Filed under Uncategorized by admin on December 6, 2011 at 6:31 pm no comments Win 7 Home Security 2012 is new fake spyware application to hit the internet. It is spreading rapidly using browser exploits and malicious websites. It comes from the same family as Malware Protection and other similar rouges. It can silently install itself on your computer without your permission or knowledge.
If your computer has been infected, it is strongly recommended that you remove Win 7 Home Security 2012 . Follow the 4 steps below to finally remove Win 7 Home Security 2012 :
Bookmark this page and re-boot your computer into Safe Mode with Networking”. To enter “Safe Mode with Networking” press F8 repeatedly while your computer is rebooting.

Click Here To download Spyware Doctor with Antivirus.

Click Run to launch the SpywareDoctor Installation wizard and install the removal tool.

Spyware Doctor will automatically begin to scan your computer. When it’s done, click Fix Checked and finally remove Win 7 Home Security 2012 and any other Spyware infections.

Having troubles downloading? Then you might need to follow the additional steps below:
Call us, we can help: 1-800-906-8454
1: Reset your Internet Explorer proxy settings.
- Under “Tools” in the browser tool bar select “Internet Options”.
- In the “Internet Options” window that pops up, click the “Connections” tab at the top.
- Click “LAN Settings” near the bottom of the “Connections” section.
- If the “Proxy server” checkbox is marked with a check, click it to deselect/uncheck it. See image below:

2. Now download Spyware Doctor by > Clicking Here <. Rename the file to iexplorer and double click to open and begin installation.
Now proceed with the directions above to remove Win 7 Home Security 2012 .
Still can’t remove your spyware infection? Call us, we can help:
1-800-906-8454

What Exactly is Win 7 Home Security 2012 ?
Win 7 Home Security 2012 is a fake Anti-Spyware program. The crooked makers of this software have only one thing in mind. Your money! The only purpose of this rogue is to trick you into believing that you must purchase the “Full” Version of this software.
This legitimate looking rogue is made by the same creators of Cloud Security, OpenCloud Security, and OpenCloud Antivirus. The makers of these programs have become very good at making them seem legitimate.
It is unknown how many people have been duped by this fake, but you do not have to be one of them. You have been armed with the knowledge to remove Win 7 Home Security 2012 .
Win 7 Home Security 2012 Scare Tactics:
Win 7 Home Security 2012 will employ a number of scare tactics to try and get you to upgrade to the “full” version. Do not fall for it. Some of the scare tactics include multiple pop-up warnings, and scary looking scan results. Below you can see the different ways this program will try and trick you.
Pop-up Alerts:
Serious security vulnerabilities were detected on this computer. Your privacy and personal data may be unsafe. Do you want to protect your PC?
Win 7 Home Security 2012 Firewall Alert
Win 7 Home Security 2012 has blocked a program from accessing the internet
Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen
Private data can be stolen by third parties, including credit card details and passwords.
Malware Intrusion
Sensitive areas of your system were found to be under attack. Spy software attack or virus infection possible. Prevent further damage or your private data will get stolen. Run an anti-spyware scan now. Click here to start.
System danger!
Your system security is in danger. Privacy threats detected. Spyware, keyloggers or Trojans may be working the background right now. Perform an in-depth scan and removal now, click here.
System Hijack!
System security threat was detected. Viruses and/or spyware may be damaging your system now. Prevent infection and data loss or stealing by running a free security scan.
Privacy threat!
Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.
Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.
Win 7 Home Security 2012 Alert
Security Hole Detected!
A program is trying to exploit Windows security holes! Passwords and sensitive data may be stolen. Do you want to block this attack?
Win 7 Home Security 2012 Alert
Internet Explorer alert. Visiting this site may pose a security threat to your system!
Possible reasons include:
- Dangerous code found in this site’s pages which installed unwanted software into your system.
- Suspicious and potentially unsafe network activity detected.
- Spyware infections in your system
- Complaints from other users about this site.
- Port and system scans performed by the site being visited.
Things you can do:
- Get a copy of Win 7 Home Security 2012 to safeguard your PC while surfing the web (RECOMMENDED)
- Run a spyware, virus and malware scan
- Continue surfing without any security measures (DANGEROUS)
Just like the fake security alerts, the browser hijack is just another attempt to make you think that your computer has a security problem so that you will then purchase the program.
Win 7 Home Security 2012 Screenshots:

How to Remove Win 7 Home Security 2012 Manually.
Before considering to use these manual removal steps, please consider the following disclaimer:
Altering computer files and register items should only be attempted by knowledgeable computer users. Errors in performing these steps may lead to problems effecting other aspects of your machine.
Attempt these steps at your own risk, otherwise consider using the automatic removal method. Even after manual removal is achieved it is still strongly recommended that you run a full scan with the recommended removal tool Spyware Doctor.
Step 1: End any Win 7 Home Security 2012 processes. To do this, you will need to restart your computer and quickly press alt+ctrl+del before it can load. Then end any and all Win 7 Home Security 2012 processes.
[random].exe (the processes will consist of random letters and numbers, example: 1ja8jr62ae2.exe
Step 2: Delete Win 7 Home Security 2012 files and folders
%CommonAppData%\<random characters>
%LocalAppData%\<random characters>
%LocalAppData%\<random 3 chars>.exe
%Temp%\<random characters>
%UserProfile%\Templates\<random characters>
Step 3: Delete any Win 7 Home Security 2012 Registry files
HKEY_CURRENT_USER\Software\Classes\.exe “(Default)” = ‘ah’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “%LocalAppData%\<random 3 chars>.exe” -a “%1″ %*
HKEY_CLASSES_ROOT\ah
HKEY_CURRENT_USER\Software\Classes\ah “(Default)” = ‘Application’
HKEY_CURRENT_USER\Software\Classes\ah “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\ah\DefaultIcon “(Default)” = ‘%1′
HKEY_CURRENT_USER\Software\Classes\ah\shell\open\command “(Default)” = “%LocalAppData%\<random 3 chars>.exe” -a “%1″ %*
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “%LocalAppData%\<random 3 chars>.exe” -a “%1″ %*
HKEY_CLASSES_ROOT\ah\shell\open\command “(Default)” = “%LocalAppData%\<random 3 chars>.exe” -a “%1″ %*
HKEY_CLASSES_ROOT\ah\shell\open\command “IsolatedCommand”
Step 4: Download MalwareBytes AntiMalware and run a full scan in safe mode.
In Conclusion:
Win 7 Home Security 2012 is a dangerous spyware program that should be removed immediately. Chances are that you had anti-virus protection on your computer that was destroyed by Win 7 Home Security 2012 .
That is why it is highly recommended to download Spyware Doctor and run a full scan even if manual removal is achieved. This will make sure that the infection is gone 100%, and will keep you protected in the future from any spyware or virus threats.
Still can’t remove Win 7 Home Security 2012 ? Call us, we can help:
1-800-906-8454
If you have followed all the directions above and are still having troubles then please leave a detailed comment below and we will try our best to help you remove this infection.
Please be as specific as possible and tell us exactly what you have done so far to this threat.
If this page was helpful, please click the Facebook like button at the top of the page to help spread the word on how to remove Win 7 Home Security 2012 .
Filed under Uncategorized by admin on October 7, 2011 at 4:06 pm no comments AV Guard Online is the newest fake antispyware program to hit the internet. It is quickly spreading through the use of hacked websites and browser exploits. It can silently install itself on your computer without your permission or knowledge.
If your computer has been infected, it is strongly recommended that you remove AV Guard Online. Follow the 4 steps below to finally remove AV Guard Online:
Bookmark this page and re-boot your computer into Safe Mode with Networking”. To enter “Safe Mode with Networking” press F8 repeatedly while your computer is rebooting.

