<rss version="2.0">
	<channel>
	<title>Newest additions and updates of spyware parasites</title>
<link>http://www.2-spyware.com</link>
<description>Latest information about spyware threats to your computer. Get new and updated information how to detect and remove spyware and protect your PC from parasites.</description>
<language>en-us</language>
<pubDate>Tue, 09 Feb 2010 12:13:25 CST</pubDate>
<webMaster>info@2-spyware.com</webMaster>
<ttl>120</ttl>

<item>
<title>Vista Antispyware 2010</title>
	<link>http://www.2-spyware.com/remove-vista-antispyware-2010.html</link>
	<description> Vista Antispyware 2010 is a rogue security program that uses false scan results, fake infections, and fake security alerts/pop ups to scare you into purchasing the software. VistaAntispyware 2010 will be configured to start automatically when you log on into your computer. Once running, it will automatically simulate a system scan and list a variety of infections. The rogue program will claim that it cannot remove those supposed infections unless you first purchase the software. This is a scam in the first place, please don't purchase it! The reported threats either don't even exist or are absolutely harmless. Please read the removal guide below and find out how to remove Vista Antispyware 2010 virus from your computer. 

The most annoying thing about VistaAntispyware2010 is not the fake security alerts but self-protection techniques. That's right, the rogue program blocks all legitimate anti-virus and anti-spyware programs and even not security related ones. Additionally, it will also block Task Manager and Regedit as well as other useful functions needed for rogue program's removal. As for fake notifications and security alerts then those are fairly common: fake Windows Security Center, fake pop-ups, firewall alerts and etc. Nothing very new actually. The same can be said about browser and Dekstop hijacking methods. Nothing new it this field too. The rogue program hijacks Internet Explorer and displays fake security messages when browsing the Web. How to get rid of Vista Antispyware 2010? Please read further.

VistaAntispyware2010 removal instructions:

1. Click Start-&amp;gt;Run (or WinKey+R). Input: &amp;quot;command&amp;quot;. Press Enter or click OK.
2. Type &amp;quot;notepad&amp;quot; as shown in the image below and press Enter. Notepad will open.
3. Copy and past the following text into Notepad:

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand]
[-HKEY_CURREN T_USERSoftwareCla... </description>
	<guid>http://www.2-spyware.com/remove-vista-antispyware-2010.html</guid>
	 <pubDate>Tue, 09 Feb 2010 09:02:47 CST</pubDate>
</item>

<item>
<title>SecurePcAv</title>
	<link>http://www.2-spyware.com/remove-securepcav.html</link>
	<description> SecurePcAv is a rogue anti-spyware application that reports numerous false infections and displays fake warnings to trick you and make you think that your computer is infected with a bunch of various viruses. This fake program is from the same family as SafePcAv, GuardWWW and MyPcSecure. There are many more such programs that look exactly the same as SecurePcAv. All these fake programs belong to WiniSoft malware family. Anyway, once installed, Secure PcAv will scan your computer and display a list of false system security threats to scare you. Then it will prompt you to pay for a full version of the program to remove the infections or threats which don't even exist. Please don't that. Don't purchase this bogus software. Instead, use the removal guide below to remove SecurePcAv from your computer either manually for free or with automatic removal tool.

[Figure 1. SecurePcAv graphical user interface]
While running, Secure Pc Av will display fake pop ups and warnings claiming that you are not protected or that your computer is under attack by an Internet virus. That;s of course not true. What is more, SecurePcAv will impersonate Windows Security Center and yet again claim that your anti-virus software is disabled. In order to protect your computer you should buy SecurePcAv, that's what this virus will claim. In some cases this rogue program may come bundled with Rootkits. That's why we strongly recommend you to download an automatic removal tool for SecurePcAv and scan your PC. Because you just simply can't remove rootkit infection manually. Please read the removal guide carefully and get rid of this infection as soon as possible. </description>
	<guid>http://www.2-spyware.com/remove-securepcav.html</guid>
	 <pubDate>Tue, 09 Feb 2010 05:26:43 CST</pubDate>
</item>

<item>
<title>Antivirus Live</title>
	<link>http://www.2-spyware.com/remove-antivirus-live.html</link>
	<description> Antivirus Live is a rogue antivirus application, fake spyware removal tool that enters a computer with the help or Trojans and other malicious software. It is from the same family as Antivirus System PRO and Spyware Protect 2009. Once installed, AntivirusLive will display fake security alerts and notifications about serious computer security threats or infections. The rogue application will also block almost all programs, especially anti-virus, to protect itself from being deleted. You will see the &amp;quot;Application can not be executed&amp;quot; warning when you launch applications. To make things even more complicated, it will hijack Internet Explorer and change LAN Settings. Antivirus Live enables proxy server for LAN and blocks security related and antivirus software websites. 

