Virus Expert

10/15/2012

Polisen Enheten for Databrott Virus,

Polisen Enheten for Databrott virus uses the same malicious tactic as FBI virus, Ukash virus, Canadian Mounted Police ransomware and other PC lockers of this type. This sample is prepared especially for Sweden audience. It penetrates inside a system secretly therefore you will not see any sign of its activity before it roots deeply in a system.

How to remove Panda Trojan ?

Panda Security has warned the users that virus developers have employed a good name Panda for their malicious purposes. Trojan uses their name for infecting computers. Panda Trojan is capable of logging all commands entered by the users into the affected computer - including, of course, personal, financial and login information - and sends it to a remote server controlled by cyber crooks. It is also able to load itself up after every computer reboot, and uses stealth techniques to prevent being detected by antivirus products.

An Garda Síochána virus. How to remove

An Garda Síochána is another ransomware that infects systems with great power nowadays. As any other ransomware this one has the main aim of getting your money by fooling you into this. How exactly does it do that? When An Garda Síochána virus penetrates inside your system it automatically blocks it and leaves you with one message on a screen.

How to remove Polisen Enheten for Databrott virus,

Polisen Enheten for Databrott is a new virus with old aims and methods of work inside your system. When Polisen Enheten for Databrott ransomware gets into your system it blocks the whole machine so you will not have the possibility to do anything at all. The main goal of Polisen Enheten for Databrott ransomware is not new to users as almost every single virus wants to get your money for their malicious products. And Polisen Enheten for Databrott virus is not an exception in this case.

Green dot Moneypak Virus

Green dot Moneypak Virus is a real problem for millions of the Internet users. We receive numerous E-mails from our customers with the claims that their PCs are blocked by above-mentioned severe infection. Green dot Moneypak Virus developers manage to hijack the vulnerable PCs and fool the gullible Internet users into believing that the illegal actions are spotted on their computers and the fines are needed to pay for these crimes. So the hackers are getting richer day by day. We draw your attention to the fact that police authorities do not collect fines in such way. They do not have a jurisdiction that would allow them to lock computers. It is nothing more than a dirty trick.

Your computer has been locked. How to unlock?

The people who have invented UKASH virus family are very rich now, because they are succeeded to fool millions of law-abiding Internet users. The family of notorious Ukash viruses seems to be a profitable business, because new samples of ransomware programs are released almost every day. This article is aimed to open the eyes of millions of Internet users - police authorities do not collect fines in such way. They do not have a jurisdiction that would allow them to lock computers.

MoneyPak virus. How to unlock a PC?

The United States of America suffers from computer infection that hijacks the desktop of the infected computer. It is called by some as FBI virus, but, of course, this Trojan has nothing to do with the Federal Bureau of Investigation. This ransomware is very severe and has already stolen money from millions of Internet users. It is unpleasant to listen but the fact is the fact. We warn all Internet users about this menace. We recommend you to carefully read this entry and find out how not to be deceived by this parasite.

My skype is hacked. Please help

Skype Trojan is currently rotates on the Internet distributes itself via the Skype accounts of affected users. It tends to automatically spread itself by sending out a message with the following content: “hey, is this your skype profile pic”? This question and the notice with the suggestion to download some suspicious file can be received from your friends or colleagues. Then link to the picture in question follows and at the end of each link the Skype nickname of the targeted user is included: "http://xxxxxxxxxx.xxx/xxxxxx?image=[Skype nickname of target]" Please do not open the links of such type even they are sent from your friends or acquaintances. They do not sent them, merely their skype account have been hacked. But if your system is already infected with this hoax you are recommended to perform the next steps:

How to fix my Skype

To stop this mess you are recommended to perform the next steps:

open skype
go to tools
options
advanced
allow other programs access to skype
Now when you click that there should be 3 programs remove them all from the list.

Not less important this you need to do is to download the reputable anti-virus, like GridinSoft Trojan Killer and launch the full scan.

Make sure to update virus database before using it. If any questions occur, you are appreciated to leave a comment

10/03/2012

Searchsafe.com - the reason of the redirects

Basing on the last researches conducted by GridinSoft Trojan Killer Lab, Searchsafe.com is a risky website. It pushes computer users to use it to search information by pretending as a real search engine. Indeed, it is impossible to find any useful information by means of, it just a very nasty redirect virus. It is able to affect your browsing activities. This tricky redirect virus is also able to change your browser settings to keep hijacking your web browsers, and even takes place of your whole homepage, and cannot not work if you try to uninstall and reinstall your homepage. When you use the search engines, you will not get your desired search results but are forced to its website: Searchsafe.com or other annoying advertisement websites. In addition, it has the ability to modify your system settings to mess up your system. It can make your computer become more compromised so that other threats will get into your computer easily. What’s worse, Searchhere.com is an evil stealer; it traces your online activities and collects your personal information to transfer to the remote hackers for the illegal profits. You should keep in mind that Searchhere.com is a very harmful threat in your computer; you are highly recommended to remove it as soon as possible once it appears on your computer.

How to stop Searchhere.com disgusting activities

Stop Searchsafe.com running processes in the windows task manager.
You need to open Registry Editor and delete these Searchhere.com registry entries:
to stop the redirects you should remove these files
When all above-mentioned steps are successfully perfomed, you are recommended to download GridinSoft Trojan Killer http://trojan-killer.net/download.php and scan your system for other insecure objects presence because while you were redirected to malicious sites one could easily get computer viruses, rogue, worms, etc

Source: http://remove-trojans.com/searchsafe-com-is-a-risky-web-site/

10/02/2012

Vista Defender 2013 virus description and removal instructions

Vista Defender 2013 belongs to the group of fake anti-virus program that do their best to affect the vulnerable PCs. This malicious plot is implemented by means of Trojans. They infiltrates onto the targeted platforms via security holes. the virus particles could be also easily included to any archive or another item you download from the worldwide web.