Trojan List 57: January 2009

Saturday, January 31, 2009

PSW.Lmir.ee Trojan

Click here to remove PSW.Lmir.ee malware

PSW.Lmir.ee description:
PSW.Lmir.ee Category:Trojan,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing PSW.Lmir.ee:

you can run trial version of ExterminateIt, or remove PSW.Lmir.ee manually.

To completely manually remove PSW.Lmir.ee malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PSW.Lmir.ee.

Macro.Word97.Spooky Trojan

Click here to remove Macro.Word97.Spooky malware

Macro.Word97.Spooky description:
Macro.Word97.Spooky Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Macro.Word97.Spooky:

you can run trial version of ExterminateIt, or remove Macro.Word97.Spooky manually.

To completely manually remove Macro.Word97.Spooky malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Macro.Word97.Spooky.

Bancos.GGH Trojan

Bancos.GGH description:
Bancos.GGH Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Bancos.GGH:

you can run trial version of ExterminateIt, or remove Bancos.GGH manually.

To completely manually remove Bancos.GGH malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.GGH.

Search Enhancer Adware

Click here to remove Search Enhancer malware

Search Enhancer description:
Search Enhancer Category:Adware,BHO
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits
BHO (Browser Helper Object) Trojan.
The BHO waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
The method of network transport used by the attacker makes this Trojan unique.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.
Instead, this Trojan encodes the data with a simple XOR algorithm before placing it into
the data section of an ICMP ping packet." explained the company.

Removing Search Enhancer:

you can run trial version of ExterminateIt, or remove Search Enhancer manually.

To completely manually remove Search Enhancer malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Search Enhancer.

Pigeon.ADF Trojan

Pigeon.ADF description:
Pigeon.ADF Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.ADF:

you can run trial version of ExterminateIt, or remove Pigeon.ADF manually.

To completely manually remove Pigeon.ADF malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.ADF.

Pigeon.AWFZ Trojan

Click here to remove Pigeon.AWFZ malware

Pigeon.AWFZ description:
Pigeon.AWFZ Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AWFZ:

you can run trial version of ExterminateIt, or remove Pigeon.AWFZ manually.

To completely manually remove Pigeon.AWFZ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AWFZ.

untd.com Tracking Cookie

untd.com description:
untd.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing untd.com:

you can run trial version of ExterminateIt, or remove untd.com manually.

To completely manually remove untd.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with untd.com.

Bancos.HRI Trojan

Bancos.HRI description:
Bancos.HRI Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.HRI:

you can run trial version of ExterminateIt, or remove Bancos.HRI manually.

To completely manually remove Bancos.HRI malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.HRI.

BackConstructor.Server Trojan

Click here to remove BackConstructor.Server malware

BackConstructor.Server description:
BackConstructor.Server Category:Trojan,Backdoor,RAT,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.
Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.

Removing BackConstructor.Server:

you can run trial version of ExterminateIt, or remove BackConstructor.Server manually.

To completely manually remove BackConstructor.Server malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BackConstructor.Server.

System33r.Tiny.Webdownloader.fwb Downloader

Click here to remove System33r.Tiny.Webdownloader.fwb malware

System33r.Tiny.Webdownloader.fwb description:
System33r.Tiny.Webdownloader.fwb Category:Downloader
This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.

Removing System33r.Tiny.Webdownloader.fwb:

you can run trial version of ExterminateIt, or remove System33r.Tiny.Webdownloader.fwb manually.

To completely manually remove System33r.Tiny.Webdownloader.fwb malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with System33r.Tiny.Webdownloader.fwb.

Neoturk Backdoor

Neoturk description:
Neoturk Category:Backdoor,RAT
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Removing Neoturk:

you can run trial version of ExterminateIt, or remove Neoturk manually.

To completely manually remove Neoturk malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Neoturk.

ValueFromClick Adware

Click here to remove ValueFromClick malware

ValueFromClick description:
ValueFromClick Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Removing ValueFromClick:

you can run trial version of ExterminateIt, or remove ValueFromClick manually.

To completely manually remove ValueFromClick malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ValueFromClick.

Afhrm Trojan

Afhrm description:
Afhrm Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Afhrm:

you can run trial version of ExterminateIt, or remove Afhrm manually.

To completely manually remove Afhrm malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Afhrm.

Pigeon.AKX Trojan

Pigeon.AKX description:
Pigeon.AKX Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AKX:

you can run trial version of ExterminateIt, or remove Pigeon.AKX manually.