[Figure 1. Antivirus Live graphical user interface]
Antivirus Live is promoted through the use of Trojans that come from fake online scanners and other misleading websites. It is also distributed using social engineering. The main goal of AntivirusLive is to trick you into purchasing the program. In order to achieve its goals, the misleading application will simulate a system scan and report false scan results. Antivirus Live will state that your computer is badly infected with Trojans, worms, spyware and other malware. Then it will ask you to pay for a full version of the program to remove the infections which do not even exist. In other words, this is nothing more but a scam. Do not purchase it!

What is more, Antivirus Live will impersonate Windows Security Center and state that Windows did not find any anti-virus software on your computer and that Windows are not updated. Obviously, the rogue program will suggest you to active Antivirus Live in order to protect your computer. And that's by the way, the main difference between the legitimate Security and the fake one. The legitimate one does not promote any particular anti-virus software. When this fake anti-spyware app... </description>
	<guid>http://www.2-spyware.com/remove-antivirus-live.html</guid>
	 <pubDate>Tue, 09 Feb 2010 04:02:10 CST</pubDate>
</item>

<item>
<title>Security Tool</title>
	<link>http://www.2-spyware.com/remove-security-tool.html</link>
	<description> Security Tool is a rogue antivirus application that deliberately gives reports of false system security threats on your computer and displays fake security alerts or notifications to make you think your PC is infected with malware. The misleading application is from the same family as Total security 2009 and System Security. When installed, SecurityTool will be configured to start automatically when you log on into Windows. Then it will imitate system scan and display a variety of infections that can't be removed unless you purchase the program. The files detected during the scan are either harmless or legitimate system files and can't cause any damage to your computer. 

Security Tool is pushed through the use of Trojans, fake online anti-malware scanners and other malicious software. It is installed along with Trojans FakeAV that display fake security warnings and promote SecurityTool malware. Once running, the bogus program will block legit programs and especially anti-virus software. Another interesting thing is that if you click on Updates button, you will see &amp;quot;Updating&amp;quot;, but actually there is no network activity. It's just another argument why Security Tool is classified as a rogue security application.  What is more, this parasite will impersonate Windows Security Center and constantly display warnings/notifications about serious security threats and privacy issues. It may claim that your computer is under attack by an Internet virus or that private data can be stolen. For example:

&amp;quot;Security Tool Warning
Spyware.IEMonster activity detected. This is spyware that attempts to steal passwords from Internet Explorer, Mozilla Firefox, Outlook and other programs. Click here to remove it immediately with SecurityTool.&amp;quot;

To make things worse, SecurityTool will hijack web browsers and block certain security websites obviously to protect itself from being deleted. It should be already obvious that this p... </description>
	<guid>http://www.2-spyware.com/remove-security-tool.html</guid>
	 <pubDate>Tue, 09 Feb 2010 03:02:55 CST</pubDate>
</item>

<item>
<title>Antivirus Pro 2010</title>
	<link>http://www.2-spyware.com/remove-antivirus-pro-2010.html</link>
	<description> Antivirus Pro 2010 is a misleading security application pushed through Braviax malware (Trojan.Virantix.C Trojan virus). This program is classified as misleading application because it reports false scan results and displays fake security alerts to make you think your computer is infected. AntivirusPro 2010 from the same family as PC Antispyware 2010, Home Antivirus 2010 and PC Security 2009. Once installed, the misleading application will ask you to pay for a full version of the program to remove non-existing system security threats. Do not buy this program. Uninstall Antivirus Pro 2010 from your computer as soon possible.

As we have already mentioned, AntivirusPro2010 is promoted through the use of Braviax infection. This Trojan virus displays fake security alerts in your Windows task bar that promotes the misleading application. Usually it states that your computer is unprotected and that you should activate your antivirus software. The Trojan may also display warnings about various malware infections. While running, AntivirusPro_2010 will impersonate Windows Security Center and state that anti-virus software is outdated or disabled. Do not trust it, it's a scam. 

To make things even worse, Antivirus Pro 2010 will hijack web browsers and redirect you to entirely different websites full of advertisements. What is more, it will block certain security websites and antivirus programs to protect itself from being deleted. If you find that your computer infected with this parasite, please use the removal guide below to remove Antivirus Pro 2010 from the system manually for free. Note that there can be additional malware installed on your computer not only Braviax and Antivirus Pro 2010, that's why we strongly recommend you to scan your computer with reliable anti-malware application like Spyware Doctor. </description>
	<guid>http://www.2-spyware.com/remove-antivirus-pro-2010.html</guid>
	 <pubDate>Tue, 09 Feb 2010 02:02:13 CST</pubDate>
</item>

