Friday, April 6, 2007

How to remove the spyware Program1

Welcome to the real world! Your system has been partially taken over by insidious adware programs written by hackers with malicious intentions.

(1) Disconnect the computer from internet. Pull out the cable to the wall or disable the ethernet/modem device.

(2) Use a professional adware/virus/worm/trojan removal tool and clean up the system. If you want to use online tools to remove them, then don't disconnect from internet. You may use reputed services such as "symantec" or "trendmicro" tools and detect/remove the nasty stuff through online assistance. These companies offer free services to remove them for home users.

(3) Once you remove them, go to internet-explorer options, security and disable a whole lot of features:
-disable scripting. This will turnoff javascripting and prevent crooks from repeating it. You can add selected sites to "trusted sites" and allow scripting there.

-disable java, disable applets, disable activeX altogether, disable software permissions, increase safety level etc. Occasionally you may get warning notices while browsing internet "you have disabled activeX!" but that nuisance is a small price for security.

You should always be able to go to Task Manager using CTRL-ALT-DELETE. If this is also disabled, then you may have to reboot in safe-mode and start cleaning.

Also, change all your passwords that you have set in internet sites, since some worms would have screen-captured your keyboard and forwarded them to some other website for storage.

I would like to personally meet those crooks who write such software and break their fingers one by one. I am pissed off! They have wasted so many days of my life.

Monday, March 26, 2007

CITYJOY.EXE a Variant from LOP.COM Threat.

There is a new variant called CITYJOY.EXE which belongs to same family of LOP.COM threat. It hijacks the browser settings. The location of the variant is [%application_data%]\sectpeakonlineblah\. You can download the LOP remover from this location http://www.thespykiller.co.uk/files/lopremover.exe and remove this threat.

HiddenFaxWindow freezes computer

HiddenFaxWindow seems to be from the Fax service. Disable the Fax service, if you have no need of it. Or uninstall Fax Services.
To Remove a Windows XP HiddenFaxWindow Component
  • Log on as Administrator or as a member of the Administrators group.
  • Click Start, click Control Panel, and then double-click Add or Remove Programs.
  • Click Add/Remove Windows Components. The Windows Components Wizard starts.
  • In the Components list, click to clear the check box next to the component that you want to remove. Clear the check box of Windows Fax Services. Note that a shaded check box next to a component indicates that only some of its subcomponents are installed.
  • If you want to remove a subcomponent, click Details. Then, click to clear the check box next to the subcomponents that you want to remove, and then click OK.
  • Click Next.
  • In the Completing the Windows Components Wizard screen, click Finish.
  • Restart your PC.

Error: UNMOUNTABLE_BOOT_VOLUME

Problem : Error: UNMOUNTABLE_BOOT_VOLUME

when you start Windows XP, you may receive the following error message, where aaaaaaaa, bbbbbbbb, cccccccc, and dddddddd are hexadecimal numbers that may vary:
STOP 0x000000ED (0xaaaaaaaa,0xbbbbbbbb,0xcccccccc,0xdddddddd) UNMOUNTABLE_BOOT_VOLUME in windows xp.
Solution : This has worked for me numerous times with UNMOUTABLE_BOOT_VOLUME errors:go into the recovery console with your XP cd and log into your windows installation then type:
CHKDSK /R (this takes ages)
CHKDSK /P
FIXBOOT
Still you have the same problem you can visit Microsoft troubleshooting guide. Click here to visit the microsoft of this error.

How to remove SpyLocked and asafetyproject.com

SpyLocked (Spy Locked) is a rogue program that is installed by a trojan called Zlob. Of course you need to remove SpyLocked, but more importantly, you need to ALSO remove the Zlob trojan that installed it. Zlob infects your computer and starts generating warning messages in hopes of scaring you into buying SpyLocked.
SpyLocked (Spy Locked) is a ransomware anti-spyware product that is secretly installed by the Zlob Trojan. Other trojans are also known to install SpyLocked. SpyLocked - or the trojan that installs it - starts generating warning messages (similar to the ones shown below) to try and force users into purchasing the full version of SpyLocked in order to have the alledged infections removed.
Download SpyNoMore to scan your PC, it is very effective against the Zlob trojan and SpyLocked.