Remove Win32/ ClickPotato virus – how to get rid

February 10, 2011 By

Win32.ClickPotato virus is is a part of scam which tries to sell out the pirates video movies to the internet users. The virus Win32.Click-Potato gets into computers mostly when an advertisement on malicious websites is clicked. This virus immediately installs its components and all necessary files needed to compromise the security of the infected computer. After completing its installtion, Win32.ClickPotato virus will display annoying popup windows on the desktop screen of infected computer. These popups can be advertisements that will offer the user to buy some movies at low price. Websites and domains used by Win32.ClickPotato virus to trick more users for making sales, are fraulent websites and all the videos offered by Win32.ClickPotato virus are pirated movies and they voilate copyright laws.

Remember! Win32.ClickPotato is a dangerous threat for your computer and internet security. This virus may bring new malwares and trojans onto your computer. ClickPotato virus also works like a browser hijacker so it may lead your web links and search queries while searching on Yahoo, Google or bing, to wrong websites. ClickPotato tries to sell out pirated movies and often it dose`nt provide even the pirated movies when you pay for the video. It may corrupt your windows registry and important system files used by windows. It is recommended to remove the ClickPotato virus immediately upon detection.

Auto Removal

To remove this virus Automatically, We Suggest the following removal tools:
Spyware Doctor:
How to do guide:

  • Download the spyware doctor`s latest version available at the link below to your desktop. (Its free one and it works fine)
  • When the download completes, open the Spyware Doctor setup file from your desktop by double clicking it
  • Click the install button, select AGREE to the terms and conditions and complete the installation wizard
  • After getting it installed on your machine, double click the Spyware Doctor software icon from desktop
  • Now the spyware doctor scanner will appear, Select the SCAN now button and let it do the job

    • download spyware doctor Remove Win32/ ClickPotato virus how to get rid

    Filed Under: 3: Viruses & Worms Tagged With: , , , ,

    Win32 Virut.h trojan – how t get rid of virut malware

    January 16, 2011 By

    Win32.Virut.H malware is a virus designed to destroy system and networks. W32.Virut virus deletes important system files and makes the network unusable. It damages system by various ways like overwriting system files with its own command. It may also delete system files or ingect them. Win32.Virut.h also has some previous versions like W32.virut.nbp and trojan w32.Virut.cf backdoor

    Win32.Virut.H hides itself and remains in infected computer without user knowledge. It copies and drops its malware files to emails, cracked software programs or it may spread itself via removable media devices such as CDs or Pen drives.

    Win32.Virut.H usually gets into a computer through malicious porn websites, mostly freeware porns or peer to peer file-sharing or via spam emails that contain download links. Win32.Virut.H infects the executable and runs a backdoor onto infected computer.

    How to remove Win32.virut:

    Its too difficult to get rid of Virut virus manually, therefor its recommended to use a powerful anti malware program to remove win32.virut.h virus.

    Auto Removal

    To remove this virus Automatically, We Suggest the following removal tools:
    Spyware Doctor:
    download spyware doctor Win32 Virut.h trojan how t get rid of virut malware

    Filed Under: 2: Trojan Removal Tagged With: , , ,

    Flooder.win32.UDP.c trojan removal guide

    January 8, 2011 By

    Flooder.Win32.UDP.c virus is actually a hacktool that could be utilized in breaking a system attacks by hackers. When your computer is infected with Flooder.win32.UDP.c malware, you will notice unwanted annoying popup on your screen while surfing the web. These popups contain unwanted advertisement (spam). You will also be redirected to malicious websites and unwanted webpages when clicking a different link. Flooder.Win32.UDP.c is created to steal your personal information stored in your computer such as logins, e mails and credit cards. Flooder.win32.UDP.c compromises your internet and computer security and allows the hackers to get into your computer for malicious [Read more...]

    Filed Under: 3: Viruses & Worms Tagged With: , , ,

    Win32 Bubnix rootkit virus

    November 22, 2010 By

    The Win32/Bubnix virus had been given several different names—Bubnix Virus, Rootkit/Bubnix.A, Gen:Rootkit.Nixoa.1, TR/Rootkit.Gen, and W32/Rootkit.BNQN, to name a few—but whatever your security software calls it, it’s one of the worst botnet viruses on the web today, rivaling pests like Alureon.H and the Rimecud virus with its incredible ability to spread from computer to computer.