<item>
<title>Advanced Defender</title>
	<link>http://www.2-spyware.com/remove-advanced-defender.html</link>
	<description> Advanced Defender is a rogue anti-spyware program that is promoted and installed through the use of malicious software, usually Trojans. This fake security program is a clone of Personal Protector and Personal Guard 2009 scareware. Once installed, it will run a fake system scan and display a list of infections or system threats just to scare you into thinking that your computer is seriously infected. The scan results are false, don't worry too much about that. However, don't remove any files reported by this bogus software as you may actually remove legitimate Windows files. There is also a list of predetermined files that will be reported as computer threats:

C:WINDOWScertofsystem.exe
C:WINDOWSexplorers.exe
C:WINDOWSmicroso ftdefend.dll
C:WINDOWSregp.exe
C:WINDOWSspoos.exe
C:WINDOWSsystem32winscent .exe 

The above files were created on your computer by the rogue program and don't pose any risk to your security. You could remove those files manually, but it would be better if you read the removal guide below about how to remove Advanced Defender from your computer either manually for free or with an automatic removal tool.

[Figure 1. Advanced Defender graphical user interface]
While running, Advanced Defender will do more very annoying things to trick you into purchasing the program and to protect itself from being removed. First of all, it will block almost all executable files on your computer. Of course, it will block anti-virus software in the first place. Then it will claim that your computer is under attack or that there is a Trojan virus that may steal sensitive data and send it to a remote PC. Non of these statements are true. These fake notifications and warnings just like the false scan results were made to scare you. 

Cmd.exe is infected with worm Lsas.Blaster.Keyloger. This worm is trying to send your credit card details using to connect to remote host. 

Attention! System detected a potential hazard on your computer tha... </description>
	<guid>http://www.2-spyware.com/remove-advanced-defender.html</guid>
	 <pubDate>Tue, 09 Feb 2010 01:57:40 CST</pubDate>
</item>

<item>
<title>Antivirus XP 2010</title>
	<link>http://www.2-spyware.com/remove-antivirus-xp-2010.html</link>
	<description> Antivirus XP 2010 is a rogue anti-virus application that claims to scan your computer for malware, but in reality it only imitates legitimate security software and tries to trick users into thinking that their computers are badly infected. The goal is one - to trick as many people as possible into purchasing the so-called &amp;quot;full&amp;quot; version of the program which obviously doesn't even exist. Antivirus XP 2010 is &amp;quot;pushed&amp;quot; through the use of bogus online scanners and fake video/warez websites. When running, this parasite will flood your computer with fake security alerts and notifications stating that the system is compromised. It will even impersonate Windows Security Center. The worst thing about this virus is that it blocks almost all programs, not to mention security software, anti-virus and anti-spyware programs are blocked in the first place. It also blocks Task Manager, Regedit and other Windows functions. Antivirus XP 2010 removal guide written below will show you how to remove this virus from your computer once and for all.

[Figure 1. Antivirus XP 2010 graphical user interface]
Most importantly, don't purchase AntivirusXP2010. It's nothing more but a scam. If you have already purchased it, contact your credit card company and dispute the charges. Unfortunately, Antivirus XP 2010 removal is not as easy as you would expect it to be. As we know it blocks all .exe files, so obviously you won't be able to install or run any anti-malware program. Probably the virus won't even let you to download it. You can try to remove it manually, AntivirusXP 2010 associated files are listed below.

Antivirus XP 2010 removal instructions:

1. Click Start-&amp;gt;Run (or WinKey+R). Input: &amp;quot;command&amp;quot;. Press Enter or click OK.

2. Type &amp;quot;notepad&amp;quot; as shown in the image below and press Enter. Notepad will open.

3. Copy and past the following text into Notepad:

Windows R... </description>
	<guid>http://www.2-spyware.com/remove-antivirus-xp-2010.html</guid>
	 <pubDate>Mon, 08 Feb 2010 22:02:52 CST</pubDate>
</item>

<item>
<title>Security Central</title>
	<link>http://www.2-spyware.com/remove-security-central.html</link>
	<description> Security Central is a bogus program advertised as reliable security software. It uses false scan results, fake security alerts and browser hijacking in order to scare you into purchasing this program. It is obvious that this infection should be removed upon detection, otherwise SecurityCentral may cause even more damage. Remember, do not purchase this program!

Usually, Security Central is advertised through the use of trojans, fake online anti-malware scanners and other malicious software. Most of the time, Trojans display legitimate looking pop-ups or security alerts similar to Windows Security Center warnings. These alerts state that you computer is infected with trojans, adware or spyware. You may see this fake alert:

&amp;quot;Security Central
Threat Found
Alert
Object:
SYSTEMControlSet001ControlSafeBootNetwork
Comment:
Atta ck from: 111.90.181.116, port 47333
Attacked port: 10631
Threat: Trojan-DDoS.9&amp;quot;

Information about possible attacks and security threats might be also displayed. The main goal of such behavior is to trick you into downloading Security Central. 

