Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical
Screenshot:
How to remove Personal Protector manually:

The files to be deleted:

c:\Program Files\Personal Protector
c:\Program Files\Personal Protector\base.wdb
c:\Program Files\Personal Protector\baseadd.wdb
c:\Program Files\Personal Protector\conf.wcf
c:\Program Files\Personal Protector\personalprotector.exe
c:\Program Files\Personal Protector\quarant.wdb
c:\Program Files\Personal Protector\queue.wdb
c:\Program Files\Personal Protector\un.exe
c:\Program Files\Personal Protector\q
c:\WINDOWS\tempfile2.bat
c:\Documents and Settings\All Users\Microsoft PData
c:\Documents and Settings\All Users\Microsoft PData\inetprovider.dll
%UserProfile%\Desktop\Personal Protector.lnk
%UserProfile%\Start Menu\Programs\Personal Protector
%UserProfile%\Start Menu\Programs\Personal Protector\Personal Protector.lnk
%UserProfile%\Start Menu\Programs\Personal Protector\Uninstall.lnk

Remove registry entries:

It shocks me as a devoted Firefox user to say this, but Internet Explorer 9 could very well leapfrog the competition in the race of next-generation of web browsers in 2010 thanks to a groundbreaking platform-wide implementation of a hardware-accelerated renderer that I think is quite literally “a free upgrade for the web”.

What makes IE9’s implementation of hardware-acceleration so compelling is that it has major real-world benefits and its completely transparent to both end-user and developers. Using the new capabilities in Direct2D instead of GDI, IE9 is able to rendering all the visual elements of websites much faster and smoother. One example of where this really shines is in the Bing Maps demo where continuously panning the map is just as smooth as navigating a map in a 3D strategy game.

During a meeting with IE general manager Dean Hachamovitch, he explained that this feature hasn’t already been implemented in other mainstream browsers today is because by no means this is an easy feat to accomplish. At least one issue he pointed out was the fact that there may be other components inside a frame that handles its own rendering, like Adobe Flash for example.

Having already overcame the major implementation issues, Dean was able to confirm this feature does not actually introduce any incompatibility issues besides a subtle difference in the layout of text as fonts are rendered by the more advanced DirectWrite engine.

Essentially, this feature coupled with an already improved and continued investment in web standards and overall browser performance until it is released, IE9 is in great shape to become the browser with the best browsing experience in 2010 when one might expect it to ship as a standalone download.

I may very well make the switch back.

W32/Magania.AZLM Trojan Known Files » kva8wr.exe, bgotrtu0.dll, uweyiwe0.dll, ahnsbsb.exe, ahnxsds0.dll, ahnfgss0.dll, 6l6.com, gjnfah.cmd

W32/Magania.AZLM is a trojan. The trojan will infect Windows systems.
This Worm Copies its file(s) to Windows\system32, Root of windows installed folder as hidden files or active non-hidden files.

W32/Magania.AZLM Trojan information updated on October 12, 2009.
Other names of W32/Magania.AZLM Trojan:
W32/Magania.AZLM Trojan is also known as Trojan-GameThief.Win32.Magania.azlm, Worm.Taterf.ATS, Worm:Win32/Taterf.B.
Download Registry, Taskmanager and Folder Options Repair Tool

W32/Magania.AZLM Trojan Manual Removal Instructions

Recommended Removal from Windows Safe Mode:
How to Start Windows in Safe Mode:
Restart your Computer, Press F8 Repeatedly, when your Screen turns on, Select Safe mode, press enter.

The Infected Files Can be Seen in these folders and names also Running in Tasks
End the Following Active Process Before Removal
[ Kill the Process, Use Killbox if your Access Denied ]

Download W32/Magania.AZLM Trojan Known File Removal Tool
[In Windows Vista Run As Administrator, After Execution System Will Restart ]

%Windows\System32\kva8wr.exe
%Windows\System32\bgotrtu0.dll
%Windows\System32\uweyiwe0.dll
%Windows\System32\ahnsbsb.exe
%Windows\System32\ahnxsds0.dll
%Windows\System32\ahnfgss0.dll
%Root of Windows Drive\6l6.com
%Root of Windows Drive\gjnfah.cmd

[ No Exact Information about Files, search above related files in Program files Folder ]
If you have any of these files in running process from task manger, end the process before removal.
Note: if task manager is disabled, Download the following file, Download - Enable Registry.reg
[ Right Click - Save Target As/Linked Content As ]
Open it with Regedit.exe [%system32\regedit.exe], then it Confirms Add to registry Yes or No, Confirm Yes, then click Ok.


