http://www.2-spyware.com Latest information about spyware threats to your computer. Get new and updated information how to detect and remove spyware and protect your PC from parasites. en-us Fri, 20 Nov 2009 13:05:24 CST info@2-spyware.com 120 http://www.2-spyware.com/remove-antivirus-system-pro.html Antivirus System Pro is classified as a rogue anti-spyware application because it uses misleading methods in order to scare you into purchasing this program. Usually, the rogue uses false scan results and fake security warnings. It states that your computer is infected with Trojans, adware or malware and that you should purchase Antivirus System Pro to remove these infections. Of course, these infections are all fake and don't actually exist on your computer. This parasite is advertised through the use of Trojans, such as notorious Zlob or Vundo. It might be also promoted on various malicious websites. Once active, AntivirusSystem Pro will ostensibly scan your computer and list various fake infections or security issues. It will also flood your computer with very annoying pop-ups and security alerts. Here's an example of a fake Antivirus System Pro alert: "Windows Security alert Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan you computer. Your system might be at risk now." Obviously, these alerts are also fake. If your computer is infected with Antivirus System Pro, please use the removal guide shown below to remove it immediately. Removal delay will only worsen the situation, because Antivirus System Pro will download even more malware onto your computer. http://www.2-spyware.com/remove-antivirus-system-pro.html Fri, 20 Nov 2009 12:11:40 CST http://www.2-spyware.com/remove-security-tool.html Security Tool is a rogue antivirus application that deliberately gives reports of false system security threats on your computer and displays fake security alerts or notifications to make you think your PC is infected with malware. The misleading application is from the same family as Total security 2009 and System Security. When installed, SecurityTool will be configured to start automatically when you log on into Windows. Then it will imitate system scan and display a variety of infections that can't be removed unless you purchase the program. The files detected during the scan are either harmless or legitimate system files and can't cause any damage to your computer. Security Tool is pushed through the use of Trojans, fake online anti-malware scanners and other malicious software. It is installed along with Trojans FakeAV that display fake security warnings and promote SecurityTool malware. Once running, the bogus program will block legit programs and especially anti-virus software. Another interesting thing is that if you click on Updates button, you will see "Updating", but actually there is no network activity. It's just another argument why Security Tool is classified as a rogue security application. What is more, this parasite will impersonate Windows Security Center and constantly display warnings/notifications about serious security threats and privacy issues. It may claim that your computer is under attack by an Internet virus or that private data can be stolen. For example: "Security Tool Warning Spyware.IEMonster activity detected. This is spyware that attempts to steal passwords from Internet Explorer, Mozilla Firefox, Outlook and other programs. Click here to remove it immediately with SecurityTool." To make things worse, SecurityTool will hijack web browsers and block certain security websites obviously to protect itself from being deleted. It should be already obvious that this p... http://www.2-spyware.com/remove-security-tool.html Fri, 20 Nov 2009 10:11:43 CST http://www.2-spyware.com/remove-advanced-virus-remover.html Advanced Virus Remover is a rogue security application promoted through the use of Trojans, fake advertisements and online anti-malware scanners. It is advertised as an anti-virus software, but in reality, though, AdvancedVirus Remover is just another scam. The main purpose of the rogue is to scare you into thinking that your computer is seriously infected with malware, spyware and other parasites. Once, this program is installed and active, it will simulate system scan and display many bogus infections that won't be removed until you purchase Advanced Virus Remover. AdvancedVirusRemover will also display fake security alerts and notifications about various privacy issues. It will state that your computer is unprotected and that certain viruses can damage your confidential data. Here's an example of fake security alert generated by Advanced Virus Remover: "System warning! Continue working in unprotected mode is very dangerous. Viruses can damage your confidential data and work on your computer. Click here to protect your computer." You should ignore such fake notifications and remove Advanced Virus Remover from your computer immediately after the first appearance. Please use the manual removal guide stated below to remove Advanced VirusRemover from your PC if it is already infected. Removal delay will only worsen the situation, because this parasite may download more malware onto your computer. http://www.2-spyware.com/remove-advanced-virus-remover.html Fri, 20 Nov 2009 06:38:32 CST http://www.2-spyware.com/remove-cyber-security.html Cyber Security is a misleading application promoted through the use of Trojans that deliberately display fake security alerts or impersonate online anti-spyware scanners to convince you that your computer is infected with malware. This program is from the same family as Total Security. Usually, Trojans hijack web browser and display fake alerts about serious system security threats. Then it prompts you to scan your PC with Cyber Security to detect and remove those supposed infections. Once installed, this parasite may seriously compromise your computer. It has the ability to block system tools and programs as well as security programs. It will continue to display fake notifications and alerts about serious security problems and privacy issues. You may see fake security alerts with the following text: "WARNING Cyber Security Alert! New data base update is available Automatic updating is necessary to get you system protected in real time against new and emerging viruses, worms and tyoyans. Regular updating is needed to prevent you PC from latest virus threats that can lead to system slowdown, freezes, crashes and data loss." The main goal of Cyber Security is to trick you into purchasing a full version of the program. However, the problem is that it actually doesn't exist and that won't help you anyway as the main infection remains active. We strongly recommend you to remove Cyber Security from your computer as soon possible. Please use the removal guide below to get rid of this infection manually for free. If you have inadvertently purchased this program, please contact your credit card company immediately and dispute the charges. http://www.2-spyware.com/remove-cyber-security.html Fri, 20 Nov 2009 03:11:46 CST http://www.2-spyware.com/remove-trojan-yektel.html Win32/Yektel is a family of Trojans that displays misleading security alerts and notifications of malware infections to make you think that your computer is infected and to trick you into purchasing the rogue application that supposedly removes those infections. Yektel Trojans also modifies Internet Explorer and displays fake warnings. One of the fake warnings states: This page is infected with malicious advertising code. Such code can seriously affect your computer. Click here to protect your computer with . The trojan may also display a fake warning page instead of a requested web page as shown in [Figure 1]. [Figure 1. Fake Internet Explorer warning page] Clicking on any of the links in the above message usually leads to a misleading web site that encourages prompts you to pay money to register a rogue security product. If you see such fake warnings and fake security alerts then your PC is likely infected with Trojan Yektel. Please use the removal guide below to remove this infection from your computer. http://www.2-spyware.com/remove-trojan-yektel.html Thu, 19 Nov 2009 07:24:02 CST http://www.2-spyware.com/remove-fuqer-trojan.html Fuqer Trojan is a very dangerous pest, which acts by disabling antiviral software and, as a result of this, allows other parasites to sneak into the infected machine freely. What is more, Fuqer is also able to produce a great destruction with the help of its own algorithms; this usually result in system instability and can even make infected PC totally unusable and hard to repair. http://www.2-spyware.com/remove-fuqer-trojan.html Thu, 19 Nov 2009 05:11:59 CST http://www.2-spyware.com/remove-securekeeper.html SecureKeeper is a misleading anti-spyware application that reports false system security threats on your computer and then asks to pay for a full version of the program to remove the threats which don't even exist. The rogue program is from the WiniSoft malware family. It displays fake security alerts, notifications from Windows Task Bar and other misleading pop-ups. Once installed, Secure Keeper will create many random files in the main Windows directories and later will detect those files as serious infections. Actually, those files are harmless and won't make any damage to the system. The most important thing to remember is that SecureKeeper is a scam. Do not buy this bogus software and uninstall it from your computer as soon as possible. [Figure 1. SecureKeeper graphical user interface] SecureKeeper enters a computer with the help of Trojans that come from fake online scanners, misleading websites or bundled with other malware. Trojans download Secure Keeper files and display fake warnings about infections, security and privacy issues. While running, the rogue program will perform several fake system scans and display a list of infections that can not be removed unless you purchase the program. However, the truth is that even of you purchase it, your PC will be still infected, so obviously you shouldn't buy it. To make things worse, it will constantly display very annoying alerts stating that your computer is under attack. The fake security alert reads: Security Center Alert! Infiltration Alert! Your computer is being attacked by an Internet Virus. It could be a password-stealing attack, a trojan-dropper or similar. SecureKeeper will also hijack Internet Explorer and make your computer slower than usual. Securekeeper.com is the home page of this infection. This websites is full of false information and fake reviews, do not open it. As you can see, this application is absolutely useless and should be removed upon detection. Please... http://www.2-spyware.com/remove-securekeeper.html Wed, 18 Nov 2009 23:51:44 CST http://www.2-spyware.com/remove-sdbot-add.html Sdbot.add is a dangerous widely spread worm that propagates mostly through unprotected network shares found on a local network. Once executed, the parasite drops a rootkit that allows the remote intruder to break into the infected system. Sdbot.add also runs a backdoor controlled through the IRC network. This backdoor gives the attacker unauthorized remote access to a compromised computer and allows to control it. Sdbot.add secretly runs on every Windows startup. http://www.2-spyware.com/remove-sdbot-add.html Wed, 18 Nov 2009 23:11:42 CST http://www.2-spyware.com/remove-enterprise-suite.html Enterprise Suite is a misleading application created by the same group of scammers who have released Windows Enterprise Suite, Windows Enterprise Defender and many other rogue applications. The misleading application is pushed through the use of Trojans that come from fake online scanners [Figure 2], bogus websites or bundled with other malicious software. The scammers also use social engineering to promote rogue applications. Once a Trojan virus is installed, it will download Enterprise Suite files and display fake security alerts to scare you into thinking that your computer is infected with spyware, worms and other malware. The rogue program will then imitate system scan and will give false report of threats/infections on your computer. Finally, you will be prompted to pay for a full version of the program to remove those threats. So obviously, this is a scam. Do not purchase this bogus application. Instead, uninstall Enterprise Suite from your PC upon detection. [Figure 1. Enterprise Suite graphical user interface] As you can see from the image above, EnterpriseSuite uses Windows OS style to make it look more legitimate and reliable. The rogue program displays fake scan results, though, the names of provided infections are real. If you decide to check if a particular infection reported by this program actually exists, you will likely find out that it does exist. Some of the reported infections you may see: SpamTool.Win32.Delf.h Trojan-Spy.Win32.Citifraud Trojan-PSW.Win32.Fantast Trojan-PSW.Win32.Dripper Trojan-PSW.Win32.Delf.d Trojan-Spy.HTML.Bankfraud .ix Trojan.BAT.AnitV.a Virus.Win32.Faker.a Trojan-Spy.HTML.Bankfraud.ra Vir us.BAT.IBBM.ClsV [Figure 2. Enterprise Suite - fake online scanner] To make things worse, Enterprise Suite will constantly display fake security alerts stating that your computer is not protected and that you should buy the full version of the program to ensure full system and remove found infections. Those security alerts are very... http://www.2-spyware.com/remove-enterprise-suite.html Wed, 18 Nov 2009 22:37:26 CST http://www.2-spyware.com/remove-systemdefender.html SystemDefender is a rogue anti-spyware program released on September 21, 2007. SystemDefender usually makes its way to your computer via Trojans and browser security holes, but may also be downloaded and installed manually. When active, SystemDefender uses scare tactics, such as falsified scan reports and system notifications to get users to buy the full version. It may even load message "Your privacy is in danger. Download privacy protection software now" instead of desktop wallpaper in order to scare people. SystemDefender is a scam and should be treated as such: do NOT download or buy it, if you have it - remove it and block SystemDefender's domain using your HOSTS file. http://www.2-spyware.com/remove-systemdefender.html Wed, 18 Nov 2009 18:11:07 CST http://www.2-spyware.com/remove-trojan-agent.html Trojan.Agent is not a threat in itself, it is a fake threat displayed by rogue anti-spyware programs. These programs use this and other scare tactics to get the user to buy the full version of the fake spyware removal programs. Programs related to Trojan.Agent should not be trusted under any circumstances and should be removed upon detection. http://www.2-spyware.com/remove-trojan-agent.html Tue, 17 Nov 2009 22:11:00 CST http://www.2-spyware.com/remove-alpha-antivirus.html Alpha Antivirus is a misleading anti-virus program that deliberately displays fake security alerts and reports false system security threats to trick you into thinking your computer is infected with spyware, adware, Trojans or other malicious software. The graphical user interface of this bogus application is almost identical to widely spread rogue's anti-spyware application called Personal Antivirus. When the program is installed it will list a variety of infections and prompt you to pay for a full version of the program to remove infections which do not even exist. You shouldn't purchase this program. We strongly recommend you to uninstall Alpha Antivirus from your computer upon detection. Alpha Antivirus is installed through the use of fake online anti-spyware scanners and Trojan viruses. Trojans, usually FakeAV, display fake security alerts and notifications stating that your PC is infected or under attack by an