Windows Security alert
Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan you computer. Your system might be at risk now.

Security Central is form the same family as XP Police Antivirus. Once installed, this program will ostensibly scan your computer. The scan results are false and can be easily ignored, however, don't remove these files, because some of them might be legitimate ones. Otherwise, you can make your computer unstable. To add some more, Security Central will constantly display very annoying security alerts about various infections and security issues. These alerts are fake too. The worst thing is that they will show up like every 1-2 minutes. It can be almost impossible to to even a regular tasks with your computer. 

While running, Security Central will h... </description>
	<guid>http://www.2-spyware.com/remove-security-central.html</guid>
	 <pubDate>Mon, 08 Feb 2010 21:02:16 CST</pubDate>
</item>

<item>
<title>Antivirus Soft</title>
	<link>http://www.2-spyware.com/remove-antivirus-soft.html</link>
	<description> Antivirus Soft is a rogue anti-virus program that gives false reports of threats and displays bogus pop-ups to make you think that your computer is infected with malware. This fake program is a clone of Antivirus Live and Antivirus System PRO malware. Usually, such rogue programs come from various misleading websites, fake online scanners, but it can be also promoted in Facebook, MySpace and similar websites. Once installed, it will ostensibly scan your computer for malware and display a variety of infections that can be only removed with a full version of the program. However, don't buy it. Keep in mind that the scan results are absolutely false. This is nothing more but a scam. Please remove Antivirus Soft from your computer as soon as possible. Use the removal guide below. 

[Figure 1. Antivirus Soft graphical user interface]
When running, Anti-virus Soft will also display many fake security alerts and notifications. For example, you may see fake pop-ups with the following text:

Windows Security alert
Windows reports that computer is infected. Antivirus software
helps to protect your computer against viruses and other
security threats. Click here for the scan your computer. Your
system might be at risk now.
And there is also an error message that states &amp;quot;Application can not be executed&amp;quot;. This one will be displayed every time you try to launch an anti-spyware or anti-virus software. What is more, Antivirus Soft will change Internet Explorer's settings. A proxy server will be added under the LAN settings, so that you cannot browse to any web site other than the site for Antivirus Soft. As you can see, this virus is quite irritating. Unfortunately, it can't be removed as a regular program. It won't let you to remove its files manually either. The removal guide below will show you how to get rid of Antivirus Soft from the system once and for all. 

Antivirus Soft removal instructions

1. Restart your computer.... </description>
	<guid>http://www.2-spyware.com/remove-antivirus-soft.html</guid>
	 <pubDate>Mon, 08 Feb 2010 17:02:37 CST</pubDate>
</item>

<item>
<title>Your PC Protector</title>
	<link>http://www.2-spyware.com/remove-your-pc-protector.html</link>
	<description> Your PC Protector is a rogue anti-spyware program from the same family as Windows Police Pro and Windows Antivirus Pro. The rogue program is promoted and installed through the use of Trojans. While YourPCProtector is running, it will claim to scan your computer for malware and report false threats to scare you into thinking that you are infected when in reality you are not. It's a typical scareware so of course it will ask you to pay for a full version of the program in order to remove the infections. By the way, this rogue program displays the same premeditated infections and threats as Windows Antivirus Pro did. Very likely, it will claim that you are infected with Trojan.Win32.Agent.azsy, Emai-Worm.Win32.Merond.a and etc. Please ignore these false infections and do not pay for activating this scam application. Instead, follow the removal instructions below and remove &amp;quot;Your PC Protector&amp;quot; virus as soon as possible.

[Figure 1.Your PC Protector graphical user interface]
While running, YourPCProtector will also display fake warnings and notifications. Those warnings will claim that your computer is being attacked by an Internet virus or that it continues to be infected with harmful viruses. 

Windows Police Pro Alert
Infiltration Alert
Your computer is being attacked by an Internet Virus. It could be password-stealing attack, a trojan-dropper or similar.

Security Warning
Your computer continues to be infected with harmful viruses. In order to prevent permanent loss of your information and credit card data theft please activate your antivirus software. Click here to enable protection.
Your PC Protector will also modify Windows Registry and hijack Internet Explorer. Whenever you try to launch Internet Explorer of FireFox the program generates a notification displaying firewall alert. It says that you Internet browser has been infected by a Trojan and your private data are at risk. The fake warning claims that you need to purchase YourPC P... </description>
	<guid>http://www.2-spyware.com/remove-your-pc-protector.html</guid>
	 <pubDate>Mon, 08 Feb 2010 14:02:50 CST</pubDate>
</item>

