The rapidly-developing internet has poseted a lot of treats to our daily online activities and securities. To name a few spyware, adware, torjan and viruses etc... They can potentially steal your data oor even bring down you computer.
Fake or false system alert popup, one of many syndromes of the potential treats you might see, is usually installed via a Torjan called Zlob (Torjan.Zlob). MOst people get the ZLob torjan by installing a video codec from one of those social networking. The Zlob Torjans then generats fake system popup alert to trick you into buying of their product.
To Remove this completely, it takes patients and some basic computer skills.
Manual Removal Instruction: (For Windows 2000/XP/Vista)
Stop the following running processes if exists:
How to stop a process: Press “Ctrl+Alt+Del” key or “Ctrl+Shift+Esc” key to open task manager, click on process tab, then select the required process and click end process.
Note: End Process can happen only one at a time.
Here are the Processes that needs to be killed:
spydawn.exe, dfrgsrv.exe, ismon.exe, pmsnrr.exe, Spy-Locked.exe, pesttrap.exe, mscornet.exe, isnotify.exe, regperf.exe, SpywareLock.exe, antivermins.exe, mssearchnet.exe, issearch.exe, ishost.exe, SpywareLocked 3.5.exe, AntiVerminsPro.exe, nvctrl.exe, pmmon.exe, SpywareLocked.exe, SpyLocked 3.6.exe, spywarequake.exe, spyfalcon.exe, pmsngr.exe, spylocked.exe.
Unregister the following DLL Files if exists:
How to unregister a dll file: Go to “start menu”, “Run”, type “regsvr32 /u
msvcp71.dll, czxtyx.dll, qvjpt.dll, oyopu.dll, dxovx.dll, Ygjun.dll, higehsg.dll, bpvol.dll, oyopu.dll, yronl.dll, czxtyx.dll, yuspej.dll, xkrdk.dll, splug.dll, yronl.dll, isadd.dll, bpvol.dll, uimcu.dll, cthkpcv.dll, dxovx.dll, tahxqcj.dll, pkgvyg.dll, splug.dll, pkgvyg.dll, axlet.dll, lcsrsrv.dll, iesbpl.dll, qzviz.dll, qzviz.dll, ginuerep.dll, heur003.dll, Ygjun.dll, isadd.dll, tahxqcj.dll, heur001.dll, higjxe.dll, heur002.dll, yuspej.dll, imfdfcj.dll, lcsrsrv.dll, heur000.dll, bolnyz.dll, hvnwm.dll, yhbdupd.dll, qvjpt.dll, iesplg.dll, dxmpp.dll, wfkduei.dll, winrge32.dll, ywbicim.dll, wfkduei.dll.
Remove the following Registry Values if Exists:
How to delete a registry value: Go to “start menu”, “Run”, type “Regedit” and Enter, Here locate the following Locations and delete the key/String.
- HKEY HKEY_LOCAL_MACHINE\SOFTWARE\SpyDawn
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows \CurrentVersion \App Paths\SpyDawn.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows \CurrentVersion \Uninstall\SpyDawn
- HKEY_CLASSES_ROOT\TypeLib\{661173EE-FA31-4769-97D4-B556B5D09BDA}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{661173EE-FA31-4769-97
- HKEY_LOCAL_MACHINE\software\antivermins
- HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\antivermins.exe
- HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run antivermins
- HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\antivermins
- HKEY_CURRENT_USER\Software\SNO2 HKEY_CURRENT_USER\Software\PestTrap
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SpywareQuake
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\E2CA7CD1-1AD9-F1C4-3D2A-DC1A33E7AF9D
- HKEY_LOCAL_MACHINE\SOFTWARE\SpywareQuake\refid:”1″
- HKEY_LOCAL_MACHINE\SOFTWARE\SpywareQuake\Language:”1033″
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SpyQuake2.com
Find and Delete the following Files if Exists:
msvcp71.dll, ginuerep.dll, kuhmk.dll, vwfps.dll, heur000.dll, wfkduei.dll, higehsg.dll, oqipt.dll, fyhhxw.dll, kcaofg.dll, twain32.dll, hvnwm.dll, xkrdk.dll, iqzv.dll, msvcr71.dll, cthkpcv.dll, higjxe.dll, imfdfcj.dll, geplxss.dll, htey.dll, appmagr.dll, axlet.dll, bolnyz.dll, yhbdupd.dll, tvomnc.dll, ulztc.dll, msvcp71.dll, heur003.dll, wfkduei.dll, dxmpp.dll, hjpprpu.dll, oerucu.dll, reglogs.dll, heur002.dll, winrge32.dll, spydawn.exe, cvnzie.dll, mssearchnet.exe, rosdzop.dll, heur001.dll, ywbicim.dll, ismon.exe, isnotify.exe, spywarequake.exe, regperf.exe, sbnudh.dll, pmsngr.exe, nvctrl.exe, issearch.exe, spywarequakeinstaller.exe, dfrgsrv.exe, spyfalcon.exe, pmsnrr.exe, nvctrl.exe, pmmon.exe, AntiVerminsPro.exe, pesttrap.exe, antivermins.exe, ishost.exe, mscornet.exe.
That’s it! In order to avoid the malicious spyware and adware in the future, educate yourselves and be careful with ActiveX Components, Toolbars and JavaScript plugins.
My Best Suggestion is to Download a Free Antvirus, Update it completely and Scan you computer.
No comments:
Post a Comment