Click Here To download Spyware Doctor with Antivirus.

Click Run to launch the SpywareDoctor Installation wizard and install the removal tool.

Spyware Doctor will automatically begin to scan your computer. When it’s done, click Fix Checked and finally remove AV Guard Online and any other Spyware infections.

Having troubles downloading? Then you might need to follow the additional steps below:
Call us, we can help: 1-800-906-8454
1: Reset your Internet Explorer proxy settings.
- Under “Tools” in the browser tool bar select “Internet Options”.
- In the “Internet Options” window that pops up, click the “Connections” tab at the top.
- Click “LAN Settings” near the bottom of the “Connections” section.
- If the “Proxy server” checkbox is marked with a check, click it to deselect/uncheck it. See image below:

2. Now download Spyware Doctor by > Clicking Here <. Rename the file to iexplorer and double click to open and begin installation.
Now proceed with the directions above to remove AV Guard Online.
Still can’t remove your spyware infection? Call us, we can help:
1-800-906-8454

What Exactly is AV Guard Online?
AV Guard Online is a fake Anti-Spyware program. The crooked makers of this software have only one thing in mind. Your money! The only purpose of this rogue is to trick you into believing that you must purchase the “Full” Version of this software.
This legitimate looking rogue is made by the same creators of Sytem Tool 2011, Security Tool, and MS Recovery Tool. The makers are very good at making the programs look like the real deal.
It is unknown how many people have been duped by this fake, but you do not have to be one of them. You have been armed with the knowledge to remove AV Guard Online.
AV Guard Online Scare Tactics:
AV Guard Online will employ a number of scare tactics to try and get you to upgrade to the “full” version. Do not fall for it. Some of the scare tactics include multiple pop-up warnings, and scary looking scan results. Below you can see the different ways this program will try and trick you.
Pop-up Alerts:
svchost.exe
svchost.exe was replaced with unauthorized program.
It has encountered a problem and needs to close.
If you were in the middle of something, the information you were working on might be lost.
Please tell Microsoft about this problem.
We have created an error report that you can send to us. We will treat this report as confidential and anonymous.
Windows Security Alert
To help protect your computer, Windows Firewall has blocked some features of this program.
Do you want to keep blocking this program?
Name: Zeus Trojan
Publisher: Unauthorized
Warning! Infection found
Unauthorized sending E-MAIL with subject “RE:” to <fake email here> was CANCELLED.
Warning! Infection found
Unwanted software (malware) or tracking cookies have been found during last scan. It is highly recommended to remove it from your computer.
Keylogger Zeus was detected and put in quarantine.
Keylogger Zeus is a very dangerous software used by criminals to steal personal data such as credit card information, access to banking accounts, passwords to social networks and e-mails.
Security Warning
Your computer continues to be infected with harmful viruses. In order to prevent permanent loss of your information and credit card data theft please activate your antivirus software. Click here to enable protection.
Security Warning
Malicious programs that may steal your private information and prevent your system from working properly are detected on your computer.
Click here to clean your PC immediately.
Security Warning
There are critical system files on your computer that were modified by malicious software.
It may cause permanent data loss.
Click here to remove malicious software.
Warning: Infection is Detected
Windows has found spyware infection on your computer!
Click here to update your Windows antivirus software
Warning: Spyware Detected
Windows has found spy programs running on your computer!
Click here to update your Windows antivirus software
Windows Security Center
Serious security vulnerabilities were detected on this computer. Your privacy and personal data may be unsafe. Do you want to protect your PC?
AV Guard Online Screenshots:

How to Remove AV Guard Online Manually.
Before considering to use these manual removal steps, please consider the following disclaimer:
Altering computer files and register items should only be attempted by knowledgeable computer users. Errors in performing these steps may lead to problems effecting other aspects of your machine.
Attempt these steps at your own risk, otherwise consider using the automatic removal method. Even after manual removal is achieved it is still strongly recommended that you run a full scan with the recommended removal tool Spyware Doctor.
Step 1: End any AV Guard Online processes. To do this, you will need to restart your computer and quickly press alt+ctrl+del before it can load. Then end any and all AV Guard Online processes.
[random].exe (the processes will consist of random letters and numbers, example: 1ja8jr62ae2.exe
Step 2: Delete AV Guard Online files and folders
%AppData%\<random>\
%AppData%\<random>\
%AppData%\<random>\http://www.freeremovalofspyware.org/wp-admin/post-new.php
%AppData%\<random> Guard Online.ico
%AppData%\ldr.ini
%StartMenu%\Programs\AV Guard Online\
%StartMenu%\Programs\AV Guard Online\AV Guard Online.lnk
%System%\<random>.exe
%UserProfile%\Desktop\AV Guard Online.lnk
Step 3: Delete any AV Guard Online Registry files
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “<random>”
Step 4: Download MalwareBytes AntiMalware and run a full scan in safe mode.
In Conclusion:
AV Guard Online is a dangerous spyware program that should be removed immediately. Chances are that you had anti-virus protection on your computer that was destroyed by AV Guard Online.
That is why it is highly recommended to download Spyware Doctor and run a full scan even if manual removal is achieved. This will make sure that the infection is gone 100%, and will keep you protected in the future from any spyware or virus threats.
Still can’t remove AV Guard Online? Call us, we can help:
1-800-906-8454
If you have followed all the directions above and are still having troubles then please leave a detailed comment below and we will try our best to help you remove this infection.
Please be as specific as possible and tell us exactly what you have done so far to this threat.
If this page was helpful, please click the Facebook like button at the top of the page to help spread the word on how to remove AV Guard Online.
Filed under Uncategorized by admin on July 19, 2011 at 7:01 pm no comments
Has XP Defender Pro taken control of your computer? Is it trying to trick you into believing that you must purchase the program? BEWARE: This is a fake anti spyware program that comes from the same family of spyware as Windows Recovery and Windows Protection Alarm.
Do not purchase the full version of XP Defender Pro under any circumstance because it will not fix your problem, but instead make it worse. Once it is installed it can open the doors to many more infections.
This dangerous program will try and give you all kinds of legitimate looking alarms and results. No matter what, the alerts that XP Defender Pro give you are fake. XP Defender Pro can be dangerous for your PC, and it is very important that you remove it ASAP.
Automatic XP Defender Pro Removal Instructions:
Remove XP Defender Pro in 4 Easy Steps:
Bookmark this page and re-boot your computer into Safe Mode with Networking”. To enter “Safe Mode with Networking” press F8 repeatedly while your computer is rebooting.

Click Here To download Spyware Doctor with Antivirus.

Click Run to launch the SpywareDoctor Installation wizard and install the removal tool.

Spyware Doctor will automatically begin to scan your computer. When it’s done, click Fix Checked and finally remove XP Defender Pro and any other Spyware infections.

Having troubles downloading? Then you might need to follow the additional steps below:
Call us, we can help: 1-800-906-8454
1: Reset your Internet Explorer proxy settings.
- Under “Tools” in the browser tool bar select “Internet Options”.
- In the “Internet Options” window that pops up, click the “Connections” tab at the top.
- Click “LAN Settings” near the bottom of the “Connections” section.
- If the “Proxy server” checkbox is marked with a check, click it to deselect/uncheck it. See image below:

2. Now download Spyware Doctor by > Clicking Here <. Rename the file to iexplorer and double click to open and begin installation.
Now proceed with the directions above to remove XP Defender Pro.
Still can’t remove your spyware infection? Call us, we can help:
1-800-906-8454


Symptoms Of Infection
- Your computer is acting slow. XP Defender Pro slows down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
- You are getting pestered with pop ups. XP Defender Pro infects your registry and uses it to launch annoying pop up ads out of nowhere.
- Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious XP Defender Pro infection.
Dangers Of Infection
Viruses like XP Defender Pro will infect your registry and other important system files. If the infection is not treated it can cause a complete collapse of your system.

Some XP Defender Pro infections contain spyware and keyloggers which can be used to record sensitive data like passwords, credit card, bank account, and social security numbers. The longer you allow the infection to fester, the greater the chance of identity fraud.
How To Remove Infection Manually
Before considering to use these manual removal steps, please consider the following disclaimer:
Altering computer files and register items should only be attempted by knowledgeable computer users. Errors in performing these steps may lead to problems effecting other aspects of your machine. Attempt these steps at your own risk, otherwise consider using the automatic removal method.
Uninstall XP Defender Pro Processes:
%UserProfile%\Application Data\Microsoft\<random>.exe
Delete XP Defender Pro Files:
%UserProfile%\Application Data\Microsoft\<random>
Remove XP Defender Pro Registry Files:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe “Debugger” = ‘svchost.exe’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe “Debugger” = ‘svchost.exe’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe “Debugger” = ‘svchost.exe’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe “Debugger” = ‘svchost.exe’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe “Debugger” = ‘svchost.exe’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe “Debugger” = ‘svchost.exe’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe “Debugger” = ‘svchost.exe’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe “Debugger” = ‘svchost.exe’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = ’0′
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = ’0′
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore “DisableSR ” = ’1′
Popular Search Terms
Remove XP Defender Pro
Delete XP Defender Pro
Uninstall XP Defender Pro
How to get rid of XP Defender Pro
How to remove XP Defender Pro
XP Defender Pro removal
XP Defender Pro removal
Filed under Uncategorized by admin on February 14, 2011 at 9:28 pm no comments Antivirus .NET might be the next major spyware infection to hit the internet. This pesky fake anti spyware program will infect your computer without your permission or knowledge. It is even infecting and destroying the computers of the more internet savvy.
The thing that makes Antivirus .NET so dangerous is the fact that it needs no user intervention to install itself. It’s not your fault that your computer has become infected. But do not worry, because all can be restored as good as new.
Antivirus .NET will try and trick you into beleiving you need it’s full version by blasting your computer with pop-ups, fake virus scans, and fake virus alerts. It will then warn you that you must pay for the full version to remove the said “threats”.
But that’s not the worst of it. It will shut down your other anti-virus and anti-spyware programs. It will constantly redirect your internet connection and tell you that you are browsing unsafely. It will also infect and corrupt your registry, leaving your computer totally unsafe and unstable. Follow the directions below to get rid of it once and for all.
Automatic Antivirus .NET Removal Instructions:
Antivirus .NET AV Removal:

- Download Spyware Doctor
- Install Spyware Doctor
- Once Installed, it will update Its malware definitions
- Press Start Scan and let it scan your PC for malware
- After Scan is complete, It should find Antivirus .NET
- Press Fix Checked to remove Antivirus .NET

Many of you will notice that Antivirus .NET will block you from installing Spyware Doctor. In this case, you must follow this additional steps below:
- Download Spyware Doctor and save to your Desktop (if you cannot download then bookmark this page and skip to Step 3 to restore your internet)
- Rename the file iexplorer.exe
- Restart your Computer in Safe Mode with Networking (keep tapping F8 while your system boots up)
- Launch Internet Explorer, click on Tools and then Internet Options.
- Click on the Connections tab and select LAN Options
- Uncheck the box Use a Proxy Server For Your LAN and click OK
- Launch iexplorer.exe (Spyware Doctor)
- Update Malware Definitions and click Start Scan
- Click the Fix Checked button and remove Antivirus .NET
Following the above steps will prevent Antivirus .NET from blocking you and you will be able to install Spyware Doctor properly.