<item>
<title>Internet Security 2010</title>
	<link>http://www.2-spyware.com/remove-internet-security-2010.html</link>
	<description> Internet Security 2010 (also known as IS2010) is a rogue antivirus program. Please read the removal instructions and get rid of this fake program from your computer as soon as possible. InternetSecurity2010 is a clone of Advanced Virus Remover malware. If you take a closer look, you will see that both programs use the same graphical user interface. This rogue application is promoted through the user of Trojans. Most of the time, Trojans have to be manually installed and may come from various misleading websites, for example fake online anti-malware scanners. When running such media player processes as QuickTimePlayer.exe, AdvancedDVDPlayer.exe, tvp.exe, realplay.exe, windvd.exe, winamp.exe, setup_wm.exe, LA.exe, PowerDVD.exe, mplayerc.exe, wmplayer.exe, Internet Security 2010 additionally displays many fake error messages, such as:

Windows can`t play the folowing media formats: AVI;WMV;AVS;FLV;MKV;MOV;3GP;MP4;MPG;MPEG;MP3;AAC;WAV;WMA;CDA;FLAC;M4A;MID. Update your video and sound codec to resolve this issue!

Internet Security 2010 imitates a system scan and reports many false system security threats. Then it will redirect its victims to vs-codec-pro.net where it is asked to pay for a full version of the program to remove those security issues or infections. However, do not buy it - this is a scam.  

[Figure 1. Internet Security 2010 graphical user interface]
When running, Internet Security 2010 will also display fake security alerts. Those alerts will state that IS2010 has found critical vulnerabilities on your computer. The rogue program displays these infections:

Rogue:W32/XPAntivirus.gen!
AdWare.Win32.Zwangi
Trojan-Spy.HTML .Visafraud.a
Worm:W32/Agent
Trojan-PSW.W32/Steam
Net-Worm.Win32.DipNet.d
Tr ojan-Dropper:W32/Trojan-Dropper
Worm:W32/Downadup.gen
Trojan-Downlaoder:W32 /Fakerean.gen!A
Net-Worm.Win32.Mytob.t
Trojan-Spy.Win32.Hookit.11
Trojan-Cl icker.HTML.IFrame.g
Virus:W32/Alman.b
Trojan-Dropper.Win32.Agent.sd
Email-W orm.Win32NetSky.q
riskware.Win32
Ro... </description>
	<guid>http://www.2-spyware.com/remove-internet-security-2010.html</guid>
	 <pubDate>Mon, 08 Feb 2010 12:02:32 CST</pubDate>
</item>

<item>
<title>Antivir</title>
	<link>http://www.2-spyware.com/remove-antivir.html</link>
	<description> Antivir is a misleading anti-spyware application that reports false or exaggerated system security threats and infections to make you think that your computer is infected with malware. Once installed, it will simulate system scans and display a list of infections, but won't let you to remove those supposed infections unless you pay for a full version of the program. As you can see, the main goal of this misleading application is to trick you into purchasing the program. This is nothing more but a scam. Do not pay for it and uninstall Antivir from your computer as soon as possible.

[Figure 1. Antivir graphical user interface]
Antivir is promoted through the use of Trojans that come mostly from fake online anti-malware scanners. Of course, the scammers use other misleading methods to promote their bogus product. Social engineering is very popular distribution method too. You shouldn't accept invitations or open links received from unknown people. When installed, Trojans download rogue application and displays fake security alerts. Those fake security alerts or notifications will state that your computer is infected, for example: &amp;quot;Warning! Identity theft attempt detected&amp;quot;. Other fake notification states:

Trojan:W32/Inject Activity Detected
Trojan:W32/Inject is a large family of malware that secretly makes changes to the Windows Registry. Variants in the family make also makes changes to other running processes.

[Figure 2. Antivir - fake alert]
To make things worse, Antivir will hijack Internet Explorer and display &amp;quot;Warning! Visiting this site may harm your computer!&amp;quot; message [Figure 3].

[Figure 3. Antivir - fake Internet Explorer warning]
Further more, Antivir may block legitimate anti-spyware software and block security related websites. There shouldn't be any doubts about this bogus application - it must be removed upon detection. Most importantly, do not purchase Antivir. Otherwise, you will simpl... </description>
	<guid>http://www.2-spyware.com/remove-antivir.html</guid>
	 <pubDate>Mon, 08 Feb 2010 08:02:06 CST</pubDate>
</item>

<item>
<title>Antivirus Vista 2010</title>
	<link>http://www.2-spyware.com/remove-antivirus-vista-2010.html</link>
	<description> Antivirus Vista 2010 is a rogue anti-virus program that is usually advertised through the use of pop ups and fake security alerts that state that your computer is infected and that you should run an online anti-malware scan. Once the rogue program is installed, it will claim to scan your computer for malware and display a list of false threats just to confirm that your computer is infected with malware (usually Trojans and computer worms). Then it will ask you to pay for a full version of the program in order to remove the threats which as we already know don't even exist. Most importantly, don't buy it. If you did, then please contact your credit card company and dispute the charges. Next, please read removal guide below and remove Antivirus Vista 2010 from your computer manually for free or with an automatic removal tool. 

