Spyware and Adware Threats

You are here: HOME > COMPUTER > ANTIVIRUS

TrackZapper

Reported: April 13, 2007

 

Description:
TrackZapper is a rogue security application that displays exaggerated reports that the computer is infected with adware and spyware.
 

Alias: TZ Spyware Remover

 

Threat Level: Medium

 

Type: Adware

 

Systems Affected: Windows All

 

HOW TO REMOVE TrackZapper:

1. Temporarily Disable System Restore (Windows Me/XP). [how to]
2. Update the virus definitions.
3. Reboot computer in SafeMode [how to]

4. Run a full system scan and clean/delete all infected files
5. Delete any values added to the registry. [how to edit registry]

Navigate to and delete the following subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4222FB6A-87F1-4867-8639-3B07B79B2EA2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{509F840C-8FBE-4B39-8135-7AE4F77211BE}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7E0EA78D-E2BD-4DC4-8139-3C80FEA5388C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BE09D09-4A7B-4CC9-A729-A0142C7DF45B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{921064A0-DA49-40B6-B8CE-0E9F3C925E2D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B46BB0D4-73BC-426F-822D-06CF4D5D5AE9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCAF88BD-430E-4735-84DA-87B2BCA2420E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DE9BE0B6-6282-45C1-89E0-6DC449033B23}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F01F5B97-4493-47C7-881E-17C065B899EC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1AE04A0C-8523-47DE-AA0C-1A752BAC0C3C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{23E12DDE-E63E-4D03-B92A-5A9FBD2AAC56}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{250191B9-C470-4496-BE0B-328A9828B13F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{335F2B2A-95EE-4D5E-964C-92DB7CD9AB4F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3CF06A51-25CB-4AC1-8B2B-68939764841B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3DC35E00-E545-4874-8F22-8509077849FE}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4A10974A-BE32-4C5D-959C-7CB2A2EC7A47}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6EBFEFE7-4A25-43E9-8DA9-1B2050D6B40F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{79534873-72F1-4EF4-80B1-81DC825FB29A}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7A571EF3-BA6F-4883-8089-ED150079D1E8}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{853958CB-4ABD-4425-90E8-481BF6F50BE3}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E64C74F7-7A0B-4CDB-A948-0BBB54AF4D76}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E9BE9673-6933-45D7-8478-7A521DA5CF0F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EA8AF03F-D635-4007-9430-A82DAE65F7A1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F8D7C39B-B275-44D3-9758-08DC48A52124}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{5466CEC7-55DE-4245-A6B6-CFA8CCCB89DC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.Backup
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.Error
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.Loading
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.Remove
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.Scan
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.Shield
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.ThreadControl
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.ThreadLaunch
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Core.Worker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TZ Spyware Remover_is1
HKEY_USERS\S-1-5-21-1343024091-1336601894-839522115-500\Software\TZ Spyware Remover

 

6. Exit registry editor and restart the computer.

7. In order to make sure that the threat is completely eliminated from your computer, carry out a full scan of your computer using AntiVirus and Antispyware Software. Another way to delete the virus using various Antivirus Program without the need to install can be done with Online Virus Scanner.

 

  FREE ON-LINE VIRUS SCANNER:   

Click here to proceed

 

  SPYWARE REMOVAL TOOLS:

Download and run any of these Anti-Spyware