    The Bubnix virus is basically a driver that hides its presence on your computer by preventing you from accessing its files or registry values. Once it installs itself, it’s capable of downloading additional viruses onto your hard drive, and it can even take over your email and send spam to people on your contact list, which won’t earn you any friends

    Bubnix Virus May Be Rogue Anti-Spyware
    Rogue anti-spyware refers to anti-spyware/antivirus software of questionable value. Rogue anti-spyware may not be proven to protect your computer from spyware, may popup fake alerts or create many false positives about your PC being infected, or may use scare tactics to try to get you to purchase the application. Rogue anti-spyware software may be installed by a Trojan, come bundled with other software, or install itself through web browser security holes. While it is fairly rare, some rogue anti-spyware is created and distributed by known spyware or adware companies, and the rogue anti-spyware may install spyware or adware itself [Read more...]

    Filed Under: 3: Viruses & Worms Tagged With: , ,

    Trojan downloader win32 small dge removal

    November 10, 2010 By

    Trojan-Downloader.Win32.Small.dge

    it is a fake threat that appears in a phony security alert from rogue antispyware Virus Fighter. This Trojan-Downloader.Win32.Small.dge popup :

    “WARNING! Virus threat has been detected!
    Warning! Scan detected harmful malicious programs that can damage your system. It is recommended to immediately remove the belowlisted threats.”

    Is Trojan-Downloader.Win32.Small.dge really dangerous?

    Sometimes. But most likely, Trojan-Downloader.Win32.Small.dge’s biggest threat is to your wallet — in this case, Trojan-Downloader.Win32.Small.dge is just pushing you to waste money on scamware.

    How to remove this Trojan manually:

    Block Trojan-Downloader.Win32.Small.dge sites:
    www.virusdoctor-online.com

    Stop Trojan-Downloader.Win32.Small.dge processes:
    c:\Documents and Settings\All Users\Application Data\927e\unins000.exe
    c:\Documents and Settings\All Users\Application Data\927e\VDoca582.exe

    Delete Trojan-Downloader.Win32.Small.dge DLLs:
    c:\Documents and Settings\All Users\Application Data\927e\mozcrt19.dll
    c:\Documents and Settings\All Users\Application Data\927e\sqlite3.dll
    [Read more...]

    Filed Under: 2: Trojan Removal Tagged With: , ,

    Trojan win32 TDSS or Tidserv rootkit

    November 10, 2010 By


    Trojan TDSS Rootkit

    It also known as Trojan Backdoor.Tidserv is a trojan horse that may represent security risk for the infected computer. The trojan uses rootkit-specific techniques designed to hide the software presence in the system and also blocks user access to security websites. Once running, this trojan will display a fake security alerts that tells you to install a rogue antispyware application to delete the infection. These alerts are a fake and should be ignored!
    Use the following instructions to remove trojan TDSSserv (trojan Backdoor.Tidserv).

    Step 1: Disable TDSSserv trojan driver.

    Right click the My computer icon. If you are using the non classic Start menu, then right click My computer icon on your Start button menu.
    Click Properties.
    Click Hardware Tab.
    Click Device Manager.
    In the top menu, click View and click Show Hidden Drivers.
    Scroll down to non Plug and Play drivers.
    Click + at left.
    In the list of drivers right click TDSSserv.sys.
    Click Disable.
    Click YES for confirm.
    Close all windows and reboot your computer.
    Step 2: Delete TDSSserv trojan driver.

    Download Avenger from here and unzip to your desktop.
    Run Avenger, copy,then paste the following text in Input script Box:
    Drivers to delete:
    TDSSserv.sys

    Then click on ‘Execute’.

    You will be asked Are you sure you want to execute the current script?. Click Yes.
    You will now be asked First step completed — The Avenger has been successfully set up to run on next boot. Reboot now?. Click Yes.
    Your PC will now be rebooted.


    Step 3: Remove TDSSserv trojan files and any associated malware. [Read more...]

