Get rid of spyware. The easy way

Smart Fortress 2012 is a rogue antivirus program that belongs to Rogue.WinWebSec family of rogues. The program warns that your system is badly infected but in fact it only wants to sell its useless application as a reputable antispyware program. Smart Fortress 2012 reaches random computer systems with a help of Trojan viruses.

Once there, the program uses malicious methods to convince computer user into purchasing something completely useless. The program generates tons of security notifications and pop up ads which warn that your system is infected with some spyware infection. Some security warnings are displayed when you try to launch specific program. The message states that the program is infected and recommends updating Smart Fortress 2012.

The funny part is that you have never installed Smart Fortress 2012 to your system so how can the program keep asking to be updated and similar things. Although computer users find it strange, many of them still fall for this trick and they purchase Smart Fortress 2012.

What is more, the program uses a fake scanner which looks just like legitimate one. The scanner pretends looking for infections every single time you reboot your system. Once the scan finishes the program displays a list of infections and recommends getting a full version of Smart Fortress 2012 in order to remove them.

Do not fall for this trick and eliminate Smart Fortress 2012 as soon as you detect it on your machine. For the best results, use a reputable antispyware program.

Smart HDD description

Smart HDD is a fake computer optimization program that is designed just to scare computer users and make them purchase something fake and illegal. It’s an application that infiltrates into the system through Trojan infections. Once there it starts displaying various security notifications and pop up messages that warns about some hard drive sector reading errors, hard disc problems etc. It scans the system using a fake scanner which reports about nonexistent infections.

The purpose of Smart HDD is to make you purchase its license. Unfortunately, the program does not have any useful functions so basically paying means giving your money to cyber criminals for nothing. Do not purchase Smart HDD under any circumstances. You can find a a removal guide of Smart HDD below.

How to remove Smart HDD

The most common way to uninstall this badware from your system is to use Add/Remove Programs function in Control Panel. Unfortunately, this doesn’t always work with Smart HDD. Quite often, the progam hides some files and runs some processes on the infected machine completely secretly. In order to delete Smart HDD from your system temporarily you have to stop and remove its processes, unregister DLL files.

Use this code to fake register Smart HDD: 15801587234612645205224631045976. After that most of the security notifications by Smart HDD will stop bothering you. Then you can perform a full system scan with a reputable antispyware program, such as Spyware Docotr or Spyhunter. Make sure you have the newest version of the program.

Open c:\windows\system32 in explorer. Find cmd.exe and create a desktop link to it.

Removing Smart HDD manually

Launch cmd from desk. Type: “runas /user:cceng cmd” without quotes and press enter.

Launch taskmgr in a new windows

Kill  processes of Smart HDD which usually consist of random letters/numbers and look quite unusual.

In the same cmd, launch regedit.

Go to HKCU\Software\Microsoft\Windows\CurrentVersion\run and delete all the reg values that are from the same location like processes you killed

Delete any desktop and startmenu icons to it.

Find more about Smart HDD and how to remove it.

Security Scanner description

Security Scanner is a rogue anti-spyware that comes from the same family as Security Shield, Security Tool and other extremely dangerous applications that all have been initiating serious problems for PC users. This real-looking but fake application is presented as powerful security program that protects PC on new level. However, Security Scanner 2012 is closely connected to Trojans and has an empty virus data base, so it has no capabilities to find and remove computer viruses for you. The only thing it does is displaying annoying system scanners and alerts that all report nonexistent infections. Please, don’t fall for Security Scanner or Security Scanner 2012 and remove this misleading program ASAP.

In the beginning, Security Scanner 2012 employs Trojan viruses to help it with the infiltration on the compromised PC. In most of the cases, they come inside the system without any sign and additionally make some registry modification so that the malware could launch once the PC is rebooted. Sometimes, fake scanner websites are used to convince user to download the installer. In addition, Security Scanner starts triggering its annoying alerts and scanners that all inform the victim that he/she has some problems. Of course, Security Scanner 2012 reports only invented problems and harmless viruses in order to make its victims concerned about their machines. If reported by this program these viruses do not deserve any trust, they should be simply ignored.

Under no circumstances should you purchase this fake security program. Follow this guide to remove Security Scanner from your system.

How to remove Security Scanner

To get rid of spyware such as Security Scanner 2012 you must block Security Scanner sites, stop and remove processes, unregister DLL files, search and remove all other Security Scanner files and registry utility. Follow the Security Scanner detection and removal instructions below.

The most typical spyware removal method is to remove Security Scanner 2012 by using “Add or Remove Programs” service. However there may be hidden Security Scanner files, running processes and registries in your computer, so Security Scanner may recreate all other files after reboot.

Using additional anti-spyware software:

Enter this address into the address bar: http://www.2-viruses.com/downloads/spyhunter-i.exe to download Spyhunter anti-malware installer without being disabled. This anti-malware program kills malicious processes on install, thus you might run even in cases when other programs are blocked.
Use this code for the fake Security Scanner registration: 64C665BE-4DE7-423B-A6B6-BC0172B25DF2. In addition, after disabling the virus, run a full system scan with Spyhunter, Spyware Doctor or Malwarebytes Anti-Malware, as this only disables parasite. The code changes sometimes, though.
Download process explorer ( http://www.2-viruses.com/wp-content/uploads/PE/eXplorer.exe ) , then rename it to explorer.exe or iexplore.exe and kill malware processes running in the background. In addition, download Spyware Doctor, Spyhunter, etc. to run a full system scan and find all infected files on your computer.

Removing Security Scanner manually

Check if you can launch regedit and task manager (start->run->regedit, press ctrl-alt-del, choose task manager)
If regedit fails, you will have to use additional software. Removal instructions above.
If task manager fails and you can not access regedit or it failed to repair step 1.2 : Download Process explorer and rename it to iexplorer.exe
Stop all tasks under your user that are named by random numbers, your username or are completely unknown, as well as the process “hotfix.exe”. Note down their names: %LocalAppData%\[random].exe
Using regedit, remove these Security Scanner registry entries (use the names that you noted down): HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “[random]
Remove these Security Scanner files (with names noted down): %LocalAppData%\[random].exe
Scan with reputable spyware remover as Spyware Doctor for remaining traces of infection
Reboot your system

Spyware removal tools for making your system more secure against infections like Security Tool
Spyware Doctor (recommended spyware remover)
Superantispyware (quite good spyware remover)
Spybot S&D (if you are completely old-school)
Hitman Pro 3.5 (if you have no problem scanning your PC each day manually)
AVAST antivirus – one of the best free antivirus
ESET NOD32 -very good commercial antivirus
G-Data – new and scored very well
Microsoft’s security essentials – free antivirus by Microsoft..

More information about Security Scanner removal.

Security shield is a rogue anti-spyware program that displays lots of disturbing warnings in order to convince you into purchasing full version of it. The rogue is spread by infected websites or trojans in fake popular software updates or faked movies. Thus you should take care when downloading something from the network or you can get infected with malware like Security Shield.

Security Shield prevents majority of software execution by claiming they are infected. It will also display a fake warning over any website visited. There are several strategies how to overcome it.

1. Download anti-malware programs directly, for example http://www.2-viruses.com/downloads/spyhunter-i.exe. Spyhunter and some other anti-malware programs kill Security Shield process during install. You can use Process Explorer as well.
2. Use Security Shield virus registration codes.
   • Click Get full protection.
   • Look place to enter activation code.
3. Search for Security Shield files, rename them, and reboot. It should not launch on restart

.

Remember, you have to upgrade your antivirus, as it is better not to let malware like Security Shield pass through your PCs defenses rather than remove it afterwards. Never trust program you haven’t installed yourself, also make sure you research before purchasing any software.

System Check is a fake computer optimization program that spreads on the system with the help of Trojan viruses and warn about hard drive problems that in fact do not perform any useful action. The application warns your hard disk problems can lead to corrupt and missing data. It displays lots of fake alerts and security notifications scaring you that you really need to purchase a full version of System Check in order to fix all problems that have been detected on your system.

In reality System Check only wants to get money from you but it cannot perform any functions at all. System Check was designed just on one purpose – to steal money from random computer users. Most of the time less experienced computer users fall for this trick as System Check manages to create such a situation that it looks you cannot do anything about it.

The program even hides some of your files so you start thinking that your system is actually having some issues. The most effective System Check virus removal is by using a reputable antispyware program as soon as you detect it on your machine. It’s not a program worth your trust. 

