We have previously reviewed some tools to remove Spywares like – Spyware Terminator and rootkit removal tools like – Sophos Rootkit Removal and Sanity Check.

In this article, I am going to review a tool called SpyDLL Remover which is a lightweight and very well targeted DLL scanning tool which can scan for any spyware of infected code by canning the DLL (Dynamic Link Library) files running or installed on the computer. This tool is fully compatible with Windows 7 32bit and 64 bit editions, I have tested it on my windows 7 desktop. I will give a complete review of this effective tool.

One really nice thing about this tool does not require any installation, its a simple EXE file which you can carry on Pen Drive / CD / DVD and run on any PC which you suspect is infected with some spyware / malware.

This is how the interface looks like,

The interface is simple and easy to use. just run the tool and press “Start Scan” button on the tool and it will scan your DLL files for any malicious or suspected behavior.

It will show the results categories on a color coded scheme with different threat levels highlighted in different color.

The red ones are serious threats, the orange one are less severe and yellow one are mild. After scan is complete, you can check the information of the highlighted DLLs online and decide whether or not you want to remove the reported DLLs. It gives you options to remove the suspected / malicious DLL files.

The Process viewer tab on this tool allows you to see all the running processes and their corresponding DLL files and its details. click on the image below to see the detailed options at the bottom of this image which include :

• Remove DLL
• Check Online
• DLL Info
• Process Info
• Kill Porcess
• Refresh
• Export

Another feature of this tool is the DLL tracer, this is very helpful if you want to know details of a DLL file in the extracted package of some software or otherwise. You can put the path of the DLL and SpyDLL scanner will trace the DLL and scan it.

To summarize, the features of SpyDLL Remover include :

• Advanced Spyware Scanner which efficiently discovers hidden Rootkit processes as well as suspicious/injected DLLs within all running processes in the system.
• Detection and removal of hidden userland Rootkit processes using sophisticated techniques such as
• - Direct NT System Call Implementation
  - Process ID Bruteforce Method (PIDB) as first used by BlackLight
  - CSRSS Process Handle Enumeration Method
• State of art technique for completely freeing the injected DLL from remote process based on advanced DLL injection method using low level implementation which defeats any blocking attempts by Rootkits. This is one of those unique features found only in SpyDLLRemover.
• Sophisticated DLL auto analysis which helps in seperating out the legitimate modules/DLLs from the malicious ones. Such DLLs are displayed using different colors representing various threat levels for quicker and easier identification.

for detailed features, see the homepage of SpyDLL Remover

Download SpyDLL Remover

PS : This is 500th Article on Trouble Fixers. Thanks for your immense support and appreciation to make it going.

This content is just a summary, read the full article at ©2010 TroubleFixers - All about fixing computer troubles. All Rights Reserved.

Remove Spywares From Windows 7 PC Using SpyDLL Remover is a post from TroubleFixers - All about fixing computer troubles

As per the advisory there is a vulnerability that if a user presses F1 Key on being asked by a Website or webpage, the website can run potentially malicious code or scrip on such computers. That computer can get hacked, information can be stolen or it may also lead to data theft.

It is an advice to all our readers and Windows XP, Windows 2002 and Windows 2003 Server users to beware of this vulnerability and do not press the F1 Key when asked by a website. This may leave your computer unsecured or infected with virus or trojans.

Even if you are a Windows Vista User or Windows 7 or Windows Server 2008 user, its a safety tip to not click F1 Key when asked by a website.

This content is just a summary, read the full article at ©2010 TroubleFixers - All about fixing computer troubles. All Rights Reserved.

Websites Asks To Press F1 Key ? DON’T PRESS IT is a post from TroubleFixers - All about fixing computer troubles

In order to stop these kind of viruses infection, you need to stop the autorun feature in windows, here is a free program which lets you do it.

AutoRun Vaccine is a small program to enable or disable AutoRun feature of Windows, it will stop the viruses to take the advantage of autorun feature to infect USB devices to spread or re-infect your computer.

It is very simple and easy to use program as shown in the above snapshot, which lets you take enable or disable autorun in single click.

Download AutoRun Vaccine | Similar Tools – USB Autorun Blocker | USBProtect

This content is just a summary, read the full article at ©2010 TroubleFixers - All about fixing computer troubles. All Rights Reserved.