Symptoms Of Infection
- Your computer is acting slow. Antivirus .NET slows down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
- You are getting pestered with pop ups. Antivirus .NET infects your registry and uses it to launch annoying pop up ads out of nowhere.
- Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious Antivirus .NET infection.
Dangers Of Infection
Viruses like Antivirus .NET will infect your registry and other important system files. If the infection is not treated it can cause a complete collapse of your system.

Some Antivirus .NET infections contain spyware and keyloggers which can be used to record sensitive data like passwords, credit card, bank account, and social security numbers. The longer you allow the infection to fester, the greater the chance of identity fraud.
How To Remove Infection Manually
Before considering to use these manual removal steps, please consider the following disclaimer:
Altering computer files and register items should only be attempted by knowledgeable computer users. Errors in performing these steps may lead to problems effecting other aspects of your machine. Attempt these steps at your own risk, otherwise consider using the automatic removal method.
Uninstall Antivirus .NET Processes
%Temp%\<random>\<random>.exeFile Location Notes:
%Temp% refers to the Windows Temp folder. By default, this is C:\Windows\Temp for Windows 95/98/ME, C:\DOCUMENTS AND SETTINGS\ProfileName\LOCAL SETTINGS\Temp for Windows 2000/XP, and C:\Users\ProfileName\AppData\Local\Temp for Windows Vista and Windows 7.
Delete Antivirus .NET Files
%Temp%\[random]\
%Temp%\[random]\[random].exe, like
%Temp%\rvtkqtpyc\qstviuhsjmo.exe
Remove Antivirus .NET Registry Files
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter | “Enabled” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “ProxyOverride” = “”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “ProxyServer” = “http=127.0.0.1:30215″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “ProxyEnable” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | {RANDOM}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | {RANDOM}
Popular Search Terms
Remove Antivirus .NET
Delete Antivirus .NET
Antivirus .NET
How to get rid of Antivirus .NET
How to remove Antivirus .NET
Antivirus .NET removal
Remove Antivirus.NET
Antivirus.NET removal
Uninstall Antivirus .NET
Warning! If Spyware Doctor is blocked by the virus then run your system in safe mode and try again. To do this reboot your system and tap F8 repeatedly as your computer starts up. Then run Spyware Doctor as normal. If this doesn’t work try renaming the Spyware Doctor EXE file.
Filed under Uncategorized by admin on February 10, 2011 at 10:29 pm no comments 
Antivira AV is probably the next major spyware infection to hit the internet. This pesky fake anti spyware program will infect your computer without your permission or knowledge. It is even infecting and destroying the computers of the more internet savvy.
The thing that makes Antivira AV so dangerous is the fact that it needs no user intervention to install itself. It’s not your fault that your computer has become infected. But do not worry, because all can be restored as good as new.
Antivira AV will try and trick you into beleiving you need it’s full version by blasting your computer with pop-ups, fake virus scans, and fake virus alerts. It will then warn you that you must pay for the full version to remove the said “threats”.
But that’s not the worst of it. It will shut down your other anti-virus and anti-spyware programs. It will constantly redirect your internet connection and tell you that you are browsing unsafely. It will also infect and corrupt your registry, leaving your computer totally unsafe and unstable.
Automatic Antivira AV Removal Instructions:
*Spyware Doctors free version is only for spyware detection. If Spyware Doctor detects spyware on your PC, you will need to purchase Spyware Doctor to remove the spyware threats.
Antivira AV Removal:

- Download Spyware Doctor
- Install Spyware Doctor
- Once Installed, it will update Its malware definitions
- Press Start Scan and let it scan your PC for malware
- After Scan is complete, It should find Antivira AV
- Press Fix Checked to remove Antivira AV

Many of you will notice that Antivira AV will block you from installing Spyware Doctor. In this case, you must follow this additional steps below:
- Download Spyware Doctor and save to your Desktop (if you cannot download then bookmark this page and skip to Step 3 to restore your internet)
- Rename the file iexplorer.exe
- Restart your Computer in Safe Mode with Networking (keep tapping F8 while your system boots up)
- Launch Internet Explorer, click on Tools and then Internet Options.
- Click on the Connections tab and select LAN Options
- Uncheck the box Use a Proxy Server For Your LAN and click OK
- Launch iexplorer.exe (Spyware Doctor)
- Update Malware Definitions and click Start Scan
- Click the Fix Checked button and remove Antivira AV
Following the above steps will prevent Antivira AV from blocking you and you will be able to install Spyware Doctor properly.

Symptoms Of Infection
- Your computer is acting slow. Antivira AV slows down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
- You are getting pestered with pop ups. Antivira AV infects your registry and uses it to launch annoying pop up ads out of nowhere.
- Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious Antivira AV infection.
Dangers Of Infection
Viruses like Antivira AV will infect your registry and other important system files. If the infection is not treated it can cause a complete collapse of your system.