Unregister DLL Files Using Windows Command Prompt
To open the Windows Command Prompt, go to Start - Run, type cmd and then click the "OK" button.
Type "cd" in order to change the current directory,
Press the "space" button, enter the full path to where you believe the Program DLL file is located press the "Enter" button on your keyboard.
If you don't know where Program DLL file is located, use the "dir" command to display the directory's contents.

To unregister a "Program" DLL file,
Type in the exact directory path + "regsvr32 /u" + [ DLL_NAME ]

Example [ C:\Windows\System\ regsvr32 /u filename.dll ] and press the "Enter" button.
A message will pop up that says you successfully unregistered the file.

W32/Magania.AZLM Trojan Entries Manual Removal From Registry
Click Start, Run,Type regedit,Click OK.
Note: If the registry editor fails to open the threat may have modified the registry to prevent access to the registry editor.
Download UnHookExec.inf,
[ Right Click - Save Target As/Linked Content As ]
Save it to your Windows desktop.
Do not run it at this time, download it only.
After booting into the Safe Mode or VGA Mode
Right-click the UnHookExec.inf file and click Install.
[This is a small file. It does not display any notice or boxes when you run it.]
Or Download Regfile to enable Registry editor
Download Registry Enabler [ Right click - Save Target As ]
Open it with Registry editor

W32/Magania.AZLM Trojan modifies registry at the following locations to ensure its automatic execution at every system Startup:
Delete The Entries

HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\Software\Microsoft\Windows\CurrentVersion\Run

Delete file entries from right side, look up file entries listed above
Search Registry For W32/Magania.AZLM Trojan File Names listed above to remove completely,
Edit Menu - Find, enter Keyword and remove all value that find in search.

Exit the Registry Editor,
Restart your Computer.

Recommended Removal Tools:
Kaspersky Antivirus or Internet Security [ Shareware ]
Spyware Doctor [ Shareware ]
AVG Antivirus [ Freeware ]
Killbox [ Freeware ]

I am glad to announce that today we shipped a new version of the Windows API Code Pack – version 1.0.1. This is not a major version with a lot of new features, but rather a minor version focused on fixing bugs, improving performance, adding demos and few features updates (new wrappers…)

But before we dive into this new version of the Windows Code Pack let’s better understand what this Windows API Code Pack is all about.

Windows 7 offers new features like the taskbar, libraries, and the Sensor and Location platform, to name a few. These features enable new scenarios and create new opportunities for developers to make their applications shine on Windows 7. All these great features are exposed via the Win32 native API. Currently there is no “Windows 7” namespace in the .NET Framework, and no easy way to use these features from managed code applications. To help managed code developers access them, we released version 1.0 of the Windows API Code Pack for the .NET Framework in August (just after Windows 7 RTM).

The Windows API Code Pack is a free, managed Source Code Library provided by Microsoft as is. You should consider this library as if you wrote it yourself, as if it is your own code. It is a great starting point and provides a really good and solid solution for managed code developers. It covers a lot of the new Windows 7 features as well as some more fundamental core features from the Windows Vista timeframe. You may think of the Windows API Code Pack as the closest thing to an “official” managed API for Windows. But you need to remember that it’s not a product with 24x7 technical support available from Microsoft Customer Service and Support. We believe it is a great solution, and that the codebase is very solid and high quality.

Our goal with the code pack is to enable managed code developers to take advantage of Windows APIs that are not part of the .NET Framework. We feel that as a shared source that is separate from the .NET runtime libraries, the Windows API Code Pack provides an optimal compromise between the Microsoft Win32 managed wrapper, short time-to-market -we released the Windows API Code Pack just a month after the Win7 RTM, and we ship full source code of the library.