Internet virus. FakeAV variants may also download additional malware. In this case is also installs a password stealer on the compromised computer. Once active, AlphaAntivirus will be automatically configured to imitate system scan and display bogus results each time you log on into Windows. As we have already mentioned, the scan results are fake, you may safely ignore them. The main goal of this infection is to trick you into purchasing totally useless software. Furthermore, Alpha Antivirus will block anti-virus programs and security related websites to protect itself from being deleted. It may disable certain Windows tools and options too, for example Task Manager, Registry Editor and etc. The program will also impersonate Windows Security Center and state that you must purchase AlphaAntivirus to ensure full system protection. As you can see, this program is nothing more but a scam. Please use the removal guide below to remove Alpha Antivirus from your computer manually for free. http://www.2-spyware.com/remove-alpha-antivirus.html Tue, 17 Nov 2009 16:11:02 CST http://www.2-spyware.com/remove-personal-protector.html Personal Protector is a misleading anti-spyware application from the same family as Personal Guard 2009. Most of the time, the rogue program is promoted through the use of Trojans, but may also come bundled with other malicious software. When running, Personal Protector reports false scan results, displays fake security alerts and hijacks Internet Explorer to scare you into thinking that your computer is infected with numerous Trojans, spyware and other malware. Then it asks to pay for a full version of the program to remove the threats, which of course do not actually exist. In other words, this is nothing more but a scam. Do not purchase this bogus software. We strongly recommend you to uninstall Personal Protector from your computer as soon as possible if it is already infected with this malware. [Figure 1. Personal Protector graphical user interface] Usually, Personal Protector must be manually installed. However, the scammers use various misleading tactics and social engineering to trick you into installing this malware. Most of the time, scammers use fake online scanners and misleading websites full of advertisements to make you think that your computer is infected and that yur should download Personal Protector to remove those infections. Another very popular method is when fake online video websites prompts a user to install flash player update to view requested video. But what he really gets is Trojan virus which later downloads rogue files and displays fake security alerts. When active, Personal Protector displays many fake security alerts and notifications stating that your computer is infected or under attack. Those fake alerts are very annoying and shows up like every one or two minutes. I also states that your personal information can be stolen. To make things look more realistic, the rogue application disables anti-virus software and block certain security related websites. You may not be able to use such system tools as Task Manager and System ... http://www.2-spyware.com/remove-personal-protector.html Tue, 17 Nov 2009 01:29:17 CST http://www.2-spyware.com/remove-control-center.html Control Center is a misleading application, fake spyware removal tool that uses false scan results and fake security alerts to scare you into purchasing the so-called "full" version of the program. The misleading application is a clone of Privacy Center malware. Once installed, it will run several fake system scans and report numerous infections or system security threats to make you think that your computer is infected with spyware, Trojans, worms and other viruses. Then it will ask you to pay for a full version of the program to remove those threats. Of course, this is a scam, because ControlCenter identifies harmless files as dangerous infections. So, the scan results are false. You may easily ignore them. Most importantly, do not purchase it. Instead, uninstall Control Center from your PC as soon as possible. Note that removal delay will likely worsen the situation because the program is able to download and install additional malware. [Figure 1. Control Center graphical user interface] Control Center is distributed through the use of Trojans that enter a computer secretly or using various misleading methods and social engineering. Most of the time, Trojans come from fake online scanners and fake websites. Trojans can be bundled with other malicious software too. When running, ControlCenter will be configured to run a system scan each time you logon into Windows. As we have already mentioned, the scan results are false. The same can be said about Control Center security alerts. Those are fake too. What is more, the rogue program will disable certain system tools and options. It may disable Task Manager and System Restore or block anti-virus software/security related websites. If you find that your computer is infected with this malware, please use the removal guide below to remove Control Center from the system as soon as possible. If you have already purchase the program, contact your credit card company and tell them what has happened. ... http://www.2-spyware.com/remove-control-center.html