    Filed Under: 2: Trojan Removal Tagged With: , , , ,

    Remove trojan renos bah

    November 10, 2010 By


    Remove win32 Trojan downloader Renos.BAH

    TrojanDownloader:WIN32/Renos.BAH is a trojan that can download malicious program on to the computer. TrojanDownloader:WIN32/Renos.BAH can also install rogue security programs without users consent. The said program will scam computer users and attracts themto pay for the registered version.
    TrojanDownloader:Win32/Renos.BAH [Microsoft] is also known as:
    Threat Alias Number of Incidents
    Generic Downloader.x [McAfee] 41
    Downloader [Symantec] 38
    Trojan-Downloader.Win32.CodecPack [Ikarus] 33
    Trojan-Dropper.Agent [Ikarus] 11
    Downloader.MisleadApp [Symantec] 8
    Trojan.Zlob [Symantec] 7
    Generic Downloader.ac [McAfee] 6
    Possible_DLDER [Trend Micro] 6
    Trojan-Downloader.Win32.Renos [Ikarus] 6
    Puper [McAfee] 5
    Trojan-Downloader.Win32.Agent.aopv [Kaspersky Lab] 5
    Trojan-Downloader.Win32.CodecPack.aac [Kaspersky Lab] 5
    Trojan.Fakeavalert [Symantec] 4
    Trojan-Downloader.Win32.Renos.BA [Ikarus] 4
    Trojan Horse [Symantec] 3
    Trojan.Zlob [Ikarus] 3
    Trojan-Dropper.Win32.Agent.agsb [Kaspersky Lab] 3
    Downloader.Trojan [Symantec] 2
    Generic Downloader.ab [McAfee] 2
    Mal/Generic-A [Sophos] 2
    Troj/Dloadr-CAB [Sophos] 2
    Troj/FakeVir-KL [Sophos] 2
    Trojan.Win32.Monder.yrv [Kaspersky Lab] 2
    Trojan.Zlob!sd6 [PC Tools] 2
    Trojan-Downloader.Win32.Agent.aoyi [Kaspersky Lab] 2
    Trojan-Downloader.Win32.Agent.apqe [Kaspersky Lab] 2
    Trojan-Downloader.Win32.Agent.atam [Kaspersky Lab] 2
    Trojan-Downloader.Win32.Agent.bhzq [Kaspersky Lab] 2
    Trojan-Downloader.Win32.CodecPack.aak [Kaspersky Lab] 2 [Read more...]

    Filed Under: 2: Trojan Removal Tagged With: , , ,

    Trojan win32 packed generic 200 alureon gen

    November 10, 2010 By

    Remove Trojan.Packed.Generic.200

    Packed.Generic.200 is a usual detection for malicious files that were packed or encrypted to conceal itself from antivirus and security programs. Once executed, Packed.Generic.200 can further harm the computer by downloading additional threats from a remote server.


