What this programs does:

Registry Defender Platinum is a rogue registry cleaning program that is advertised via malware such as the Vundo Trojan. When infected with Vundo, pop-ups will be displayed that state your Windows Registry is corrupted and that you should download and install Registry Defender Platinum. If you decide to download and install the program it will be configured to start automatically when your computer turns on. When running, the program will perform a scan and state that you have numerous Windows Registry problems. It will not, though, allow you to fix these problems until you purchase the program. Even if the program was actually describing legitimate problems, we would never know. This is because it does not explicitly state what the problems are. Instead it just states you have a problem and asks you to spend money to fix it. Legitimate programs in this category, on the other hand, would provide specific details as to each problem that has been detected.

 
Registry Defender Platinum screen shot
For more screen shots of this infection click on the image above.
There are a total of 3 images you can view.

If you are infected with Registry Defender Platinum, then please use the free removal guide below to remove it and any malware that is associated with it

Introduction

An essential piece of software for every computer is an Anti-Virus. An Anti-Virus protects your computer from many common viruses and trojans which can be deadly for you system. Avast Anti-Virus Free Edition is very good and effective FREE Anti-Virus.

Downloading/Installation

Please visit this link: http://www.avast.com/eng/down_home.html and download the version that matches your language. 

Once you have downloaded it locate the file that you just downloaded. The icon should appear like the image below:
 

Now double-click on the file to launch the installation of Avast! 

Next youll see this screen: 

 
Click next. 

You will get another window with the ReadMe File, just click Next, again. 

Now you get the beloved Legal Agreement, just click I agree, and then click Next to continue. You will now see an image similar to the one below: 
 

I would recomend using the “Typical” installation. Make sure Typical is selected then click Next. 
 

Now if you selected “Minimal” you wont see “skins” here. After reviewing this for a second and confirming that what you have on your screen is similar to mine, click the Next button. (Note: the “Free Space” will vary from computer to computer. Since I have about 170 Gigabytes free that is why my Free Space is so large.) 

After pressing Next, you will get the above message. Basically if you select Yes it will do a quick scan of your hard drive upon boot-up. This scan will start before you log-in into Windows. I recomend you select No, because even though this scan will only happen once, this scan can take quiet a while. It took almost an hour for my hard drive. 

 
If you have Microsoft Anti-Spyware, or other similar program installed you may be prompted with a similar message. Click the Allow button to allow this change to take affect. 

Now you have to restart your machine. I highly advise you to select Restart and then click Finish. 

After you restart you will get a message about Avast! it will give you the general “Hello and Thank you for choicing our Product.” Also after you restart you will notice 2 new icons in the bottom right corner of the screen.
 

The icon with the I is for the “Virus Recovery Database” (VRDB). What this does is virutally makes copies of the program you have installed and if one of them gets infected with a virus this will replace the files infected so the program function like before. The A is the On-Access Protection. 

Very Important – after restarting, right click on the A in the taskbar and select Updating, the highlight Program.
 

You will get this popup after its done updating. If Avast! had to download anything for your computer you may get a message asking you to restart. 

Configuring 
Now right click on the A in taskbar and click Start Avast! AntiVirus.
 

Click Program Registration and you will be taken to their website. Fill out the form and then check you e-mail. Once you get an e-mail from them (usualy about 1 minute after submitting the form) copy and paste the serial they provided into the highlighted box. Then click ok. 

 
Now you will see this screen. Click the little hard drive like icon in the top right corner, below the X. 

Click each icon on the right once until the options in the center read: 

• Scan local drives: ON
• Scan removeable media: ON
• Scan selected folders: ON
  C:

Also adjust the slider at the top from Standard Scan to Thorough Scan, and make sure to check “Scan Archive Files.” 

Now click on the A on the middle left side and adjust the Resident Protection from Standard to High. 

Ok now to set-up and configure the On-Access Protection. 

• Right click on the A on the taskbar
• Click On-Access Protection Control
  

I recomend changing the default slide from Normal to High, depending on how fast your system is.
 

What makes Avast! unique is that it scans many parts of the system. It scans Instant Messenging, Internet Mail, Network Shield, Outlook/Exchange, P2P Shield, Standard Shield and Web Shield. So regardless of what you do on the computer you will be protected no matter what. 

Scheduling a Scan  

To schedule a scan: (from: http://forum.avast.com/index.php?board=2;action=display;threadid=3796) 

• Go to Start > Programs > Accessories > System Tools > Scheduled Tasks

• Click (or double-click) on Add Scheduled Task

• In the wizard that appears click Next - a list of programs will appear
• Click Browse and navigate to C:Program FilesAlwil SoftwareAvast4 (or whatever folder in which you installed avast!)
• Click (or double-click) on the file ashQuick.exe
• On the next screen give the task a name of your choice and choose how often you want it to run and click on Next
• On the next screen choose the appropriate scheduling options and click on Next

• On the next screen enter the user name and password for the Windows user you want the task to run as, then click on Next

• On the next screen check the box for the option “Open advanced properties for this task when I click Finish” , and then click Finish

• On the next screen, in the “Run” field you will see the path for the ashQuick.exe program. After the closing quote enter a space and type in the path(s) that
  you want scanned. Multiple paths must be separated by a space and any paths that include a space in the path name must be in quotes. Here are a couple of examples:

  “C:Program FilesAlwil SoftwareAvast4ashQuick.exe” C: E: - this will scan the entire contents of the C: and E: drives
  
  ” C:Program FilesAlwil SoftwareAvast4ashQuick.exe” “C:Program Files” E:Downloads - this will scan the contents of the Program Files folder on the C: drive and the Downloads folder on the E: drive, including all subfolders (Note the first path is in quotes due to the space in the folder name “Program Files”)

• Click OK

• In the Scheduled Tasks window, from the menu, click on Advanced and choose “Start Using Task Scheduler”

• To test your newly created task, from the Scheduled Tasks window, right-click on the tasks icon and choose “Run” from the popup menu. If the scan doesnt begin correctly youll get an error message. The problem is most likely in the scan path (missing quotes or something like that.)
• Close the Scheduled Tasks window

Keep in mind that this is just a “quick scan” and Im not sure with what sort of depth that ashQuick.exe scans, but it beats nothing at all.

I dont know if there is any way to pass other parameters to the ashQuick.exe program for various options like scanning depth, what to do if a virus is encountered, etc. If anyone has any info on how to pass other parameters please feel free to add the information to this thread.

Lastly, I wouldnt suggest using the screen saver scanner in conjunction with this scheduled scan, as they may end up running at the same time and cause conflicts.

Dialers, Trojans, Viruses, and Worms Oh My!

If you use a computer, read the newspaper, or watch the news, you will know about computer viruses or other malware. These are those malicious programs that once they infect your machine will start causing havoc on your computer. What many people do not know is that there are many different types of infections that are categorized in the general category of Malware. 
Malware – Malware is programming or files that are developed for the purpose of doing harm. Thus, malware includes computer viruses, worms, Trojan horses, spyware, hijackers, and certain type of adware. 
This article will focus on those malware that are considered viruses, trojans, worms, and viruses, though this information can be used to remove the other types of malware as well. We will not go into specific details about any one particular infection, but rather provide a broad overview of how these infections can be removed. For the most part these instructions should allow you to remove a good deal of infections, but there are some that need special steps to be removed and these wont be covered under this tutorial. 
Before we continue it is important to understand the generic malware terms that you will be reading about. 
Adware – A program that generates popups on your computer or displays advertisements. It is important to note that not all adware programs are necessarily considered malware. There are many legitimate programs that are given for free that display ads in their programs in order to generate revenue. As long as this information is provided up front then they are generally not considered malware. 
Backdoor - A program that allows a remote user to execute commands and tasks on your computer without your permission. These types of programs are typically used to launch attacks on other computers, distribute copyrighted software or media, or hack other computers. 

