.exe
msantivirus.exe
MSAntivirus.lnk
UninstallMSAntivirus.lnk
c:\Program Files\MSA
c:\Program Files\MSA\MSA.cpl
c:\Program Files\MSA\MSA.exe
c:\Program Files\MSA\msa0.dat
c:\Program Files\MSA\msa1.dat
c:\WINDOWS\system32\MSA.cpl
c:\Documents and Settings\Administrator\Desktop\MSAntivirus.lnk



قم بحذف الريجستري:

HKEY_CURRENT_USER\Software\AntiVirus
HKEY_CURRENT_USER\Software\MSA
HKEY_CLASSES_ROOT\.key
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run “Antivirus”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run “Antivirus”

[منازار]

System Optimizer 2008

معلومات عنه:

System Optimizer 2008, also known as SystemOptimizer2008, is new counterfeit anti-spyware software that created to invade yoru privacy and ruin the Internet community. Just like most fake antispywares, System Optimizer 2008 issues misleading and exaggerated results. System Optimizer 2008 usually installed itself onto your PC without your permission, through Vundo Trojan, Virus or fake software. SystemOptimizer2008 will display fake system alerts or fake security alerts to trick user to buy the paid version of SystemOptimizer2008 , in order to remove the potential and reported problems. Not only does it cause your machine to slow down dramatically, it would also put your privacy and data in risk.

طريقة التخلص منه:


قم بايقاف الملفات التالية:

SystemOptimizer2008 .exe



قم بحذف الملفات التالية:

c:\Program Files\SystemOptimizer2008\SystemOptimizer2008.exe
c:\Program Files\SystemOptimizer2008\SystemOptimizer2008.url
c:\Program Files\SystemOptimizer2008\uninst.exe
c:\Program Files\SystemOptimizer2008\Lang
c:\Program Files\SystemOptimizer2008\Lang\English.ini
c:\Program Files\Common Files\SystemOptimizer2008
c:\Program Files\Common Files\SystemOptimizer2008\cwriter.exe
c:\Program Files\Common Files\SystemOptimizer2008\stmon.exe
c:\Program Files\SystemOptimizer2008\Activate.dat
c:\Program Files\SystemOptimizer2008\bnlink.dat
c:\Program Files\SystemOptimizer2008\lapv.dat
c:\Program Files\SystemOptimizer2008\License.rtf
c:\Program Files\SystemOptimizer2008\LowProcess.exe
c:\Program Files\SystemOptimizer2008\main.exe
c:\Program Files\SystemOptimizer2008\main.xml
c:\Program Files\SystemOptimizer2008\pv.dat
c:\Program Files\SystemOptimizer2008\Readme.rtf
c:\Program Files\SystemOptimizer2008\SCToolbar.dll
c:\Program Files\SystemOptimizer2008\sqlite3.dll
c:\Program Files\SystemOptimizer2008\sr.log
c:\Program Files\SystemOptimizer2008\support.url
c:\Program Files\SystemOptimizer2008\toolbar.xml
c:\Program Files\SystemOptimizer2008\unins000.dat
c:\Program Files\SystemOptimizer2008\unins000.exe
c:\Program Files\SystemOptimizer2008\up.dat
c:\Program Files\SystemOptimizer2008\updater.dat
c:\Program Files\SystemOptimizer2008\Microsoft.VC80.CRT
c:\Program Files\SystemOptimizer2008\Microsoft.VC80.CRT\Micro soft.VC80.CRT.manifest
c:\Program Files\SystemOptimizer2008\Microsoft.VC80.CRT\msvcp 80.dll
c:\Program Files\SystemOptimizer2008\Microsoft.VC80.CRT\msvcr 80.dll
c:\Program Files\SystemOptimizer2008\Microsoft.VC80.MFC\mfc80 .dll
c:\Program Files\SystemOptimizer2008\Microsoft.VC80.MFC\Micro soft.VC80.MFC.manifest\
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\SystemOptimizer2008 1.32.lnk
%UserProfile%\Desktop\SystemOptimizer2008.lnk
%UserProfile%\My Documents\SystemOptimizer2008
%UserProfile%\My Documents\SystemOptimizer2008\SDBHO.dll
%UserProfile%\My Documents\SystemOptimizer2008\sdcfg.dat
%UserProfile%\My Documents\SystemOptimizer2008\Logs
%UserProfile%\My Documents\SystemOptimizer2008\Quarantine
%UserProfile%\Start Menu\Programs\SystemOptimizer2008
%UserProfile%\Start Menu\SystemOptimizer2008 1.32.lnk
%UserProfile%\Start Menu\Programs\SystemOptimizer2008\SystemOptimizer2 008 1.32.lnk
%UserProfile%\Start Menu\Programs\SystemOptimizer2008\SystemOptimizer2 008 Website.lnk
c:\Program Files\SystemOptimizer2008
c:\Program Files\SystemOptimizer2008\blacklist.txt
c:\Program Files\SystemOptimizer2008\msvcp71.dll
c:\Program Files\SystemOptimizer2008\msvcr71.dll
c:\Program Files\SystemOptimizer2008\sdev.sgn



