SpyZooka Blog - Easy Spyware Removal

SpyZooka Warns Computer Owners of Total PC Defender Scam

bluepenguin15 — Sat, 13 Mar 2010 03:15:30 +0000

SUMMARY: SpyZooka warns of rogue software that tricks computer owners into thinking their computer has security problems. Total PC Defender mimics actual spyware and is a fake program that won’t remove viruses from computers.

Sequim, WA – If you have a computer that suddenly shows windows filled with warnings of security problems and the urgent need to buy an antispyware program, it may be a scam. Carl Haugen, President of BluePenguin Software says, “Total PC Defender mimics actual spyware programs showing a computer user fake security warnings that can scare a user into thinking the computer is infected and tricking the user into purchasing a full version of the software program. This program is a fake and does not show real security warnings or real scan results, nor does it remove viruses from computers.”

Rogue software programs like Total PC Defender may accidentally be downloaded through fake URLs that pop up at the top of search engine results, redirecting you to another page. There will most likely be a ‘Click to fix’ button, prompting you to give money, which ends up being an illegitimate company selling a product that is not protecting your computer.

“Once installed, the only way to remove Total PC Defender is to reformat your hard drive or use a legitimate antispyware program like SpyZooka to remove it,” says Haugen. “SpyZooka is a legitimate antispyware program that will detect and protect your computer from such infections.”

Contact: Carl D. Haugen III, CdO, HsD
Company: BluePenguin Software, Inc
www.BluePenguinSoftware.com
Phone: 561-459-5393
Email: press@bluepenguinsoftware.com

Win32.Shark Trojan

Carl Haugen — Fri, 12 Mar 2010 09:00:11 +0000

Win32.Shark is a backdoor Trojan horse program. This nasty program downloads other malware onto your already infected system. Win32.Shark will spread itself through spam e-mails, pornographic websites and file-sharing programs. Once it has entered, it will inject malicious files into your registry that will activate annoying pop-up advertisements. In addition to turning off your security software, this pest gives control of your computer over to its hacker. Now, nothing one your system is off limits!

AKA:
Net-Worm.Win32.Mytob.f
W32.Mytob.L@mm
W32/Mytob.gen@MM
WORM_MYTOB.J
I-Worm.Mytob.I
W32/Mytob-D
Worm:Win32/Hellim.B
Net-Worm.Mytob!sd5
Backdoor.VB.GEN
Backdoor.Win32.Shark.dxa
Backdoor.Win32.Shark.aoo
Backdoor.Win32.VB
Related Files: shel.exe
my_server.exe
localhoster.exe
okiller.exe

Category:
Trojan

Recommended Action:
Remove at once.

Attempting manual removal is difficult and must be approached with caution. You must kill all running processes for Win32.Shark. You must then search for all remaining files and then delete them. Leaving any files behind will result in this program returning and causing more harm to your PC. To safeguard fully against this threat and any others, use a trusted system that doesn’t require manual removal.

SpyZooka is an effective spyware removal program with the ability to automatically clear all spyware from your PC. With so many choices out there, know that SpyZooka offers the only 100% spyware removal guarantee. The choice is simple – SpyZooka.

Win32.Shang Trojan

Carl Haugen — Thu, 11 Mar 2010 14:00:25 +0000

Hackers who usually write viruses will also write backdoor Trojan programs like Win32.Shang. This program is beloved by hackers because of its relative ease in infiltrating a system. Hackers will use these programs to harvest confidential data for identify theft or to use your PC to distribute additional malware. These pests will be able to execute files, run applications and even open and close your disk drive! Failure to remove this pest quickly and you could lose much more than the use of your disk drive.

For detection, look for the following fingerprints: 0a1dddf9f034c174…, 822cb1154adf89b0…, 30512ef325f9002e…, c4eacb0bacf11935…, 3a75ab0c4904bb6c…, d97c48adb95e11ff…, eb561faf7f74d01a…

AKA:
Backdoor.Win32.Shang.15
Backdoor.Shang.15
BackDoor-UW
Backdoor.Trojan
BackDoor.Shang.15
Troj/Shang-15
Backdoor:Win32/Shang.1_5
BKDR_DEVILICON.A
BDC/Shang.15.Cli
Win32:Trojan-gen.
BackDoor.Shang.D
Backdoor.Shang.1.5.A
Trj/Shangquan.C
Win32/Shang.15.Client

Related Files:
N/A

Category:
Backdoor Trojan

Recommended Action:
Remove at once.

For manual removal for Win32.Shang, you must delete all files and folders and any registry entries for the program. This can be quite difficult not to mention time consuming. If you want a faster way, SpyZooka is the answer. SpyZooka will eliminate the need for poring over different file names and such.

SpyZooka does it for you. With SpyZooka on your side, you have no need to fear spyware again. Simply set SpyZooka to scan for detection of spyware each time you startup Windows. It’s that simple.

Win32.Shah Trojan

Carl Haugen — Wed, 10 Mar 2010 11:00:18 +0000

Backdoor, Win32.Shah, is named after the Persian word for king but it may be aptly named “king of nuisances.” Backdoors have recently become enormously popular within the hacker community because of their ability to surreptitiously enter a user’s PC and gather data. Like its many cousins, Win32.Shah will enter unannounced and will embed itself into the PC’s directories using random names in order to avoid detection. It will also open a port that sallows other malware to enter quite easy and accessible.

AKA:
Backdoor.Win32.Shah.10.B
Troj/Shah.10-B
Backdoor.Shah.10.B,
BKDR_SHAH.10.B
Win32/Shah.10.B
Shah.10.B Backdoor
Backdoor:Win32/Shah.1_
Backdoor:Win32/Shah.1_0B
Backdoor:Win32/Shah.A
Backdoor:Win32/Shah.B

Related Files:
N/A

Category:
Backdoor Trojan

Recommended Action:
Remove at once.

In order to remove Win32.Shah manually, you must kill all running processes, terminate all registry entries and delete all remaining files. If even one file is left behind, Win32.Shah will resurface and all your effort will be for naught. To be sure this pest is gone you can use an automatic remover like SpyZooka. SpyZooka is a trusted anti-spyware application that promises around the clock protection against spyware. SpyZooka can easily eliminate this threat and will keep you secure from new threats. With SpyZooka on your side, you’re always protected.

SpyZooka Gets New Spyware Directory

bluepenguin15 — Wed, 10 Mar 2010 03:26:26 +0000

SUMMARY: BluePenguin Software announces new spyware directory for SpyZooka. SpyZooka’s new spyware directory integrates knowledge, assessments and solutions providing superior spyware protection.

Sequim, WA – BluePenguin Software announces new spyware directory for SpyZooka. SpyZooka’s new spyware directory integrates knowledge, assessments and solutions providing superior spyware protection. “Spyware can infiltrate computers to garner personal information, track activities and rack up charges,” says Carl Haugen, president and founder of BluePenguin Software. “SpyZooka’s new spyware directory identifies types of spyware and offers a solution to rid a computer of that spyware.”

Spyware enters computers without a visual trace and can take information stored on the computer, track internet visits and even hijack dial-up systems causing them to rack up hundreds of dollars in calls to 900 numbers. Hackers can take control of computers through spyware.

SpyZooka’s spyware directory was created for ease of use. Set up alphabetically by spyware, each category then provides a list of manufacturers. Histories are given including dates the spyware were developed, if they are still active or if they are defunct. A rating on a scale of 1-100 advises of the severity of the virus.

Spyware can enter a computer through email, shared printers and computers and faulty URLs. SpyZooka’s spyware directory identifies existing problems through a free computer scan and has ready solutions on hand if a computer has been infected.

A few of the viruses discussed in the spyware directory are Adware, Backdoor, Trojan, Dialer, Keylogger, Rogue and more. The results of these viruses can be destructive and disastrous.

“SpyZooka’s spyware directory was developed in order to put control back with computer owners,” says Carl Haugen of BluePenguin. “We wanted to create something that was intuitive to use and that wasn’t filled with computer jargon. Our directory is easy to navigate and speaks in layman’s terms so anyone can understand it.”

