Spyware Techie

Published by Allen on May 8, 2008 06:40 am under Spyware Help

Advertisement (advertise here?)

Do you know what Instantsafepage.com is?

DESCRIPTION

Instantsafepage.com is a browser hijacker that may change your home page to point to Instantsafepage.com. Instantsafepage.com is known to be very similar to PureSafteyHere.com which both promote and sell rogue anti-spyware programs such as WinSpyKiller and AntiSpyware Sheild. Instantsafepage.com may prompt users with popup alerts that state you are infected with W32.Myzor.FK@yf.

Do you ever get a popup message that reads like the following?

Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows.
Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations [SIC]: Click â€œOKâ€ to download officially approved security software.
Always keep your patch levels up-to-date.

The above message is totally bogus and only used as a scare tactic to get you to download and purchase the rogue applications listed on the Instantsafepage.com website. You can even tell that this message is fake because they misspelled the word â€œRecommendationsâ€.

In non-techie terms: Instantsafepage.com should not be visited but if you find yourself with the Instantsafepage.com infection we recommend that you avoid downloading any software from the home page. Instantsafepage.com is just like many other malicious websites in the way that it offers a free download of a rogue program and then attempts to get you to purchase it through annoying popups.

Instantsafepage.com website image:

Name: Instantsafepage.com
Instantsafepage.com WHOIS Information:
Website IP Address: 85.255.116.212
Registration Service Provided By: ESTDOMAINS INC
Contact: 1.3027224217
Registrar: www.estdomains.com
Domain Name: INSTANTSAFEPAGE.COM
Update Date: 05-May-2008
Creation Date: 05-May-2008
Expiration Date: 05-May-2009
Domain servers in listed order:
ns1.instantsafepage.com 85.255.116.212
ns2.instantsafepage.com 85.255.116.213

Instantsafepage.com Removal Guide Automatic Removal Instructions

Instantsafepage.com Manual Removal Instructions

This manual removal method is for techie computer users. Instantsafepage.com manual removal may be difficult and time consuming to remove. There’s no guarantee that Instantsafepage.com will be removed completely. So read the Instantsafepage.com removal steps carefully and good luck.

Before you start: Close all programs and Internet browsers. Also back up your computer in case you make a mistake and your computer stops working.

Uninstall Instantsafepage.com Program
Click on Start > Settings > Control Panel > Double-click on Add/Remove Programs. Search for and uninstall Instantsafepage.com if found.
To stop Instantsafepage.com processes (view process removal steps)
Go to Start > Run > type taskmgr. The click the Processes tab and you’ll see a list of running processes.
Search and stop these Instantsafepage.com processes:
There are no processes.
For each unwanted process, right-click on it and then select “End task”.
To Unregister Instantsafepage.com DLLs (view DLL removal steps)
Search and unregister these Instantsafepage.com DLLs:
There are no dll's.

To locate the Instantsafepage.com DLL path, go to Start > Search > All Files or Folders. Type Instantsafepage.com and in the Look in: select either My Computer or Local Hard Drives. Click the Search button.
Once you have the Instantsafepage.com DLL path, go to Start and then click on Run. In the Run command box, type cmd, and then click on OK.
To locate the exact DLL path, type cd in order to change the current directory. To display the contents of the directory, use the dir command. To remove the DLL file type regsvr32 /u FILENAME.dll (FILENAME is the name of the file that you want to unregister).
To unregister Instantsafepage.com registry keys (view registry keys removal steps)
Go to Start > Run > type regedit > press OK.
Edit the value (on the right pane) by right-clicking on it and selecting the Modify option. Select the Delete option.
Search and delete these Instantsafepage.com registry keys:
There are no registry keys.
If your homepage has been changed, go to Start > Control Panel > Internet Options > click on the General > click Use Default under Home Page. Add the your desired default homepage, then click Apply > click OK. Open a new web browser to check that you have your desired default homepage.
Remove Instantsafepage.com Directories.
To find Instantsafepage.com directories, go to Start > My Computer > Local Disk (C:) > Program Files > Show the contents of this folder.
Search and delete the following Instantsafepage.com directories:
There are no directories.

Right-click on the Instantsafepage.com folder and select Delete.
A message will appear saying ‘Are you sure you want to remove the folder Instantsafepage.com and move all its contents to the Recycle Bin?’, click Yes.
Another message will appear saying ‘Renaming, moving or deleting Instantsafepage.com could make some programs not work. Are you sure you want to do this?’, click Yes.
To remove Instantsafepage.com icons on your Desktop, drag and drop them to the Recycle Bin.

You’ve completed the Instantsafepage.com manual removal instructions!
I hope this article has helped you solve your Instantsafepage.com problems. If you want to contribute to this article, post your comment below.

Disclaimer