Spyware Removal Instructions

[#: The article How to Remove Vundo.GC free is an article in Spyware Removal Instructions, the original author is admin .you can read more articles at Manual removal instructions> PC Self Help Guides> Removal Tools> Rogue Anti Spyware> Trojan> Virus,the next article:.#]

How to get rid of Vundo.GC or Trojan.Vundo.H using HijackThis

recently a greate number people have got lots of pop up ads witha very slow computer,it has infected Trojan.Vundo.H or Trojan Vundo.GC which was quite difficult to remove it. There are vundo.gc, pop ups, slow running system,or Vundo.GC removal help ,Trojan Horse Vundo. GC adn so on.

here are steps by HijackThis to manually remove Vundo.GC

1.The first step is to download HijackThis to your computer in a location that you know where to find it again. This program does not have an installation to it, so you need to remember where you downloaded it to in order to launch it in the future.

You can download HijackThis here: HijackThis Download Link

2.Once it is downloaded navigate through Windows Explorer or My Computer to the location your downloaded it to and double click on the icon for HijackThis.exe When it is launched the first time, you will see a screen similar to the figure below:

Figure 1. HijackThis Startup screen when run for the first time

3.To have HijackThis scan your computer for possible Hijackers, click on the “Do a system Scan only ” button . You will then be presented with a screen listing all the items found by the program as seen in Figure 2.

Figure 2. Scan Results

At this point, you will have a listing of all items found by HijackThis.

4. To find 8 Symptoms that may be in a HijackThis

mark it checked to remove as this is the spyware Vundo.GC key file.

Some examples:

O2 - BHO: (no name) - {46b9ebe6-63d8-4000-9111-8d9360b343d5} - C:\WINDOWS\system32\hufebido.dll
O4 - HKLM\..\Run: [wemohosego] Rundll32.exe “C:\WINDOWS\system32\roweyubo.dll”,s
O4 - HKLM\..\Run: [50e15a92] rundll32.exe “C:\WINDOWS\system32\zofemake.dll”,b
O4 - HKLM\..\Run: [CPM53d2690e] Rundll32.exe “c:\windows\system32\lasozozo.dll”,a
O20 - AppInit_DLLs: c:\windows\system32\wekewude.dll C:\WINDOWS\system32\rukowebi.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\lasozozo.dll
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\lasozozo.dll

another hijackthis log:

O2 - BHO: (no name) - {0ead6069-d2f3-4874-aa1a-77a05ee41b80} - C:\WINDOWS\system32\weziroze.dll
O4 - HKLM\..\Run: [wavoyesizu] Rundll32.exe “C:\WINDOWS\system32\wotifiri.dll”,s
O4 - HKLM\..\Run: [20ddfb3d] rundll32.exe “C:\WINDOWS\system32\yezedina.dll”,b
O4 - HKLM\..\Run: [CPM23eec8a1] Rundll32.exe “c:\windows\system32\fijapuna.dll”,a
O20 - AppInit_DLLs: C:\WINDOWS\system32\kuzezeve.dll c:\windows\system32\fijapuna.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\fijapuna.dll
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\fijapuna.dll

wohoo,you may find some in the same:

the first Symptom:“ O2 - BHO: (no name)” 8 letters random.dll file name“

the second Symptom:” O4 - HKLM\..\Run: [random letters] Rundll32.exe 8 letters random.dll file name“

the third and fourth are like second Symptom:“ O4 - HKLM\..\Run: [random letters] Rundll32.exe 8 letters random.dll file name” ,the last letter of the three Symptoms are “s,b,a”

the fifth: “O20 - AppInit_DLLs:8 letters random.dll file name 8 letters random.dll file name“

and then others:

O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
SSODL: SSODL 8 letters random.dll file name
O22 - SharedTaskScheduler:8 letters random.dll file name

Figure 3. Select an item to Remove

5.using Malwarebytes’Anti-Malware to Remove other spyware ,if you don’t have one,here it is :Malwarebytes’ Anti-Malware Download Link

6.download Registry Easy for other Registry repairing, cleaning errors and problems to optimize your PC. It is an amazing program that I use!

good luck!

Technorati : Vundo.GC
Del.icio.us : Vundo.GC

What’s System Security 4.51

System Security 4.51 is a rogue program. System Security 4.51 is often downloaded and installed by a Trojan, through browser security holes, or via other unconventional and unethical mechanisms. Once installed, System Security will display notifications of imaginary security and privacy risks in its attempts to get the user to purchase the full version and may generate system slowdown and instability. System Security 4.51 keeps popping up with warnings of trojans, spyware, etc. with a request to pay with a credit card.This program can be extremely difficult to manually remove.

How to get rid of System Security 4.51 using HijackThis

HijackThis is a utility that produces a listing of certain settings found in your computer. HijackThis wills scan your registry and various other files for entries that are similar to what a Spyware or Hijacker program would leave behind.

1.The first step is to download HijackThis to your computer in a location that you know where to find it again. This program does not have an installation to it, so you need to remember where you downloaded it to in order to launch it in the future.

You can download HijackThis here: HijackThis Download Link

2.Once it is downloaded navigate through Windows Explorer or My Computer to the location your downloaded it to and double click on the icon for HijackThis.exe When it is launched the first time, you will see a screen similar to the figure below:

Figure 1. HijackThis Startup screen when run for the first time

3.To have HijackThis scan your computer for possible Hijackers, click on the “Do a system Scan only ” button . You will then be presented with a screen listing all the items found by the program as seen in Figure 2.

Figure 2. Scan Results

At this point, you will have a listing of all items found by HijackThis.

4. To find the item most like this,in the “All Users\Application Data“ folder,and random number named folder which in it with random named application

mark it checked to remove as this is the spyware System Security 4.51 key file.

Some examples:

O4 - HKLM\..\Run: [04146796] C:\Documents and Settings\All Users\Application Data\04146796\04146796.exe

O4 - HKLM\..\Run: [283681218] C:\Documents and Settings\All Users\Application Data\283681218\283681218.exe

Figure 3. Select an item to Remove

Once you have selected the items you would like to remove, press the Fix Checked button, designated by the blue arrow, in Figure3. HijackThis will then prompt you to confirm if you would like to remove those items. (for more details using HijackThis)

5.using Malwarebytes’Anti-Malware to Remove other spyware ,if you don’t have one,here it is :Malwarebytes’ Anti-Malware Download Link

6.download Registry Easy for other Registry repairing, cleaning errors and problems to optimize your PC. It is an amazing program that I use!

good luck!

Technorati : System Security 4.51
Del.icio.us : System Security 4.51

what ’s google redirect virus

when your computer has infected the “google redirect virus” , every search engine you go to is giving your random redirects no matter what browser you use.Your computer will being really slow … aswell when going into google the links you click into direct you to other ads and nonrelated sites… only after clicking two or three times may get into the original site intended.if you have find those problems,your computer may have the google redirect virus.

How to Get rid of google redirect virus using Malwarebytes’Anti-Malware

1.Malwarebytes' Anti-Malware Download Link,and it's free.

2.After installtion ,make sure update Malwarebytes' Anti-Malware and than make sure the Perform quick scan option is selected ,just click scan button.


3.The scanning process may take quite a while, so I suggest you go and do something else or go to setp 4 first to cleaning Registry errors .After the scan is finished,a screenshot shows all the malicious programs found will be shown how has seen in the picture below. Remember that, the infections May vary, what is shown.You should now click on the Remove Selected button to remove all the listed malware.

good luck!

Technorati : google redirecting virus
Del.icio.us : google redirecting virus