The Windows API Code Pack includes a great deal of managed API for Windows (7). For example:

• Extensive integration with the Windows Shell namespace, with support for the Windows Shell property system, providing control like explorer browser and access to Windows Libraries
• A completely 100% feature parity with the native Taskbar API including (but not limited to) JumpLists, Icon Overlay, Progress bar, Thumbnail, custom switcher, Thumbnail Button, etc…
• Windows Task Dialogs , other controls
• Support for Direct3D 11.0 and DXGI 1.0/1.1 APIs
• Support for the Sensor Platform APIs
• Extended Linguistic Services APIs
• Windows Restart Manager
• Power APIs
• And many other features

Each technology represented in the Windows API Code Pack has multiple demos and examples (including source) in C# and VB. We are planning on releasing updates to the Windows API Code Pack roughly every three months. We will be investing mainly in stability (meaning fixing bugs), fundamentals, testing and documentation, as well as new feature support (based on customer feedback).

You may ask yourself, “Why isn't the Windows API Code Pack part of the .NET Framework?”

We ship open source code that we might bring into the runtime sometime in the future, if we feel it's sufficiently core to the entire framework to be worth the size increase. Remember the .NET Framework runs on both Windows Vista and Windows XP. However, Windows 7 is here now, and we want to enable you to access this set of free, open source library sooner rather than later. We’re shipping this library in a community-supported form and, as you can see, we intend to keep updating it. While this version (1.0.1) is a minor release, we are planning on another release in the next few months. In the meantime, you get the best of both worlds in a package that you can use as a whole or in parts without restriction.

Another question you may ask is, “Will .NET 4 replace the need to use the Windows API Code pack?”

When .NET 4 ships, you will be able to use its Windows 7 features such as Taskbar and multitouch integration with WPF, DirectWrite support, and the location API via the Devices namespace. Continue to access other features such as libraries, Restart Manager, and Sensors via the Windows API Code Pack.

Last but not least, we are looking for feedback from the community – that is you the .NET developer using this library to write managed code applications for Windows 7. On the Windows API Code Pack site, you can ask questions, provide feedback, report bugs, and follow open bugs. Your input is critical for the continuation of this library, so please send us your feedback and questions.

To learn more about how to use the Windows API Code Pack check the Windows 7 Training on Channel 9

Hot off the presses, we’re extremely pleased to report that our newest OEM, ASUS, has just announced that they’ll soon be introducing a new Home Server to the market here in the US – and in other markets across the globe. Their TS Mini Home Server, powered by a 1.66 GhZ Intel Atom chipset and running Windows Home Server, will come in two configurations:

• 500GB Hard Drive (with 1 empty HDD bay) @ $349 MSRP
• 1 TB Hard Drive (with 1 empty HDD bay) @ $529 MSRP

 

The form factor is pretty sleek and comes packed with 6 USB ports and an eSata port for additional external storage options. In addition to all the great features of the underlying Windows Home Server operating system, the TS Mini will also come bundled with a free year long subscription to a 500 GB online storage service, a feature that automatically synchronizes files stored on the TS Mini with external drives, and a real time system monitoring tool.

Not to be outdone, ASUS also points to the device’s ‘green’ credentials: it’s certified ‘Energy 5.0’ compliant and consumes on average only 24.5W.

The TS Mini is now available for pre-order at online retailers Amazon.com and NewEgg.

A hearty welcome to ASUS in joining the Home Server family!

- Mark

In my casual scavenging of trademark applications at the USPTO, a new trademark filed this week has revealed an interesting new project from Microsoft that aims to help people familiarize themselves with the Ribbon user interface with a game inspired by the “Hero” franchise. No, I’m not kidding.

Trademark serial number 77872539 for “Ribbon Hero” is classified as a “computer software for training users to use business application software; and computer game software for use in computer user training”. In detail, it will…

providing online training in the nature of tutorials and “how to” demonstrations in the field of business application software; educational services, providing training and educational materials in the field of business application software; entertainment in the nature of competitions in the field of business application software user skills; and providing recognition and incentives by the way of awards and contests to demonstrate excellence in the field of business application software user skills.

After some more digging around, it turns out this is actually a project by the Office Labs folks whose privacy policy page reveals this will actually be a Facebook game with competitive scoring.

If you use the Ribbon Hero Facebook application, Microsoft stores your Facebook ID and the ID of your primary Facebook network. When you connect to Facebook, you can choose to share your scores with your friends. This will make your Facebook profile picture and overall score appear in your Facebook friends’ Ribbon Wars leaderboard. In addition, your overall score will be counted towards your primary Facebook network’s average score. Your Facebook friends will be able to click on your profile picture in Ribbon Hero, and then see how many points you have on each challenge.

Will this be a bigger hit than Guitar Hero 3 and Farmville? Only time will tell.