Some Antivira AV infections contain spyware and keyloggers which can be used to record sensitive data like passwords, credit card, bank account, and social security numbers. The longer you allow the infection to fester, the greater the chance of identity fraud.
How To Remove Infection Manually
Before considering to use these manual removal steps, please consider the following disclaimer:
Altering computer files and register items should only be attempted by knowledgeable computer users. Errors in performing these steps may lead to problems effecting other aspects of your machine. Attempt these steps at your own risk, otherwise consider using the automatic removal method.
Uninstall Antivira AV Processes
[random].exe
Delete Antivira AV Files
c:\Documents and Settings\All Users\Application Data\[random]\[random]
c:\Documents and Settings\All Users\Application Data\[random]\[random].exe
c:\Users\All Users\AppData\Roaming\[random]\[random]
c:\Users\All Users\AppData\Roaming\[random]\[random].exe
Remove Antivira AV Registry Files
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1″
Popular Search Terms
Remove Antivira AV
Delete Antivira AV
Uninstall Antivira AV
How to get rid of Antivira AV
How to remove Antivira AV
Antivira AV removal
Remove AntiviraAV
Warning! If Spyware Doctor is blocked by the virus then run your system in safe mode and try again. To do this reboot your system and tap F8 repeatedly as your computer starts up. Then run Spyware Doctor as normal. If this doesn’t work try renaming the Spyware Doctor EXE file.
Filed under Uncategorized by admin on January 7, 2011 at 2:13 pm one comment
XP Internet Security 2010 is a newer fake antivirus/malware that is quickly spreading across the internet. XP Internet Security 2010, and similar malware, use scare tactics to try and convince users their machine is infected with viruses and adware. They do this in order to trick the user into purchasing . These rogue programs are fake antivirus programs and you should not fall prey to them.
We have noticed that XP Internet Security 2010 will often go by different name variations from XP Internet Security 2010 to: Win 7 Antivirus Pro, Win 7 Antispyware 2010, Antivirus Vista 2010, XP Guardian, XP Antivirus Pro, XP Internet Security, and other variations.
XP Internet Security 2010 is a dangerous fake that must be removed immediately. Although you can remove Xp Internet Security 2010 manually (and we’ll show you how in a short while), the steps are pretty tricky. So I strongly suggest you go for automatic removal on this one.
Automatic XP Internet Security 2010 Removal Instructions:
Remove Internet Security 2011:

- Download Spyware Doctor
- Install Spyware Doctor
- Once Installed, it will update Its malware definitions
- Press Start Scan and let it scan your PC for malware
- After Scan is complete, It should find XP Internet Security 2010
- Press Fix Checked to remove XP Internet Security 2010

Many of you will notice that XP Internet Security 2010 will block you from installing Spyware Doctor. In this case, you must follow this additional steps below:
- Download Spyware Doctor and save to your Desktop (if you cannot download then bookmark this page and skip to Step 3 to restore your internet)
- Rename the file iexplorer.exe
- Restart your Computer in Safe Mode with Networking (keep tapping F8 while your system boots up)
- Launch Internet Explorer, click on Tools and then Internet Options.
- Click on the Connections tab and select LAN Options
- Uncheck the box Use a Proxy Server For Your LAN and click OK
- Launch iexplorer.exe (Spyware Doctor)
- Update Malware Definitions and click Start Scan
- Click the Fix Checked button and remove XP Internet Security 2010
Following the above steps will prevent XP Internet Security 2010 from blocking you and you will be able to install Spyware Doctor properly.

Symptoms Of Infection
- Your computer is acting slow. XP Internet Security 2010 slows down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
- You are getting pestered with pop ups. XP Internet Security 2010 infects your registry and uses it to launch annoying pop up ads out of nowhere.
- Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious XP Internet Security 2010 infection.
Dangers Of Infection
Viruses like XP Internet Security 2010 will infect your registry and other important system files. If the infection is not treated it can cause a complete collapse of your system.

Some XP Internet Security 2010 infections contain spyware and keyloggers which can be used to record sensitive data like passwords, credit card, bank account, and social security numbers. The longer you allow the infection to fester, the greater the chance of identity fraud.
Manually Removal XP Internet Security 2010:
Before considering to use these manual removal steps, please consider the following disclaimer:
Altering computer files and register items should only be attempted by knowledgeable computer users. Errors in performing these steps may lead to problems effecting other aspects of your machine. Attempt these steps at your own risk, otherwise consider using the automatic removal method.
You should print or write these steps out:
Step 1) Open task manager (press ctrl + alt + del) and end the following process: av.exe
If you cannot open task manager (the rogue program closes it as soon as it open) then you need to reboot your system and as soon as Windows loads, pres ctrl + alt + del before the rogue program gets a chance to load.
Step 2) Delete the following registry values:
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CURRENT_USER\Software\Classes\secfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\secfile\shell
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = “”%AppData%\av.exe” /START “%1? %*”
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = “”%1? %*”
HKEY_CURRENT_USER\Software\Classes\.exe | @ = “secfile”
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = “application/x-msdownload”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | @ = “”%AppData%\av.exe” /START “%1? %*”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | IsolatedCommand = “”%1? %*”
Step 3) Delete the following file: av.exe
Do a Windows search for the location of the file.
Step 4) Open msconfig (type in “msconfig” into search field in start menu) and uncheck the following in the start up tab:
Anything that contains the rogue malware name, and anything that is blank or has no name.
Popular Search Terms
Remove XP Internet Security 2010
Delete XP Internet Security 2010
Uninstall XP Internet Security 2010
How to get rid of XP Internet Security 2010
How to remove XP Internet Security 2010
XP Internet Security 2010 removal
Remove XP Internet Security 2010
XP Internet Security 2010 removal
XP Internet Security 2010
Warning! If Spyware Doctor is blocked by the virus then run your system in safe mode and try again. To do this reboot your system and tap F8 repeatedly as your computer starts up. Then run Spyware Doctor as normal. If this doesn’t work try renaming the Spyware Doctor EXE file.
Filed under Uncategorized by admin on November 27, 2010 at 3:42 pm no comments 
Antimalware Doctor is yet another dangerous fake anti spyware programs to hit the internet. Unfortunately it seems like a totally legitimate program and is duping many new and experienced internet users into trusting and downloading it.
Antimalware Doctor will try and trick you into buying the full version by using scare tactics. It will bombard you with fake pop-ups and security alerts. It will also run fake scans and try and get you to buy the full version by giving false alerts. It goes without saying that you should not purchase the full version.
It goes without saying that immediate removal is imperative to secure your data. Failure to do so will not only result in possible damage to the operating system and your PC hardware, it will also increase the chance of other bad software getting in your computer and hacking into your online accounts. If you believe that this malware is in your computer, just follow our instructions below to be rid of it once and for all.
Automatic Antimalware Doctor Removal Instructions:
Remove Antimalware Doctor:

- Download Spyware Doctor
- Install Spyware Doctor
- Once Installed, it will update Its malware definitions
- Press Start Scan and let it scan your PC for malware
- After Scan is complete, It should find Antimalware Doctor
- Press Fix Checked to remove Antimalware Doctor

Many of you will notice that Antimalware Doctor will block you from installing Spyware Doctor. In this case, you must follow this additional steps below:
- Download Spyware Doctor and save to your Desktop (if you cannot download then bookmark this page and skip to Step 3 to restore your internet)
- Rename the file iexplorer.exe
- Restart your Computer in Safe Mode with Networking (keep tapping F8 while your system boots up)
- Launch Internet Explorer, click on Tools and then Internet Options.
- Click on the Connections tab and select LAN Options
- Uncheck the box Use a Proxy Server For Your LAN and click OK
- Launch iexplorer.exe (Spyware Doctor)
- Update Malware Definitions and click Start Scan
- Click the Fix Checked button and remove Antimalware Doctor
Following the above steps will prevent Antimalware Doctor from blocking you and you will be able to install Spyware Doctor properly.

Symptoms Of Infection
- Your computer is acting slow. Antimalware Doctor slows down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
- You are getting pestered with pop ups. Antimalware Doctor infects your registry and uses it to launch annoying pop up ads out of nowhere.
- Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious Antimalware Doctor infection.
Dangers Of Infection
Viruses like Antimalware Doctor will infect your registry and other important system files. If the infection is not treated it can cause a complete collapse of your system.

Some Antimalware Doctor infections contain spyware and keyloggers which can be used to record sensitive data like passwords, credit card, bank account, and social security numbers. The longer you allow the infection to fester, the greater the chance of identity fraud.
How To Remove Infection Manually
Uninstall Antimalware Doctor Processes
Antimalware Doctor.exe
Delete Antimalware Doctor Files
C:\Windows\System32\enemies-names.txt
C:\Windows\System32\Antimalware Doctor.exe
Remove Antimalware Doctor Registry Files
HKEY_CURRENT_USER\Software\Antimalware Doctor Inc\Antimalware Doctor
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Antimalware Doctor.exe”
Popular Search Terms
Remove Antimalware Doctor
Delete Antimalware Doctor
Uninstall Antimalware Doctor
How to get rid of Antimalware Doctor
How to remove Antimalware Doctor
Antimalware Doctor removal
Remove AntimalwareDoctor
AntimalwareDoctor removal
Antimalware-Doctor
Warning! If Spyware Doctor is blocked by the virus then run your system in safe mode and try again. To do this reboot your system and tap F8 repeatedly as your computer starts up. Then run Spyware Doctor as normal.
Filed under Uncategorized by admin on August 22, 2010 at 5:07 pm no comments 
Has Security Tool taken control of your computer? Is it trying to trick you into believing that you must purchase the program? BEWARE: This is a fake anti spyware program that comes from the same family of spyware as System Security and Total Security 2009.
Do not purchase the full version of Security Tool under any circumstance because it will not fix your problem, but instead make it worse. Once it is installed it can open the doors to many more infections.
This dangerous program will try and give you all kinds of legitimate looking alarms and results. No matter what, the alerts that Security tool give you are fake. Security Tool can be dangerous for your PC, and it is very important that you remove it ASAP.
Automatic Security Tool Removal Instructions:
Remove Security Tool:

- Download Spyware Doctor
- Install Spyware Doctor
- Once Installed, it will update Its malware definitions
- Press Start Scan and let it scan your PC for malware
- After Scan is complete, It should find Security Tool
- Press Fix Checked to remove Security Tool
Many of you will notice that Security Tool will block you from installing Spyware Doctor. In this case, you must follow this additional steps below:
- Download Spyware Doctor and save to your Desktop (if you cannot download then bookmark this page and skip to Step 3 to restore your internet)
- Rename the file iexplorer.exe
- Restart your Computer in Safe Mode with Networking (keep tapping F8 while your system boots up)
- Launch Internet Explorer, click on Tools and then Internet Options.
- Click on the Connections tab and select LAN Options
- Uncheck the box Use a Proxy Server For Your LAN and click OK
- Launch iexplorer.exe (Spyware Doctor)
- Update Malware Definitions and click Start Scan
- Click the Fix Checked button and remove Security Tool
Following the above steps will prevent Security Tool from blocking you and you will be able to install Spyware Doctor properly.
Symptoms Of Infection
- Your computer is acting slow. Security Tool slows down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
- You are getting pestered with pop ups. Security Tool infects your registry and uses it to launch annoying pop up ads out of nowhere.
- Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious Security Tool infection.
Dangers Of Infection
Viruses like Security Tool will infect your registry and other important system files. If the infection is not treated it can cause a complete collapse of your system.

