<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>I  AM  YOUR  I.T.  GUY &#187; virus</title>
	<atom:link href="http://iamyouritguy.com/archives/tag/virus/feed" rel="self" type="application/rss+xml" />
	<link>http://iamyouritguy.com</link>
	<description>iamyouritguy.com</description>
	<lastBuildDate>Thu, 03 Sep 2009 04:11:08 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.3</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>AntiMalwareGuard Step by Step Removal Guide</title>
		<link>http://iamyouritguy.com/archives/153</link>
		<comments>http://iamyouritguy.com/archives/153#comments</comments>
		<pubDate>Mon, 03 Aug 2009 04:03:59 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus Repair]]></category>
		<category><![CDATA[Windows Tutorials]]></category>
		<category><![CDATA[fix]]></category>
		<category><![CDATA[repair]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[vista]]></category>
		<category><![CDATA[xp]]></category>

		<guid isPermaLink="false">http://iamyouritguy.com/archives/153</guid>
		<description><![CDATA[<!-- Easy AdSense V2.63 -->
<!-- Post[count: 2] -->
<div class="ezAdsense adsense adsense-leadin" style="text-align:center;margin:12px;" ><script type="text/javascript"><!--
google_ad_client = "pub-1213643583738263";
/* Plugin: ezAds 468x60, created 6/21/09 */
google_ad_slot = "7785219564";
google_ad_width = 468;
google_ad_height = 60;
//-->
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script></div>





AntiMalwareGuard
is another fake anti-spyware program that comes from a Trojan infection.
To remove the AntiMalwareGuard
Before you start: Print or bookmark these instructions because you&#8217;ll have to reboot into Safe Mode. Also back up your computer in case you make a mistake.


Download and save SmitFraudFix to your desktop.

Restart your computer in Safe Mode (how to do safe [...]]]></description>
			<content:encoded><![CDATA[<p><strong><span style="color:#f79646">AntiMalwareGuard</span><br />
</strong>is another fake anti-spyware program that comes from a Trojan infection.</p>
<p>To remove the AntiMalwareGuard</p>
<p><span style="font-family:Times New Roman; font-size:12pt"><span style="color:#f79646"><strong>Before you start:</strong></span> Print or bookmark these instructions because you&#8217;ll have to reboot into Safe Mode. Also <a title="back up your computer" href="http://www.spyware-techie.com/how-to-back-up-your-computer/"><span style="color: blue; text-decoration: underline;">back up your computer</span></a> in case you make a mistake.<br />
</span></p>
<ol>
<li><a title="Download and save SmitfraudFix" href="http://siri.urz.free.fr/Fix/SmitfraudFix.exe"><span style="font-family: Times New Roman; color: blue; font-size: 12pt; text-decoration: underline;">Download and save SmitFraudFix</span></a><span style="font-family:Times New Roman; font-size:12pt"> to your desktop.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">Restart your computer in <a title="Safe Mode (how to do safe mode)" href="http://iamyouritguy.com/archives/151"><span style="color: blue; text-decoration: underline;">Safe Mode (how to do safe mode)</span></a>. Once the<br />
desktop appears, double click on the <span style="color:#f79646"><strong>SmitfraudFix.exe</strong></span> on your desktop.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">After the credits screen, you&#8217;ll see a menu. Select the option number <strong>2</strong>, which is <span style="color:#f79646"><strong>&#8216;Clean (safe mode recommended)&#8217;</strong></span>, and then<br />
press <span style="color:#f79646"><strong>Enter</strong></span> to delete infect files.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">SmitFraudFix will begin cleaning your computer and take a series of cleanup processes. When the process is over, it will automatically begin the <span style="color:#f79646"><strong>Disk Cleanup</strong></span> program.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">Once the <span style="color:#f79646"><strong>Disk Cleanup program is complete</strong></span>, you will be prompted with the message <span style="color:#f79646"><strong>&#8216;Registry cleaning &#8211; Do you want to clean the registry&#8217;</strong></span>. Answer <span style="color:#f79646"><strong>Y (Yes)</strong></span> and hit <span style="color:#f79646"><strong>Enter</strong></span>. Reboot your computer.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">SmitFraudFix will now check if wininet.dll is infected. SmitFraudFix will ask you whether to replace the infected file (if there&#8217;s any) Answer by typing <span style="color:#f79646"><strong>Y (Yes)</strong></span> to replace file then hit <strong>Enter</strong>.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">Reboot your computer to complete the cleaning process.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">After reboot, a Notepad screen may appear containing a log of all the files<br />
removed from your computer. If it doesn&#8217;t appear, a file will be created called<br />
<span style="color:#f79646"><strong>rapport.txt</strong></span> in the root of your drive, <span style="color:#f79646"><strong>(Local Disk C:)</strong>.</span><br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">Restart your computer in <a title="Safe Mode (how to do safe mode)" href="http://iamyouritguy.com/archives/151"><span style="color: blue; text-decoration: underline;">Safe Mode (how to do safe mode)</span></a>.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">Go to <span style="color:#f79646"><strong>C:\Windows\Temp</strong></span>, click <span style="color:#f79646"><strong>Edit</strong>,</span> click <span style="color:#f79646"><strong>Select All</strong></span>, press <span style="color:#f79646"><strong>DELETE</strong></span>, and then<br />
click <span style="color:#f79646"><strong>Yes</strong></span> to confirm that you want all the items to go to the <span style="color:#f79646"><strong>Recycle Bin</strong></span>.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">Go to <span style="color:#f79646"><strong>C:\Documents and Settings\[LISTED USER]\Local Settings\Temp</strong></span>, click <span style="color:#f79646"><strong>Edit</strong></span>, click <span style="color:#f79646"><strong>Select All</strong></span>, press <span style="color:#f79646"><strong>DELETE</strong></span>, and then click <span style="color:#f79646"><strong>Yes</strong></span> to confirm that<br />
you want all the items to go to the <span style="color:#f79646"><strong>Recycle Bin</strong></span>.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">Reboot your computer back to normal mode.<br />
</span></li>
</ol>
<p style="text-align: left;">Please leave comment. Let me know if this post help!</p>
]]></content:encoded>
			<wfw:commentRss>http://iamyouritguy.com/archives/153/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Profile Storage Space error, virus, or malware. Repair! Fix!</title>
		<link>http://iamyouritguy.com/archives/21</link>
		<comments>http://iamyouritguy.com/archives/21#comments</comments>
		<pubDate>Fri, 10 Jul 2009 00:47:59 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus Repair]]></category>
		<category><![CDATA[Windows Tutorials]]></category>
		<category><![CDATA[computer]]></category>
		<category><![CDATA[current version]]></category>
		<category><![CDATA[error]]></category>
		<category><![CDATA[fix]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[microsoft]]></category>
		<category><![CDATA[policies]]></category>
		<category><![CDATA[profile]]></category>
		<category><![CDATA[registry]]></category>
		<category><![CDATA[repair]]></category>
		<category><![CDATA[space]]></category>
		<category><![CDATA[storage]]></category>
		<category><![CDATA[system]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[windows xp]]></category>