    Trojan:win32/Alureon.gen!J [Microsoft]
    Rootkit.win32.TDSS [Ikarus]
    Virus.win32.Fasec [Ikarus]
    Packed.win32.Tdss.f [Kaspersky Lab]
    Rootkit.win32.TDSS.eyj [Kaspersky Lab]
    Trojan.win32.InternetAntivirus [Ikarus]
    Packed.win32.Tdss.c [Kaspersky Lab]
    DNSChanger.r [McAfee]
    Trojan:win32/Alureon.gen [Microsoft]
    DNSChanger.f.gen.a [McAfee]
    Trojan-Downloader.win32.Renos.AQ [Ikarus]
    Mal/TDSS-A [Sophos]
    Trojan.TDss. [Ikarus]
    Mal/Alureon-C [Sophos]
    Mal/FakeVirPk-A [Sophos]
    TrojanDownloader:win32/Rugzip.A [Microsoft]
    Mal/TDSS-A, Mal/EncPk-CZ [Sophos]
    Mal/FakeVirPk-A, Mal/EncPk-CZ [Sophos]
    Trojan:win32/FakeSpyguard [Microsoft]
    Trojan.win32.Alureon [Ikarus]
    DNSChanger.gen [McAfee]
    Generic FakeAlert.k [McAfee]
    Packed.win32.Tdss.a [Kaspersky Lab]
    Mal/Alureon-C, Mal/FakeVirPk-A [Sophos]
    Mal/EncPk-CZ [Sophos]
    Mal/EncPk-GR, Mal/EncPk-GR [Sophos]
    Worm.win32.AutoTDSS [Ikarus]
    Trojan:win32/InternetAntivirus [Microsoft]
    Generic FakeAlert.h [McAfee]
    Generic.dx [McAfee]
    FakeAlert-AG.gen.a [McAfee]
    Trojan:win32/Sudiet.B [Microsoft]
    TrojanDownloader:win32/FakeIA.A [Microsoft]
    Trojan:win32/Alureon.BH [Microsoft]
    Win-Trojan/Xema.variant [AhnLab]
    Mal/Generic-A [Sophos]
    Packed.win32.Tdss.e [Kaspersky Lab]
    Trojan.win32.FakeSpyguard [Ikarus]
    Trojan:win32/Vundo.JC.dll [Microsoft]
    Mal/Alureon-C, Mal/Alureon-B, Mal/FakeAV-S [Sophos]
    Mal/Alureon-C, Mal/Alureon-B, Mal/FakeAV-S, Mal/FakeVirPk-A [Sophos]
    Mal/FakeVirPk-A, Mal/TDSS-A [Sophos]
    Mal/TDSSPack-E [Sophos]
    Trojan.TDss [Ikarus]
    Trojan:win32/Alureon.gen!Q [Microsoft]
    TrojanSpy:win32/Chadem.A [Microsoft]
    Rootkit.TDSS!sd [PC Tools]
    Trojan.Fakeav. [Ikarus]
    TrojanDownloader:win32/Renos.gen!BC [Microsoft]
    TrojanDropper:win32/Kryptik.B [Microsoft]
    Packed.win32.Tdss [Ikarus]
    Trojan:win32/Witer.B [Microsoft]
    Generic FakeAlert.c [McAfee]
    Generic PWS.y [McAfee]
    Mal/TDSSPack-J [Sophos]
    Program:win32/FakeWG.A [Microsoft]
    Generic Downloader.x [McAfee]
    Mal/FakeAV-AD [Sophos]
    Mal/TDSS-A, Mal/FakeVirPk-A [Sophos]
    Mal/UnkPack-Fam [Sophos]
    Packed.win32.Krap.d [Kaspersky Lab]
    Rootkit.win32.TDSS.cnk [Kaspersky Lab]

    Virus.win32.Rootkit [Ikarus]
    Backdoor.win32.TDSS [Ikarus]
    FakeAlert-SpywareGuard [McAfee]
    Packed.win32.Tdss.d [Kaspersky Lab]
    Trojan:win32/Alureon.BC [Microsoft]
    Trojan:WinNT/Alureon.C [Microsoft]
    Virus.win32.Fabot [Ikarus]
    Mal/Alureon-B, Mal/FakeAV-S [Sophos]
    Mal/Alureon-C, Mal/Alureon-B [Sophos]
    Mal/EncPk-GR, Mal/EncPk-GR, Mal/TDSSPack-E [Sophos]
    Mal/TDSSPack-A, Mal/EncPk-CZ [Sophos]
    Mal/TDSSPack-A, Mal/TDSSPack-E, Troj/Virtum-Gen [Sophos]
    Mal/TDSSPack-E, Mal/Alureon-C [Sophos]
    Packed.win32.Tdss.h [Kaspersky Lab]
    Puper [McAfee]
    Trojan.Fakeavalert!sd [PC Tools]
    Trojan.win32.Pakes.mjk [Kaspersky Lab]
    Trojan:win32/Alureon.BG [Microsoft]
    Trojan:win32/Alureon.BJ [Microsoft]
    Trojan-Downloader.win32.FakeIA [Ikarus]
    Trojan-Downloader.win32.Rugzip [Ikarus]
    TrojanDownloader:win32/Renos.gen!AQ [Microsoft]
    Backdoor.TDSS!sd [PC Tools]
    Backdoor.win32.Inject.mw [Kaspersky Lab]
    Backdoor.win32.TDSS.bfr [Kaspersky Lab]
    Backdoor.win32.TDSS.bkt [Kaspersky Lab]
    Backdoor.win32.TDSS.blc [Ikarus]
    Backdoor.win32.TDSS.blc [Kaspersky Lab]
    Backdoor.win32.TDSS.fp [Kaspersky Lab]
    BraveSentry [McAfee]
    DNSChanger.f.gen.b [McAfee]
    FakeAlert-AB [McAfee]
    FakeAlert-AB.dldr [McAfee]
    Gen.Trojan [Ikarus]
    Generic Downloader.j [McAfee]
    Generic FakeAlert.a [McAfee]
    Generic PUP.z [McAfee]
    Mal/EncPk-GJ, Mal/EncPk-CZ [Sophos]