To completely manually remove Pigeon.AKX malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AKX.

Macro.Word97.Emelia Trojan

Click here to remove Macro.Word97.Emelia malware

Macro.Word97.Emelia description:
Macro.Word97.Emelia Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Macro.Word97.Emelia:

you can run trial version of ExterminateIt, or remove Macro.Word97.Emelia manually.

To completely manually remove Macro.Word97.Emelia malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Macro.Word97.Emelia.

Aftershock Trojan

Aftershock description:
Aftershock Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Aftershock:

you can run trial version of ExterminateIt, or remove Aftershock manually.

To completely manually remove Aftershock malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Aftershock.

cashengines.com Tracking Cookie

Click here to remove cashengines.com malware

cashengines.com description:
cashengines.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing cashengines.com:

you can run trial version of ExterminateIt, or remove cashengines.com manually.

To completely manually remove cashengines.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with cashengines.com.

Friday, January 30, 2009

Fake.Yahoo.Messenger.Advanced.Version Trojan

Click here to remove Fake.Yahoo.Messenger.Advanced.Version malware

Fake.Yahoo.Messenger.Advanced.Version description:
Fake.Yahoo.Messenger.Advanced.Version Category:Trojan,Hacker Tool,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.
DoS trojans conduct attacks from a single computer with the consent of the user.

Removing Fake.Yahoo.Messenger.Advanced.Version:

you can run trial version of ExterminateIt, or remove Fake.Yahoo.Messenger.Advanced.Version manually.

To completely manually remove Fake.Yahoo.Messenger.Advanced.Version malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Fake.Yahoo.Messenger.Advanced.Version.

Vxidl.AUY Trojan

Vxidl.AUY description:
Vxidl.AUY Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Vxidl.AUY:

you can run trial version of ExterminateIt, or remove Vxidl.AUY manually.

To completely manually remove Vxidl.AUY malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AUY.

Skymasters Adware

Skymasters description:
Skymasters Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Removing Skymasters:

you can run trial version of ExterminateIt, or remove Skymasters manually.

To completely manually remove Skymasters malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Skymasters.

Pigeon.AVRO Trojan

Click here to remove Pigeon.AVRO malware

Pigeon.AVRO description:
Pigeon.AVRO Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AVRO:

you can run trial version of ExterminateIt, or remove Pigeon.AVRO manually.

To completely manually remove Pigeon.AVRO malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVRO.

Webnexus Adware

Webnexus description:
Webnexus Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Detection Webnexus :

Webnexus Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\webnexus

Removing Webnexus:

you can run trial version of ExterminateIt, or remove Webnexus manually.

To completely manually remove Webnexus malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Webnexus.

BZ Trojan

BZ description:
BZ Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing BZ:

you can run trial version of ExterminateIt, or remove BZ manually.

To completely manually remove BZ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BZ.

Chisyne!generic Trojan

Click here to remove Chisyne!generic malware

Chisyne!generic description:
Chisyne!generic Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Detection Chisyne!generic :

Chisyne!generic Registry Keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\awvtu
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\awvtu

Removing Chisyne!generic:

you can run trial version of ExterminateIt, or remove Chisyne!generic manually.

To completely manually remove Chisyne!generic malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Chisyne!generic.

HyperBar Adware

HyperBar description:
HyperBar Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Detection HyperBar :

HyperBar Files:
[%PROGRAM_FILES_COMMON%]\Hyperbar\HyperbarSS1.dll
[%PROGRAM_FILES_COMMON%]\Hyperbar\HyperbarSS2.dll
[%PROGRAM_FILES_COMMON%]\Hyperbar\HyperbarSS3.dll
[%PROGRAM_FILES_COMMON%]\Hyperbar\HyperbarSS1.dll
[%PROGRAM_FILES_COMMON%]\Hyperbar\HyperbarSS2.dll
[%PROGRAM_FILES_COMMON%]\Hyperbar\HyperbarSS3.dll

