Archive for the 'Run' Category
Thursday, April 30th, 2009
This is a harmful program.
Name: Coreguard 2009
Filename: Coreguard 2009.exe
Registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Coreguard Antivirus 2009
Command: C:\Program Files\Coreguard Antivirus 2009\Coreguard 2009.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:
O4 – HKCU\..\Run: [Coreguard Antivirus 2009] C:\Program Files\Coreguard Antivirus 2009\Coreguard 2009.exe
Description: main file of CoreGuard Antivirus 2009 (rogue antivirus/antispyware program)
How to remove: use the instructions How to remove CoreGuard Antivirus 2009 (Uninstall instructions)
Posted in O4, Rogue Antispyware/Antivirus, Run | No Comments »
Thursday, April 30th, 2009
This is a harmful program.
Name: pcam
Filename: pcam.exe
Registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | PCAntiMalware
Command: c:\program files\pcantimalware\pcam.exe
Startup Type: HKLM->Run
HijackThis Category: O4
HijackThis Line:
O4 – HKLM\..\Run: [PCAntiMalware] “c:\program files\pcantimalware\pcam.exe” /min
Description: main file of PCAntiMalware (rogue antispyware program)
How to remove: use the instructions How to remove PCAntiMalware (Uninstall Guide)
Posted in O4, Rogue Antispyware/Antivirus, Run | No Comments »
Thursday, April 30th, 2009
This is a harmful program.
Name: VShield
Filename: VShield.exe
Registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | Virus Shield 2009
Command: C:\Documents and Settings\All Users\Application Data\f5bc4e8\VShield.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:
O4 – HKCU\..\Run: [Virus Shield 2009] “C:\Documents and Settings\All Users\Application Data\f5bc4e8\VShield.exe” /s /d
Description: main file of Virus Shield 2009 – rogue antispyware program.
How to remove: use the instructions How to remove Virus Shield 2009 (Uninstall instructions)
Posted in O4, Rogue Antispyware/Antivirus, Run | No Comments »
Tuesday, April 28th, 2009
This is a harmful program.
Name: sysguard
Filename: sysguard.exe
Registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | system tool
Command: C:\WINDOWS\sysguard.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:
O4 – HKCU\..\Run: [system tool] C:\WINDOWS\sysguard.exe
Description: filename of main file of Spyware Protect 2009 and Antivirus System PRO. Both apps are rogue antispyware programs.
How to remove: use these Spyware Protect 2009 removal instructions or use these Antivirus System PRO removal instructions
Posted in O4, Rogue Antispyware/Antivirus, Run | No Comments »
Tuesday, April 28th, 2009
This is a harmful program.
Name: msas2009
Filename: msas2009.exe
Registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | MS AntiSpyware 2009
Command: C:\Documents and Settings\All Users\Application Data\CrucialSoft Ltd\MS AntiSpyware 2009\msas2009.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:
O4 – HKCU\..\Run: [MS AntiSpyware 2009] “C:\Documents and Settings\All Users\Application Data\CrucialSoft Ltd\MS AntiSpyware 2009\msas2009.exe” /autorun
Description: main file MS Antispyware 2009 (rogue antispyware program)
How to remove: use the instructions How to remove MS Antispyware 2009
Posted in O4, Rogue Antispyware/Antivirus, Run | No Comments »
Tuesday, April 28th, 2009
This is a harmful program.
Name: AntivirusPro2009
Filename: AntivirusPro2009.exe
Registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | Antivirus Pro 2009
Command: C:\Program Files\AntivirusPro2009\AntivirusPro2009.exe
Startup Type: HKLM->Run
HijackThis Category: O4
HijackThis Line:
O4 – HKLM\..\Run: [Antivirus Pro 2009] “C:\Program Files\AntivirusPro2009\AntivirusPro2009.exe” /hide
Description: main file Antivirus Pro 2009 (rogue antispyware program)
How to remove: use the instructions How to remove Antivirus Pro 2009
Posted in O4, Rogue Antispyware/Antivirus, Run | No Comments »
Tuesday, April 28th, 2009
This is a harmful program.
Name: gadcom
Filename: gadcom.exe
Registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | gadcom
Command: C:\Documents and Settings\user\Application Data\gadcom\gadcom.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:
O4 – HKCU\..\Run: [gadcom] “C:\Documents and Settings\user\Application Data\gadcom\gadcom.exe”
Description: trojan, installed with rogue antispyware programs and other malware
How to remove: use Malwarebytes Antimalware
Posted in O4, Run, Trojan | No Comments »
Tuesday, April 28th, 2009
This is a harmful program.
Name: AntivirusXP
Filename: AntivirusXP.exe
Registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | AntivirusXP.exe
Command: C:\Program Files\AntivirusXP\AntivirusXP.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:
O4 – HKCU\..\Run: [AntivirusXP.exe] C:\Program Files\AntivirusXP\AntivirusXP.exe
Description: main file of Antivirus XP Pro (rogue antispyware program)
How to remove: use the instructions How to remove Antivirus XP Pro (Delete instructions)
Posted in O4, Rogue Antispyware/Antivirus, Run | No Comments »
Monday, April 27th, 2009
This is a harmful program.
Name: Malware Doctor
Filename: Malware Doctor.exe
Registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | Alcmtr
Command: C:\Program Files\Malware Doctor\Malware Doctor.exe
Startup Type: HKLM->Run
HijackThis Category: O4
HijackThis Line:
O4 – HKLM\..\Run: [Alcmtr] C:\Program Files\Malware Doctor\Malware Doctor.exe
Description: main file of Malware Doctor (rogue antispyware program)
How to remove: use the instructions How to remove MalwareDoc or Malware Doctor (Delete instructions)
Posted in O4, Rogue Antispyware/Antivirus, Run | No Comments »
Saturday, April 25th, 2009
This is a harmful program.
Name: winav
Filename: winav.exe
Registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | sysav
Command: %UserProfile%\Application Data\winav.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:
O4 – HKCU\..\Run: [sysav] %UserProfile%\Application Data\winav.exe
Description: main file of WinPC Antivirus (rogue antispyware)
How to remove: use the instruction How to remove WinPC Antivirus (Uninstall instructions)
Posted in O4, Rogue Antispyware/Antivirus, Run | No Comments »
