Zararlı İsmi : Windows Antivirus ProWindows Antivirus Pro bir rogue(sahte) yazılımdır.
Nedir Rogue (Sahte) Yazılım ?Sahte güvenlik programı olarak adlandırdığımız bu programlar kötü niyetli programlardır.
Olmayan zararlıları var gibi göstermek,
sürekli system alert , your computer infected vs. uyarıları vermek ,
reklam pencereleri veya site yönlendirmeleri yaparak sizi kendi sitesine veya bazı porno ve crack sitelerine yönlendirmek ,
sizi dolandırmayı amaçlamak vs. bu tip programların genel özellikleridir.

Zararlı İsmi : WindowsAntivirusPro
Etiketler :Warning!
Running of application is impossible. The file C:\Windows\Notepad.exe is infected. Please activate your antivirus program.
Warning: Infection is Detected
Windows has found spyware infection on your computer!
Click here to update your Windows antivirus software
Security Warning
There are critical system files on your computer that were modified by malicious program.
It will cause unstable work of your system and permanent data loss.
Click here to undo performed modifications and remove malicious software (Highly recommended).
Security Warning
Your computer continues to be infected with harmful viruses. In order to prevent permanent loss of your information and credit card data theft please activate your antivirus software. Click here to enable protection.
Security Warning
Malicious programs that may steal your private information and prevent your system from working properly are detected on your computer.
Click here to clean your PC immediately.
“Windows Antivirus Pro Alert. Infiltration Alert: Your computer is being attacked by an Internet Virus. It could be a password-stealing attack, a trojan-dropped or similar. Details: Attack from: 239.80.11.105, port 58962; Attacked port: 41567; Threat: HalfLemon, Do you want Windows Antivirus Pro to block this attack?”
Hijackthis Raporundaki Girdileri :O2 - BHO: ICQSys (IE PlugIn) - {F54AF7DE-6038-4026-8433-CC30E3F17212} - C:\WINDOWS\system32\dddesot.dll
O23 - Service: AntipyPro_12 (AntipPro2009_12) - Unknown owner - C:\WINDOWS\svchast.exe
---------------------------------------
Temizlik :
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
veyahttp://rapidshare.com/files/256487217/mbam-setup1.39.zipİlk olarak yukarıdan Malwarebytes'Anti Malware'i indirin.(3 mb)
Programı kurun.

Update bölümünden güncelleyin.
Perform full scan diyip bütün sürücüleri işaretleyip ; taramanın bitmesini bekliyorsunuz.
(Eğer full scan ( tam tarama'da) sorun yaşıyorsanız hızlı tarama (quick scan) seçeneğini seçebilirsiniz.)
Tarama bittiğinde show results diyince bulduğu zararlıları görebilirsiniz.
Remove selected deyip ; biraz bekliyorsunuz.Bilgisayarınızı yeniden başlatın.
Restart sonunda Bulduğu nesneler karantinaya geldi..
Buradakileri de delete all diyerek uçurabilirsiniz.
Başlat > Programlar menüsünde kalan artıkları(eğer varsa) ( tıklanınca hatalı kısayol uyarısı veren kısayol ve klasörü el ile silin)
----------------------------------------------------------------------
Malwarebytes' Anti-Malware ile temizleyebileceğiniz WindowsAntivirusPro girdileri Kayıt Defteri Girdileri: HKEY_CURRENT_USER\Software\Softimer
HKEY_CURRENT_USER\Software\Windows Antivirus Pro
HKEY_CLASSES_ROOT\CLSID\{425882B0-B0BF-11CE-B59F-00AA006CB37D}
HKEY_CLASSES_ROOT\CLSID\{F54AF7DE-6038-4026-8433-CC30E3F17212}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F54AF7DE-6038-4026-8433-CC30E3F17212}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Win Antivirus Pro
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AntipPro2009_12
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntipPro2009_12
Klasörler ve Dosyalar:
%UserProfile%\Desktop\Windows Antivirus Pro.lnk
%UserProfile%\Start Menu\Programs\Windows Antivirus Pro
%UserProfile%\Start Menu\Programs\Windows Antivirus Pro\Windows Antivirus Pro.lnk
c:\Program Files\Windows Antivirus Pro\
c:\Program Files\Windows Antivirus Pro\ANTI_files.exe
c:\Program Files\Windows Antivirus Pro\msvcm80.dll
c:\Program Files\Windows Antivirus Pro\msvcp80.dll
c:\Program Files\Windows Antivirus Pro\msvcr80.dll
c:\Program Files\Windows Antivirus Pro\Windows Antivirus Pro.exe
C:\Program Files\Windows Antivirus Pro\tmp\
C:\Program Files\Windows Antivirus Pro\tmp\dbsinit.exe
C:\Program Files\Windows Antivirus Pro\tmp\wispex.html
C:\Program Files\Windows Antivirus Pro\tmp\images\
C:\Program Files\Windows Antivirus Pro\tmp\images\i1.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\i2.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\i3.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\j1.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\j2.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\j3.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\jj1.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\jj2.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\jj3.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\l1.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\l2.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\l3.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\pix.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\t1.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\t2.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\up1.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\up2.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\w1.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\w11.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\w2.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\w3.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\w3.jpg
C:\Program Files\Windows Antivirus Pro\tmp\images\wt1.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\wt2.gif
C:\Program Files\Windows Antivirus Pro\tmp\images\wt3.gif
c:\WINDOWS\ppp3.dat
c:\WINDOWS\ppp4.dat
c:\WINDOWS\svchast.exe
c:\WINDOWS\system32\bennuar.old
c:\WINDOWS\system32\dddesot.dll
c:\WINDOWS\system32\desot.exe
c:\WINDOWS\system32\sysnet.dat