HyperBar Registry Keys:
HKEY_CLASSES_ROOT\AppID\Hyperbar.DLL
HKEY_CLASSES_ROOT\AppID\HyperbarAdv.DLL
HKEY_CLASSES_ROOT\AppID\HyperbarSS1.DLL
HKEY_CLASSES_ROOT\AppID\HyperbarSS3.DLL
HKEY_CLASSES_ROOT\AppID\{047E7D40-FD9B-483A-934B-361C2A581506}
HKEY_CLASSES_ROOT\AppID\{191F8DE5-0703-4A2A-A5B1-71C84CE51864}
HKEY_CLASSES_ROOT\AppID\{AE6286A9-0D91-4A45-A1F2-73EE5CAFCDC9}
HKEY_CLASSES_ROOT\AppID\{C4AC1481-6C39-433E-BD39-2A05FBF45BA7}
HKEY_CLASSES_ROOT\CLSID\{03BB57D6-9C96-4B55-9BBF-54060A7CB0EC}
HKEY_CLASSES_ROOT\CLSID\{1BC1FC4B-B0D2-4D8D-9307-2E40E2A8C257}
HKEY_CLASSES_ROOT\CLSID\{1EDF3CEE-B9DA-4508-B900-44EB34191465}
HKEY_CLASSES_ROOT\CLSID\{2925BAA3-CC06-4808-A308-32D5AFB0DDFE}
HKEY_CLASSES_ROOT\CLSID\{2B89BA5F-362D-448E-AC71-CCE59C8F840E}
HKEY_CLASSES_ROOT\CLSID\{2F6F5329-6B57-4D2D-B6AB-662793AEB986}
HKEY_CLASSES_ROOT\CLSID\{39CDE95F-7466-463A-81DE-CA0CDD7F6687}
HKEY_CLASSES_ROOT\CLSID\{414162F2-8BEE-44BD-A79F-A5121B3C911F}
HKEY_CLASSES_ROOT\CLSID\{52612A25-88CA-42C8-8337-B9E555BAD6D4}
HKEY_CLASSES_ROOT\CLSID\{60549BE9-A4A5-4a40-94EC-C19EAC88AD99}
HKEY_CLASSES_ROOT\CLSID\{60BF88CD-D2C0-49C1-A260-408545E11FD5}
HKEY_CLASSES_ROOT\CLSID\{6D4C2692-B5CE-4159-9A91-C76AFE24DA70}
HKEY_CLASSES_ROOT\CLSID\{90B3F2FC-413E-4B1A-AD4B-E9130B9A54FD}
HKEY_CLASSES_ROOT\CLSID\{948C9FD5-B95A-41D6-B753-EFA9CFB1912E}
HKEY_CLASSES_ROOT\CLSID\{B91EF050-6DE4-4CD9-8789-93084E6D98F0}
HKEY_CLASSES_ROOT\CLSID\{C851F631-0D35-4238-9EA7-D48B6DADAB14}
HKEY_CLASSES_ROOT\CLSID\{D361E196-6667-49D0-A34B-779519463540}
HKEY_CLASSES_ROOT\CLSID\{D41802BC-9085-4AB7-90F6-084C1DE1A944}
HKEY_CLASSES_ROOT\CLSID\{D5C414B7-3ECB-4F31-8668-4DEE30E1D363}
HKEY_CLASSES_ROOT\CLSID\{D7A75BAF-8A04-4e33-9FDA-7D91672CFF74}
HKEY_CLASSES_ROOT\CLSID\{DADAAC10-11C5-470A-824F-26F3E75EBD58}
HKEY_CLASSES_ROOT\CLSID\{DB3F4F59-4819-41C8-8AFC-921D58DF2787}
HKEY_CLASSES_ROOT\CLSID\{E032016B-D840-4B66-B6A5-25B42BBB8B33}
HKEY_CLASSES_ROOT\CLSID\{E1B3CC06-67CB-40A6-B2F5-CD529255DB9F}
HKEY_CLASSES_ROOT\CLSID\{E895F3C1-632E-4AFF-8DED-3FFCB2A3D096}
HKEY_CLASSES_ROOT\CLSID\{F21C02EF-C46F-4FBD-A100-8A22104700ED}
HKEY_CLASSES_ROOT\CLSID\{F410FF2F-C7CD-490C-990D-F40027FDA104}
HKEY_CLASSES_ROOT\CLSID\{F4297A06-1332-4ED0-B176-0CE3D9BC6AE6}
HKEY_CLASSES_ROOT\CLSID\{F6886667-986D-4F60-AA0B-9AA54A2D3C26}
HKEY_CLASSES_ROOT\CLSID\{FB3A747D-A8BA-45FB-8196-1D442668796C}
HKEY_CLASSES_ROOT\CLSID\{FC4D3457-9125-4EA1-9525-E48B1B5E69CE}
HKEY_CLASSES_ROOT\Hyperbar.BootstrapService
HKEY_CLASSES_ROOT\Hyperbar.BootstrapService.1
HKEY_CLASSES_ROOT\Hyperbar.ClassObjectManager
HKEY_CLASSES_ROOT\Hyperbar.ClassObjectManager.1
HKEY_CLASSES_ROOT\Hyperbar.CodeDownloadBindingHelper
HKEY_CLASSES_ROOT\Hyperbar.CodeDownloadBindingHelper.1
HKEY_CLASSES_ROOT\Hyperbar.CommandHandlingService
HKEY_CLASSES_ROOT\Hyperbar.CommandHandlingService.1
HKEY_CLASSES_ROOT\Hyperbar.ConfigLoader
HKEY_CLASSES_ROOT\Hyperbar.ConfigLoader.1
HKEY_CLASSES_ROOT\Hyperbar.EnumUnknown
HKEY_CLASSES_ROOT\Hyperbar.EnumUnknown.1
HKEY_CLASSES_ROOT\Hyperbar.HiliteHandler
HKEY_CLASSES_ROOT\Hyperbar.HiliteHandler.1
HKEY_CLASSES_ROOT\Hyperbar.HyperBlockerService
HKEY_CLASSES_ROOT\Hyperbar.HyperBlockerService.1
HKEY_CLASSES_ROOT\Hyperbar.IEBand
HKEY_CLASSES_ROOT\Hyperbar.IEBand.1
HKEY_CLASSES_ROOT\Hyperbar.IEBandFactory
HKEY_CLASSES_ROOT\Hyperbar.IEBandFactory.1
HKEY_CLASSES_ROOT\Hyperbar.IEBandInstaller
HKEY_CLASSES_ROOT\Hyperbar.IEBandInstaller.1
HKEY_CLASSES_ROOT\Hyperbar.IEBandService
HKEY_CLASSES_ROOT\Hyperbar.IEBandService.1
HKEY_CLASSES_ROOT\Hyperbar.IEBHO
HKEY_CLASSES_ROOT\Hyperbar.IEBHO.1
HKEY_CLASSES_ROOT\Hyperbar.IEBHOFactory
HKEY_CLASSES_ROOT\Hyperbar.IEBHOFactory.1
HKEY_CLASSES_ROOT\Hyperbar.IEBHOInstaller
HKEY_CLASSES_ROOT\Hyperbar.IEBHOInstaller.1
HKEY_CLASSES_ROOT\Hyperbar.IEBServicePP
HKEY_CLASSES_ROOT\Hyperbar.IEBServicePP.1
HKEY_CLASSES_ROOT\Hyperbar.InstallManager
HKEY_CLASSES_ROOT\Hyperbar.InstallManager.1
HKEY_CLASSES_ROOT\Hyperbar.NavHelperSearchHook
HKEY_CLASSES_ROOT\Hyperbar.NavHelperSearchHook.1
HKEY_CLASSES_ROOT\Hyperbar.NavHelperService
HKEY_CLASSES_ROOT\Hyperbar.NavHelperService.1
HKEY_CLASSES_ROOT\Hyperbar.NavHlpSHFactory
HKEY_CLASSES_ROOT\Hyperbar.NavHlpSHFactory.1
HKEY_CLASSES_ROOT\Hyperbar.NavigateHandler
HKEY_CLASSES_ROOT\Hyperbar.NavigateHandler.1
HKEY_CLASSES_ROOT\Hyperbar.ProductManager
HKEY_CLASSES_ROOT\Hyperbar.ProductManager.1
HKEY_CLASSES_ROOT\Hyperbar.PropSheetHandler
HKEY_CLASSES_ROOT\Hyperbar.PropSheetHandler.1
HKEY_CLASSES_ROOT\Hyperbar.ResourceManager
HKEY_CLASSES_ROOT\Hyperbar.ResourceManager.1
HKEY_CLASSES_ROOT\Hyperbar.SearchService
HKEY_CLASSES_ROOT\Hyperbar.SearchService.1
HKEY_CLASSES_ROOT\Hyperbar.ServiceManager
HKEY_CLASSES_ROOT\Hyperbar.ServiceManager.1
HKEY_CLASSES_ROOT\Hyperbar.ServiceSite
HKEY_CLASSES_ROOT\Hyperbar.ServiceSite.1
HKEY_CLASSES_ROOT\Hyperbar.ToolbarService
HKEY_CLASSES_ROOT\Hyperbar.ToolbarService.1
HKEY_CLASSES_ROOT\Hyperbar.TopResultsService
HKEY_CLASSES_ROOT\Hyperbar.TopResultsService.1
HKEY_CLASSES_ROOT\HyperToolbar.BindStatusCallbackHelper
HKEY_CLASSES_ROOT\HyperToolbar.BindStatusCallbackHelper.1