    Packed.Generic.200 [Symantec] is known to be created as:
    %AppData%\microsoft\windows\winlogon.exe
    %CommonAppData%\svhost.exe
    %ProgramFiles%\malware defender00\malwaredef.exe
    %ProgramFiles%\malware defender00\uninstall.exe
    %ProgramFiles%\spyware guard00\uninstall.exe
    %ProgramFiles%\system guard00\uninstall.exe
    %System%\.exe
    %System%\blphcdj0erc.scr %System%\dgmoeqh.dll %System%\kdbox.exe
    %System%\kddgp.exe
    %System%\kdech.exe
    %System%\kdeln.exe
    %System%\kdenh.exe
    %System%\kdfjr.exe
    %System%\kdfln.exe
    %System%\kdfnh.exe
    %System%\kdgfk.exe
    %System%\kdgvz.exe
    %System%\kdgzy.exe
    %System%\kdhsx.exe
    %System%\kdidf.exe
    %System%\kdiqc.exe
    %System%\kdius.exe
    %System%\kdjdx.exe
    %System%\kdjjk.exe
    %System%\kdjlv.exe
    %System%\kdjqc.exe
    %System%\kdjrf.exe
    %System%\kdkxu.exe
    %System%\kdlsf.exe
    %System%\kdmpu.exe
    %System%\kdmsx.exe
    %System%\kdozp.exe
    %System%\kdpdw.exe
    %System%\kdpvv.exe
    %System%\kdqrh.exe
    %System%\kdrnz.exe
    %System%\kdryz.exe
    %System%\kdufr.exe
    %System%\kduns.exe
    %System%\kduzx.exe
    %System%\kdvah.exe
    %System%\kdwau.exe
    %System%\kdwfk.exe
    %System%\kdxja.exe
    %System%\kdxmc.exe
    %System%\kdyim.exe
    %System%\kdysv.exe
    %System%\kdyvf.exe
    %System%\lphcdj0erc.exe
    %System%\senekaaelyvfva.dll
    %System%\senekabiysufkk.dll
    %System%\senekabpqxxnos.dll
    %System%\senekadbyuscvn.dll
    %System%\senekaelbqfoow.dll
    %System%\senekagambcjpe.dll
    %System%\senekagvrchxfy.dll
    %System%\senekaiylbjlxi.dll
    %System%\senekakbkuktqs.dll
    %System%\senekakorduymb.dll
    %System%\senekalkbevyic.dll
    %System%\senekamiqufjpy.dll
    %System%\senekapdkswqwe.dll
    %System%\senekapkrlnsyt.dll
    %System%\senekapxywyksp.dll
    %System%\senekasftdcbrq.dll
    %System%\senekasvthfger.dll
    %System%\senekauetqxtiq.dll
    %System%\senekavivximpc.dll
    %System%\senekaxeqcxnqv.dll
    %System%\senekayxmaeorc.dll
    %System%\uacagxvnnqb.dll
    %System%\uacpylxbwqj.dll
    %System%\wcenter.exe
    %System%\winscenter.exe
    %Temp%\bootmatrix.exe
    %Temp%\file.exe
    %Temp%\jah.exe
    %Temp%\ma_r.exe
    %Temp%\ma_v.exe
    %Temp%\setup.exe
    c:\resycled\boot.com
    c:\resycled\ntldr.com

    Download Malware Bytes Anti-Malware



    Filed Under: 2: Trojan Removal Tagged With: , , , ,
    « Older Posts