Dialler - A program that typically dials a premium rate number that has per minute charges over and above the typical call charge. These calls are with the intent of gaining access to pornographic material. 
Hijackers – A program that attempts to hijack certain Internet functions like redirecting your start page to the hijackers own start page, redirecting search queries to a undesired search engine, or replace search results from popular search engines with their own information. 
Spyware – A program that monitors your activity or information on your computer and sends that information to a remote computer without your knowledge. 
Trojan - A program that has been designed to appear innocent but has been intentionally designed to cause some malicious activity or to provide a backdoor to your system. 
Virus - A program that when run, has the ability to self-replicate by infecting other programs and files on your computer. These programs can have many effects ranging from wiping your hard drive, displaying a joke in a small box, or doing nothing at all except to replicate itself. These types of infections tend to be localized to your computer and not have the ability to spread to another computer on their own. The word virus has incorrectly become a general term that encompasses trojans, worms, and viruses. 

Worm - A program that when run, has the ability to spread to other computers on its own using either mass-mailing techniques to email addresses found on your computer or by using the Internet to infect a remote computer using known security holes. 

How these infections start 
Just like any program, in order for the program to work, it must be started. Malware programs are no different in this respect and must be started in some fashion in order to do what they were designed to do. For the most part these infections run by creating a configuration entry in the Windows Registry in order to make these programs start when your computer starts. 
Unfortunately, though, in the Windows operating system there are many different ways to make a program start which can make it difficult for the average computer user to find manually. Luckily for us, though, there are programs that allow us to cut through this confusion and see the various programs that are automatically starting when windows boots. The program we recommend for this, because its free and detailed, is Autoruns from Sysinternals.

When you run this program it will list all the various programs that start when your computer is booted into Windows. For the most part, the majority of these programs are safe and should be left alone unless you know what you are doing or know you do not need them to run at startup. 

At this point, you should download Autoruns and try it out. Just run the Autoruns.exe and look at all the programs that start automatically. Dont uncheck or delete anything at this point. Just examine the information to see an overview of the amount of programs that are starting automatically. When you feel comfortable with what you are seeing, move on to the next section. 
 
How to remove these infections
 
We have finally arrived at the section you came here for. You are most likely reading this tutorial because you are infected with some sort of malware and want to remove it. With this knowledge that you are infected, it is also assumed that you examined the programs running on your computer and found one that does not look right. You did further research by checking that program against our Startup Database or by searching in Google and have learned that it is an infection and you now want to remove it. 

If you have identified the particular program that is part of the malware, and you want to remove it, please follow these steps. 

1. Download and extract the Autoruns program by Sysinternals to C:Autoruns

2. Reboot into Safe Mode so that the malware is not started when you are doing these steps. Many malware monitor the keys that allow them to start and if they notice they have been removed, will automatically replace that startup key. For this reason booting into safe mode allows us to get past that defense in most cases.
3. Navigate to the C:Autoruns folder you created in Step 1 and double-click on autoruns.exe.

Intel Desktop Board D945GCLF2 Mini-ITX Motherboard, Integrated Dual-Core Intel Atom Processor 330, Intel 945GC Express Chipset, Supports DDR2 667, SATA HDD, w/ GB LAN, Video and Audio. OEM

 The Intel Desktop Board D945GCLF2 is designed to support Internet-centric computing, delivering incredible capabilities in the new flexible Mini-ITX form factor. Featuring the integrated 45nm dual-core Intel Atom processor 330 and the Intel 945GC Express Chipset, this board is an energy-efficient solution for home users as well as for unique vertical markets. Designed with Intels leading edge 45nm Hi-k metal gate processor, this board delivers incredible opportunities to communicate, listen, watch, play, and learn via Internet connectivity.

References: | Intel Company Website | How to build a MiniITX system |

Black HP USB2.0 External 20X LightScribe Dual-Layer DVD+/-W DVD Burner HP1040VE, 20x DVD+/-R, 8x DVD+/-R DL, 12x DVD-RAM, w/ Nero 7 Essentials

 HPs multiformat drive offers high speeds and double-layer recording, and its LightScribe Version 1.2-ready for high-contrast LightScribe labeling. It lets users easily preserve, edit and share up to 8.5 GB of video, photos, and multimedia presentations on one double-layer disc – and quickly store, back up and transport files on DVDs and CDs. The dvd1040e records double-layer DVDs at up to 8X, recordable DVDs at up to 20X, rewritable DVDs at up to 8X, and DVD-RAM at up to 12X.

 
LightScribe is the innovative new disc-labeling system that gives CDs and DVDs a neat, professional look without ink, pens, or paper labels. With LightScribe, you simply burn your data, flip the disc over, and burn a precise, silkscreen-like label directly onto your LightScribe CD or DVD.

Specifications: Write speed: DVD+R up to 20X (CAV); DVD+RW up to 8X (ZCLV); DVD-R up to 20X (CAV); DVD-RW up to 6X (ZCLV); DVD+R Double Layer up to 8X (ZCLV); DVD-R Dual Layer up to 8X (CLV); DVD-RAM up to 12X (PCAV); CD-R up to 48x (CAV); CD-RW up to 32x (ZCAV). Read speed: DVD-ROM up to 16X (CAV); CD-ROM up to 48x (CAV). Sustained transfer: 1x CD = 150 KB/s (data mode 1); 1X DVD = 1350 KB/s. Access time: DVD 160 ms; CD 160 ms (typical). Disc finalization time: DVD <2 minutes at 4X (DVD+R single-layer disc); CD <1 minute typical. Mean time between failures (MTBF): 70,000 POH at 25% duty cycle in room temp. Compatibility: Device write media compatibility: CD-R, CD-RW, DVD+R, DVD+R DL, DVD+RW, DVD-R, DVD-R DL, DVD-RW, LightScribe CD-R, LightScribe DVD+R, LightScribe DVD-R, 4.7 GB single-sided/9.4 GB double-sided DVD-RAM (2.6 GB single-sided/5.2 GB double-sided media not supported). Device read media compatibility: DVD-ROM, DVD+R, DVD+R DL, DVD+RW, DVD-R, DVD-R DL, DVD-RW, DVD-Video, 4.7 GB single-sided/9.4 GB double-sided DVD-RAM (2.6 GB single-sided/5.2 GB double-sided media not supported), CD-R, CD-RW, CD-DA, CD Extra, CD-ROM (Mode 1 – Yellow Book), CD-ROM/XA & CD-I Ready (Mode 2/Form 2 – Green Book), Photo-CD (single and multi-session), VCD, CD-Text.

System Requirements: 1.6 GHz Intel Pentium IV processor or equivalent recommended (Actual drive performance depends on PC configuration and blank media). 128 MB RAM (256 MB RAM recommended for video editing). 1024 x 768 video resolution with a minimum of 16-bit color required for DVD authoring and editing. USB 2.0 interface and available port on PC. Minimum hard disk space requirements: 1 GB free for included software installation, 10 GB free for DVD video disc creation (18 GB free for double layer). Internet connectivity recommended for software updates. Operating system compatibility: Microsoft Windows XP/2000 Professional SP4.

Package Contents: External DVD+/-R/ + /-RW drive with DVD+/-R up to 20X, double-layer. recording, DVD-RAM, and LightScribe direct disc labeling. Software CD including electronic users guide. Quick-Start placemat. Getting Help guide. USB 2.0 cable. Power supply. Software included: Nero 7 Essentials.

References: | HP Company Website

Black Lite-On USB 2.0 External Slim DVD Burner eSAU208-31, 8x DVD+/-R, 8x DVD+RW, 24x CD-R/RW. w/ Lightscribe

 The eSAU208 is a fully featured, USB-powered, 8X slim DVD writer, a perfect solution for those users who are looking for a compact, stylish and portable DVD writer. Mobility and flexibility are important aspects of the eSAU208. The drive can be powered in different ways. A standard power adaptor, bundled with the drive, can be used as a power source. Furthermore, the eSAU208 can be powered directly from a PC or notebook through a USB cable, which uses either one or two USB ports of the computer. A USB cable that is suitable for both options is also bundled with the drive. Writing speeds of the eSAU208 are 8X for DVD±R and DVD+RW, 6X for DVD±R DL and DVD-RW, 5X for DVD-RAM and 24X for CD-R(W). Reading speeds are 8X for DVD-ROM and 24X for CD-ROM. For some notebooks where lower energy consumption is required, the eSAU208 provides a “power saving mode”. To save energy and / or to operate the drive more efficiently on specific low powered notebooks, writing and reading speeds will be reduced approx. 40-60% depending on the media format.

Specifications:

MSI Radeon X1600 256MB GDDR3 PCI-Express (PCI-E) Video Card, Dual DVI, S-Video/TV Out, OEM/Bare Card

WD My Passport Essential 2.5in 160GB External Hard Drive, 5400 RPM, USB 2.0, Model: WDME1600TN

Kaspersky Internet Security 2009 * Protects from viruses, Trojans, worms, spyware, adware * Scans files, email, and Internet traffic * Protects instant messengers * Protects from unknown threats * Analyzes and closes Internet Explorer vulnerabilities * Disables links to malware sites / phishing sites * Global Threat Monitoring (Kaspersky Security Network) * Blocks all types of keyloggers * Automatic database updates * Free technical support. Functionality * Hourly updates and fastest response times ensure you benefit from the industrys most up-to-date protection. * New – Advanced anti-virus engine delivers the industrys fastest scan times (Passmark Security, June 2007). Saves time and improves performance. * Protects you from the phishing and malware sites that you wouldnt otherwise know were attempting to steal from you. * Kaspersky Security Network allows your computer to report when it discovers a threat that hasnt been seen before. All 250 million Kaspersky users benefit from our combined knowledge! * Works with Windows Vista, and Windows XP

License:Free

Malwarebytes Anti-Malware is a high performance anti-malware application that thoroughly removes even the most advanced malware and spyware. With one of the fastest, most effective quick scans and malware removal capabilities on the market, this program is the perfect addition to your PCs defenses.

The full version of the product includes a number of key features, including the ability to schedule updates and scans and most importantly, a real-time malware protection module that blocks malicious processes before they even start.

Version 1.34 includes a fix for removing Registry keys with corrupt permissions, improved removal of drivers, improved memory usage, and disinfection for USB-spread infections like Conficker.

Download Now (2.74MB)

License: Free

Additional Requirements:Windows 95/98/Me/NT/2000/XP/2003/Vista/7

Avast Home Edition is a complete ICSA & Checkmark certified antivirus, Checkmark certified anti-spyware & anti-rootkit package. Avast includes the following components: On demand scanner with skinnable simple interface, just select what do you want to scan in which way and press the Play button; On access scanner, special providers to protect the most of available e-mail clients; Instant messaging–ICQ, Miranda; Network traffic–intrusion detection, lightweight firewall; P2P protection for Kazaa, BitTorrent; Web shield–monitors and filters all HTTP traffic; NNTP scanner–scans all Usenet Newsgroup traffic and all operations with files on PC; Boot time scanner–scans disks in the same way and in the same time as Windows CHKDSK does. Version 4.8.1335.90319 brings improvements in the rootkit scanner as well as performance optimizations.

 

Avast Home Edition 4.8.1335.90319

Download Now (31.27MB)

License: Free

LimeWire is the worlds fastest P2P file-sharing application for all types of computer files, including music, video, pictures, games, and text documents. Other features include dynamic querying, file previews during download, advanced techniques for locating rare files, and an easy, clean user interface. 
LimeWires new spam blocker gets rid of junk results, and automatic updates will keep you sharing faster than ever with the latest version. You can search for Creative Commons and Weedshare licensed files, and publish your own creative works with Creative Commons licensing. LimeWire continues its guarantee of no adware or spyware. Includes built-in bittorent support. 

Version 5.1.2 fixed a bug with the single file sharing widget,Remove the check box for the multi file sharing widget 

License: Free; paid upgrade available

With behavior-based threat detection and integrated real-time monitoring, Ad-Aware Anniversary Edition focuses on core consumer security needs. Instead of adding layers of bells and whistles–thereby slowing your computer and scans down–we have decided to focus on what really matters. Anniversary Edition provides advanced threat protection, and is significantly lighter and faster than our previous versions.

License:

Free

Operating Systems:

Windows Vista, Windows XP, Windows 2000