Contact: Carl D. Haugen III, CdO, HsD
Company: BluePenguin Software, Inc
www.BluePenguinSoftware.com
Phone: 561-459-5393
Email: press@bluepenguinsoftware.com

Win32.ShadowPhyre RAT

Carl Haugen — Tue, 09 Mar 2010 09:00:26 +0000

RAT or Remote Administration Tool, Win32.ShadowPhyre, is brought to us by hacker, Dark-Mentor. This pest also falls under the category of a backdoor Trojan. Hackers will send these backdoor Trojans on a bit of a reconnaissance mission that will only make it easier for the hacker to enter when it sees fit. The hacker and the backdoor will communicate and instructions will be given. Eventually, the hacker will assume full control of your PC if not removed promptly.

AKA:
Troj/ShadowPhyre-A
Backdoor.ShadowPhyre.A
BKDR_SHADOWPHYRE.A
Win32/ShadowPhyre.A
ShadowPhyre.A Backdoor
Backdoor.Win32.ShadowPhyre.b
Backdoor.ShadowPhyre.b
BackDoor-GE
BackDoor.ShPhyre
Troj/ShadowP-B
Backdoor:Win32/ShadowPhyre.B
BKDR_SHADOW.A
TR/ShadowPhyreB.Cli
Win32:Trojan-gen.
BackDoor.ShadowPhyre
Backdoor.ShadowPhyre.B
Trojan.ShadowPhyre.B
Trj/ShadowPhyre2.Cl
Win32/Shadow

Related Files:
readme.doc
shadow.exe
trance.exe

Category:
RAT
Backdoor

Recommended Action:
Remove at once.

Win32.ShadowPhyre can be removed but not without difficulty. To do so, you must kill the following processes:
shadow.exe, trance.exe

Then, remove the following files
readme.doc, shadow.exe, trance.exe.

If this does not work, you may need a stronger solution. That can be found in none other than SpyZooka. SpyZooka is an automatic spyware remover that changes hours of tedious manual removal into minutes with the simple click of your mouse. You can save yourself countless hours by investing in SpyZooka’s proprietary system. To be certain, to be sure, use SpyZooka.

Win32.Shadow Trojan

Carl Haugen — Mon, 08 Mar 2010 14:00:14 +0000

This dangerous program, Win32.Shadow, has a variety of functions depending on the needs of the attacker. It can be an e-mail flooder, which means it will clog a network or your PC by sending out massive quantities of e-mails.

You can also find it spamming from your PC. It is able to do this by gaining secret access and then will use your account to send out spam e-mails to countless unsuspecting users. It is also a backdoor so if entry is gained, it will open up a port on your PC and leave you vulnerable to other malicious attacks.

AKA:
Spammer:Win32.Shadow
Email-Flooder.Win32.Shadow
Backdoor.Win32.Shadow.d
BDS/Shadow.D.1
Win32.Shadow.aa
Win32/Shadow.G
Troj/Shadow-D
Backdoor.Shadow.D
BKDR_SHADOW.D
Win32/Shadow.D
Shadow.D Backdoor

Threat type:
Backdoor Trojan

Related Files:
N/A

Category:
Trojan

Recommended Action:
Remove at once.

Manually remove this scourge of a program by terminating all processes, files, folders and registry entries. If this process is confusing to you, you are not alone. Manual removal is difficult. For a fast and automatic solution, you have SpyZooka. SpyZooka can easily rid you of Win32.Shadow and ALL spyware in one fell swoop. SpyZooka scans, detects and eliminates spyware in an all-in-one system. An easy-to-use application, you will be protected with SpyZooka.

Win32.ServU-based Trojan

Carl Haugen — Sun, 07 Mar 2010 11:00:55 +0000

Win32.ServU-based is known to be a backdoor Trojan program. It uses such mediums as e-mail, shareware and freeware sites, Internet Relay Chat and Peer-to-Peer programs to find its way onto your computer. If you have the misfortune of being infected with this malware, you will encounter such things as an extremely slow computer, possible disabling of security software and even a complete loss of control of your PC. Win32.ServU-based gains entry and will open a random port to communicate with its author. This pest came onto the scene in March of 2005.