Win 7 Antivirus 2012 is a rogue antivirus program that was designed by computer hackers in order to gain money from random computer hackers. The program warns that your system is at risk and it recommends getting a full version of Win 7 Antivirus 2012 in order to solve all your security issues. The application warns that your system is infected by displaying a security alert. Once you click on it you will get Win 7 Antivirus 2012 installed to your system. The program will also be configured to start automatically with each system reboot.

Win 7 Antivirus 2012 uses a fake scanner to imitates scanning the infected system. Unfortunately, it is not able to detect anything and that is not the point of this program. Instead it displays a a list of infections and tells to remove them as soon as possible. As a solution it offers getting a full version of Win 7 Antivirus 2012.

What is more, the application constantly displays fake security notifications and pop up ads which do not correspond to reality at all. They all warn about system infections even if your system is completely clear of them. The purpose of these messages is to make you think that your system is infected and make you pay for Win 7 Antivirus 2012. as soon as you pay, the purpose of this badware is completed.

Please remove Win 7 Antivirus 2012 with the reputable antivirus program as soon as you detect it on your machine. You can do it using a reputable antispyware program. If you have paid for this malicious application already, please don’t hesitate to contact your credit card company and dispute the charges.

System Fix is a fake system defragmenter that belongs to Fake HDD family of  rogue programs. Here are some facts about it:

1. System Fix is spread by Trojans and infected/corrupt websites
2. System Fix refuses to be uninstalled from the system. None of the legitimate applications do that.
3. System Fix falsifies its scan results and attempts to make computer users purchase its fake program.
4. System Fix warns about hard drive issues even if your system is completely fine.
5. System Fix might block many of your computer programs and destroy regular performance of your machine.

There are 3 ways how to get rid of System Fix:

Using System Restore to get rid from System Fix

Note: System Fix might disable system restore.

1. Click Start.
2. Point to All Programs.
3. Point to Accessories.
4. Point to System Fix.
5. Click System Restore.
6. Follow the instructions on the wizard.

Using Automatical remover to get rid from System Fix

1. Check if you are able to install and run Spyware Doctor for automatic System Fix removal: Spyware doctor
2. If download, execution or installation fails rename the downloaded executable to iexplorer.exe, firefox.exe or alike. These names are not blocked by virus usually.
3. After removal, restart your system and scan with alternate removers to check for othe infections that could have infiltrated together with System Fix.

Removing System Fix manually

1. Check if you can launch regedit and task manager (start->run->regedit, press ctrl-alt-del, choose task manager)
   1. If it fails, you will have to use automatic removal instructions (above)
   2. If task manager fails, but you can access regedit, search for a keys in registry containing Task and delete them.
   3. If task manager fails and you cannot access regedit or it failed to repair step 1.2, download Process explorer and rename it to iexplorer.exe
2. Stop all tasks that has a random name that consists of digits, that are named as your username or are completely unknown and looks suspicious. Write down their names.
3. Search for these files in hard disk and delete them.
4. Search for registry keys that contain these files and delete them.
5. Scan with reputable spyware remover as Spyware Doctor to remove infection completely.
6. Reboot your system.

Spyware removal tools for making your system more secure against infections like System Fix

1. Spyware Doctor (recommended spyware remover)
   1. Superantispyware (quite good spyware remover)
   2. Spybot S&D (if you are completely oldschool)
   3. Malwarebytes anti-malware (if you have no problem scanning your PC each day manually)
2. AVAST antivirus – one of the best free antivirus
   1. ESET NOD32 -very good commercial antivirus
   2. G-Data – new and scored very well
   3. Microsoft’s security essentials – free antivirus by microsoft, very new.

Security Sphere 2012 is a malicious application that is categorized as rogue anti-spyware. Here are some facts about this malware (how it spreads, how it works, how it swindles the money):

1. Security Sphere 2012 is spread together with infected updates or downloads. It uses trojans for getting inside through security vulnerabilities found on the PC.
2. Trying to trick its victim, Security Sphere 2012 displays only faked system scanners and alerts reporting numerous malware. When scanning different PC, it will give the same scan results.
3. The reason why Security Sphere 2012 was released is money – malware declares that you must purchase its license to remove threats reported on its alerts.
4. Security Sphere 2012 disables its victims from its successful removal by disconnecting user from Internet, blocking legitimate security programs found.

