Friday, July 10, 2009

How to remove WinBlueSoft (fake antispyware software)

WinBlueSof is a fake anti spyware and it is from the family of WiniBlueSoft.this fake antispyware enters in to your computer by following these using Trojan or other malicious programs .
first of all trojan will attack your computer with the security alerts asking you to download and install WinBlueSoft to clean your computer .WinBlueSoft Uses Blocker.dll that makes this infection more devastating.

when blocker.dll is loaded for the first time it will change your desktop to a black background with dark red ominous text written over it. This text is

" Warning!
Your're in danger!
Your computer is infected with Spyware!
All you do with computers is stored forever in your hard disk. When you visit sites, send emails... All your actions are logged. And it is impossible to remove them with standard tools. Your data is still available for forensics. And in some cases

For your boss, your friends, your wife, your children.

Every site you or somebody or even something, like spyware, opened in the browsers, with all the images, and all the downloaded and maybe later removed movies or mp3 songs - ARE STILL THERE and could break your life!

Secure yourself right now!
Remove all Spyware from your PC! "

You can remove this fake anti spyware manually from your computer by following these steps .
1 Remove all the files associated with this fake anti spyware software.

c:\Documents and Settings\All Users\Desktop\WinBlueSoft.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\WinBlueSoft
c:\Documents and Settings\All Users\Start Menu\Programs\WinBlueSoft\1 WinBlueSoft.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\WinBlueSoft\2 Homepage.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\WinBlueSoft\3 Uninstall.lnk
c:\Program Files\WinBlueSoft Software
c:\Program Files\WinBlueSoft Software\WinBlueSoft
c:\Program Files\WinBlueSoft Software\WinBlueSoft\data.bin
c:\Program Files\WinBlueSoft Software\WinBlueSoft\license.txt
c:\Program Files\WinBlueSoft Software\WinBlueSoft\uninstall.exe
c:\Program Files\WinBlueSoft Software\WinBlueSoft\WinBlueSoft.exe
C:\Windows\System32\blocker.dll


2 Remove all the registry files associated with the WinBlueSoft.

HKEY_CURRENT_USER\Software\WinBlueSoft
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinBlueSoft
HKEY_LOCAL_MACHINE\SOFTWARE\WinBlueSoft
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinBlueSoft"


No comments: