Home > Threats > SpywareRemover

What is SpywareRemover

Posted on 24 May 2008 under Rogue Programs

1. What is SpywareRemover?

It is rogue PC security software, which is installed without the user's consent, usually through Internet Explorer. The core of the problem is Trojan.Zlob that downloads SpywareRemover. Trojan is also tended to display fake security alerts in the taskbar area, purportedly computer has been infected with spyware, at the same time SpywareRemover is offered as spyware removal utility, featuring free system scan. In order to remove threats, that has been assumingly found, user is prompted to buy licensed SpywareRemover version.

Important! Do not buy SpywareRemover, it will be useless purchase, because the program is not able to clean and protect computers properly!

2. SpywareRemover screen shot:

SpywareRemover

3. How to remove SpywareRemover:

  1. Internet connection might be disabled or Internet browser might be blocked by SpywareRemover, so it won't be possible to download any files to infected computer. In this case please download all files required for SpywareRemover removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
  2. To remove SpywareRemover download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
  3. After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:

  4. After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove SpywareRemover.

  5. Restart the computer to complete SpywareRemover removal procedure.

4. SpywareRemover files:

setupxv.exe (setup file), sprmvr.exe, ptlg.exe, SpywareRemover.exe,

5. Hijackthis entries:

O4 Entries:
O4 - HKLM\..\Run: [msptlg] C:\WINDOWS\ptlg.exe
O4 - HKCU\..\Run: [SpywareRemover] C:\Program Files\SpywareRemover\SpywareRemover.exe -boot
O23 Entries:
O23 - Service: ptlg - Unknown owner - C:\WINDOWS\system32\ptlg.exe