3 ways how to remove Security Sphere 2012:

Get rid of Security Sphere 2012 using System Restore method:

Note: Security Sphere 2012 may disable system restore.

1. Click Start.
2. Point to All Programs.
3. Point to Accessories.
4. Point to System Tools.
5. Click System Restore.
6. Follow the instructions on the wizard.

Uninstall Security Sphere 2012 using automatic remover:

1. Check if there is possibility to download, install and run anti-malware program for automatic Security Sphere 2012 removal: StopZilla
2. If download, execution or installation processes fail, go to steps 1-2 of manual removal instructions, or rename the downloaded executable file to iexplorer.exe, firefox.exe or something like that that are not blocked by virus.
3. After removal, reboot, scan with alternate remover to check for remaining Trojans spreading Security Sphere 2012.

Remove Security Sphere 2012 manually:

1. Launch regedit and task manager (click start->run->regedit, press ctrl-alt-del, choose task manager)
   1. If opening regedit fails, you should use automatical removal instructions (above)
   2. If opening task manager fails, but you can access regedit search for a keys in registry containing Task and delete them.
   3. If opening task manager fails and you can’r access regedit as well or it failed to repair, step 1.2 : Download Process explorer and rename it to iexplorer.exe
2. Stop all tasks under your user that are named by random numbers, your username or are completely unknown. Note down their names.
3. Search for these files in hard disk and delete them.
4. Search for registry keys mentioning these files and delete them.
5. Scan with reputable spyware remover to remove Trojans that spread this infection completely.
6. Reboot your system

More information about Security Sphere removal.

Zentom System Guard will pretend to be legitimate and trustworthy anti-spyware application as soon as it gets inside the system. However, soon it becomes completely unwanted: it starts interrupting every step of a user with its fake system scanners and announces about numerous viruses detected that in reality are fake. You must remember this fact because this scamware may get into your computer as well. Zentom System Guard enters computers without any permission asked and does that with a help of Trojans viruses. So, its infiltration always stays unnoticed. You should immediately remove Zentom System Guard after it starts appearing on your desktop. Besides, rely only on a reputable anti-spyware program when fixing your machine.

Zentom System Guard malware continues scanning the system for viruses as soon as it becomes active what initiates numerous problems because you become completely disabled when trying to browse the Internet. In order to stop this virus, you should ignore all its scanners and alerts that in reality don’t have any meaning. Just uninstall Zentom System Guard once you see it on board and always make sure your security software is updated to avoid such scams. Here is how you can remove Zentom System Guard.

Cloud Protection is a cyber threat that should never be trusted. Though it looks like legitimate anti-malware program, it will never become capable to find or remove any kind of virus. That’s because Cloud Protection has no virus search engine and is created to generate money. It gets ability to rip its victims off quite easily: it starts ‘scanning’ the system for viruses in the beginning and then ‘detects’ some virus. Of course, user it said that unregistered version of Cloud Protection is not capable to fix the problem and that you need to purchase its license if you want to remove viruses detected by Cloud Protection. As you may have understood, Cloud Protection simply tries to swindle your money by offering to get its licensed version.

Just like any other malware, Cloud Protection is capable to get inside the system with a help of Trojans. All this procedure is done unnoticeably for a user, just like additional modifications done to computer’s registry. If you want to save your machine, you should simply remove Cloud Protection. If you find that you are disabled from using your anti-spyware program, reboot your PC into safe mode with networking first and repeat the scanning. Besides, you can follow this detailed Cloud Protection removal guide as well.

Security Guard 2012 must be removed before it starts messing your PC up and if you thought that it can help you to get rid of viruses that are found on your machine, you are wrong. It is a rogue anti-spyware in reality, which can be stopped only by removing all its files and registry entries. The reason why Security Guard 2012 was released is money – after pretending to be a reputable anti-malware, it starts puchsing its victims to purchase its license. However, there is no Security Guard 2012 licensed version.

For making you believe you have problems with your PC, it claims:

Warning! Infection found
Unauthorized sending E-MAIL with subject “RE:” to fake@email.address was CANCELLED.