Stop or Suspend AutoRun In Windows With AutoRun Vaccine is a post from TroubleFixers - All about fixing computer troubles

The features of Trent Micro Internet Security include:

• Antivirus
• Antispyware
• Firewall
• Protects Windows and Important Programs from Unauthorized Changes
• Web Threats Protection
• Spam Email Filter
• Parental Controls
• Data Theft Prevention

To avail a free trial version of 1 year single user, follow the steps below :

1. Download the link on the right hand side at this promotional page.

2. It will download a setup file of about 149 MB – TIS175_IOMEGA.exe , run the setup after download is completed. During the setup, it asks for the Serial Number, at that window, select – “Install a free trial version”

3. After install, it will ask you to activate the product, simply put your email address to activate the product, it will install updates and gets ready for use

source – Raymond.cc

This content is just a summary, read the full article at ©2010 TroubleFixers - All about fixing computer troubles. All Rights Reserved.

Trend Micro Internet Security 1 Year Free Trial Worth $69.95 is a post from TroubleFixers - All about fixing computer troubles

Rootkits are one of the biggest security and identity theft tools which can infect your PC. Most of the good and reliable Anti-Virus tools have anti-rootkit feature bundled in them, but if your anti-virus does not provide that safety, you must scan your computer manually for any rootkit infections using free scanning tools like – Sophos Rootkit Removal Tool

In this article I will review one more useful free rootkit scanner tool called SanityCheck which scans the rootkits and malwares on your computer. Good thing is that it is fully compatible with Windows 7 64 bit and 32 bit versions, and older versions including Windows Vista, Windows XP etc. Its a free tool for personal use.

Fix:

Features of SanityCheck Rootkit Removal Tool include :

• Runs on almost all Windows versions
• Makes use of special deep inventory techniques
• Detect hidden processes
• Detect obfuscated processes
• Detect processes attempting to appear as common system processes
• Detect processes with obviously deceptive names
• Detect processes without product, company or description information
• Verify signatures and checksums of processes and kernel modules
• Detect SSDT hooks
• Detect Import Address Table hooks
• Detect kernel object callout hooks
• Detect hidden drivers
• Detect hijacked driver entry points
• Optional expert mode

For more tools on virus problems, you can see our Virus Problems Category.

 Download SanityCheck

This content is just a summary, read the full article at ©2010 TroubleFixers - All about fixing computer troubles. All Rights Reserved.

Rootkit Removal Tool For Windows 7 And Older Windows Version is a post from TroubleFixers - All about fixing computer troubles

It also prevents malicious programs from disabling Task Manager and Registry Editor, and also prevents changes to many other system settings. This application does not have a visual interface, does not require any installation, so you can execute directly on computer. Once it started running it will show up only in windows system tray.

Some related fixes we have talked about are Virus In Pen Drives, Repair or Protect Your Pen Drive and Disabling Autorun Autoplay  

Whenever this program detects a virus it automatically removes it and displays an alert box near the taskbar. Wimp also blocks automated scripts (such as VBScript files) from running on your computer, since some viruses spread in this manner. To make the best use of Wimp, place it in your Startup folder: Go to Start > Programs, right-click on Startup and select Open, Create a shortcut to Wimp in this folder.

Anytime if you want to disable wimp you just need to right click the system tray icon and select disable wimp.

Download Wimp | Similar Tools – Ninja Pendisk, iKill

This content is just a summary, read the full article at ©2010 TroubleFixers - All about fixing computer troubles. All Rights Reserved.

Windows Malware Protection Tool is a post from TroubleFixers - All about fixing computer troubles

Internet is a place which is flooded with security problems and viruses and you need to stay alert of any suspicious links or messages in the inbox or instant messenger.

There has been a virus which is spreading through MSN / Live messenger which shows you a link in the IM window with a text which says

“Hi,this is your photo? – some link here

Do not click on the link on this message, this takes you to a url which infects your computer with this virus. It downloads a virus file called Picture_2525.exe and installs it.

If you have accidentally clicked this link, below is the method to remove this virus manually.

Fix:

We recommend that you always use a good antivirus tool, free or paid, with real-time protection which can save you from such viruses.

If this virus has already infected your computer, open the task manager by pressing Shift + CTRL + ESC key together and kill the following tasks :

svlost.exe
svlostSrv.exe
tasman.exe

 

After this you need to kill the virus service. Press Windows Key + R and type the following command and press enter:

sc delete svlostServices

After this is open the following folder -  c:\Windows\System32  and delete the below mentioned files:

libeay32.dll
ssleay32.dll
svlost.exe
svlosta.dll
svlostb.dll
svlostSrv.exe
tasman.exe

Now clean the Registry entries by running following commands using Windows Key + R using the run prompt:

reg delete "hkcu\software\microsoft\internet explorer\main" /v default_page_url /f
reg delete "hkcu\software\microsoft\internet explorer\main" /v "Start Page" /f

 

As a precautionary measure, change your MSN / Windows Live Password.

[ Source – Raymond.cc ]

This content is just a summary, read the full article at ©2010 TroubleFixers - All about fixing computer troubles. All Rights Reserved.