Some Security Tool infections contain spyware and keyloggers which can be used to record sensitive data like passwords, credit card, bank account, and social security numbers. The longer you allow the infection to fester, the greater the chance of identity fraud.
How To Remove Infection Manually
Before considering to use these manual removal steps, please consider the following disclaimer:
Altering computer files and register items should only be attempted by knowledgeable computer users. Errors in performing these steps may lead to problems effecting other aspects of your machine. Attempt these steps at your own risk, otherwise consider using the automatic removal method.
Uninstall Security Tool Processes:
%UserProfile%\Application Data\4946550101\4946550101.exe
Delete Security Tool Files:
%UserProfile%\Start Menu\Programs\Security Tool.lnk
%UserProfile%\Application Data\4946550101\4946550101.bat
%UserProfile%\Application Data\4946550101\4946550101.cfg
%UserProfile%\Application Data\4946550101\4946550101.exe
%UserProfile%\Application Data\4946550101
%UserProfile%\Desktop\Security Tool.lnk
%Program Files%\SecurityTool
Remove Security Tool Registry Files:
77DC0B63-ff35-4ba9-8BE8-aa9EB676FA02
7897A556-0E82-49F4-8C80-D0983CBF0352
7F23592B-8F2C-4C08-83A8-BBE01BF9CC64
a791a998-ae9a-42cb-b833-45279b64dd30
AF4DA69B-E1D6-469A-855B-6445294857D4
HKEY_LOCAL_MACHINE\SOFTWARE\SecurityTool
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SecurityTool
HKEY_CURRENT_USER\Software\Vista Antivirus 2010
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “SecurityTool”
Popular Search Terms
Remove Security Tool
Delete Security Tool
Uninstall Security Tool
How to get rid of Security Tool
How to remove Security Tool
Security Tool removal
Remove SecurityTool
Security Tool removal
Security-Tool
Warning! If Spyware Doctor is blocked by the virus then run your system in safe mode and try again. To do this reboot your system and tap F8 repeatedly as your computer starts up. Then run Spyware Doctor as normal. If this doesn’t work try renaming the Spyware Doctor EXE file.
Filed under Uncategorized by admin on August 21, 2010 at 1:48 am no comments 
Is your computer warning you of an urgent need to purchase a Desktop Security 2010 uninstall key? Whatever you do, do not do it. This scam. This program is a actually a fake antivirus program that wants to rip you off. Whatever you do, do not purchase Desktop Security 2010 uninstall key.
Desktop Security 2010 does a very good job of mimicking a legitimate looking anti spyware program. But be warned that this is not a real program, only a well designed scam. It’s got a very professional interface desinged to trick you into believing it’s a legitimate program.
Your computer may have become infected with desktop security 2010 while browsing random websites online. It may have come from an unsafe website, a web 2.0 website like facebook or youtube. Although it’s not really important how you became infected, but how you will remove desktop security 2010. If your computer has become infected with desktop security 2010, just follow our instructions below to get rid of it once and for all.
Automatic Desktop Security 2010 Removal Instructions:
Remove Desktop Security 2010:

- Download Spyware Doctor
- Install Spyware Doctor
- Once Installed, it will update Its malware definitions
- Press Start Scan and let it scan your PC for malware
- After Scan is complete, It should find Desktop Security 2010
- Press Fix Checked to remove Desktop Security 2010
Many of you will notice that Desktop Security 2010 will block you from installing Spyware Doctor. In this case, you must follow this additional step after you have downloaded the program – Restart Your Computer in Safe Mode with Networking AFTER you have downloaded Spyware Doctor from this website.
To restart in Safe Mode with Networking, restart your computer as you normally do and right when it begins to reboot, repeatedly press the F8 key – it must be pressed before the Windows logo appears when you are restarting. You will then need to select Safe Mode with Networking.
Restarting in this manner will prevent Desktop Security 2010 from blocking you and you will be able to install Spyware Doctor properly. But remember, you must Download Spyware Doctor before you restart in safe mode.
Symptoms Of Infection
- Your computer is acting slow. Desktop Security 2010 slows down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
- You are getting pestered with pop ups. Desktop Security 2010 infects your registry and uses it to launch annoying pop up ads out of nowhere.
- Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious Desktop Security 2010 infection.
Dangers Of Infection
Viruses like Desktop Security 2010 will infect your registry and other important system files. If the infection is not treated it can cause a complete collapse of your system.