Warning: Infection is Detected
Windows has found spyware infection on your computer!
Click here to update your Windows antivirus software

You may think that Security Guard 2012 got on your system out of nowhere – in reality it uses Trojans for its secret intrusion. According to security experts, it can’t come through the shield of updated anti-spyware, so make sure you have one on your PC. After getting on board, malware starts reporting about numerous viruses detected and then offers to purchase licensed version. Please, never purchase it! You must remove Security Guard 2012 as soon as you notice it on your PC.

OpenCloud AV is a typical malware that prefers making use of backdoor methods when it tires to get inside the system. Once it manages to get there, malware starts warning its victims about numerous viruses detected and then offers its paid services. However, giving your money for OpenCloud AV licensed version is useless because it’s the one that needs to be eliminated. It uploads malicious executables every time Windows starts and allows more malware to come inside.

When having OpenCloud Antivirus on your machine, you will keep on receiving annoying pop-up ads and scanners reporting the same virus. These fake scan reports are expected to make you believe you are attacked and that you need to purchase OpenCloud AV license. Never fall into this scam!  You should simply remove OpenCloud AV from your computer and always have licensed anti-virus and anti-spyware programs installed to avoid such unexpected intrusions. To make this process easier, use this Activation Key on the Activation Key Section.

A new family of rogues is spreading on the Internet. They share the same graphical user interface and act the same way. The only difference is that they change name depending on the operating system that is run on a targeted computer system.  Windows 7 can be infected with Win 7 Antispyware 2012, Win 7 Antivirus 2012, Win 7 Security 2012 and similar. The users of Windows XP are likely to notice XP Antivirus 2012, XP Home Security 2012, XP Internet Security 2012. Those who are using Windows Vista can suffer from Vista Security 2012, Vista Home Security 2012, Vista Antispyware 2012, etc.

Despite different name, the program use same methods to scam computer users. The program gets inside using Trojan viruses. Once there it installs its single executable and it goes deep down into the system so that it becomes impossible to remove it. The program is configured to start automatically when computer is restarted. Every time it runs a fake scanner and at the end offers purchasing a full version of one of the mentioned programs.

Moreover, it constantly causes fake pop up ads and security notifications warning that your system is badly infected ad promoting purchasing Win 7 Home Security 2012, XP Antivirus 2012, Vista Antivirus 2012, etc.

Beware that such scanners are fake and their scan results should be ignored. If you have purchased one of such program, do not hesitate to contact your credit card company and dispute the charges. Get rid of XP Security 2012, Win 7 Antispyware 2012, Vista Antivirus 2012 or similar program without even thinking.

Internet Security Essentials is a rogue antispyware program that is promoted on the Internet as a reputable antispyware program while in fact it’s a dangerous application that is trying to rip you off. Internet Security Essentials gets inside the system with a help of a Trojan and once inside becomes a dominant component of a program.

The application is configured to be started with each system reboot. So when computer logs in to Windows you will first of all notice a scanner of Internet Security Essentials running on your system without you asking to scan your computer. The program then claims that it detected tons of security notifications and pop up ads and recommend purchasing a full version of Internet Security Essentials in order to remove detected threats.

Also the program causes hundreds of fake security notifications and pop up ads which also provide false information about infections on your system. The purpose of them is to promote Internet Security Essentials as a reputable antispyware program.

It is strongly advised to eliminate Internet Security Essentials as soon as you detect it on your system. use s reputable antispyware program, for instance, Spyware Doctor to perform a full system scan and get rid of this badware quickly and easily.

Antivira Av is a rogue antispyware program that comes from the same family of rogues as Antivirus .NET. The program was designed by cyber criminals in order to rip computer users off. It basically imitates all functions of an antispyware program and attempts to convince computer user into purchasing its full version.

Once Antivira Av infiltrates into the system it disturbs all your activity. The program terminates almost all executives that you try to run including your security programs. It displayed tons of security notifications claiming that you have to activate your antivirus software. Then it attempts to make you purchase Antivira Av which in reality has nothing to do with security.

Moreover, a so called trial version of Antivira Av runs a scanner and pretends looking for infections. After a while, the program claims to detect a bunch of various infections and again tries to make you purchase a licensed version of Antivira Av.

It is strongly recommended to remove Antivira Av right after noticing its existence on your system. The best way to do it is scanning your system with one of the legitimate anti-spyware tools.

You can also disable the processes of Antivira Av manually and then run a full system scan with Malwarebytes or Spyware Doctor.

Have no doubts to remove Antivira Av. It’s a rogue program that has none useful functions.

System Tool 2011 is a fake anti-virus application of the same family as Security Tool. It is rogue of the worst kind: Infecting users PCs, wrecking havoc with tons of popups suggesting that the PC is infected. And after that it asks to purchase a full version of System Tool 2011, which is not only a fake, but uses phishing payment processors as well. After you pay for System Tool, you give up your credit card details. It is about the same as post it on billboard in the worst district of any city. Its makers will not shun from misusing it and purchasing something for themselves.

System Tool 2011 might go with several names. One of them Is System Tool 2.2 , another is simply System Tool. It is about the same parasite and its removal instructions should be about the same.

To get rid of System Tool you have several options

Method A

1. Reboot into safe mode and do system restore.

2. Scan with decent antiviruses and anti-malware tools to get all trojans out.

Method B:

1. Disable it with System Tool 2011 key available here.

2. Scan with malwarebytes, Spyware Doctor or other tool

Method C.

1. Kill System Tool 2011 processes (typically 5 random letters and 5 random numbers) using task manager

2. Delete System Tool 2011  files

3. Reboot, and scan with anti-malware tools.

Antivirus Solution 2010 – sounds great, doesn’t it? Well, hold your horses, because this program sucks on a whole different level. Antivirus Solution 2010 is a rogue anti-spyware program, a term you will be hearing a lot these days. It basically means that this is a fake anti-spyware program, which does nothing of use, and relies on malicious methods to enter the system and extort people’s money.
The list of measures used by Antivirus Solution 2010 to get on your system can be long. It includes fake downloads and updates, fake online scanners, and downloader trojans. Once inside, Antivirus Solution 2010 will try to scare you by spamming your with alerts, such as:

“Warning!
Your computer is being used as spamming machine. You can get sued for spam.
Your computer WILL BE DISCONNECTED FORM INTERNET BECAUSE SPAMMING OTHER PCs”

“Antivirus Solution Agent
The antivirus database has become outdated and should be updated now. Click on this message to receive the latest antivirus updates.”

The point of this false information is to lead you to believe your system is infected, so that hopefully you will run the Antivirus Solution 2010 scan, which will claim more of the same to be true.
The punchline is this: in order to remove these non-existent threats you have to pay for the licensed version of Antivirus Solution 2010. Do NOT do this. Instead, follow these instructions and dispose of this malicious parasite once and for all.
Using System Restore
1. Click Start.
2. Point to All Programs.
3. Point to Accessories.
4. Point to System Tools.
5. Click System Restore.
6. Follow the instructions on the wizard.
Using Automatical remover to get rid of Antivirus Solution 2010
1. Check if you are able download, install and run Spyware doctor for automatic Antivirus Solution 2010 removal: Spyware doctor
2. If download, execution or installation fails, proceed to steps 1-2 of manual removal instructions, or rename the downloaded executable to iexplorer.exe, firefox.exe or alike. These names are not blocked by virus usually.
3. After removal, reboot, scan with alternate removers to check for remaining traces of Antivirus Solution 2010. There is no real remover that can guarantee a 100% detection rate for new parasites like this.
Removing Antivirus Studio 2010 manually
1. Check if you can launch regedit and task manager (start->run->regedit, press ctrl-alt-del, choose task manager)
2. If regedit fails, you will have to use automatical removal instructions (above)
3. If task manager fails, but you can access regedit : search for a keys in registry containing Task and delete them.
5. If task manager fails and you can not access regedit or it failed to repair step 1.2 : Download Process explorer and rename it to iexplorer.exe
6. Stop all tasks under your user that are named by random numbers, your username or are completely unknown, as well as the processes “securityhelper.exe”, “securitycenter.exe”, “Antivirus Studio 2010.exe”. Note down their names.
7. Search for these files in hard disk and delete them.
8. search for registry keys mentioning these files and delete them
9. Scan with reputable spyware remover as Spyware Doctor for remaining traces of infection, disable proxy server in your browser and clean up hosts file
10. Reboot your system
Spyware removal tools for making your system more secure against infections like Antivirus Solution 2010
1. Spyware Doctor (recommended spyware remover)
2. Superantispyware (quite good spyware remover)
3. Spybot S&D (if you are completely oldschool)
4. Hitman Pro 3.5
5. AVAST antivirus – one of the best free antivirus
6. 1. ESET NOD32 -very good commercial antivirus
7. 2. G-Data – new and scored very well
8. Microsoft’s security essentials – free antivirus by microsoft.
Here a more detailed guide on Antivirus Solution 2010