Remove “Hi, this is your photo ?” MSN / Windows Live Messenger Virus is a post from TroubleFixers - All about fixing computer troubles

In this article, I am going to review a free and effective Virus Removal tool called HouseCall by Trend Micro. This toll scans your computer for most common Virus, Worms, Trojans and Spyware Infections. Remember that this is a on demand scanning tool and does not provide real-time protection from viruses, so I recommend that you should still get yourself a reliable free or paid anti-virus software.

This tool is simple to use and requires small download before you can start the scan. In this article I will review HouseCall Virus Removal tool.

Note : If your computer is so infected that it does not allow to download or run an executable file,then you should try – [How To] Remove A Virus That Does Not Allow To Run Virus Scan

You need to follow the below steps to use HouseCall :

1. Go to HouseCall Page at : http://housecall.trendmicro.com/

2. Start the download of the HouseCall Launcher from this page, depending on you have 32bit version or 64 Bit version of Windows.

2. Continue to download and run the program when downloaded :

3. This tool will display the license agreement which you can read and agree and then it will download some updates before launching the scanner.

4. Start the scan using the button below and wait till the tool scans your PC for Infections because of Viruses, Trojans, Spyware and Worms.

Hope you find this tool handy and useful when you suspect any virus Infections in your PC. Follow @troublefixers on twitter for updates via twitter.

This content is just a summary, read the full article at ©2010 TroubleFixers - All about fixing computer troubles. All Rights Reserved.

Remove Virus, Trojans , Worms And Spyware Using HouseCall Free Scanner By Trend Micro is a post from TroubleFixers - All about fixing computer troubles

DiStartup is a freeware tool which runs as a windows service that delete the whole Windows startup programs, and monitor the Windows registry and common startup in case of prevent and delete any program to enter the startup programs safety area.

As this program runs as a windows service, so it does not have any visible interface, This program runs as service which runs first before any running program, DiStartup runs and delete the startup programs before they will be runs.

This program monitors the following registry keys related to windows startup

All Users-RunOnce
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
All Users-Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
All Users-RunOnceEx
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
All Users-RunEx
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunEx
Current User-RunOnce
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
Current User-Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Current User-RunOnceEx
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
Current User-RunEx
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunEx

Download DiStartup

This content is just a summary, read the full article at ©2010 TroubleFixers - All about fixing computer troubles. All Rights Reserved.

Troubleshoot Viruses In Windows Startup With DiStartup is a post from TroubleFixers - All about fixing computer troubles

One of my friends Mohit called me and told me that his laptop has got some virus infection in his Windows Vista OS. The virus is causing many exe applications to stop randomly. He explained his problem as :

Whenever I try to run a virus scan, It will close the anti-virus, crash windows explorer and will stop many services. The icons in the system tray are also not loading. Many exe applications are crashing randomly. I am not able to install any virus removal tool on my laptop. The in built anti-virus has also stopped responding. I am not able to run system restore on windows as the virus is killing the system restore wizard as soon as I launch it.

In such situations, when the virus has infected the computer so badly that you are not able to run a virus scan, there are still methods to remove the virus. In this post I will share one such useful trick.

Fix:

The solution to fix such virus is that fix the virus using a boot CD with virus scanner tool. Using a boot CD, the computer will boot using the CD, thus the virus will not load into the memory and will not be able to kill the anti-virus.

In this article I will review a free Virus Removal Boot CD tool for personal use by Kaspesky. We have already reviewed the Kaspersky Virus Removal tool which runs inside Windows.

Steps to use the Kaspersky Rescue Boot CD:

1. Download the Boor CD image called Kaspersky Rescue CD on some other computer which is not infected. Link is given at the bottom of this article.

2. Burn a CD using this CD image on the computer where you download the image file. You can use Nero or In Built Image burning tool of Windows 7 or any other image burning tool for this. Now use this CD to boot the infected computer.

3. Boot the infected computer using this CD. If the computer does not boot with this CD, press delete when computer starts, open BIOS setup and set the Boot order for the devices.

4. When you start booting with CD, you will see screens like this – It will boot using a customized Linux platform and will start the scanner as you can see in the images below.

Additional to Virus scan, you can also delete a file if your are sure that its causing problems. For deleting a file, you can use the red icon at the bottom of the screen which is a menu and will give you an option to run “File Manager” which gives you access to all your hard disk drive partitions.

Download Kaspersky Rescue CD Image

This content is just a summary, read the full article at ©2010 TroubleFixers - All about fixing computer troubles. All Rights Reserved.

[How To] Remove A Virus That Does Not Allow To Run Virus Scan is a post from TroubleFixers - All about fixing computer troubles