Mar 08

Remove Spydetector2009.com hijacker (Removal Instructions)

Hijackers Add comments

Threat Description:

Spydetector2009.com is a website designed especially to provide online support to the deployment of scareware campaign of Antivirus Live 2010 threat. Actually, Spydetector2009.com alone is not dangerous to visit. It contains no malicious scripts or trojans. The site under analysis is compiled with Antivirus Live 2010 fraudulent billing system, which means people can purchase the rogue product there. Things probably get worse if you are getting your browser forcibly redirected to Spydetector2009.com for no apparent reason, as it may seem. In that case, there is some trojan cleaning job that you should perform. Trojans can hijack one’s web browser (this mostly refers to Internet Explorer which is quite vulnerable to such attacks). As a result of this jack-up activity, you will realize that something is amiss because Spydetector2009.com will keep popping up replacing the sites you actually wanted to visit. This malady is quite annoying, one must remark. Spydetector2009.com is an unwanted website, to say the least. The sole fact that it is promoting such badware as Antivirus Live 2010 is quite prominent to make one acknowledge that Spydetector2009.com is to be avoided. In case you’ve been hit by the above-mentioned browser hijack, it’s recommended to locate and get rid of the trojans being the reason of this.

Determine if your system is infected with Spydetector2009.com hijacker and related threats:

Download Spydetector2009.com Hijacker and Antivirus Live 2010 Free Scanner with Remover

Spydetector2009.com Screenshot:

Spydetector2009.com

How to remove this threat manually:

Spydetector2009.com manual uninstall procedure:

Get rid of the related corrupt files:

  • %UserProfile%\Local Settings\Application Data\[random]\
  • %UserProfile%\Local Settings\Application Data\[random]\[random]sysguard.exe

Delete the associated registry entries:

  • HKEY_CURRENT_USER\Software\AvScan
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random]“
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random]“

Please note that Spydetector2009.com manual removal is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may cause irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic removal tool below:

Download Spydetector2009.com Hijacker Removal Tool

Leave a Reply