Mon, 16 Nov 2009 23:48:07 CST http://www.2-spyware.com/remove-linksafeness.html LinkSafeness is a misleading anti-spyware application that reports false or exaggerated system security threats/infections and constantly displays fake security alerts to trick you into thinking that your computer is infected with malware. This application is from the same family (WiniSoft) as AntiAID rogue. Once installed, Link Safeness will perform several fake system scans and list a variety of infections or potentially dangerous files. However, it won't remove those infections unless you purchase this bogus application. We strongly recommend you not to do so. Instead, you should uninstall LinkSafeness from your computer upon detection. [Figure 1. LinkSafeness graphical user interface] Usually, LinkSafeness is promoted through the use of Trojan viruses. Trojans are mostly distributed via fake online scanners, misleading websites and using social engineering. Once active, Trojan virus downloads rogue files and displays fake security alerts stating that your computer is infected or under attack by an Internet virus. LinkSafeness has its home page too - linksafeness.com. This websites is not very dangerous, however you shouldn't visit it anyway. Note that it promotes entirely different product called Virus Protector [Figure 2]. Linksafeness.com is full of fake reviews, false information that's why it should be added to the list of potentially harmful websites. [Figure 2. Linksafeness.com - the home page of LinkSafeness] When running, LinkSafeness will flood your computer with fake security alert and notifications from Windows task bar. The fake alerts state: Spyware Alert! Your computer is infected with spyware. It could damage your critical files or expose your private data on the Internet. Click here to register your copy of LinkSafeness and remove remove spyware threats from your PC. Then the rogue will impersonate Windows Security Center and claim that you should activate LinkSafeness in order to ensure full system protection [... http://www.2-spyware.com/remove-linksafeness.html Mon, 16 Nov 2009 06:13:46 CST http://www.2-spyware.com/remove-sitevillain.html SiteVillain is a misleading anti-spyware application that reports false or exaggerated system security threats/infections and displays fake warnings to trick you into thinking that your computer is infected with spyware, Trojans and other malware. The rogue program is a clone of AntiAID. Both programs are from the family of WiniSoft malware. Basically, Site Villain is scareware that prompts the user of the compromised computer to pay for a full version of the rogue program to remove the threats which don't even exist. Don't trust it, this is nothing more but a scam. We strongly recommend you to uninstall SiteVillain from your computer as soon as possible. [Figure 1. SiteVillain graphical user interface] SiteVillain is distributed mostly through the use of Trojans that may come from fake online anti-malware scanners, misleading websites that supposedly provide free videos and software or Trojan viruses can also be bundled with other malicious software. However, usually the rogue application must be manually installed. Of course, the scammers use various methods to trick people into installing Trojans and rogue applications. SiteVillain has its home page, but as you can see in the image below [Figure 2] you won't find a word about this software on this website. It is mainly about the rogue security application called Virus Proctor. There are also screen shots of AntiAID on this website. Sitevillain.com is a potentially dangerous website, full of false information, that's why we strongly recommend you not to visit this website. [Figure 2. Sitevillain.com - the home page of SiteVillain] When running, the rogue application will imitate several system scans and report that your computer is badly infected. SiteVillain won't let you to remove those infections unless you first purchase it. However, don't do that. Don't spend your money for absolutely worthless software. What is more, this parasite will imper... http://www.2-spyware.com/remove-sitevillain.html Mon, 16 Nov 2009 04:17:46 CST http://www.2-spyware.com/remove-system-defender.html System Defender is a misleading anti-spyware application that reports false or exaggerated system security threats, displays fake security alerts and uses browser/desktop hijacking techniques to make you think your computer is infected with a whole variety of malicious software. Once installed, the rogue program will prompt you to pay for a full version of the program in order to remove the threats which actually don't even exist. System Defender is just another scam, so be careful about it. Most importantly, do not purchase this program. Then, uninstall System Defender from your PC as soon as possible. Removal delay will only worsen the situation. [Figure 1. System Defender graphical user interface] System Defender is a new version of the rogue application called Windows System Defender. This program uses Windows OS style and Microsoft's graphics, visual elements to make it look more reliable or to make people think that this is actually a part of Windows operating system. That's obviously not truth. System Defender