Saturday, November 29, 2008

How to remove Winweb Security 2008 (Delete instructions)

Just not long i posted on rogue anti spyware programs, my sister's notebook actually kena (Malay term which denotes that something has happened. Closest English approximation is "to get". 1. "He kena scolded by the teacher." (He was scolded by the teacher.)2. "He kena whack by Ah Beng." (He got hit by Ah Beng.) hit by it ; Winweb Security 2008, also known as WinwebSecurity.


A little information about Winweb Security 2008.
Winweb Security 2008 is a rogue antispyware application. It is another new counterfeit anti-spyware software that created to ruin the Internet community. Just like most fake antispywares, Winweb Security 2008 issues misleading and exaggerated results. Winweb Security 2008 usually installed itself onto your PC without your permission, through Vundo Trojan, Virus or fake software. WinwebSecurity2008 will display fake system alerts or fake security alerts to trick user to buy the paid version of WinwebSecurity2008 , in order to remove the potential and reported problems. Not only does it cause your machine to slow down dramatically, it would also put your privacy and data in risk. Once running, Winweb Security 2008 starts scanning the computer and found a lot of trojans and spyware. Then, it said that you should purchase Winweb Security 2008 in order to remove them and protect your PC. Winweb Security 2008 is another malware that tries to get money disguised as a security tool.


Winweb Security 2008 properties:


• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Winweb Security 2008 snapshot taken from my sister's notebook !
















The images shows how the fake anti-spyware uses deceptive scan results as a tactic to scare you into purchasing the software. This practice of showing false results is very common among rogue anti-spyware programs, and like many others, Winweb Security is using it to scare you into thinking you are infected. It shows there are 38 infections found on the system !

Below is my recommended manual removal for Winweb Security 2008. WinWeb Security 2008 can be removed by deleting the following files and registry keys.


Make sure you update your antivirus and antispyware definitions.

  1. Restart the pc and boot to SAFE MODE.
  2. Run 'Regedit' to open the Registry Editor. (Learn How To Do This)
  3. Delete the following registry values;
  4. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WinwebSecurity
  5. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\ adpws
  6. Delete the following registry keys;
  7. HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\Browser Helper Objects\{D5DF7C9D-6069-4552-8B0C-D02A912FC889}
  8. Delete file, C:\Documents and Settings\All Users\Application Data\5689887B.exe
  9. Delete folder, C:\Documents and Settings\All Users\Application Data\WinwebSecurity

After all the above has been done, run both your AntiVirus and AntiSpyware to detect any infections residue in the system.

Below shows what my SUPERAntispyware has found after doing a complete scan;


It reported there are total of 162 threats detected of which 127 in files and 35 in registry !

Scan reports are informative. The user is presented with parasite name, type, exact location of its objects and its short description (online). The application comes with useful additional utilities called System and Browser Repairs. These tiny tools allow to repair specific system and web browser components or functions that have been disabled by parasites. For instance, the user can enable the Task Manager, repair broken network connection, reset desktop wallpaper, restore hijacked home page and other browser settings, etc.

After running both antivirus and antispyware, Winweb Security 2008 should be removed. Now, reboot your computer back to normal mode and your computer should remain clear of the infection (once and for all).



Safety Tips for Fighting Spyware

The following precautions to help you keep your computer clean. It is very important for you to keep your computer clean so that important information is not stolen. For example, certain programs will log your keystrokes on your computer and use it to steal passwords. Using stolen passwords, these hackers can log into your bank accounts, credit card accounts, etc. Also, certain malicious software will slow down your computer and some can also cause your central processing unit to run at 100%, destroying the computer in the long run.

Here are some steps you can take to stay safe while still getting the most from the Internet and software programs.

  1. Most computer experts will recommend Firefox Web Browser as the best choice to keep your computer safe.

  2. Make sure to have antivirus software and that it is up to date. New viruses come out every day, therefore it is important to make sure that you update the virus definitions.
    I recommend to invest on good reliable antivirus such as ; Kaspersky Internet Security 2009. which now retail at $62-68 at SIM LIM SQUARE for 3 user, which i was using as now. Alternatively, the are also FREE Edition such as; AVG Anti-Virus Free Edition The free version is limited in features, but includes all basic scanning functionality as well as real-time protection. It worked pretty well or better as compare to some popular Antivirus software.


  3. Make sure to have spyware protection software.

  4. Make sure you have a firewall that is trusted.


Overall, work to remove viruses, malware, and spyware and then keep them out by using software to help protect your computer. Also try to stay away from suspecious websites.

Thursday, November 27, 2008

"Warning: Spyware has been detected on your computer".




What You Need to Know About Spyware Removal Tools!



With spyware infections now considered one of the greatest threats facing internet users, more and more people are searching for spyware removal tools. A recent CNN study reported 90% of internet users have some form of spyware infection on their computer. In response the market is filled with different kinds of spyware removers. The most popular method of spyware infection these days is caused by rogue anti spyware programs. These are simply fake spyware removal tools that send out false positive warning messages that your computer is infected.


Beware of rogue anti spyware programs
Often times the "Warning: Spyware has been detected on your computer" message is fake! It is actually a form of spyware advertising as a spyware remover. This is a clever trick to simply infect your computer further and steal information. These pop ups will come out of nowhere and warn you of grave danger while providing a link to scan or remove the spyware. But be careful because it is a trap. The dead give away is when the message mentions a specific spyware remover or provides a direct link to download.


The image below is an example of a fake warning message.












Two of the latest rogue antispyware programs sweeping the internet by storm
The two newest anti spyware rogue programs are Antispywaremaster and XP Antivirus 2008.
They fool the user into downloading the software and then wham! Their computer is infested with spyware and other corrupt files. Antispywaremaster is so evil it cons the user out of $115 and steals their credit card information.







List of the latest Rogue Anti Spyware Programs
Avoid these programs like the plague!!


AntispywaremasterXP
Antivirus 2008
Antispyspider
Antivirus 2009
IE Antivirus
WinFixer
Malware Bell
SpySheriff
Smithfraud
VirusHeat

SpyAxe
AntiVirGear
Malware Alarm
VirusBlast
Spyware Removal Wizard
SpyHeal
RemoveIT Pro
Vundo

Do not fall trap to the above "rogue anti spyware programs"


Killing Efficiency and Threat Database

Without question the two most important features of a spyware removal tool are the size of the threat database and the ability to completely eliminate a form of spyware.
Equally as important is the killing efficiency of the spyware removal tool. They will spread themselves across numerous folders including your registry and system process files. Spyware can attach itself to your startup commands, even if deleted it can simply regenerate itself every time you start your computer. The latest infections stick themselves to your "system restore" function nullify the computers ability to use it. One common way spyware can infect your computer is through hijacking your browser. A dangerous website can alter your homepage and alter your favorites or bookmarks. By hijacking your browser they can redirect your webpage sending you to sites filled with spyware.


The above software is what i have been using and i recommending to those who need a anti spyware to protect their system ! Surf the Homepage to see more features of what it does !
Download the Free Edition


SUPERAntiSpyware is a free spyware, malware, trojans remover. Easily remove over 1 million pests and threat components such as VirusRay, AntiVirGear, VirusProtectPro, DriveCleaner, SmitFraud, Vundo, WinFixer, SpyAxe, SpyFalcon, WinAntiVirus, AntiVermins, AntiSpyGolden and thousands more!
SUPERAntiSpyware is the most thorough scanner on the market. Their Multi-Dimensional Scanning and Process Interrogation Technology will detect spyware that other products miss! SUPERAntiSpyware will remove ALL the Spyware, NOT just the easy ones!

How does SUPERAntiSpyware compare with the competition?
The industry is in a constant state of change with new infections coming out on a daily basis. SUPERAntiSpyware.com is in the position to locate, analyze and remove "zero-day" threats as they appear on the market. Definitions are often updated and rules several times per day to ensure that users have the most up to date protection available.

The above shows that SUPERAntiSpyware residue a very small amount of memory usage on system resources and won't slow down your computer like many other anti-spyware products !

Wednesday, November 26, 2008

Active@ Hard Disk Monitor

Ok after knowing the functions of S.M.A.R.T. TECHNOLOGY, we moved on to discuss the following software that i found it to be useful ;

Active@ Hard Disk Monitor is a Freeware disk utility that checks and monitors your hard drives health status to enable user to backup their harddisks and help to prevent data loss. It allows user to detect bad sectors on a disk surface. The software can be launched automatically at Windows startup and monitor the system in the background. An icon in the System Tray can display the temperature for selected HDDs.


