Remove the iRemotePC Virus

iRemotePC, also known as Adware.Win32.iRemotePC 1.6, is a virus that can be used to gather personal information, such as credit card numbers, from your computer and communicate that information to a remote hacker.

In addition, iRemotePC may replicate itself, execute certain tasks, impair your computer performance and cause other serious damage to your computer. Consequently, iRemotePC should be removed as soon as it is discovered on your computer.

Read More

Misleading Applications

Have you ever seen a strange security message pop up like an advertisement while you're surfing the web? Have you seen an unexpected balloon message appear from an unknown program on your system, telling you that you’re infected with a new threat? These are common tactics used by a type of program called "misleading applications" and other people refer to as “Rogue Software” or “Rogue Anti-Virus”. These programs typically sneak onto their victims’ systems while they surf the web, masquerade as a normal Microsoft Windows alert, or otherwise trick people into downloading them onto their computer. Once installed, misleading applications exaggerate or make false claims about the security status or performance of your system, then promise to solve these bogus problems if you pay them.

What are misleading applications?

Misleading applications intentionally misrepresent the security status of a computer. Misleading applications attempt to convince the user that he or she must remove potentially malware or security risks from the computer. The application will hold the user hostage by refusing to allow him or her to remove or fix the phantom problems until the “required” software is purchased and installed. Misleading applications often look convincing the programs may look like legitimate security programs and often have corresponding websites with user testimonials, lists of features, etc.

How they Attack?

Why are they dangerous?

The victims of misleading applications have paid for software that does not work, handed their personal information to scammers, and are left with a false sense of security that leads them to potentially greater risks from more aggressive threats. Even if a person catches on to the ruse and does not pay the misleading application vendor, the programs can be notoriously difficult to remove without the proper security software.

What To Do?

1. Use a legitimate Antivirus to proactively protect from spyware and other security risks
   
2. Configure the firewall in Antivirus software to block unsolicited requests for outbound communication
   
3. Be especially cautious when clicking on pop-up advertisements especially ads promoting system security or performance tools that look like a standard Microsoft Windows alert
   
4. Do not accept or open suspicious error dialogs from within the browser
   
5. Purchase security and system performance software from reputable sources
   
6. Keep software and security patches up to date

Read More

Spot a Computer Virus in an Email Inbox

Computer viruses are insidious pieces of software that can cause a great deal of destruction in a short amount of time. Email is an especially popular way of transmitting computer viruses, but unfortunately when it comes to email it's not always possible to tell friend from foe. With the proper precautions, though, you can avoid an infection. Read on for some tips for recognizing a virus in your inbox.

Read More

How to remove Disk Recovery

Disk Recovery is a counterfeit application. The parasite comes along with the download and installs itself automatically. Malware is accompanied by a malicious trojan which enters the system and then creates a backdoor for Disk Recovery to sneak.

  

Once installed the parasite will set user’s mind that computer has many infections with different types of malware and viruses through its fake alert messages. Disk Recovery does not do anything to prevent or remove legitimate computer viruses, spyware or other kind of malware. It is not able to provide any actual security service. Not only Disk Recovery is incapable of detecting or removing malware it can harm your system by editing registry entries.

You have to get rid of the malware or else the rogue will show an avalanche of pop-ups that literally paralyze your computer system.

Here are few of rogue security alerts:

Critical Error!

Damaged hard drive clusters detected. Private data is at risk.

Critical Error

Hard Drive not found. Missing hard drive.

Critical Error

RAM memory usage is critically high. RAM memory failure.

Critical Error

Windows can’t find hard disk space. Hard drive error

Critical Error!

Windows was unable to save all the data for the file \System32\496A8300. The data has been lost. This error may be caused by a failure of your computer hardware.

Critical Error

A critical error has occurred while indexing data stored on hard drive. System restart required.

System Restore

The system has been restored after a critical error. Data integrity and hard drive integrity verification required.

Activation Reminder

Disk Recovery Activation

Advanced module activation required to fix detected errors and performance issues. Please purchase Advanced Module license to activate this software and enable all features.

Low Disk Space

You are running very low disk space on Local Disk (C:).

Windows – No Disk

Exception Processing Message 0×0000013

Disk Recovery Diagnostics

Windows detected a hard disk error.

A problem with the hard drive sectors has been detected. It is recommended to download the following sertified <sic> software to fix the detected hard drive problems. Do you want to download recommended software?

Fix Disk

Disk Recovery Diagnostics will scan the system to identify performance problems.

Start or Cancel

Windows detected a hard drive problem.

Scanning for hard drive errors…

Hard drive scan helps to detect and resolve hard drive problems and system performance issues.

Manual removal Steps

To get rid of spyware such as Disk Recovery you need to remove processes, search and delete registry keys, DLL and other Disk Recovery related files from your computer.

Uninstall Disk Recovery from Control Panel

Start > Settings > Control Panel > Add/Remove Programs. Double click to uninstall.

Delete Disk Recovery registry entries:

1. To open registry editor click Start > Run > type "regedit".

2. Delete the following entries

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:'

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'yes'

Note: Please take a back up of the registry before editing it.

To Search and delete the Disk Recovery related files:

%AllUsersProfile%\~

%AllUsersProfile%\~r

%AllUsersProfile%\.dll

%AllUsersProfile%\.exe

%AllUsersProfile%\

%AllUsersProfile%\.exe

%UserProfile%\Desktop\Disk Recovery.lnk

%UserProfile%\Start Menu\Programs\Disk Recovery

%UserProfile%\Start Menu\Programs\Disk Recovery\Disk Recovery.lnk

%UserProfile%\Start Menu\Programs\Disk Recovery\Uninstall Disk Recovery.lnk

Read More

Remove the WGA Virus

The WGA virus poses as Microsoft's anti-piracy software. It enters your computer when you click on a link sent by an unknown user on AOL Messenger. The WGA virus registers itself as a new system driver service called "wgavn." This virus has numerous aliases or names. This makes it really tough for you, if not impossible, to remove it manually. The easiest and best way to remove the WGA virus is by using your built-in anti-malware program.

Read More

Remove a Search Engine Virus

You may prefer a certain search engine such as Google or Yahoo!, but suddenly you're being forced to go to a certain search page without any choice. Perhaps a search toolbar has suddenly appeared at the top of your browser, and you can't close it. You may have been infected with a search engine "virus," which is actually a type of adware or malware. Fortunately, you can get rid of it with a few simple steps.

Read More

Clean an Infected Hard Drive

Getting a virus on your hard drive can quickly turn your computer into a slow, zombie-like machine that has a brain of its own and won't do anything you want it to do. Because the hard drive is infected and it is somewhat out of control, you must take the right steps in cleaning it, or you will find yourself going in circles.

Read More