Antivirus Vista 2010 scam is very irritating and unfortunately can't be removed as easy as you would remove regular software. That's because it uses quite effective self-protection methods and techniques to make the removal process complicated, especially for people who don't know much about computer. First of all, it blocks almost all legitimate software; of course it disables security software in the first place. Manual removal can be complicated only if you can use Task Manager and Registry Editor, unfortunately it disables these tools too. What is more, Antivirus Vista 2010 will flood your computer with fake security alerts, firewall warnings and other similar pop-ups. It will also hijack Internet Explorer and redirect you to various misleading websites or block access to security related websites. Now, let's see how to get rid of Antivirus Vista 2010 virus?

Antivirus Vista 2010 removal instructions:

1. Click Start-&amp;gt;Run (or WinKey+R). Input: &amp;quot;command&amp;quot;. Press Enter or click OK.
2. Type &amp;quot;notepad&amp;quot; as shown in the image below and press Enter. N... </description>
	<guid>http://www.2-spyware.com/remove-antivirus-vista-2010.html</guid>
	 <pubDate>Mon, 08 Feb 2010 04:02:11 CST</pubDate>
</item>

<item>
<title>XP Guardian</title>
	<link>http://www.2-spyware.com/remove-xp-guardian.html</link>
	<description> XP Guardian is a fake anti-spyware program that is distributed through the use of Trojans or comes bundled with other malware. Once a Trojan virus is installed, it will impersonate an Automatic Windows Updates window and download the rogue program onto your computer. When the rogue program is active, it will imitate a system scan and report false system security threats. What is more, XPGuardian will constantly display fake security alerts and impersonate Windows Security Center to make the scam look more realistic. Finally it will ask you to pay for a full version of the program to remove the infections which don't even exist. Don't purchase it and remove XP Guardian virus from your computer upon detection. 

[Figure 1. XP Guardian graphical user interface]
The worst thing about XP Guardian is that it actually protects itself quite well. It blocks legitimate security software and hijack web browsers. In some cases it blocks all programs, not only anti-virus or anti-spyware software. Furthermore, it will detect many of well known and reputable websites as harmful and display fake security alert stating that you may infect your PC if you open a particular website. And of course, it disables certain Windows functions such as Task Manager or Regedit. It's possible to remove it manually, but you have to re-enable those Windows functions at first. You may also download an automatic removal tool, but again have to fix some registry entries and terminate the main process of XPGuardian which is AV.exe to be able to run the removal tool. 

XP Guardian removal instructions:

1. Click Start-&amp;gt;Run (or WinKey+R). Input: &amp;quot;command&amp;quot;. Press Enter or click OK.

2. Type &amp;quot;notepad&amp;quot; as shown in the image below and press Enter. Notepad will open.

3. Copy and past the following text into Notepad:

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand]
[-HKEY_CURREN T_USERSoftware... </description>
	<guid>http://www.2-spyware.com/remove-xp-guardian.html</guid>
	 <pubDate>Mon, 08 Feb 2010 02:02:00 CST</pubDate>
</item>

<item>
<title>Paladin Antivirus</title>
	<link>http://www.2-spyware.com/remove-paladin-antivirus.html</link>
	<description> Paladin Antivirus is a rogue security application that is distributed and installed through the use of Trojans or other malicious software. It's from the same family as Malware Defense. Usually this fake application comes from misleading websites and fake online scanners. It may also pop up on your screen while you are on Facebook, MySpace or similar websites. Once installed, PaladinAntivirus will attempt to uninstall legitimate antivirus software. It targets the following antivirus manufacturers: NOD32, Norton Internet Security, AVG8, Avira AntiVir, Avast!, Agnitum Outpost Security Suite, Malwarebytes' Anti-Malware, F-Secure. Paladin Antivirus states:

There is unauthorized antivirus software detected on your computer. It is recommended you to remove it, otherwise it could conflict with Paladin Antivirus.
Then it will supposedly scan your computer for malware and report false threats to make you think that your computer is infected. Finally, it will prompt you to pay for a full version of the program to remove the threats which don't even exist. Please don't remove reported files as they might be legitimate ones and don't purchase  this bogus software. Instead, please use the removal guide below to remove Paladin Antivirus from your computer as soon as possible.

[Figure 1. Paladin Antivirus graphical user interface]
While running, the rogue program will display many fake security alerts on your screen. Those fake security warnings will claim that your PC is badly infected or that your computer is being attacked from a remote PC. 

