Home / Parasites / Rogue Anti-Spyware / InstantSafePage.com
Click on screenshot to zoom
Danger level:  10
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:

InstantSafePage.com

InstantSafePage.com , which may be also called InstantSafePage or InstantSafePagecom,(other sites SoftHomePage.com, Asecureforum.com, Securitypills.com, Secureinvites.com, PureSafetyHere.com) is the latest browser hijacker from Trojan Zlob. InstantSafePage.com will generates fake warning message W32.Myzor.FK@yf to trick users into downloading and buying rogue anti-spyware like AntiSpyware Shield, Win SpyKiller, Virusheat, Virusheat 4.3, VirusHeat 4.4.
message looks like this:

"Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows.
Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations [SIC]: Click “OK” to download officially approved security software.
Always keep your patch levels up-to-date."

InstantSafePage.com can open security holes or even install additional spyware. InstantSafePage.com can start every time when user starts his computer system and it will really annoy him with lots of imaginary errors or notifications. We recomend to remove InstantSafePage.com as soon as possible. InstantSafePage.com cannot be trusted. Users should stay away from this site!

Download Spyware Removal Tool to Remove* InstantSafePage.com
  • Quick & tested solution for InstantSafePage.com removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove InstantSafePage.com

Files associated with infection (InstantSafePage.com):

qdsba.dll
vadokmxt.dll
wdpoefan.dll
561756.dll
312191.dll
qnmargolbve.dll
pmsoarbf.dll
Wxdbpfvo.dll
uyhjw.dll
814810.dll
rkaxfza.dll
bubbj.dll
dntpkwodpx.dll
omlbpkaw.dll
qtvglped.dll
892267.dll
403445.dll
temlxopqftg.dll
rkvdr.dll
qdnkewfa.dll
mgsvflkw.dll
vualf.dll
ekvgsnw.dll
svpekgongrk.dll
svpekgonnof.dll
svpekgonlop.dll
drnpfdxwgv.dll
dcggain.dll
qvdntlmw.dll
vbgtorfd.dll
dwnrpofk.dll
jdxah.dll
kdftlboekae.dll
drnpfdxsxp.dll
drnpfdxopx.dll
drnpfdxxsn.dll
drnpfdxlsk.dll
admggxp.dll
drnpfdxlwn.dll
1205847823.dll
drnpfdxsfn.dll
etlrlws.dll
drnpfdxrqv.dll
drnpfdxxrs.dll
bokpkov.dll
altvxvm.dll
1205289674.dll
enlfxgw.dll
apdqnxp.dll
dkxrstqqgr.dll
antiviirus.exe
1204885300.dll
1204460162.dll
1203846321.dll
1203634438.dll
1204372749.dll
1203140349.dll
1202650266.dll
1202567261.dll
laf1.exe
1198448799.dll
waun.exe
wamdl.dll
uninst.exe
scu.exe
scm.exe
scit.exe
sbun.exe
sbsm.exe
sbmntr.exe
sbmdl.dll
1198448796.dll
iinqyl.dll
1202030455.dll
ofcpi.dll
1201639702.dll
1201639705.dll
findsiteonline.dll
qhcvdw.dll
fsehfcu.dll
G5-tmp.exe
G2-tmp.exe
hdtip.dll
voipwet.dll
vipextpxm.dll
werbettxf.dll
vipextgpk.dll
werbetlrw.dll
vipextnog.dll
sysdivx.dll
werbetpwg.dll
Trojan.Zlob|eulbn.dll
isfun.exe
isfmntr.exe
ictun.exe
icthis.exe
nczupfw.dll
isfmdl.dll
ictmdl.dll
antzozc.dll
dumpserv.com
zxserv0.com
vnp7s.net
msvol.tlb
hp[X].tmp
msmsgs.exe
dumpserv.com nvctrl.exe
uimcu.dll
dtjby.dll
ncompat.tlb
btrklfr.dll

