Striker

Salut, I've tested the about.exe and it was Data Recovery aka Master Utilities. This rogue will disable your Taskmanager, hide all files + your hard drive. You can do nothing. If you're infected with Data Recovery or Master Utilities, please use this key to disinfect your PC. Serial = 1203978628012489708290478989147 The file will be dropped here: C:\Documents and Settings\All Users\Application Data\6DSS92c31Apgjk.exe After the registration you can download the registered copy of Master Utilities. Start a Quick Scan with Malwarebytes' Anti-Malware to delete the rest of files (Be sure your MBAM is updated!) Some screenshots:

I know these guys, and they took this serial now for 2 years or longer. System Tool same as System Security 2009 etc. I'm sure, they will not ban this key . The setup does have a Anti VMWare function. Just type the serial into the registration field and you will get the control back. So you can easy remove that from your pc

Serial to activate this rogue: WNDS-S0DF5-GS5E0-FG14S-2DF8G Have Phun.

Screenshot: This rogue does have a algorithm. Some keys, who i've copied from the keygen for the fake AVG 2011 by Xylitol: HBF21-PFP49-MDI72-GFA305-XYL43 MKF80-LDA97-CGN91-NGF540-XYL75 JCC10-HCN81-BKO61-LHA092-XYL50 GDM15-IMF18-BAK31-KAM555-XYL26 IPL45-BMK22-PIJ45-OAG323-XYL83 KMC58-KGC90-BNH84-AIJ015-XYL63 JCD04-PLM21-NDN95-FME626-XYL24 NFK35-LHG85-FOP52-ACK580-XYL52 IKC70-DID51-JOH05-KGI054-XYL16 MEA21-PMO42-IKE75-GME022-XYL53 OCI52-OKI26-LDA24-MGK564-XYL62 Note: This is not the real AVG 2011 !!! The Keys does only work for the rogue!

Nope. ...Yeah, you got it. I'm Innovagest2000 aka BakaSoftware. SURPRISEEE!!!! Buy my products and you will get a cookie for free!

The Key for AV8 rogue: ABC12-DEF34-GHI56-JKL789 The fake scanners for AV8 are back, that's why i post the key.

Hm sorry i forgot that patch is detected by some av's

I just fixed the jump so it never jumps: How to: 1. Install Quick System Cleaner. 2. Copy the patch to the program dir and apply it. 3. Go to Quick System Cleaner registration field and type anything. 4. Enjoy! Hm it's not hard to remove QSC, that rogue is a lame one. You can easy remove that rogue with the uninstaller, you will find that here: C:\Programs\Quick System Cleaner After this, update MBAM and start a free scan for the changed registrys etc.

Update MBAM and start a free quick scan. Maybe Malwarebytes will find the uvx.exe and you can see, where the file is located. btw which antivirus do you use? And please check your processes with Process Explorer (Click me) Do you have some suspicious processes in your list?

No problem But you have right. Some sites like that are really infected. like that sites: example.co.cc/hello/xrewdneqduclisbrclg.php "co.cc" sites are often infected with exploits or rogue applications etc.

hm but Avira :/.. i think Avast! rulez

Thanks Advanced Setup, for the information.

No Buttons, there is no malware for sure. When you click on the image on this homepage, you will be redirect to the original old homepage (link is dead). But im wondering. Why is this site still alive?!

A few month ago i found a site for AV XP 08. The homepage.. Link: hxxp://www.artextil.com.co/antivir/ IT'S NOT DANGEROUS! You cannot download something on that site. It's just a blanc page. But who made this site online again????!

The new key is: U2FD-S2LA-H4KA-UEPB before: UEPB-H4KA-S2LA-U2FD

Yes, it's right. Thank you. What's that?: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskhost.exe

Hm, ok. Can you post a hijackthis log? Here you can download Hijackthis: http://hijackthis.softonic.de/ To analyze your computer, start HijackThis and run a scan. See the Quick Start Guide [link to Quick Start, FAQs and Feedback] for help in running a scan. HijackThis will display a list of areas on your computer that might have been changed by spyware. Do not change any settings if you are unsure of what to do. There are many popular support forums on the web that provide free technical assistance by using HijackThis log files to diagnose an infected computer.

Try to restore ur PC.

Security Shield is a new version of System Tool, Security Tool, Total security 2009, System Security rogue. This fake anti-spyware tool displays fake alert messages, prevent execution of legit programs, detects inexistent infections and Hijacks desktop background to scare users. To register (and help removal), copy paste this code: 64C665BE-4DE7-423B-A6B6-BC0172B25DF2 If your PC is infected with Security Shield use MBAM to remove the infection. (thx to Xylitol) Video: Do not ask me for the sample, i doesn't have it.

Good idea and serials for rogues etc..

Sorry, i don't have the sample.

This trojan blocker ( MD5: 305811f060ff21aad8d8cd872c1e89e2 ) prevents all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number. Number to Call: 89652915892 Code to unlock Windows: 100200987 Run MBAM to remove the infection. http://malwareresearch.myfineforum.org/about341.html

This trojan blocker ( MD5: ed0cd3c04b2a4160bde59b477c23dc91 ) prevents all software execution. To remove the Trojan (and unlock windows), infected users need to enter a valid serial number. Number to Call: 89165740131 Code to unlock Windows: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

I got the sample now. This Gpcode does have 2 algorithms: