HT Logs. Tips, FAQs, Analyze.

This is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: WIa5bc
Filename: WIa5bc.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Windows PC Defender

Command: C:\Documents and Settings\All Users\Application Data\a5bc4e8\WIa5bc.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [Windows PC Defender] “C:\Documents and Settings\All Users\Application Data\a5bc4e8\WIa5bc.exe” /s /d

Description: WIa5bc.exe is a component of Windows PC Defender rogue antispyware program.

How to remove: use these Windows PC Defender removal instructions.

This is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: SoftSafeness
Filename: SoftSafeness.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | SoftSafeness

Command: C:\Program Files\SoftSafeness Software\SoftSafeness\SoftSafeness.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [SoftSafeness] C:\Program Files\SoftSafeness Software\SoftSafeness\SoftSafeness.exe -min

Description: main component of SoftSafeness rogue antispyware program.

How to remove: use these SoftSafeness removal instructions.

This is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: SafetyKeeper
Filename: SafetyKeeper.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | SafetyKeeper

Command: :\Program Files\SafetyKeeper Software\SafetyKeeper\SafetyKeeper.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [SafetyKeeper] C:\Program Files\SafetyKeeper Software\SafetyKeeper\SafetyKeeper.exe -min

Description: SafetyKeeper.exe is main component of SafetyKeeper rogue antispyware program.

How to remove: use these SafetyKeeper removal instructions.

This is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: windows Police Pro
Filename: windows Police Pro.exe
Command: %ProgramFiles%\Windows Police Pro\windows Police Pro.exe
Description: windows Police Pro.exe is main file of Windows Police Pro (rogue antispyware program).

How to remove: use these Windows Police Pro removal instructions.

This is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: SaveKeeper
Filename: SaveKeeper.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | SaveKeeper

Command: C:\Program Files\SaveKeeper Software\SaveKeeper\SaveKeeper.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [SaveKeeper] C:\Program Files\SaveKeeper Software\SaveKeeper\SaveKeeper.exe -min

Description: main component of SaveKeeper (rogue antispyware program)

How to remove: use these SaveKeeper removal instructions.

This is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: q1pdsdjx
Filename: q1pdsdjx.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | q1pdsdjx.exe

Command: C:\WINDOWS\system32\q1pdsdjx.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [q1pdsdjx.exe] C:\WINDOWS\system32\q1pdsdjx.exe

Description: component of SaveKeeper that shows fake Windows Security Center.
Notes:

How to remove: use these SaveKeeper removal instructions.

This is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: personalguard
Filename: personalguard.exe
Registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | personalguard

Command: C:\Program Files\Personal Guard 2009\personalguard.exe
Startup Type:HKLM->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKLM\..\Run: [personalguard] C:\Program Files\Personal Guard 2009\personalguard.exe

Description: added by Personal Guard 2009 rogue antispyware program.

How to remove: use these Personal Guard 2009 removal instructions.

This is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: PAVRM
Filename: PAVRM.exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Advanced Virus Remover

Command: C:\Program Files\AdvancedVirusRemover\PAVRM.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [Advanced Virus Remover] C:\Program Files\AdvancedVirusRemover\PAVRM.exe

Description: component of Advanced Virus Remover (fake antivirus program)

How to remove: use these Advanced Virus Remover removal instructions in order to remove the PAVRM.exe file and any associated malware from your computer for free.

This is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: AntivirusPro_2010
Filename: AntivirusPro_2010.exe
Registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | Antivirus Pro 2010

Command: C:\Program Files\AntivirusPro_2010\AntivirusPro_2010.exe
Startup Type: HKLM->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKLM\..\Run: [Antivirus Pro 2010] “C:\Program Files\AntivirusPro_2010\AntivirusPro_2010.exe” /hide

Combofix/RSIT Line:

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
“Antivirus Pro 2010″=C:\Program Files\AntivirusPro_2010\AntivirusPro_2010.exe [2009-09-06 589312]

Description: AntivirusPro_2010.exe is a component of Antivirus Pro 2010. The program is fake antispyware software that designed to scam people.

How to remove: use these Antivirus Pro 2010 removal instructions in order to remove the AntivirusPro_2010.exe file and any associated malware from your computer for free.

This is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: QuickHealCleanerSvc
Filename: QuickHealCleanerSvc.exe
Registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\quickhealcleanersvc

Command: C:\Program Files\QuickHealCleaner Software\QuickHealCleaner\QuickHealCleanerSvc.exe
Startup Type: Service
HijackThis Category: O23
HijackThis Line:

O23 – Service: QuickHealCleaner Security Service (QuickHealCleanerSvc) – Unknown owner – C:\Program Files\QuickHealCleaner Software\QuickHealCleaner\QuickHealCleanerSvc.exe

Description: component of QuickHealCleaner (rogue antispyware software)

How to remove: use these QuickHealCleanerSvc.exe removal instructions.