[Figure 2. Paladin Antivirus fake security alert]

Adware module detected on your PC!
Zlob.Porn.Ad adware has been detected. This adware module advertises websites with explicit content. Be advised of such content being possibly illegal. Please click the button below to locate and remove this threat now.
As you can see, this program is nothing more but a scam. It was designed to scare you i... </description>
	<guid>http://www.2-spyware.com/remove-paladin-antivirus.html</guid>
	 <pubDate>Mon, 08 Feb 2010 01:50:23 CST</pubDate>
</item>

<item>
<title>Vista Guardian</title>
	<link>http://www.2-spyware.com/remove-vista-guardian.html</link>
	<description> Vista Guardian is a rogue anti-spyware program that deliberately displays exaggerated scan results to make you think your computer has many infections and security/privacy risks. This program is usually promoted through the use of fake online scanners, that state that your computer is badly infected and that you should download and install Vista Guardian in order to remove infections and to protect yourself. When Vista Guardian is installed and active it will automatically perform a fake system scan when you login to Windows. After the scan it will display numerous infections of exaggerated security threats on your computer and then state that you should purchase the program in order to remove the infections or threats which don't even exist. Don't pay for this bogus software and uninstall it as soon as possible. If you are infected with this virus, then please use the removal guide stated below to remove Vista Guardian from your computer manually for free or with an automatic removal tool. 

While VistaGuardian is running you will also find your computer flooded with various alerts stating that your computer is infected with malware. This program will hijack both Internet Explorer and Firefox to randomly display messages about insecure Internet activity when browsing the web and state that you should purchase Vista Guardian to protect your computer from possible attacks. These alerts, like web browser hijacks are just another attempt to trick you into believing that you are infected with Trojans, worms and other viruses. However, the worst thing is that this parasite blocks anti-virus and anti-spyware software as well as useful Windows functions (Task Manager and Regedit). In order to remove this virus you will have to either use another PC or re-enable default Windows registry settings. To do this, please use the guide below.

Vista Guardian removal instructions:

1. Click Start-&amp;gt;Run (or WinKey+R). Input: &amp;quot;command&amp;quot;. Pr... </description>
	<guid>http://www.2-spyware.com/remove-vista-guardian.html</guid>
	 <pubDate>Sun, 07 Feb 2010 11:02:32 CST</pubDate>
</item>

<item>
<title>Personal Security</title>
	<link>http://www.2-spyware.com/remove-personal-security.html</link>
	<description> Personal Security is a misleading anti-spyware application that displays fake security alerts/pop-ups and reports false system security threats or infections to scare you into thinking that your computer is infected with malicious software. PersonalSecurity is a clone of widely spread Cyber Security and Total Security malware. The rogue program simulates a system scan and asks to pay for a full version of Personal Security in order to remove non-exist infections. In fact, the reported security threats or infections are actually either non-existing/harmless files or legitimate software. This malware will likely block real security software to protect itself from being deleted. Most importantly, do not purchase this bogus application and uninstall Personal Security from your computer as soon as possible.

[Figure 1. Personal Security graphical user interface]
Personal Security must be manually installed. Its distribution channels include e-mail, malicious or hacked Web pages, peer-to-peer networks and etc. The scammers also use social engineering to distribute Personal Security infection. Please note that Personal Security disguises itself and usually comes as flash player update/video codec or other supposedly useful software. You shouldn't install anything from suspicious websites. Otherwise, you can infect your PC with Personal Security or other malware.

To make this scam look more realistic, Personal Security impersonates Windows Security Center. It states that your computer is not protected and that you should activate PersonalSecurity to ensure full system protection. As you may know, the legitimate one does not promote particular anti-virus software. That's the main difference. The rogue application displays the same infections on every computer randomly. If your computer is infected, you will likely see one of the following:  Zlob.PornAdvertiser.ba, Trojan.BAT.Adduser.t, Spyware.IMMonitor, Win32.Rbot.fm, Infostealer.Banker.E, Spyware.IEMo... </description>
	<guid>http://www.2-spyware.com/remove-personal-security.html</guid>
	 <pubDate>Sun, 07 Feb 2010 10:02:07 CST</pubDate>
</item>

<item>
<title>Malware Defense</title>
	<link>http://www.2-spyware.com/remove-malware-defense.html</link>
	<description> Malware Defense is a fake antivirus program from the same family as AntiMalware virus. Please read the removal instructions carefully and remove this infection from your computer as soon as possible. MalwareDefense is promoted through the use of Trojans, mostly Trojan.FakeAlert. Most of the time, Trojans come from fake online scanners, misleading websites or masquerading as a fake video codec. Please note that Trojans can come bundled with other illegitimate software. Once installed, Malware Defense will generate fake alerts or notifications and report false detections in order to convince you to purchase this bogus anti-virus software. Please don't purchase it. Otherwise, you will simply lose your money. 

