CryptoLocker Protection

Important!

Protect your home or business from Ransomware like Cryptolocker, the newest and most nefarious threat against computer security to date.

Avoid costly downtime and data recovery services and use our C-Net Ransom Defender to secure your systems!

Learn More

How Our Service Works


Play our comercial

We Fix IT Over The Internet!


How to use ExpertSupportNow
Click here to watch

Spyware Removal Guide

Remove Spyware Yourself
Instant download! Learn how the experts remove spyware and speed up PCs.

Our Do-It-Yourself Guide will teach you Step by Step how to remove spyware, cleanup your PC keep it running fast, safe and protected.

Click here for more details!

New Support Session

ExpertSupportNow Connection
Name:
Key:
Please enter your name or company name and support key above as directed by our support staff.

Need a support key? Click here

Monthly Archives: February 2011

How To Remove Windows Safety Guarantee Virus / Maleware

Windows Safety Guarantee is a fake anti virus program that presents false reports and errors about your computer. Once installed Windows Safety Guarantee will prompt users to scan their computer for viruses and errors which it will come back with a report with false infections. If users attempt to remove the errors generated you will be asked to pay for Windows Safety Guarantee which is an attempt to steal personal data. If users attempt to reboot with the Windows Safety Guarantee infection they will be prompted at start up to run Windows Safety Guarantee.

Fix My Computer With Remote Computer Support Service   Home Computer Service and Business Computer Support

Manual Removal: Because the program begins at Windows start up its recommended to boot into safe mode to get rid of this infection. To get into safe mode press F8 when powering up the computer. If correctly timed and pressed you will be prompted with the windows advance start up menu. Choose Safe Mode and Windows will continue to load. Once windows starts up locate the following file and delete it. Then open the Run command followed by the command “regedit” this allows you to find and delete the listed registry files.

  • %UserProfile%\Application Data\<random>.exe

Windows Safety Guarantee Registry Entries that should be removed:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore “DisableSR ” = ’1′

Please Contact Us Here for more information on Windows Safety Guarantee Malware/ Scareware
Need help removing Windows Safety Guarantee Malware/ Scareware or other PC problems? E-Mail Us Here

How To Remove Internet Defender Virus / Malware

Internet Defender is a fake anti-virus scanning tool made to look like a legitimate Windows program. Once installed to a computer Internet Defender will configure itself to start automatically when Windows starts up. Once the program runs it will begin to do numerous scans that come up with virus entries that it found on your computer. These warnings and scans are problems it finds are not actual threats but made up ones the program creates. If you attempt to remove the issues with Internet Defender it will ask that you pay for the full version. You should never purchase this program, Internet Defender was created to trick users into purchasing a fake program in an attempt to steal credit card information.

Fix My Computer With Remote Computer Support Service   Home Computer Service and Business Computer Support

Manual Removal: Internet Defender will configure itself to disable some Windows Utilities so in order to remove it you will need to restart the computer in safe mode. To do this first shutdown the computer, during the next start up tap the F8 button until you are given a black screen with the advance start up options. Once at this screen choose Safe Mode or Safe Mode with networking. If you do not get the advance start up opition when pressing F8 it most likely is due to incorrect timing of the button press. Once in safe mode find the files listed below and remove them.

  • %AllUsersProfile%\Application Data\<random characters and numbers>_.mkv
  • %AllUsersProfile%\Application Data\<random characters and numbers>.avi
  • %AllUsersProfile%\Application Data\<random characters and numbers>.ico
  • %AllUsersProfile%\Start Menu\Programs\Startup\<random characters and numbers>.lnk
  • %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Defender.lnk
  • %UserProfile%\Desktop\Internet Defender.lnk
  • %Temp%\wrk3.tmp
  • %Temp%\<random characters and numbers>.dll
  • %UserProfile%\Start Menu\Programs\Startup\<random characters and numbers>.lnk
  • c:\Program Files\Internet Defender\
  • c:\Program Files\Internet Defender\Internet Defender.dll

Internet Defender Registry Entries that should be removed:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “<random characters and numbers>”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “<random characters and numbers>”

Please Contact Us Here for more information on Internet Defender Malware/ Scareware
Need help removing Internet Defender Malware/ Scareware or other PC problems? E-Mail Us Here

How To Remove XP Anti-Virus 2011 Virus / Malware

XP Anti-Virus 2011 is a fake anti virus program that presents false reports and errors about your computer. Once installed XP Anti-Virus 2011 will prompt users to scan their computer for viruses and errors which it will come back with a report with false infections. If users attempt to remove the errors generated you will be asked to pay for XP Anti-Virus 2011 which is an attempt to steal personal data. If users attempt to reboot with the XP Anti-Virus 2011 infection they will be prompted at start up to run XP Anti-Virus 2011.