is usually promoted through the use of fake online scanners, misleading advertisements or websites. The scammers also use social engineering techniques to distribute the rogue application. Systemmdefender.com [Figure 2] is the home page of this malware. It is a clone of windowssystemdefemder.com. Both website are potentially harmful so do not visit them. [Figure 2. Systemmdefender.com - the home page of System Defender] When running, the program will creates certain registry entry so that it executes whenever Windows starts. Then System Defender will create several harmless files on your computer which later will be detected as serious security threats or infections. Those files are used very often by other rogue applications: ANTIGEN.dll, ANTIGEN.sys, ANTIGEN.tmp, cid.dll, CLSV.dll, ddv.tmp, PE.dll, PE.drv, PE.sys, ppal.exe, runddlkey.drv, std.sys, tempdoc.dll, tjd.exe, tjd.sys. Next, SystemDefender will imitate syste... http://www.2-spyware.com/remove-system-defender.html Mon, 16 Nov 2009 00:35:44 CST http://www.2-spyware.com/remove-cyber-protection-center.html Cyber Protection Center is a fake alert/pop-up that impersonates Windows Security Center and promotes a misleading security application called Cyber Security. Most of the time, this fake protection center is displayed by Trojans and states that CyberSecurity malware is not activated. Please note that the legitimate Windows Security Center doesnât promote any anti-virus software. It only informs a computer user about system protection status. If you see Cyber Protection Center pop-up on your computer, this means that your PC is infected either with Cyber Security scareware or Trojan viruses. In such case, please use the removal guide below to remove Cyber Security and related malware from your computer manually for free. You should also scan your computer with reputable anti-spyware application to make sure that there is no other malicious software installed on your PC. http://www.2-spyware.com/remove-cyber-protection-center.html Sat, 14 Nov 2009 17:11:56 CST http://www.2-spyware.com/remove-windows-system-suite.html Windows System Suite is a misleading application that reports non-existing infections and computer threats. The main goal of this program is to convince you that your computer is infected and that you should purchase a full version of WindowsSystem Suite to protect your PC. Of course, we strongly recommend you not to do so. Instead, you must uninstall Windows System Suite from the system as soon as possible; otherwise it may cause serious problems to your computer. Windows System Suite is from the family of Windows Security Suite, Fast Antivirus 2009, Virus Shield 2009, Extra Antivirus and others. Usually, this bogus application is promoted through the use of Trojans and fake online anti-malware scanners. Those fake scanners display warnings about serious computer problems and recommend you to download WindowsSystemSuite. Regardless of what you click in those warnings, you will be redirected to the pay page of this parasite. When running, Windows System Suite will imitate system scan and report a variety of infections. Those infections of course are false and won't harm your computer. The rogue program will state that your computer is infected with Spyware, Trojans and adware. In reality, though, the only infection is Windows System Suite. To make things worse, it will display legitimately looking security alerts from Windows Task bar. You may even see two Windows Security Center icons. Likely, your Internet browser (Internet Explorer or Firefox) will be hijacked and you won't be able to open certain security websites or download antivirus program. It is possible that your computer will works slower than usual because of this malicious program. Do not purchase this program; it's a scam and nothing more. Please use the removal guide below to remove Windows System Suite from your computer manually for free. http://www.2-spyware.com/remove-windows-system-suite.html Sat, 14 Nov 2009 16:11:59 CST http://www.2-spyware.com/remove-virus-doctor.html Virus Doctor is another rogue anti-spyware application. Usually, this parasite is advertised by trojan viruses. They constantly load pop-up windows with fake information about system security risks. When user tries to close those bothersome pop-up windows he is automatically redirected to a fake online anti-spyware scan page. Counterfeit online scan also states that user's system has numerous security threats that has to be removed quickly. They suggest to use VirusDoctor anti-spyware as reliable and effective spyware removal tool. Once installed, Virus Doctor is configured to run automatically when computer starts up. Then it performs fast system scan without user's permission and reports numerous infections. VirusDoctor claims that these infections can not be removed with trial version. User has to purchase a full copy of Virus Doctor if he is willing to have a clean system. Don't be simple-hearted and reject this scam. Full version of this rogue won't help you to remove infections, because the only infection that are present on the system is Virus Doctor itself and should be removed as soon as possible. http://www.2-spyware.com/remove-virus-doctor.html Sat, 14 Nov 2009 06:11:08 CST