Dynamic Link Libraries to remove (InstantSafePage.com):

wxdbpfvo.dll
834668.dll
gndarmblvpg.dll
rtmipr.dll
qdsba.dll
vadokmxt.dll
wdpoefan.dll
561756.dll
312191.dll
qnmargolbve.dll
pmsoarbf.dll
Wxdbpfvo.dll
uyhjw.dll
814810.dll
rkaxfza.dll
bubbj.dll
dntpkwodpx.dll
omlbpkaw.dll
qtvglped.dll
892267.dll
403445.dll
temlxopqftg.dll
rkvdr.dll
mgsvflkw.dll
qdnkewfa.dll
vualf.dll
ekvgsnw.dll
drnpfdxwgv.dll
svpekgongrk.dll
svpekgonlop.dll
svpekgonnof.dll
dcggain.dll
qvdntlmw.dll
vbgtorfd.dll
dwnrpofk.dll
jdxah.dll
kdftlboekae.dll
drnpfdxsxp.dll
drnpfdxlsk.dll
drnpfdxopx.dll
drnpfdxxsn.dll
admggxp.dll
drnpfdxlwn.dll
drnpfdxsfn.dll
1205847823.dll
etlrlws.dll
drnpfdxrqv.dll|
drnpfdxxrs.dll|
altvxvm.dll
bokpkov.dll
1205289674.dll
btrklfr.dll
apdqnxp.dll
dkxrstqqgr.dll
enlfxgw.dll
1204885300.dll
1204460162.dll
1203846321.dll
1203634438.dll
1204372749.dll
1203140349.dll
1202650266.dll
1202567261.dll
sbmdl.dll
1198448796.dll
wamdl.dll
1198448799.dll
iinqyl.dll
1202030455.dll
ofcpi.dll
1201639705.dll
1201639702.dll
findsiteonline.dll
qhcvdw.dll
fsehfcu.dll
hdtip.dll
voipwet.dll
wowlze.dll
vipextpxm.dll
werbettxf.dll
vipextgpk.dll
werbetlrw.dll
vipextnog.dll
sysdivx.dll
werbetpwg.dll
Trojan.Zlob|eulbn.dll
dfrep.dll
nczupfw.dll
ictmdl.dll
isfmdl.dll
jrpkmgh.dll
antzozc.dll
uimcu.dll
dtjby.dll

Processes to kill (InstantSafePage.com):

antiviirus.exe
laf1.exe
waun.exe
uninst.exe
scu.exe
scm.exe
scit.exe
sbun.exe
sbsm.exe
sbmntr.exe
sbmdl.dll
G5-tmp.exe
G2-tmp.exe
icun.exe
isfmm.exe
isfmntr.exe
isfun.exe
icmntr.exe
icthis.exe
ictun.exe
msmsgs.exe
nvctrl.exe

Remove registry entries (InstantSafePage.com):