AKA:
Backdoor.Win32.ServU-based
Backdoor:Win32/ServUbased.AH
Win32.ServU-based.ap
Win32.ServU-based.bj

Related Files:
svchost1.exe

Category:
Backdoor Trojan

Recommended Action:
Remove at once.
To remove Win32.ServU-based manually, you must kill this process:
svchost1.exe

Delete these registry entries:
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_ssdpcl
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_ssdpcl\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_ssdpcl\0000\control
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ssdpcl
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ssdpcl\enum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ssdpcl\security

Finally, delete this file:
svchost1.exe

If you are interested in protecting your PC from further damage, then you might want to invest in an anti-spyware system that is designed to eliminate spyware but also keep you immunized from further infection. You need not look further than SpyZooka. SpyZooka has been eradicating spyware for many years with great success. Garnering numerous awards and receiving rave reviews from customers, you can’t go wrong with SpyZooka.

Win32.SevenSphere Trojan

Carl Haugen — Sat, 06 Mar 2010 11:00:18 +0000

Author, Precursor, came up with the harmful and malicious program entitled Win32.SevenSphere. It will enter unannounced and will leave the following fingerprints behind: 7db6c667b9c7595a…, 96047fd93adee176…, 36072adc1489e7d7…, a7a671fe14c57064…, 7da8ce114a805d3d…, e984cb69bde4271d.

Thankfully, there are some traces but otherwise these backdoor Trojan programs are very difficult to detect. Win32.SevenSphere will hide its processes and will often give random names to files so you are not sure which ones are which.

AKA:
Backdoor.SevenSphere.10
Backdoor/SevenSphere.10
BackDoor-ALP.gen
SennaSpy2001,
Win32/SevenSphere.10
Troj/SevenSphere-10
Backdoor.SevenSphere.10
BKDR_SEVENSPHERE.10
Win32/SevenSphere.10
SevenSphere.10 Backdoor

Related Files:
backdoor.sevensphere.10.exe
lh.nfo, sphere 1.0 server.exe.

Category:
Trojan

Recommended Action:
Remove at once.

While manual removal is difficult, it can be done by following the proceeding directions:
Terminate the following processes:
backdoor.sevensphere.10.exe, sphere 1.0 server.exe

Secondly, remove the following files:
backdoor.sevensphere.10.exe, lh.nfo, sphere 1.0 server.exe.

For full and complete protection, however, you can try SpyZooka. SpyZooka is an anti-spyware application like no other. All the features are automated which eliminates hours of tedious manual removal. Not only will it remove Win32.SevenSphere, it will eradicate any other spyware programs you might have. Spyware removal was never so easy. You can try SpyZooka without any risk. With its unprecedented 100% spyware removal guarantee, you can feel totally secure in knowing you are getting the best product out there.

Win32.Servudoor Trojan

Carl Haugen — Fri, 05 Mar 2010 09:00:17 +0000

Unintentionally installing Win32.Servudoor is the typical mode of circulation for this backdoor pest. Win32.Servudoor is found bundled with that is downloaded via shareware or freeware sites. Once this nuisance has gained entry it will open a port (hence its name “backdoor”) and allow a third party to enter. It will also have the capability of sending and receiving e-mails, changing or deleting files, launching applications and so on. Having the run of your PC is precisely what this malware is looking for.

AKA:
Win32.Servudoor.C,
Backdoor:Win32/Servudoor.I
Backdoor:Win32/Servudoor.AR
Backdoor.Win32.Servudoor.ba
Backdoor:Win32/Servudoor.X
Backdoor:Win32/Servudoor.H
Win32/Servudoor.si

Related Files:
N/A

Category:
Trojan

Recommended Action:
Remove at once.

Removing Win32.Servudoor manually takes a certain amount of tech savvy. If you are comfortable and knowledgeable about how this program works then do the following:

Kill this process:
info.exe

Then remove this file:
info.exe, lol.bat.

Many people are unfamiliar with manual removal. It does have inherent risk. One false move can render your PC useless. To save your time and sanity, you can try SpyZooka. SpyZooka is not only an award-winning anti-spyware application; it is the only program in the business that offers a 100% guarantee on spyware removal. Now, THAT is something you can count on.