System Defragmenter is a rogue system optimization tool. Basically the same concept applies here as with other rogue programs: System Defragmenter pretends to be a legitimate system optimization tool (I’d be hard-pressed to find one that is actually legitimate, but I digress..), when in fact it finds problems with the system that do not actually exist, and then asks for money in order to fix them.
This parasite finds its way to your system by various malicious methods, such as fake codec downloads, java updates and so on, at which point it will run at startup and constantly annoy you with fake alerts, such as:

“Critical Error
Hard Drive not found. Missing hard drive.”

or

“Critical Error
RAM memory usage is critically high. RAM memory failure.”

Other things will also go wrong, for example, when you try to run executable files, you might be presented with the following message:

“System Error!
Exe file is corrupted and can’t be run. Hard Drive scan required.
Scan Hard Drive”

You can use System Defragmenter to scan for issues, which an utterly pointless endeavor – the results of this scan are just as fake as everything else about this program. As a matter of fact, the conclusion of the scan will likely look like this:

“Read time of hard drive clusters less than 500 ms
32% of HDD space is unreadable
Hard drive does not respond to system commands
Bad sectors on hard drive or damaged file allocation table
Drive C initializing error
Ram Temperature is 83 C. Optimization is required for normal operation.
Data Safety Problem. System integrity is at risk.
Requested registry access is not allowed. Registry defragmentation required
Registry Error – Critical Error
GPU RAM temperature is critically high. Urgent RAM memory optimization is required to prevent system crash”

You can probably see where this is going – your system is completely ruined, and the only thing that can fix it is System Defragmenter, which costs money. Do NOT spend money on this useless software, if you have too much money, I would be more than glad to relieve you of some.
In the mean time, follow these instructions to pwn System Defragmenter once and for all.
Using System Restore
1. Click Start.
2. Point to All Programs.
3. Point to Accessories.
4. Point to System Tools.
5. Click System Restore.
6. Follow the instructions on the wizard.
Using Automatical remover to get rid of System Defragmenter
1. Check if you are able download, install and run Spyware doctor for automatic System Defragmenter removal: Spyware doctor
2. If download, execution or installation fails, proceed to steps 1-2 of manual removal instructions, or rename the downloaded executable to iexplorer.exe, firefox.exe or alike. These names are not blocked by virus usually.
3. After removal, reboot, scan with alternate removers to check for remaining traces of System Defragmenter. There is no real remover that can guarantee a 100% detection rate for new parasites like System Defragmenter.
Removing System Defragmenter manually
1. Check if you can launch regedit and task manager (start->run->regedit, press ctrl-alt-del, choose task manager)
1. If regedit fails, you will have to use automatical removal instructions (above)
2. If task manager fails, but you can access regedit : search for a keys in registry containing Task and delete them.
3. If task manager fails and you can not access regedit or it failed to repair step 1.2 : Download Process explorer and rename it to iexplorer.exe
2. Stop all tasks under your user that are named by random numbers, your username or are completely unknown, as well as the process “system defragmenter.exe”. Note down their names.
3. Search for these files in hard disk and delete them.
4. search for registry keys mentioning these files and delete them
5. Scan with reputable spyware remover as Spyware Doctor for remaining traces of infection
6. Reboot your system
Spyware removal tools for making your system more secure against infections like System Defragmenter
1. Spyware Doctor (recommended spyware remover)
1. Superantispyware (quite good spyware remover)
2. Spybot S&D (if you are completely oldschool)
3. Hitman Pro 3.5 (if you have no problem scanning your PC each day manually)
2. AVAST antivirus – one of the best free antivirus
1. ESET NOD32 -very good commercial antivirus
2. G-Data – new and scored very well
3. Microsoft’s security essentials – free antivirus by microsoft.
More information about System Defragmenter removal.

