Danger Level: Category: Infected with FraudLoad ?     Downloader FREE SCAN

Description: FraudLoad is Trojan Downloader with several variants. Once contracted, it modifies the Antivirus, and Firewall notification values in the registry to disable them. It then displays false notifications on the desktop. If the user clicks on the diplay notifications, it downloads and installs a Trojan, Rogue Antispyware Trial, or any other files from an undisclosed remote server that has been set in its protocols. This mode of operation is especially useful in tricking users into activating programs under false pretenses. By frightening the user with a threatening message, the latter become far more likely to download a suggested program, especially if that program is touted as a solution to some dire problem or threat. Download FraudLoad Removal Tool How Do I Get Rid of FraudLoad? To avoid the unnecessary risk of damaging your computer, we highly recommend you use a good spyware cleaner/remover to automatically detect and remove FraudLoad and other spyware on your PC. Download FraudLoad Removal Tool. Run a scan to detect and remove any FraudLoad infection. Restart your PC and run another scan for any remaining traces of FraudLoad. . FraudLoad Manual Removal Instructions Note: This FraudLoad manual removal process is difficult and you run the risk of destroying your computer. We highly recommend you use the FraudLoad automatic removal tool. Find and Remove FraudLoad registry keys: HKEY_CLASSES_ROOT\CLSID\{a4dca795-b588-4be0-9463-7ff2864543b1} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a4dca795-b588-4be0-9463-7ff2864543b1} HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\AV9 HKEY_CLASSES_ROOT\AppID\tupost32.dll HKEY_CLASSES_ROOT\AppID\{7DBF8390-552B-4D55-9F62-00D032032691} HKEY_CLASSES_ROOT\CLSID\{7DBF8390-552B-4D55-9F62-00D032032691} HKEY_CLASSES_ROOT\ie.ieplugin HKEY_CLASSES_ROOT\Interface\{5FD23A1E-7BE2-468E-BBFC-A35447122211} HKEY_CLASSES_ROOT\TypeLib\{5FD23A1E-7BE2-468E-BBFC-A35447122210} HKEY_CURRENT_USER\Software\SoftLand Ltd HKEY_CLASSES_ROOT\CLSID\{06ec6572-7280-485a-a712-c380526bc048} HKEY_CLASSES_ROOT\TypeLib\{B360243E-09E8-402F-8721-00B6798089AD} HKEY_CLASSES_ROOT\CLSID\{39fc2065-c9c7-49cd-8942-44cc2dedc844} HKEY_CLASSES_ROOT\WinInetApp.WinInet HKEY_CLASSES_ROOT\WinInetApp.WinInet.1 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{39FC2065-C9C7-49CD-8942-44CC2DEDC844} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39fc2065-c9c7-49cd-8942-44cc2dedc844} HKEY_CLASSES_ROOT\CLSID\{B035573A-5F43-4862-A194-87D027C63012} HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B035573A-5F43-4862-A194-87D027C63012} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B035573A-5F43-4862-A194-87D027C63012} HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a52a55f8 HKEY_CLASSES_ROOT\CLSID\{3113c6d7-d1bf-4096-94fe-5df265ac881d} HKEY_CLASSES_ROOT\VMwareApp.VMware HKEY_CLASSES_ROOT\VMwareApp.VMware.1 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3113C6D7-D1BF-4096-94FE-5DF265AC881D} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3113c6d7-d1bf-4096-94fe-5df265ac881d} HKEY_CLASSES_ROOT\TypeLib\{E24211B3-A78A-C6A9-D317-70979ACE5058} HKEY_CURRENT_USER\Software\Monopod HKEY_CLASSES_ROOT\WId4df.DocHostUIHandler HKEY_CURRENT_USER\Software\AntivirusPro_2010 HKEY_CLASSES_ROOT\CLSID\{DE5F80FD-8A16-4E53-A670-25EDD1152274} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DE5F80FD-8A16-4E53-A670-25EDD1152274} HKEY_CURRENT_USER\Software\Adsl Software Ltd HKEY_CLASSES_ROOT\TypeLib\{CFE37CAC-CA8A-FC67-89A8-F31AC98F6D61} HKEY_CLASSES_ROOT\TypeLib\{BB28A003-32B3-F829-C4BC-F13F7CDC1FFD} HKEY_CURRENT_USER\Software\IUpd721 HKEY_CLASSES_ROOT\CLSID\{5B1D95A2-F547-4e5e-8902-622B08354622} HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5B1D95A2-F547-4E5E-8902-622B08354622} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5B1D95A2-F547-4e5e-8902-622B08354622} HKEY_LOCAL_MACHINE\SOFTWARE\UAC HKEY_CLASSES_ROOT\CLSID\{25469879-7856-4D09-83C1-15D563C19D71} HKEY_CLASSES_ROOT\CLSID\{5199201E-60B4-11DE-85CF-260556D89593} HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25469879-7856-4D09-83C1-15D563C19D71} HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5199201E-60B4-11DE-85CF-260556D89593} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{5199201E-60B4-11DE-85CF-260556D89593} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25469879-7856-4D09-83C1-15D563C19D71} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{5199201E-60B4-11DE-85CF-260556D89593} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{5199201E-60B4-11DE-85CF-260556D89593} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{5199201E-60B4-11DE-85CF-260556D89593} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\NetworkNeighborhood\NameSpace\{5199201E-60B4-11DE-85CF-260556D89593} HKEY_CLASSES_ROOT\CLSID\{BF98DD74-148C-4A86-A6F3-7571F810D650} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BF98DD74-148C-4A86-A6F3-7571F810D650} HKEY_LOCAL_MACHINE\SOFTWARE\PrivacyCenter HKEY_CLASSES_ROOT\CLSID\{88A5EFA0-AA5D-4684-9CC2-5EDEC8E84655} HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{88A5EFA0-AA5D-4684-9CC2-5EDEC8E84655} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{88A5EFA0-AA5D-4684-9CC2-5EDEC8E84655} HKEY_CLASSES_ROOT\CLSID\{AAE2CCFB-71FC-4F98-93AB-5197A2E74446} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AAE2CCFB-71FC-4F98-93AB-5197A2E74446} HKEY_CLASSES_ROOT\CLSID\{DD1984BA-25E1-4F56-B124-A07ED6B2A87F} HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DD1984BA-25E1-4F56-B124-A07ED6B2A87F} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DD1984BA-25E1-4F56-B124-A07ED6B2A87F} Find and Remove FraudLoad registry values: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run@^\VIE10.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run@^\VIE10.exe HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run@^setup2(3).exe HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run@^defender32.exe HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run@^xpprotect HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run@^Monopod HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes@^URL^=^http://search-gala.com/?&uid=156&q={searchTerms} HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes@^URL^=^http://search-gala.com/?&uid=156&q={searchTerms} HKEY_CURRENT_USER_Classes\Software\Microsoft\Internet Explorer\SearchScopes@^URL^=^http://search-gala.com/?&uid=156&q={searchTerms} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\About.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Arrakis3.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashAvast.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashBug.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashChest.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashCnsnt.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashLogV.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashMaiSv.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashPopWz.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashQuick.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashServ.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashSimp2.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashSimpl.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashSkPcc.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashSkPck.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashUpd.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashWebSv.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\aswChLic.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\aswRegSvr.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\aswRunDll.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\aswUpdSv.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avadmin.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avconfig.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgchk.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgcmgr.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgcsrvx.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgdumpx.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgiproxy.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgnsx.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgscanx.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgsrmax.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgupd.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgwdsvc.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avmailc.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avmcdlg.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avnotify.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avscan.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avupgsvc.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVWEBGRD.EXE@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avwsc.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bdfvcl.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bdfvwiz.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BDInProcPatch.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BDMsnScan.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bdreinit.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bdsubwiz.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BDSurvey.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bdtkexec.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bdwizreg.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bspatch.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cavscan.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cfp.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cfpconfg.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cfplogvw.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cfpupdat.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cleanIELow.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmdagent.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\crashrep.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cssconfg.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cssupdat.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cssurf.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deloeminfs.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\driverctrl.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\fact.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\fixcfg.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\fixfp.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\guardgui.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\History.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Identity.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IEShow.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\JsRcGen.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\licmgr.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\livesrv.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\OAcat.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\OAhlp.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\OAReg.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\oasrv.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\oaui.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\oaview.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ODSW.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PSANCU.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PSANHost.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PSANToManager.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PSUNMain.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rscdwld.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\seccenter.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setloadorder.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\shield.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\signcheck.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snetcfg.exe@^Debugger^=^svchost.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exec@^Debugger^=^svchost.exe  Download FraudLoad Removal Tool FraudLoad Characterstics Disables programs / system Exploits a security flaw Distributes threats Installs without user consent Inadequate uninstall procedures Insufficient privacy disclosure and consent Uses excessive system resources

About The Free Spyware Scan From AntiSpyware 2009

AntiSpyware 2009 offers the industry's most advanced anti-spyware technology. If spyware has infiltrated your PC, you'll be able to detect it using AntiSpyware's free spyware scan.

AntiSpyware 2009 has been designed by the industry's top experts to locate the broadest range of spyware possible. This means you'll know exactly which spyware threats you are dealing with and you'll be able to address them accordingly.

How did FraudLoad get on my computer?

Wondering how FraudLoad was able to infiltrate your defenses and infect your PC? You're not alone. Millions of users become infected with FraudLoad each and every day.

P2P networks have become increasingly popular over the years. As P2P popularity has increased, so have the risks associated with using these networks. When you install a P2P application or download a file from a P2P network, it is not uncommon for spyware to be bundled in with the files and the software.

Many computer users discover the hard way that freeware and shareware aren't really free at all. Many of these "free" applications come bundled with spyware, which may very well be how the application ended up on your PC.

Not all websites are innocent. In fact, some are designed with malicious intent. If you visit one of these websites, spyware may automatically install on your hard drive without your knowledge or consent.

There are dozens of anti-spyware applications being marketed to consumers. Unfortunately, many of them do not work. Rely on a name that is trusted by many of the industry's top experts. Use AntiSpyware 2009's spyware scanner to detect spyware and to check for updates on the latest spyware threats.

There are a number of telltale signs to look for that can indicate when spyware has infected your PC. Knowing and understanding these spyware symptoms can help you reduce the amount of time spyware spends on your system and the amount of damage it can do to your computer. Here are just some of the potential spyware symptoms your computer may exhibit:

Almost everyone experiences one or two pop-ups every now and then, but if you're getting more than your fair share of pop-up ads, then spyware may be the culprit. Many unwanted software applications, such as spyware, will cause frequent occurrences of pop-up advertisements on your desktop. If you notice an increase in the number of pop-up ads you receive, you may be infected with spyware.

Many spyware applications have been known to change a user's Internet settings without their knowledge or consent. To make matters worse, if you try to change your settings back to the way they were before, spyware can just change them back again. If you notice that your search page or homepage settings have changed without explanation, spyware may be the reason.

If you notice additions to your Internet browser that you do not remember downloading or installing, spyware may be the reason. Many spyware applications add search toolbars and other BHOs (browser helper objects) to your Internet browser without your knowledge or consent.

It is very common for computers infected with spyware to experience decreases in speed and performance. This is because spyware often uses a computer's system resources to execute malicious operations. This creates a drain on your system and will result in slower Internet speeds and overall decreases in PC performance. If you notice a sudden change in the performance of your computer, it may be infected with spyware.

If you have reason to believe that your computer has been infected with spyware, it is highly recommended that you use AntiSpyware 2009's free spyware scan to detect any spyware files.

The first step in protecting your computer from spyware is to install a comprehensive anti-spyware solution. AntiSpyware 2009 offers the technology you need to keep your system safe from the latest spyware threats.

Download FraudLoad Removal Tool

Once you have downloaded and installed advanced anti-spyware protection, make sure that you are protected from the latest threats by updating your spyware definitions. AntiSpyware 2009 does this for you automatically with its convenient auto-update feature.

After you have anti-spyware software installed and updated, you need to perform Windows security updates to make sure there are no security loopholes putting your operating system at risk. To do this, open up your Internet Explorer, click on "Tools" and then click on "Windows Update" and the system will prompt you through the update process.

Once your anti-spyware protection is downloaded and installed and you have performed your Windows security updates, its time to scan your system for spyware. Simply open the application and run the spyware scan utility. AntiSpyware 2009 will take over from there.

After AntiSpyware 2009 has scanned your system, it will present you with a list of the spyware infections on your PC. At this point, you can begin the process of removing spyware from your system.

What is a Downloader?

A downloader does exactly what its name implies. This program is a the part of the Trojan that actually downloads the malicious software onto a user's computer. From there, the downloader either launches the malware or registers it in the local operating system requirements so that it will automatically run at a specified time or after a specified action. Sometimes the locations and names of the malware being downloaded are sent from an unseen website, but sometimes they are actually encoded into the downloader itself.

FraudLoad Remove FraudLoad and other unwanted applications from your computer quickly, powerfully and completely with AntiSpyware. Download now!