Fix My Computer With Remote Computer Support Service   Home Computer Service and Business Computer Support

Manual Removal of XP Anti-Virus 2011: Because the program begins at Windows start up its recommended to boot into safe mode to get rid of this infection. To get into safe mode press F8 when powering up the computer. If correctly timed and pressed you will be prompted with the windows advance start up menu. Choose Safe Mode and Windows will continue to load. Once windows starts up locate the following file and delete it. Then open the Run command followed by the command “regedit” this allows you to find and delete the listed registry files.

  • %AllUsersProfile%\t3e0ilfioi3684m2nt3ps2b6lru
  • %AppData%\Local\<random 3 letters>.exe
  • %AppData%\Local\t3e0ilfioi3684m2nt3ps2b6lru
  • %AppData%\Roaming\Microsoft\Windows\Templates\t3e0ilfioi3684m2nt3ps2b6lru
  • %Temp%\t3e0ilfioi3684m2nt3ps2b6lru

XP Anti-Virus 2011 Registry Entries that should be removed:

  • HKEY_CURRENT_USER\Software\Classes\.exe “(Default)” = ‘exefile’
  • HKEY_CURRENT_USER\Software\Classes\.exe “Content Type” = ‘application/x-msdownload’
  • HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon “(Default)” = ‘%1′ = ‘”%UserProfile%\Local Settings\Application Data\<random 3 letters>.exe” /START “%1″ %*’
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “IsolatedCommand” = ‘”%1″ %*’
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “(Default)” = ‘”%1″ %*’
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “IsolatedCommand” = ‘”%1″ %*’
  • HKEY_CURRENT_USER\Software\Classes\exefile “(Default)” = ‘Application’
  • HKEY_CURRENT_USER\Software\Classes\exefile “Content Type” = ‘application/x-msdownload’
  • HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon “(Default)” = ‘%1′
  • HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\<random 3 letters>.exe” /START “%1″ %*’
  • HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “IsolatedCommand” = ‘”%1″ %*’
  • HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “(Default)” = ‘”%1″ %*’
  • HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “IsolatedCommand” – ‘”%1″ %*’
  • HKEY_CLASSES_ROOT\.exe\DefaultIcon “(Default)” = ‘%1′
  • HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\<random 3 letters>.exe” /START “%1″ %*’
  • HKEY_CLASSES_ROOT\.exe\shell\open\command “IsolatedCommand” = ‘”%1″ %*’
  • HKEY_CLASSES_ROOT\.exe\shell\runas\command “(Default)” = ‘”%1″ %*’
  • HKEY_CLASSES_ROOT\.exe\shell\runas\command “IsolatedCommand” = ‘”%1″ %*’
  • HKEY_CLASSES_ROOT\exefile “Content Type” = ‘application/x-msdownload’
  • HKEY_CLASSES_ROOT\exefile\shell\open\command “IsolatedCommand” = ‘”%1″ %*’
  • HKEY_CLASSES_ROOT\exefile\shell\runas\command “IsolatedCommand” = ‘”%1″ %*’
  • HKEY_CLASSES_ROOT\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\<random 3 letters>.exe” /START “%1″ %*’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\<random 3 letters>.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”‘
  • HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\<random 3 letters>.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\<random 3 letters>.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”‘

Please Contact Us Here for more information on XP Anti-Virus 2011 Malware/ Scareware
Need help removing XP Anti-Virus 2011 Malware/ Scareware or other PC problems? E-Mail Us Here

How To Remove Windows Express Help Virus / Spyware

Windows Express Help is a fake scanning tool usually downloaded to the system on accident, and without a user knowing this program will install itself and produce a number of warnings indicating a system infection. These warnings are fake and should be ignored. The warnings it produces will inform a user of various security flaws and will do scans that tell a user that they are infected with a serious Trojan virus, Windows Express Help will then attempt to remove it and then gives a error messages saying the infection can only be removed with the purchase of their software. This is a scam and should never be purchased. If a user attempts to close out of the program it will continue to run in the background taking up system resources causing slow downs. Windows Express Help will also change internet settings causing browser redirects as well as disables some Windows Utilities.

Fix My Computer With Remote Computer Support Service   Home Computer Service and Business Computer Support

Manual Removal of Windows Express Help: First users should restart into Windows Safe Mode. To do this shutdown the PC first, next turn on the computer and press the F8 button until a menu appears giving the options to start Windows in safe mode. If you don’t get this menu its usually because the F8 key wasn’t pressed in time, if the Windows Startup screen appears and shows its loading Windows this means it wasn’t pressed in time and you’ll have to restart and try again. Once in safe mode you will need to delete the following files that are written to the computer:

  • %UserProfile%\Application Data\<random>.exe

Windows Express Help Registry Entries that should be removed:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = ‘%UserProfile%\Application Data\<random>.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe “Debugger” = ‘svchost.exe’

Please Contact Us Here for more information on Windows Express Help Malware/ Scareware
Need help removing Windows Express Help Malware/ Scareware or other PC problems? E-Mail Us Here