ThinkPoint is a classic example of a rogue anti-spyware program, which is in essence a fake security program. This parasite tries to capitalize on the popularity of Microsoft Security Essentials – a perfectly legitimate antivirus program, by using fake Microsoft Security Essentials alerts. In particular, ThinkPoint displays an alert, which states that MSE has detected an Unknown Win32/Trojan on your system. After providing this false information it prompts the user to perform a fake system scan. This scan “finds” an infection in C:\Program Files\Messenger\msmsgs.exe, and suggests ThinkPoint as a solution to the problem.
Afterwards your computer will reboot, and you will be presented with ThinkPoint, which will scan your system yet again and find multiple infections. You will then not be able to use the Windows Desktop or Task Manager, until you have purchased the “licensed version” of Thinkpoint (which will supposedly remove the infections). The justification for this, as stated by ThinkPoint, is “Current settings don’t allow unprotected startup. Please check your settings.”
Under no circumstances should you purchase this fake security program. Follow this guide to remove ThinkPoint from your system.
Using System Restore
1. Click Start.
2. Point to All Programs.
3. Point to Accessories.
4. Point to System Tools.
5. Click System Restore.
6. Follow the instructions on the wizard.
Using Automatical remover to get rid of ThinkPoint
1. Check if you are able download, install and run Spyware doctor for automatic ThinkPoint removal: Spyware doctor
2. If download, execution or installation fails, proceed to steps 1-2 of manual removal instructions, or rename the downloaded executable to iexplorer.exe, firefox.exe or alike. These names are not blocked by virus usually.
3. After removal, reboot, scan with alternate removers to check for remaining traces of ThinkPoint. There is no real remover that can guarantee a 100% detection rate for new parasites like ThinkPoint.
Removing ThinkPoint manually
1. Check if you can launch regedit and task manager (start->run->regedit, press ctrl-alt-del, choose task manager)
1. If regedit fails, you will have to use automatical removal instructions (above)
2. If task manager fails, but you can access regedit : search for a keys in registry containing Task and delete them.
3. If task manager fails and you can not access regedit or it failed to repair step 1.2 : Download Process explorer and rename it to iexplorer.exe
2. Stop all tasks under your user that are named by random numbers, your username or are completely unknown, as well as the process “hotfix.exe”. Note down their names.
3. Search for these files in hard disk and delete them.
4. search for registry keys mentioning these files and delete them
5. Scan with reputable spyware remover as Spyware Doctor for remaining traces of infection
6. Reboot your system
Spyware removal tools for making your system more secure against infections like Security Tool
1. Spyware Doctor (recommended spyware remover)
1. Superantispyware (quite good spyware remover)
2. Spybot S&D (if you are completely oldschool)
3. Hitman Pro 3.5 (if you have no problem scanning your PC each day manually)
2. AVAST antivirus – one of the best free antivirus
1. ESET NOD32 -very good commercial antivirus
2. G-Data – new and scored very well
3. Microsoft’s security essentials – free antivirus by microsoft, very new.
More information about ThinkPoint removal.

Antivirus IS is fresh rogue antivirus of Security Suite family. These fake antiviruses spread using trojans and fake antivirus scan websites. Also, you can get them without any download if your system is not protected enough.
After Antivirus IS infection, your internet browser will have limited connectivity. Access to legitimate websites will be blocked with warnings about system attacks or fake dangers. This can be fixed by removing proxy server from the internet browser.
You will also start seeing AntivirusIS alerts and warnings. Some of them will block execution of legitimate programs. Some of them will suggest that your system is under attack and try to convince you to launch its scan.
The scan will produce faked results. Antivirus IS will warn about Bankerfox.a and antivirus360 infections in files that are harmless and suggest to purchase full version of this fake program. This is a phishing attack: Your credit cart details will be resold even after you pay outrageous amount of money to AntivirusIS creators.
To remove AntivirusIS do following:
1. Reboot into safe mode with networking
2. Run MSConfig and disable all unclear startup from your home directory (C:\Documents and settings\… OR C:\Users\…)
3. Disable proxy server in your browser
4. Reboot again and do a full scan with Spyware Doctor or SuperAntispyware.
Alternative guide on how to get rid of Antivirus IS.
I recommend keeping full version of one of these programs for protection against Antivirus IS and other fake antiviruses.