Some Desktop Security 2010 infections contain spyware and keyloggers which can be used to record sensitive data like passwords, credit card, bank account, and social security numbers. The longer you allow the infection to fester, the greater the chance of identity fraud.
How To Remove Infection Manually
Uninstall Desktop Security 2010 Processes
Desktop Security 2010.exe
gedx_ae09.exe
jkfuckjs.exe
uninstall.exe
[random characters].exe
kgn.exe
kilslmd.exe
kn.a.exe
securitycenter.exe
Delete Desktop Security 2010 Files
Desktop Security 2010 Desktop Security 2010.lnk
Activate Desktop Security 2010.lnk
Help Desktop Security 2010.lnk
How to Activate Desktop Security 2010.lnk
gedx_ae09.exe jkfuckjs.exe
kgn.exe kilslmd.exe
kn.a.exe daily.cvd
Desktop Security 2010.exe
guide.chm
hjengine.dll
mfc71.dll
MFC71ENU.DLL
msvcp71.dll
msvcr71.dll
pthreadVC2.dll
securitycenter.exe
taskmgr.dll
uninstall.exe
[random characters].exe
Remove Desktop Security 2010 Registry Files
HKEY_LOCAL_MACHINE\SOFTWARE\Desktop Security 2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Desktop Security 2010
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = “C:\Program Files\Desktop Security 2010\Desktop Security 2010.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform “Desktop Security 2010″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random characters]”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Desktop Security 2010″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “SecurityCenter”
Popular Search Terms
Remove Desktop Security 2010
Delete Desktop Security 2010
Uninstall Desktop Security 2010
How to get rid of Desktop Security 2010
How to remove Desktop Security 2010
Desktop Security 2010 removal
Remove DesktopSecurity2010
DesktopSecurity2010 removal
Desktop-Security-2010
Warning! If Spyware Doctor is blocked by the virus then run your system in safe mode and try again. To do this reboot your system and tap F8 repeatedly as your computer starts up. Then run Spyware Doctor as normal. If this doesn’t work try renaming the Spyware Doctor EXE file.
Filed under Latest Spyware News, Uncategorized by admin on June 25, 2010 at 7:07 pm no comments 
Spyware is a category of computer programs that attach themselves to your operating system in nefarious ways. They can suck the life out of your computer’s processing power. They are designed to track your Internet habits, nag you with unwanted sales offers or generate traffic for their host Web site.
According to recent estimates, more than two-thirds of all personal computers are infected with some kind of spyware. But before you chuck your computer out the window and move to a desert island, you might want to read on. This article explains how spyware gets on your computer, what it does there and how to get rid of it.
What is Spyware?
Some people mistake spyware for a computer virus. A computer virus is a piece of code designed to replicate itself as many times as possible, spreading from one host computer to any other computers connected to it. It usually has a payload that may damage your personal files or even your operating system.Spyware, on the other hand, is generally not designed to damage your computer.
Spyware is broadly defined as any program that gets into your computer without permission and hides in the background while it makes unwanted changes to your user experience. The damage it does is more a by-product of its main mission, which is to serve you targeted advertisements or make your browser display certain sites or search results.At present, most spyware targets only the Windows operating system. Some of the more notorious spyware companies include Gator, Bonzi Buddy, 180 Solutions, DirectRevenue, Cydoor, CoolWebSearch, Xupiter, XXXDial and Euniverse.
How Does It Get On Your Computer?
Spyware usually gets onto your machine because of something you do, like clicking a button on a pop-up window, installing a software package or agreeing to add functionality to your Web browser. These applications often use trickery to get you to install them, from fake system alert messages to buttons that say “cancel” when they really do the opposite.Here are some of the general ways in which spyware finds its way into your computer:
Piggybacked software installation — Some applications — particularly peer-to-peer file-sharing clients — will install spyware as a part of their standard install. If you don’t read the installation list closely, you might not notice that you’re getting more than the file-sharing application you want. This is especially true of the “free” versions that are advertised as an alternative to software you have to buy. There’s no such thing as a free lunch.
Drive-by download — This is when a Web site or pop-up window automatically tries to download and install spyware on your machine. The only warning you might get would be your browser’s standard message telling you the name of the software and asking if it’s OK to install it. If your security settings are set low enough, you won’t even get the warning.
Browser add-ons — These are pieces of software that add enhancements to your Web browser, such as a toolbar, animated pal or additional search box. Sometimes, these really do what they say they do but also include elements of spyware as part of the deal. Or sometimes they are nothing more than thinly veiled spyware themselves. Particularly nasty add-ons are considered browser hijackers — these embed themselves deeply in your machine and take quite a bit of work to get rid of.
Masquerading as anti-spyware — This is one of the cruelest tricks in the book. This type of software convinces you that it’s a tool to detect and remove spyware. When you run the tool, it tells you your computer is clean while it installs additional spyware of its own.
What Does It Do?
Spyware can do any number of things once it is installed on your computer.At a minimum, most spyware runs as an application in the background as soon as you start your computer up, hogging RAM and processor power. It can generate endless pop-up ads that make your Web browser so slow it becomes unusable. It can reset your browser’s home page to display an ad every time you open it. Some spyware redirects your Web searches, controlling the results you see and making your search engine practically useless. It can also modify the DLLs (dynamically linked libraries) your computer uses to connect to the Internet, causing connectivity failures that are hard to diagnose.Certain types of spyware can modify your Internet settings so that if you connect through dial-up service, your modem dials out to expensive telephone numbers.
Like a bad guest, some spyware changes your firewall settings, inviting in more unwanted pieces of software. There are even some forms that are smart enough to know when you try to remove them in the Windows registry and intercept your attempts to do so.The point of all this from the spyware makers’ perspective is not always clear. One reason it’s used is to pad advertisers’ Web traffic statistics. If they can force your computer to show you tons of pop-up ads and fake search results, they can claim credit for displaying that ad to you over and over again. And each time you click the ad by accident, they can count that as someone expressing interest in the advertised product.Another use of spyware is to steal affiliate credits. Major shopping sites like Amazon.com and ebay.com offer credit to a Web site that successfully directs traffic to their item pages. Certain spyware applications capture your requests to view sites like Amazon and Ebay and then take the credit for sending you there.
Legality
So is it legal to install difficult-to-remove software without the user’s permission? Not really. There’s an increasing body of state legislation that explicitly bans spyware, including the Spyware Control Act in Utah and the Consumer Protection Against Computer Spyware Act in California. But even without these new state laws, federal law already prohibits spyware. The Computer Fraud and Abuse Act covers any unauthorized software installations. Deceptive trade practices of any kind also violate the Federal Trade Commission Act.
Additionally, the Electronic Communications Privacy Act makes it unlawful for companies to violate the security of customers’ personal information.Just like anti-spam legislation, these spyware laws can be very difficult to enforce in practice, and the perpetrators know it. It can be tough to find hard evidence connecting individual companies to their spyware products, and, as with all Internet-related lawsuits, there are often battles over which court’s jurisdiction applies to the case. Just because it’s illegal doesn’t mean it’s easy to stop.
Solutions
How can you protect yourself against spyware, and what can you do if you think you already have some on your computer? Here are a few suggestions.
Use a spyware scanner. There are several applications you can turn to for trustworthy spyware detection and removal, including Spyware Doctor, Ad-aware, Spybot and Microsoft AntiSpyware. All three are free for the personal edition. These work just like your anti-virus software and can provide active protection as well as detection.
They will also detect Internet cookies and tell you which sites they refer back to.Note – Once you know which spyware is on your computer, in some cases you’ll need to seek specific instructions on how to remove it.
Use a pop-up blocker. Many of the current browsers, including Internet Explorer 6.0 and Mozilla Firefox 1.0, have the ability to block all Web sites from serving you pop-up windows. This function can be configured to be on all of the time or to alert you each time a site wants to pop up a new window. It can also tell you where the pop-up is coming from and selectively allow windows from trusted sources.
Disable Active-X. Most browsers have security settings in their preferences which allow you to specify which actions Web sites are allowed to take on your machine. Since many spyware applications take advantage of a special code in Windows called Active-X, it’s not a bad idea to simply disable Active-X on your browser. Note that if you do this, you will also disallow the legitimate uses for Active-X, which may interfere with the functionality of some Web sites.
Be suspicious of installing new software. In general, it pays to be suspicious when a site asks to install something new on your computer. If it’s not a plug-in you recognize, like Flash, QuickTime or the latest Java engine, the safest plan of action is to reject the installation of new components unless you have some specific reason to trust them. Today’s Web sites are sophisticated enough that the vast majority of functionality happens inside your browser, requiring only a bare minimum of standard plug-ins. Besides, it never hurts to reject the installation first and see if you can get on without it. A trustworthy site will always give you the opportunity to go back and download a needed component later.
Use the “X” to close pop-up windows. Get to know what your computer’s system messages look like so that you can spot a fake. It’s usually pretty easy to tell the difference once you get to know the standard look of your system alerts. Stay away from the “No thanks” buttons if you can help it, and instead close the window with the default “X” at the corner of the toolbar.
For an even more reliable option, use the keystroke combination for “close window” built into your software. You can look in your browser’s “File” menu to find it.
If you believe your computer has been infected with spyware, then be sure to take advantage of this free spyware scan.

For more information on spyware, spyware removal and related topics, visit this article on HowStuffWorks.com.
Content provided by HowStuffWorks.com.