قم بحذف الريجستري:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run “SystemOptimizer2008″

[منازار]

Gksraemq Toolbar (Gksraemq)

معلومات عنه:

Gksraemq Toolbar, or simply known as Gksraemq, is a malicious toolbar that promotes fake antispyware applications or related websites. As many of you might have already known, Gksraemq Toolbar is new variant or clone of the notorious zlob clone toolbar. Generally, it gives itself a new name periodically so normal users would be fooled.



طريقة التخلص منه:


قم بايقاف الملفات التالية:
Gksraemq.dll
turbosearchsite.dll
oggview32.dll
toprates.dll


قم بحذف الملفات التالية:

Gksraemq.dll
oggview32.dll
turbosearchsite.dll
toprates.dll


قم بحذف الريجستري:

A74F3FC3-CC9A-4D4C-AFB5-B56F0CAA445D
47EFD4AD-CB46-4549-B24B-CEE415394C56
17D2F953-B2D1-4D1B-BCD3-20432E09ECF1
4090F502-6B2D-41B4-8409-B08905A3A0E6
F10587E9-0E47-4CBE-84AE-7DD20B8684BB
80DFDD57-D8B8-4991-82B9-9E9D426668B0
F4D76F09-7896-458a-890F-E1F05C46069F

[منازار]

SecurityScanner 2008

معلومات عنه:

SecurityScanner2008, also known as Security Scanner 2008 by a lot of people, is the latest counterfeit anti-spyware software that endangers the world of computers. Security Scanner 2008 usually installed itself onto your PC without your permission, through Vundo Trojan, Virus or fake software. Security Scanner 2008 will display fake system alerts or fake security alerts to trick user to buy the paid version of Security Scanner 2008, in order to remove the potential and reported problems. Not only does it cause your machine to slow down dramatically, it would also put your privacy and data in risk.

طريقة التخلص منه:

قم بحذف الملفات التالية:

SecurityScanner2008.lnk
SecurityScanner2008.exe
%ProgramFiles%\Security Scanner 2008\com\pcsd.dll
%ProgramFiles%\Security Scanner 2008\Security Scanner 2008.db
%ProgramFiles%\Security Scanner 2008\Security Scanner 2008.exe
%UserProfile%\Application Data\Security Scanner 2008\log.dat
%UserProfile%\Application Data\Security Scanner 2008\settings.dat
%UserProfile%\Desktop\Security Scanner 2008.lnk
%UserProfile%\Local Settings\Temp\[RANDOM FILE NAME].tmp
%ProgramFiles%\Security Scanner 2008\SecurityScanner2008.pkg
%ProgramFiles%\Security Scanner 2008\program.info
%ProgramFiles%\Security Scanner 2008\Uninstall.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Security Scanner 2008\Register Security Scanner 2008.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Security Scanner 2008\Start Security Scanner 2008.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Security Scanner 2008\Uninstall Security Scanner 2008.lnk
%CurrentFolder%\log


