System Tool Firewall Alert is a popup message window that belongs to the fake System Tools 2011 virus. The System tool firewall alert mostly appears while browsing the web in Internet Explorer. This fake alert warns the user of computer infection, it tells that your computer is infected by Lsas.Blaster.Keylogger virus which is also a fake antivirus promoter. The aim of this system tool firewall alert is to scare you and force you to install and buy system tool 2011 antivirus. Do not download or buy it as it is a scam tool. [Read more...]
Fake CopyRight Violation alert virus removal
December 19, 2010 By
The fake I-Q Manager or the AP Manager program is a new fake anti-piracy scanner wich claims to be a CopyRight protection scanner although it is not the real copyright protection software. This fake program tries to search for torrents or other copy-righted programs and then it starts to display fake copyright violation alerts to scare user about copyright violations.
[Read more...]
Fake microsoft security essential alert
December 3, 2010 By
The fake Microsoft Security Essentials Alert virus is a Trojan that is a false clone of the legitimate Microsoft Security Essentials antivirus program and it tells the user that your computer is infected with Unknown Win32/Trojan. This malicious software promotes many different fake antivirus softwares such as: Red Cross Antivirus, Peak Protection 2010, Pest Detector 4.1, Major Defense Kit and AntiSpySafeguard. The fake Microsoft Security Essentials Alert will state that it was unable to remove Unknown Win32/Trojan threat and will prompt you to install one of those five rogue programs to remove the infection which actually doesn’t even exist on your computer. Actually, it will display a list with 35 different antivirus programs, 30 of which are legitimate antivirus programs, but it let you install only the rogue ones.
[Read more...]
Trojan win32 Nuquel e alert
November 10, 2010 By
Win32/Nuquel.E description
Win32/Nuquel.E is a fake trojan reported by rogue software Spyware Protect 2009. Spyware Protect 2009 loads fabricated security alerts warning users about imaginary threats. Nuquel.E trojan is one of several imaginary infections used by this fake antispyware to intimidate people into purchasing a license of Spyware Protect2009. The program keeps urging to delete Win32 Nuquel.E by generating numerous pop-ups and system tray alerts. If clicked upon, the falsified warnings redirect user to distributors of SpywareProtect 2009.
If screen of you computer is taken over by Win32/Nuquel.E alerts, it’s a sign of SpywareProtect2009 infection.
It mostly displays “Spyware Protect 2009″ alert
INFILTRATION ALERT
You computer is being attacked by an Internet Virus. It could be a password-stealing attack, a trojan – dropper or similar.
DETAILS
Attack from: 84.154.14.114, port 34940
Attacked port: 50507
Threat: Win32/Nuqel.E
Do you want block this attack?
How to manually remove Win32/Nuquel.E
To remove Win32/Nuquel.E spyware you must block Win32/Nuquel.E sites, stop and remove processes, unregister DLL files, search and delete all other Win32/Nuquel.E files and registry utility. Follow the Win32/Nuquel.E detection and removal instructions below.
The most typical software removal method is to remove Win32/Nuquel.E by using “Add or Remove Programs” service. However there may be hidden Win32/Nuquel.E files, running processes and registries in your computer, so Win32/Nuquel.E may recreate all other files after reboot.
Win32/Nuquel.E manual removal instructions
Block Win32/Nuquel.E sites:
swp2009.com
spyprotect2009.com
sp-protect2009.com
sys-protection.com
sysguard2009.com
os-protection.com
spy-protect-2009.com
spywprotect.com
adwareguard.net antivirus-win.com
spywrprotect-2009.com
sysprotect.net spwprotect2009.com
spy-protec.com
spyware-protector-2009.com
browser-security.microsoft.com
antiwareprotect.com
antivguardian.com
Stop and remove Win32/Nuquel.E processes:
aazalirt.exe
dkekkrkska.exe
dkewiizkjdks.exe
iddqdops.exe
ienotas.exe
iqmcnoeqz.exe
irprokwks.exe
jikglond.exe
jiklagka.exe
jrjakdsd.exe
jungertab.exe
kitiiwhaas.exe
kkwknrbsggeg.exe
klopnidret.exe
krkdkdkee.exe
krkmahejdk.exe
krtawefg.exe
krujmmwlrra.exe
ktknamwerr.exe
kuruhccdsdd.exe
ooorjaas.exe
oranerkka.exe
oropbbsee.exe
otnnbektre.exe
otowjdseww.exe
otpeppggq.exe
rkaskssd.exe
ronitfst.exe
seeukluba.exe
skaaanret.exe
sysguardn.exe
tobmygers.exe
tobykke.exe
zibaglertz.exe
sysguard.exe
Locate and delete Win32/Nuquel.E registry entries:
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “sysguardn”
HKEY_CURRENT_USER\Software\Spyware Protect 2009
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\uninstall\Spyware Protect 2009
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Spyware Protect 2009
Search and unregister Win32/Nuquel.E DLL libraries:
vbzlib2.dll
Detect and delete other Win32/Nuquel.E files:
c:\Program Files\Spyware Protect 2009
c:\Program Files\Spyware Protect 2009\gfx.bin
c:\Program Files\Spyware Protect 2009\options.ini
c:\Program Files\Spyware Protect 2009\SpywareProtect2009.exe
c:\Program Files\Spyware Protect 2009\SpywareProtect2009.exe.MANIFEST
c:\Program Files\Spyware Protect 2009\SpywareProtect2009_start_setup.exe
c:\Program Files\Spyware Protect 2009\tp_starter.exe
c:\Program Files\Spyware Protect 2009\uninstall.exe
c:\Program Files\Spyware Protect 2009\uninstall.log
c:\Program Files\Spyware Protect 2009\vbase.ini
c:\Program Files\Spyware Protect 2009\lang
c:\Program Files\Spyware Protect 2009\lang\english.lng
c:\WINDOWS\system32\vbzlib2.dll
c:\WINDOWS\aazalirt.exe
c:\WINDOWS\dkekkrkska.exe
c:\WINDOWS\dkewiizkjdks.exe
c:\WINDOWS\iddqdops.exe
c:\WINDOWS\ienotas.exe
c:\WINDOWS\iqmcnoeqz.exe
c:\WINDOWS\irprokwks.exe
c:\WINDOWS\jikglond.exe
c:\WINDOWS\jiklagka.exe
c:\WINDOWS\jrjakdsd.exe
c:\WINDOWS\jungertab.exe
c:\WINDOWS\kitiiwhaas.exe
c:\WINDOWS\kkwknrbsggeg.exe
c:\WINDOWS\klopnidret.exe
c:\WINDOWS\krkdkdkee.exe
c:\WINDOWS\krkmahejdk.exe
c:\WINDOWS\krtawefg.exe
c:\WINDOWS\krujmmwlrra.exe
c:\WINDOWS\ktknamwerr.exe
c:\WINDOWS\kuruhccdsdd.exe
c:\WINDOWS\ooorjaas.exe
c:\WINDOWS\oranerkka.exe
c:\WINDOWS\oropbbsee.exe
c:\WINDOWS\otnnbektre.exe
c:\WINDOWS\otowjdseww.exe
c:\WINDOWS\otpeppggq.exe
c:\WINDOWS\rkaskssd.exe
c:\WINDOWS\ronitfst.exe
c:\WINDOWS\seeukluba.exe
c:\WINDOWS\skaaanret.exe
c:\WINDOWS\sysguardn.exe
c:\WINDOWS\tobmygers.exe
c:\WINDOWS\tobykke.exe
c:\WINDOWS\zibaglertz.exe
sysguard.exe