Surf to the homepage to know more about the functions and features it does. The Freeware version can be downloaded from the following link ; Active Hard Disk Monitor



Click on above image to enlarge It shows the application's interface and the information of the current disks.

The top-left pane has Hard Disk Drives listed. You can view S.M.A.R.T. attributes for the currently high-lighted HDD on the top-right pane. Clicking by individual S.M.A.R.T. attribute shows its description.
The bottom-left pane displays the overall status of the HDD’s health. The current Hard Disk temperature is displayed in the bottom-center pane with a temperature gage. Volumes located on a HDD are displayed on the bottom-right pane, as well as essential volume information. The time of last disk information poll is also displayed.

What this software impresses me is that it shows the current individual disk temperature in the System Tray and it also indicate how long your respective disks has been working since installed on your system !!!




It's actually shows that my SAMSUNG HD has been working for 9days 3hours (219hours) Temperture @ 36°C. Health Status ; 100%



It's shows that my MAXTOR HD has been working for 1month 2days 22hours (790hours) Temperture @ 44°C. Health Status ; 80%



It's shows that my HITACHI HD has been working for 1year 5months 25days 18hours (12978hours).Temperture @ 45°C.
Health Status ; 57%



Source from Storagereview.com conclude that :

Samsung's SpinPoint T166 delivers excellent performance that represent the
everyday performance a drive in a typical desktop system may encounter. The
T166 is a whisper-quiet drive, SpinPoint T166 delivers a great combination
of productivity performance, quiet operation, and power economy.


Considering the fact that this drive was released back in 2006, I find it very positive that this drive only has 2 platters, minimizing the risk of a hard disk crash and thereby data loss.


It seem like the Samsung SpinSpoint T166 series is a better harddisk to invest due to the harddisk temperture being monitor... Till date it never passes the 40°C, which shows it could maintain at a lower safe temperture as compare to the other 2 disk. Might be a better option for playing games and doing graphics intensive application on the harddisk.

Now the Spinpoint F1 add to the lastest flagships on SAMSUNG harddisk series.


OK, now back on the tropic again,


Active@ Hard Disk Monitor is a realtime hard drive diagnostic software. It utilizes the S.M.A.R.T. technology to track the status of the computer hard disks. Its main goal is timely detecting and anticipating any problems, occurring with the disk, before the danger of the data loss appears.

And even more - with Active@ Hard Disk Monitor you can check how old is your hard drive, how many read or write errors it collected, change the drive power mode or noise level and more..


Install Active@ Hard Disk Monitor to protect yourself from a possible data loss in case of an unexpected disk failure.

Monday, November 24, 2008

Intro the Technology of S.M.A.R.T.

What does S.M.A.R.T. stand for?
Computer users today have great expectations of data storage reliability. The S.M.A.R.T. is "Self Monitoring And Reporting Technology".It is a standard interface allowing a hard disk drive to check its status, report it to host system, and provide some estimation for a failure date to allow a system, or user, to back up data prior to a drive's failure.

What is the S.M.A.R.T. attribute?
S.M.A.R.T attribute is a specific property(parameter) of disk being monitored. The attribute is referred to either by its number or by its descriptive name. Attribute value is a positive integral number, usually in range from 1 to 100 (or sometimes 1 to 200). Maximum values are good, minimum values indicate that some component of the disk is about to fail. Specific treshold is assigned to each attribute. Once the value drops below this threshold, S.M.A.R.T considers disk to be faulty. Some attributes are considered life-critical and others are merely "informative". (e.g.: the "Temperature" attribute indicates the temperature of the hard disk, the "Power-On Hours" attribute indicates the count of hours in a power-on state, etc.) Various manufacturers may use different sets of attributes.

Some failures are predictable, and some are not.
A disc drive must be able to monitor many elements in order to have a comprehensive reliability management capability. One of the most crucial elements is understanding failures. Failures can be seen from two standpoints: predictable, and unpredictable.

Unpredictable failures occur quickly, like electronic and mechanical problems, such as a power surge that can cause chip or circuit failure.

Predictable failures are characterized by degradation of an attribute over time, before the disc drive fails. This creates a situation where attributes can be monitored, making it possible for predictive failure analysis.Mechanical failures, which are mainly predictable failures, account for 60 percent of drive failure. With the emerging technology of S.M.A.R.T., an increasing number of predictable failures will be predicted, and data loss will be avoided.