		<guid isPermaLink="false">http://iamyouritguy.com/?p=21</guid>
		<description><![CDATA[First make sure you clean  Spyware Protect 2009 virus out of your system using Malwarebytes Anti-Malware 
Follow the following steps:
a. Ctl+Alt+Delete go to task manger, go to process tab,  find &#8220;proquota.exe&#8221; right click and end the process.
b.  Click Start, and then click Run.

In the Open box, type regedit, and then click OK
Back up registry by [...]]]></description>
			<content:encoded><![CDATA[<div id="attachment_20" class="wp-caption alignnone" style="width: 310px"><a href="http://iamyouritguy.com/wp-content/uploads/2009/07/profileStorageSpaceFix1.jpg"><img class="size-medium wp-image-20" title="profileStorageSpaceFix" src="http://iamyouritguy.com/wp-content/uploads/2009/07/profileStorageSpaceFix1-300x169.jpg" alt="Profile Storage Space Fix registry location" width="300" height="169" /></a><p class="wp-caption-text">Profile Storage Space Fix registry location</p></div>
<p>First make sure you clean  Spyware Protect 2009 virus out of your system using <a href="http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html">Malwarebytes Anti-Malware </a></p>
<p>Follow the following steps:</p>
<p>a. <strong>Ctl+Alt+Delete</strong> go to task manger, go to <strong>process</strong> tab,  find &#8220;<span style="color: #ff6600;">proquota.exe</span>&#8221; right click and end the process.</p>
<p>b.  Click Start, and then click Run.</p>
<ol type="1">
<li>In the Open box, type regedit, and then click OK</li>
<li>Back up registry by clicking the File menu, click Export.</li>
<li>In the Save in box, select a location where you want to save the Registration Entries (.reg)</li>
<li>Locate by clicking on the left hand side &#8212;&gt;<strong>HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System  ( <span style="color: #ff6600;">view image above<span style="color: #000000;">)</span></span></strong></li>
<li><span style="color: #ff6600;"><span style="color: #000000;">once your at the location you will see on the right side </span></span><strong><span style="color: #ff6600;"><span style="color: #000000;">&#8220;EnableProfileQuota&#8221; </span></span><span style="color: #ff6600;">right click</span></strong><strong><span style="color: #ff6600;"><span style="color: #000000;"> EnableProfileQuota </span></span></strong><span style="color: #ff6600;"><span style="color: #000000;">and select</span></span><strong><span style="color: #ff6600;"><span style="color: #000000;"> Delete</span></span></strong></li>
</ol>
<p>c. An easier way to do this is to copy the following script between the ******  to notepad save and rename the extension to .reg and execute the file.</p>
<div>*****************************************************************</div>
<p>REGEDIT4</p>
<div>[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]</div>
<div>EnableProfileQuota&#8221;=-</div>
<div>&#8220;ProfileQuotaMessage&#8221;=-</div>
<div>&#8220;MaxProfileSize&#8221;=-</div>
<div>&#8220;IncludeRegInProQuota&#8221;=-</div>
<div>&#8220;WarnUser&#8221;=-</div>
<div>&#8220;WarnUserTimeout&#8221;=-<!--c2--></div>
<p><!--ec2-->*****************************************************************</p>
<p>I have made the file you can download <a href="http://iamyouritguy.com/wp-content/uploads/2009/07/profileStorageErrorRemoval.rar">profileStorageErrorRemoval</a> <a href="http://iamyouritguy.com/wp-content/uploads/2009/07/profileStorageErrorRemoval.rar">here</a> Extract the file and double click the file, click <strong>yes</strong> and then <strong>ok</strong>.</p>
]]></content:encoded>
			<wfw:commentRss>http://iamyouritguy.com/archives/21/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