قم بايقاف الملفات التالية:

SecurityScanner2008.exe


قم بحذف الريجستري:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\SecurityScanner2008
HKEY_LOCAL_MACHINE\SOFTWARE\Security Scanner 2008
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{82297D1 1-31C1-40B1-960A-BDF40B3B365F}
HKEY_CURRENT_USERS\Software\Security Scanner 2008
HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\Con textMenuHandlers\pcsd
HKEY_CLASSES_ROOT\CLSID\{82297D11-31C1-40B1-960A-BDF40B3B365F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\Security Scanner 2008
HKEY_LOCAL_MACHINE\SOFTWARE\Security Scanner 2008

[منازار]

AlphaWipe Tracks Cleaner 2008

معلومات عنه:

AlphaWipe Tracks Cleaner 2008, also known as Alpha Wipe Tracks Cleaner 2008 by a lot of people, is the latest counterfeit anti-spyware software that endangers the world of computers. AlphaWipe Tracks Cleaner 2008 usually installed itself onto your PC without your permission, through Vundo Trojan, Virus or fake software. AlphaWipe Tracks Cleaner 2008 will display fake system alerts or fake security alerts to trick user to buy the paid version of AlphaWipe Tracks Cleaner 2008, in order to remove the potential and reported problems. Not only does it cause your machine to slow down dramatically, it would also put your privacy and data in risk.

طريقة التخلص منه:



قم بايقاف الملفات التالية:

AlphaWipe Tracks Cleaner 2008.exe

قم بحذف الملفات التالية:

AlphaWipe Tracks Cleaner 2008.lnk
AlphaWipe Tracks Cleaner 2008.exe
%ProgramFiles%\AlphaWipe Tracks Cleaner 2008\com\pcsd.dll
%ProgramFiles%\AlphaWipe Tracks Cleaner 2008\AlphaWipe Tracks Cleaner 2008.db
%ProgramFiles%\AlphaWipe Tracks Cleaner 2008\AlphaWipe Tracks Cleaner 2008.exe
%UserProfile%\Application Data\AlphaWipe Tracks Cleaner 2008\log.dat
%UserProfile%\Application Data\AlphaWipe Tracks Cleaner 2008\settings.dat
%UserProfile%\Desktop\AlphaWipe Tracks Cleaner 2008.lnk
%UserProfile%\Local Settings\Temp\[RANDOM FILE NAME].tmp
%ProgramFiles%\AlphaWipe Tracks Cleaner 2008\AlphaWipe Tracks Cleaner 2008.pkg
%ProgramFiles%\AlphaWipe Tracks Cleaner 2008\program.info
%ProgramFiles%\AlphaWipe Tracks Cleaner 2008\Uninstall.exe
C:\Documents and Settings\All Users\Start Menu\Programs\AlphaWipe Tracks Cleaner 2008\Register AlphaWipe Tracks Cleaner 2008.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\AlphaWipe Tracks Cleaner 2008\Start AlphaWipe Tracks Cleaner 2008.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\AlphaWipe Tracks Cleaner 2008\Uninstall AlphaWipe Tracks Cleaner 2008.lnk
%CurrentFolder%\log


قم بحذف الريجستري:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\AlphaWipe Tracks Cleaner 2008
HKEY_LOCAL_MACHINE\SOFTWARE\AlphaWipe Tracks Cleaner 2008
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{82297D1 1-31C1-40B1-960A-BDF40B3B365F}
HKEY_CURRENT_USERS\Software\AlphaWipe Tracks Cleaner 2008
HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\Con textMenuHandlers\pcsd
HKEY_CLASSES_ROOT\CLSID\{82297D11-31C1-40B1-960A-BDF40B3B365F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\AlphaWipe Tracks Cleaner 2008
HKEY_LOCAL_MACHINE\SOFTWARE\AlphaWipe Tracks Cleaner 2008