Saturday, November 20, 2010

Prevent USB pen drive virus

Most of the time our computer are infected by virus through pendrive. They are plugged in by our friends or other people. Antivirus cannot detect every virus in the pendrive. How can we prevent the virus from infecting our computer when our friends or other people plug in their pendrive into our computer?
  1. Disable the autorun feature completely is the best way! or follow the step below:
  2. In my computer / windows explorer, you must not double click the removable disk .
  3. If you double click the removable disk, your computer will be infected by virus if your USB pen drive has been already infected by virus.
  4. Instead, in my computer, click the folders button:
    Prevent USB pen drive virus
  5. The folder pane will be shown:

  6. From the pane, click the Removable Disk.
  7. Done!
Some people suggest that scan the pen drive first with latest updated antivirus, but the fact is that most of the time the antivirus fail to detect the virus in the pen drive. So, the best policy is to disable the autorun feature completely

Sunday, November 14, 2010

ThinkSmart Removal Guide

ThinkSmart Removal Guide
ThinkSmart is a fake antivirus program which is much similar to ThinkPoint. ThinkSmart will start automatically when Windows boot after install in the computer. Then it will scan the computer and WILL SURELY states that the computer are infected by malwares. ThinkSmart will force the user to purchase the full version of ThinkSmart so that to cheat the money from the user. ThinkSmart cannot detect and remove any malware. The user the can follow the removal guide stated below to remove ThinkSmart completely from the computer.

ThinkSmart provide some fake features such as Scanner, Heuristic and Firewall. All of them cannot protect our computer from any kind of virus. They are SCAMS!

ThinkSmart should be removed immediately!

ThinkSmart Removal Guide
Kill Process
(How to kill a process effectively?)
defender.exe
hotfix.exe
tmp.exe
antispy.exe
thinkpoint.exe

Delete Registry
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%LocAppData%\antispy.exe"
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = "0"
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnPostRedirect" = "0"
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "tmp"
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce "SelfdelNT"
HKCU\Software\PAV
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%Documents and Settings%\[UserName]\Application Data\hotfix.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "thinksmart"
HKEY_CURRENT_USER\Software\PAV

Remove Folders and Files
%LocAppData%\antispy.exe
%LocAppData%\defender.exe
%LocAppData%\hotfix.exe
%LocAppData%\tmp.exe
%TempDir%\kjkkklklj.bat
%UserProfile%\Application Data\completescan
%UserProfile%\Application Data\hotfix.exe
%UserProfile%\Application Data\install

Tuesday, November 9, 2010

Quick Defragmenter Removal Guide

Quick Defragmenter Removal Guide
Quick Defragmenter is a fake optimization program that WILL SURELY displays fake warning to urge the user to purchase the full version of Quick Defragmenter to remove all the detected errors. In fact, it cannot detect any error and remove any errors. Quick Defragmenter will start automatically when Windows boot. The user must terminate the process of Quick Defragmenter before deleting the folder and files of Quick Defragmenter. Then, the user must remove the related registry settings so that Quick Defragmenter will not start automatically. (see the Removal Guide below).

Quick Defragmenter provide fake feature to optimize the hard drive of the computer. In fact, it does not optimize the hard drive, it can do nothing. It also provide other fake features such as Performance Services, System Health, Proactive Data Protection and Diagnostics.

Quick Defragmenter should be removed immediately!

Quick Defragmenter Removal Guide
Kill Process
(How to kill a process effectively?)
[random characters].exe
winsp2up.exe

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "winsp2up.exe"

Remove Folders and Files
%UserProfile%\Start Menu\Programs\Quick Defragmenter
%Temp%\[random].bmp
%Temp%\[random].exe
%Temp%\winsp2up.exe
%Temp%\winsp2upd.dll