[Figure 1. Malware Defense graphical user interface]
When running, Malware Defense will simulate a system scan and display a list of infections that can't be removed with a trial version of this program. In order to remove found infections you have to buy a full version of it. However, this is nothing more but a scam. Let's see why. First of all, MalwareDefense reports non-existing or legitimate Windows files as infections. Do not remove those files manually because you can seriously damage your computer. Some of the infections will be shown with the following names: Backdoor.Win32.Agent.ich, Rootkit.Win32.Agent.pp, Trojan.Dropper, Virus.Win32.Gpcode.ak, Email-Worm.Win32.NetSky.q, Net-Worm.Win32.Mytob.t and etc. Usually, Malware Defense detects those infections in main Windows OS directories. Of course, this malicious software detects the same infections on every infected computer. 

While running, Malware Defense will also display fake security alerts, notifications and error messages. This is a part of MalwareDefense scam. This virus will block particular software and display fake warning that states: 

There is unauthorized antivirus software detected on your computer. It is recommend you to remove it, otherwise it could conflict ... </description>
	<guid>http://www.2-spyware.com/remove-malware-defense.html</guid>
	 <pubDate>Sat, 06 Feb 2010 09:02:23 CST</pubDate>
</item>

<item>
<title>Antimalware Pro</title>
	<link>http://www.2-spyware.com/remove-antimalware-pro.html</link>
	<description> Antimalware Pro is fraudulent application trying to attract customers by using name of legitimate tool. There&amp;acirc;s well known anti-spyware tool named Anti-Malware (full name Malwarebytes&amp;acirc; Anti-malware); do not take Antimalware Pro as Malwarebytes&amp;acirc; Anti-malware!

Anti malware Pro may look like reputable tool: it offers anti-spyware protection, anti-virus protection, it scans computer and reports infections. However all those actions are tricky. Antimalware Pro is neither antivirus nor antispyware and it&amp;acirc;s not capable of scanning a machine. It imitates computer scan and &amp;acirc;detects&amp;acirc; imaginary viruses. It doesn&amp;acirc;t function as a security tool, but it requires $50-$80 for keeping it on your computer. AntimalwarePro spreads like malware. It tries to force people to buy a license by hijacking web browser and loading enormous amounts of pop-ups. Anti-malware Pro redirects web browser to AntiMalwarePRO.com. Both the program and the website are fraudulent. </description>
	<guid>http://www.2-spyware.com/remove-antimalware-pro.html</guid>
	 <pubDate>Sat, 06 Feb 2010 03:02:39 CST</pubDate>
</item>

<item>
<title>Vista Internet Security 2010</title>
	<link>http://www.2-spyware.com/remove-vista-internet-security-2010.html</link>
	<description> Vista Internet Security 2010 (can be also called as Vista Internet Security) is a rogue anti-spyware program that simulates a system scan and reports false scan results just to scare you and make you think that your computer is infected with Trojans, worms and other malware. Once installed, it will display fake security alerts or notifications and then inform you that you need to pay money to register the program if you want to remove the infections and computer threats, which of course do not even exist. Do not pay for this software and get rid of Vista Internet Security 2010 form your computer upon detection using the removal stated guide below.

Vista Internet Security 2010 displays warnings and notifications about serious security threats and privacy issues. It will also state that it has detected many critical spyware objects and that these objects can expose private information. Of course, that's not true. This is just a part of whole scam. Besides, no matter what you decide to do, it will ask to pay for a full version of the program to protect your computer from malware and possible attacks from the Internet. Just ignore all of this and read the removal instructions carefully. 

VistaInternetSecurity2010 removal instructions:

1. Click Start-&amp;gt;Run (or WinKey+R). Input: &amp;quot;command&amp;quot;. Press Enter or click OK.
2. Type &amp;quot;notepad&amp;quot; as shown in the image below and press Enter. Notepad will open.
3. Copy and past the following text into Notepad:

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand]
[-HKEY_CURREN T_USERSoftwareClassessecfileshellopencommand]
[-HKEY_CLASSES_ROOT.exeshello pencommand]

[HKEY_CLASSES_ROOT.exe]
@=&amp;quot;exefile&amp;quot;
&amp;quo t;Content Type&amp;quot;=&amp;quot;application/x-msdownload&amp;quot;

[-HKEY_CLASSES _ROOTsecfile]
4. Save file as &amp;quot;exefix.reg&amp;quot; (without quotation-marks) to your Desktop. 
NOTE: choose Save as type: Al... </description>
	<guid>http://www.2-spyware.com/remove-vista-internet-security-2010.html</guid>
	 <pubDate>Fri, 05 Feb 2010 13:02:34 CST</pubDate>
</item>

</channel>
</rss>