10C52A42-DB8B-4ade-AA4A-CED6A8282B85
7265100a-17e1-41bf-bd08-63b95a25a9c3
BA0BACB5-FC95-451E-94D2-4959AB0949D2
c7cd9e83-3bf6-47f8-b2e2-b114c96c1888
E404.e404mgr
E404.e404mgr.1
F10587E9-0E47-4CBE-84AE-7DD20B8684CC
F10587E9-0E47-4CBE-ABCD-7DD20B8622FF
HKEY_CURRENT_USER\Software\Online Add-on
HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows CurrentVersionRunRegSvr32=%System%msmsgs.exe
HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows NT CurrentVersionWinlogonShell=explorer.exe, msmsgs.exeHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentV
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionWinlogonShell=explorer.exe
Microsoft\Internet Explorer\Toolbar\WebBrowser
Microsoft\Internet Explorer\Toolbar\WebBrowser\{81705D67-3F73-4983-859B-97D0922E5ABE}
Microsoft\Internet Explorer\Toolbar\WebBrowser\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
Microsoft\Internet Explorer\Toolbar\{51D81DD5-55B7-497F-95DB-D356429BB54E}
Microsoft\Internet Explorer\Toolbar\{81705D67-3F73-4983-859B-97D0922E5ABE}
Microsoft\Internet Explorer\Toolbar\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03B902B1-9B25-4173-9468-56775C85A8D4}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2C566C34-7D72-4DC1-9BBE-1121A76698F8}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7C109800-A5D5-438F-9640-18D17E168B88}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D0B9175-1463-4B59-80DB-4DDE662ACB2B}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8F10DE2B-E923-4548-B524-4D9C5FA80777}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C03FD59D-9104-44B7-929A-9EAA0BA05211}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4FEDE82-C500-4AA4-BB99-A4DAE5A65A46}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DDFF8B71-EF58-4922-ACF2-2003FE2B7481}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E4E30C12-F249-43D5-ACE3-E0C380448648}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F10587E9-0E47-4CBE-ABCD-7DD20B862223}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{12a31567-9883-4cc0-a684-ad5804394d69}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{27cb634d-c84e-4c00-9b53-f5523601dbad}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{747e1fbe-b70f-441d-bbca-6e536c04924a}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{c0ca766d-060c-48e1-b536-205e321bd174}
Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{db763ed8-100a-481b-8913-50a2f41dcdc3}
Microsoft\Windows\CurrentVersion\policies\explorer\run\some
Microsoft\Windows\CurrentVersion\policies\explorer\run\start
Microsoft\Windows\CurrentVersion\Uninstall\Internet Service
Microsoft\Windows\CurrentVersion\Uninstall\MultiMedia Software
Microsoft\Windows\CurrentVersion\Uninstall\Secure Browsing
Microsoft\Windows\CurrentVersion\Uninstall\Web Application
Microsoft\Windows\CurrentVersion\Uninstall\Windows Safety Alert
NetProject
Objects\{A3D76B96-30B9-4DCC-9B3D-D12E31280D29}
Objects\{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
Online Add-on
Security Centre
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{60dea04c-9817-4309-bfa2-f8a1766c3cd1}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{a6d478c6-7961-4fe9-be4b-e621dd640112}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ab75cc7d-2751-4144-a278-5462d5a5884c}
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\start
Windows\CurrentVersion\Explorer\Browser Helper Objects\{38A36BC9-15D0-4EA0-ABA2-CEE104719DFF}
Windows\CurrentVersion\Explorer\Browser Helper Objects\{DC59D6DA-7CDE-4874-9F97-41C82C177069}
Windows\CurrentVersion\Explorer\SharedTaskScheduler\{eb9f614b-ea44-40d0-8829-542e4f254739}
Windows\CurrentVersion\Explorer\SharedTaskScheduler{4d51e91c-e917-4b7f-89ff-abe471e16927}
zlob.trojan
{0D574C9F-71F9-4F3C-BA6D-CF9C0E1E3EE8}
{10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
{12a31567-9883-4cc0-a684-ad5804394d69}
{2012F73E-7427-4AD8-9E9D-6CBA6E0053D4}
{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
{25E0128D-AAFC-49FF-AB11-1F12C2FCC391}
{27cb634d-c84e-4c00-9b53-f5523601dbad}
{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
{499B8A53-5949-4625-A8BF-A4D934AFC9DA}
{60dea04c-9817-4309-bfa2-f8a1766c3cd1}
{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
{6D7990CB-1D01-4554-9EED-75BDC6406FC2}
{747e1fbe-b70f-441d-bbca-6e536c04924a}
{81705D67-3F73-4983-859B-97D0922E5ABE}
{9E654A16-4765-4EAA-94EC-D5A6578053A4}
{a6d478c6-7961-4fe9-be4b-e621dd640112}
{aaad3a22-1c07-45f5-bfb3-e9a8c3b382fe}
{ab75cc7d-2751-4144-a278-5462d5a5884c}
{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
{C03FD59D-9104-44B7-929A-9EAA0BA05211}
{c0ca766d-060c-48e1-b536-205e321bd174}
{C130E860-7C1C-44F0-996C-1F995C10B61E}
{C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
{D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
{DB9FBA9D-AB1B-4CC6-9745-F3B549D64E40}
{E63648F7-3933-440E-B4F6-A8584DD7B7EB}
{E85F6AA5-7A0C-49A5-9E5E-936FED62347D}
{F10587E9-0E47-4CBE-ABCD-7DD20B862223}
{F2BADA0D-FD61-45EF-A994-64A073FD6613}
{F7D09218-46D7-4D3D-9B7F-315204CD0836}
Disclaimer

Comments

  1. Rocko the Wallaby Nov 23, 2013

    If you surf the web and a popup from an "antispyware" that you don't use pop up telling you that you have viruses, close your internet browser process via Task Manager and scan your computer AS SOON AS POSSIBLE!

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
 This is a captcha-picture. It is used to prevent mass-access by robots.

 
© 2006-2024 pcthreat.com  |  Terms of use |  Privacy policy |  About us |  Link to US