Win Antivirus XP comes with different names like Win Antivir 2008, Windows Antivirus 2008, and Antivurus XP 2008, but they are perfectly same program. They are members of rogue anti-spyware programs that give fake threats to users. Once the Trojan is activated, it will install the program automatically without the user’s consent and will save itself on system’s startup. Once it was installed, it will display various types of fake threats such as backdoor.mite, vbs.lion@mm, spyware.activitykey, and w32.hllw.backzat.g that will be removed unless you buy the program. It will give false threat allowing user to delete legitimate programs such as MalwareBytes and HijackThis. If such prompt appears, do not delete MalwareBytes and HijackThis since they are both legitimate.

Remove Win Antivirus XP

Step 1. Delete Windows Antivirus 2008 files:
•    wav.cpl
•    wav.exe
•    wav0.dat
•    wav1.dat
•    wav.cpl
•    Windows Antivirus 2008.lnk

Step 2. Delete Windows Antivirus 2008 registry entries:
•    HKEY_CLASSES_ROOT\.key
•    HKEY_CURRENT_USER\Software\AntiVirus
•    HKEY_CURRENT_USER\Software\WAV
•    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Antivirus”
•    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Antivirus”

Editing the registry needs proper knowledge as it may cause system failure for just one mistake. Backing up your files is highly recommended.

Category: Computer Tips & How Tos

Cyber Security is a member of rogue programs that uses a Trojan to install the program automatically without the user’s permission. It is a clone of highly popular System Security and Total Security. Once the program is installed, it will automatically launch itself and run a scan that will give you fake threats that can only be fixed by purchasing a full version.

Users tend to purchase the program afraid of system crash. Unfortunately, this program does not remove the viruses, and those viruses do not even exist. Once a user purchased the product, the threats will be temporarily gone. However, after a short period of time, it will gain prompt the same way it was before, and then will prompt you to purchase the same full version all over again. This is definitely a fraud and many users had been deceived by this rogue program.

Remove Cyber Security automatically
•    To remove this program from your system, download and install a removal tool.
•    Download and install updates.
•    Run the program and click on Scan

Manually remove Cyber Security
•    Kill the process tsc.exe and csc.exe from the task manager.
•    To do this, right-click on task bar and choose Task Manager
•    Under processes, locate files tsc.exe and csc.exe, click “End Process”
Delete registry values
•    Go to Start and type regedit on search fiels.
•    Look for these files, and then delete:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Cyber Security
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “1FD92E3F7C34799BFB075C41DA05D1FE”
Locate and delete these files:
•    Csc.exe
•    Winsource.dll
•    Help.lnk
•    Registration.lnk
•    Cyber Security.lnk
Unregister the following DLL libraries:
•    Winsource.dll
•    To do this, click on Start, type cmd on the search field, right-click on Command Prompt then choose “Run as Administrator”
•    Black window will appear
•    Type winsource.dll, then press Enter.

Category: Computer Tips & How Tos