HKEY_CLASSES_ROOT\Interface\{05C3780D-3A0C-485A-B3CF-3AF35061C8C1}
HKEY_CLASSES_ROOT\Interface\{0CBEE0CC-8F2C-47EF-99A3-ED603EB17E7F}
HKEY_CLASSES_ROOT\Interface\{0E3450CD-9281-48FB-9CBF-AF9ADCDDC472}
HKEY_CLASSES_ROOT\Interface\{10FB9211-83C0-49B3-A780-4B6FBBADE434}
HKEY_CLASSES_ROOT\Interface\{12D0B72F-E3E1-4031-8C7E-0AE5DD2BF85A}
HKEY_CLASSES_ROOT\Interface\{2C1B2722-1D57-448D-BB11-D3BF81AFB3B5}
HKEY_CLASSES_ROOT\Interface\{465F46B0-B181-49CB-AD28-B764CD24DCA1}
HKEY_CLASSES_ROOT\Interface\{4682934D-BFCE-4647-9E61-3D95BD163B6C}
HKEY_CLASSES_ROOT\Interface\{4978EC50-10E6-4733-BEC0-01C06EB24513}
HKEY_CLASSES_ROOT\Interface\{516EF947-2FF0-4D22-BA46-B08CEB7B3EDF}
HKEY_CLASSES_ROOT\Interface\{572A7CAA-2D6B-4461-B471-D47E4CDD37F2}
HKEY_CLASSES_ROOT\Interface\{5C1DDAAC-B007-40E4-9854-322492AD2B58}
HKEY_CLASSES_ROOT\Interface\{65237135-B929-444F-8034-4AF7E7C1D360}
HKEY_CLASSES_ROOT\Interface\{6E73FDAB-E391-48AF-8646-84921587858A}
HKEY_CLASSES_ROOT\Interface\{723F03AB-3016-4AED-B5AE-280F3FBF2A47}
HKEY_CLASSES_ROOT\Interface\{7E10CC6D-FCE6-49BC-A4CB-5B9B2E3E83D0}
HKEY_CLASSES_ROOT\Interface\{80BE027B-759A-4938-9B1E-E6988654DAC4}
HKEY_CLASSES_ROOT\Interface\{82155488-DC96-4F98-81C0-884EB720081A}
HKEY_CLASSES_ROOT\Interface\{88D43288-6FEF-4202-8D87-BD992D1F602F}
HKEY_CLASSES_ROOT\Interface\{89ABAF9E-2C51-47A3-93D3-D563EAF847B0}
HKEY_CLASSES_ROOT\Interface\{9C3ABDA0-EB06-41E7-A426-5836D30485CB}
HKEY_CLASSES_ROOT\Interface\{9E37CB08-105A-4B32-A0DE-05FE4F66322E}
HKEY_CLASSES_ROOT\Interface\{A702688F-E3E0-406A-BB3E-ED2CA4F7F563}
HKEY_CLASSES_ROOT\Interface\{C1419F7E-F0B8-4781-9D62-F307FC010ED6}
HKEY_CLASSES_ROOT\Interface\{D639D99D-2377-46B5-81A5-BD91B61C61B0}
HKEY_CLASSES_ROOT\Interface\{D9A25182-7A92-4511-8981-F4414744DA94}
HKEY_CLASSES_ROOT\Interface\{E299BC64-1C1B-4F91-B3F4-1B8537BF5ECD}
HKEY_CLASSES_ROOT\Interface\{F3AEEE73-9116-48ED-8212-5E49EABE0050}
HKEY_CLASSES_ROOT\Interface\{F4982E3C-93D2-4DFB-85F2-20DB0C91A6B9}
HKEY_CLASSES_ROOT\Interface\{F8C39983-CEFC-4BD4-BD29-659E4E1D31E1}
HKEY_CLASSES_ROOT\Interface\{F97B6539-DBCE-4751-8B73-5BB6502EC4C8}
HKEY_CLASSES_ROOT\TypeLib\{047E7D40-FD9B-483A-934B-361C2A581506}
HKEY_CLASSES_ROOT\TypeLib\{191F8DE5-0703-4A2A-A5B1-71C84CE51864}
HKEY_CLASSES_ROOT\TypeLib\{AE6286A9-0D91-4A45-A1F2-73EE5CAFCDC9}
HKEY_CLASSES_ROOT\TypeLib\{C4AC1481-6C39-433E-BD39-2A05FBF45BA7}
HKEY_CURRENT_USER\Software\Fukka-Round, Inc.
HKEY_CURRENT_USER\SOFTWARE\Igor V. Gunko
HKEY_LOCAL_MACHINE\SOFTWARE\Fukka-Round, Inc.
HKEY_LOCAL_MACHINE\SOFTWARE\Igor V. Gunko

Removing HyperBar:

you can run trial version of ExterminateIt, or remove HyperBar manually.

To completely manually remove HyperBar malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with HyperBar.

Win32.Spammer.Aenima.virus Hacker Tool

Click here to remove Win32.Spammer.Aenima.virus malware

Win32.Spammer.Aenima.virus description:
Win32.Spammer.Aenima.virus Category:Hacker Tool,DoS
Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.
DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing Win32.Spammer.Aenima.virus:

you can run trial version of ExterminateIt, or remove Win32.Spammer.Aenima.virus manually.

To completely manually remove Win32.Spammer.Aenima.virus malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.Spammer.Aenima.virus.

Thursday, January 29, 2009

Phishbank.ADW Trojan

Click here to remove Phishbank.ADW malware

Phishbank.ADW description:
Phishbank.ADW Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Phishbank.ADW:

you can run trial version of ExterminateIt, or remove Phishbank.ADW manually.

To completely manually remove Phishbank.ADW malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Phishbank.ADW.

Ouch.local DoS

Ouch.local description:
Ouch.local Category:DoS
DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing Ouch.local:

you can run trial version of ExterminateIt, or remove Ouch.local manually.

To completely manually remove Ouch.local malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Ouch.local.

emarketmakers.com Tracking Cookie

Click here to remove emarketmakers.com malware

emarketmakers.com description:
emarketmakers.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing emarketmakers.com:

you can run trial version of ExterminateIt, or remove emarketmakers.com manually.

To completely manually remove emarketmakers.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with emarketmakers.com.

Bancos.IOK Trojan

Bancos.IOK description:
Bancos.IOK Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Bancos.IOK:

you can run trial version of ExterminateIt, or remove Bancos.IOK manually.

To completely manually remove Bancos.IOK malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.IOK.

SpeedMod Trojan

SpeedMod description:
SpeedMod Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing SpeedMod:

you can run trial version of ExterminateIt, or remove SpeedMod manually.

To completely manually remove SpeedMod malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SpeedMod.

VB.om Trojan

VB.om description:
VB.om Category:Trojan,Backdoor
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Removing VB.om:

you can run trial version of ExterminateIt, or remove VB.om manually.

To completely manually remove VB.om malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with VB.om.

IE.Middle.Clicker BHO

Click here to remove IE.Middle.Clicker malware

IE.Middle.Clicker description:
IE.Middle.Clicker Category:BHO
As this information is entered by the user, it is captured by the BHO (Browser Helper Object) and
sent back to the attacker.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.

Removing IE.Middle.Clicker:

you can run trial version of ExterminateIt, or remove IE.Middle.Clicker manually.

To completely manually remove IE.Middle.Clicker malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with IE.Middle.Clicker.

W95.Ylang Trojan

W95.Ylang description:
W95.Ylang Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing W95.Ylang:

you can run trial version of ExterminateIt, or remove W95.Ylang manually.

To completely manually remove W95.Ylang malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with W95.Ylang.

Tracking.Cookie Tracking Cookie

Click here to remove Tracking.Cookie malware

Tracking.Cookie description:
Tracking.Cookie Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing Tracking.Cookie:

you can run trial version of ExterminateIt, or remove Tracking.Cookie manually.

To completely manually remove Tracking.Cookie malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Tracking.Cookie.

KoreanDoumi Adware

Click here to remove KoreanDoumi malware

KoreanDoumi description:
KoreanDoumi Category:Adware,BHO
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

The BHO (Browser Helper Object) waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.

Detection KoreanDoumi :

KoreanDoumi Files:
[%SYSTEM%]\webmailHook20060107.dll
[%SYSTEM%]\webmailHook20060111.dll
[%SYSTEM%]\webmailHook20060112.dll
[%SYSTEM%]\webmailHook20060107.dll
[%SYSTEM%]\webmailHook20060111.dll
[%SYSTEM%]\webmailHook20060112.dll

KoreanDoumi Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{09F93072-DE5E-4B5A-B347-F80FD7CB7309}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Windows Safety Alert
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{09F93072-DE5E-4B5A-B347-F80FD7CB7309}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows Safety Alert

Removing KoreanDoumi:

you can run trial version of ExterminateIt, or remove KoreanDoumi manually.

To completely manually remove KoreanDoumi malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with KoreanDoumi.

Fitmispani Hijacker

Fitmispani description:
Fitmispani Category:Hijacker
A Search hijacker redirects search results to other pages and may
transmit search and browsing data to unknown servers. An error page hijacker directs
the browser to another page, usually an advertising page, instead of the usual error
page when the requested URL is not found.

Removing Fitmispani:

you can run trial version of ExterminateIt, or remove Fitmispani manually.

To completely manually remove Fitmispani malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Fitmispani.

Pigeon.ETP Trojan

Pigeon.ETP description:
Pigeon.ETP Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.ETP:

you can run trial version of ExterminateIt, or remove Pigeon.ETP manually.

To completely manually remove Pigeon.ETP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.ETP.

BAT.Nitwiz Trojan

BAT.Nitwiz description:
BAT.Nitwiz Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing BAT.Nitwiz:

you can run trial version of ExterminateIt, or remove BAT.Nitwiz manually.

To completely manually remove BAT.Nitwiz malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BAT.Nitwiz.

Vxidl.BFH Trojan

Vxidl.BFH description:
Vxidl.BFH Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Vxidl.BFH:

you can run trial version of ExterminateIt, or remove Vxidl.BFH manually.

To completely manually remove Vxidl.BFH malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.BFH.

Wednesday, January 28, 2009

DS.Web Downloader

DS.Web description:
DS.Web Category:Downloader
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

Removing DS.Web:

you can run trial version of ExterminateIt, or remove DS.Web manually.

To completely manually remove DS.Web malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with DS.Web.

Pigeon.AVBP Trojan

Click here to remove Pigeon.AVBP malware

Pigeon.AVBP description:
Pigeon.AVBP Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AVBP:

you can run trial version of ExterminateIt, or remove Pigeon.AVBP manually.

To completely manually remove Pigeon.AVBP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVBP.

Bisads.180solutions Tracking Cookie

Click here to remove Bisads.180solutions malware

Bisads.180solutions description:
Bisads.180solutions Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing Bisads.180solutions:

you can run trial version of ExterminateIt, or remove Bisads.180solutions manually.

To completely manually remove Bisads.180solutions malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bisads.180solutions.

AnalogX.Server.DoS.Buffer.Overflow.Vulnerabilty DoS

Click here to remove AnalogX.Server.DoS.Buffer.Overflow.Vulnerabilty malware

AnalogX.Server.DoS.Buffer.Overflow.Vulnerabilty description:
AnalogX.Server.DoS.Buffer.Overflow.Vulnerabilty Category:DoS
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing AnalogX.Server.DoS.Buffer.Overflow.Vulnerabilty:

you can run trial version of ExterminateIt, or remove AnalogX.Server.DoS.Buffer.Overflow.Vulnerabilty manually.

To completely manually remove AnalogX.Server.DoS.Buffer.Overflow.Vulnerabilty malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with AnalogX.Server.DoS.Buffer.Overflow.Vulnerabilty.

GCDoor Trojan

GCDoor description:
GCDoor Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing GCDoor:

you can run trial version of ExterminateIt, or remove GCDoor manually.

To completely manually remove GCDoor malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with GCDoor.

ChannelUp Adware

ChannelUp description:
ChannelUp Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Detection ChannelUp :

ChannelUp Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run

Removing ChannelUp:

you can run trial version of ExterminateIt, or remove ChannelUp manually.

To completely manually remove ChannelUp malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ChannelUp.

Pigeon.EKK Trojan

Pigeon.EKK description:
Pigeon.EKK Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.EKK:

you can run trial version of ExterminateIt, or remove Pigeon.EKK manually.

To completely manually remove Pigeon.EKK malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EKK.

Pigeon.AVOS Trojan

Click here to remove Pigeon.AVOS malware

Pigeon.AVOS description:
Pigeon.AVOS Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AVOS:

you can run trial version of ExterminateIt, or remove Pigeon.AVOS manually.

To completely manually remove Pigeon.AVOS malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVOS.

Zlob.Fam.Online Add-on Trojan

Click here to remove Zlob.Fam.Online Add-on malware

Zlob.Fam.Online Add-on description:
Zlob.Fam.Online Add-on Category:Trojan,Popups
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Adware is the class of programs that place advertisements on your screen.
These may be in the form of pop-ups, pop-unders, advertisements embedded in programs,
advertisements placed on top of ads in web sites, or any other way the authors can
think of showing you an ad.

The pop-ups generally will not be stopped by pop-up stoppers, and often are
not dependent on your having Internet Explorer open.
They may show up when you are playing a game, writing a document, listening to music,
or anything else. Should you be surfing, the advertisements will often be related to
the web page you are viewing.

Detection Zlob.Fam.Online Add-on :

Zlob.Fam.Online Add-on Folders:
[%PROGRAM_FILES%]\Online Add-on

Zlob.Fam.Online Add-on Registry Keys:
HKEY_CURRENT_USER\Software\Online Add-on
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MultiMedia Software

Removing Zlob.Fam.Online Add-on:

you can run trial version of ExterminateIt, or remove Zlob.Fam.Online Add-on manually.

To completely manually remove Zlob.Fam.Online Add-on malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Zlob.Fam.Online Add-on.

SexoDial Adware

SexoDial description:
SexoDial Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Detection SexoDial :

SexoDial Registry Keys:
HKEY_CLASSES_ROOT\clsid\{8e65b894-c2e9-11d5-bcd3-00e018987519}

Removing SexoDial:

you can run trial version of ExterminateIt, or remove SexoDial manually.

To completely manually remove SexoDial malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SexoDial.

DelIosys Trojan

DelIosys description:
DelIosys Category:Trojan,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing DelIosys:

you can run trial version of ExterminateIt, or remove DelIosys manually.

To completely manually remove DelIosys malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with DelIosys.

HuntToolBar Toolbar

Click here to remove HuntToolBar malware

HuntToolBar description:
HuntToolBar Category:Toolbar
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.

Removing HuntToolBar:

you can run trial version of ExterminateIt, or remove HuntToolBar manually.

To completely manually remove HuntToolBar malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with HuntToolBar.

eBates.com Tracking Cookie

eBates.com description:
eBates.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing eBates.com:

you can run trial version of ExterminateIt, or remove eBates.com manually.

To completely manually remove eBates.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with eBates.com.

Tuesday, January 27, 2009

quebechebdos.com Tracking Cookie

Click here to remove quebechebdos.com malware

quebechebdos.com description:
quebechebdos.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing quebechebdos.com:

you can run trial version of ExterminateIt, or remove quebechebdos.com manually.

To completely manually remove quebechebdos.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with quebechebdos.com.

Vxidl.AFZ Trojan

Vxidl.AFZ description:
Vxidl.AFZ Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Vxidl.AFZ:

you can run trial version of ExterminateIt, or remove Vxidl.AFZ manually.

To completely manually remove Vxidl.AFZ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AFZ.

Possessed Trojan

Possessed description:
Possessed Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing Possessed:

you can run trial version of ExterminateIt, or remove Possessed manually.

To completely manually remove Possessed malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Possessed.

Mstream DoS

Mstream description:
Mstream Category:DoS
DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing Mstream:

you can run trial version of ExterminateIt, or remove Mstream manually.

To completely manually remove Mstream malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Mstream.

Backdoor.Y3KRat.Server.family Trojan

Click here to remove Backdoor.Y3KRat.Server.family malware

Backdoor.Y3KRat.Server.family description:
Backdoor.Y3KRat.Server.family Category:Trojan,Backdoor
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Removing Backdoor.Y3KRat.Server.family:

you can run trial version of ExterminateIt, or remove Backdoor.Y3KRat.Server.family manually.

To completely manually remove Backdoor.Y3KRat.Server.family malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Backdoor.Y3KRat.Server.family.

WebCrawler Toolbar

WebCrawler description:
WebCrawler Category:Toolbar
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.
It replaces your start page, continuosly open a number of pop up windows and so on.

Detection WebCrawler :

WebCrawler Files:
[%WINDOWS%]\system\ultrabar.dll
[%WINDOWS%]\system\ultrabar.dll

WebCrawler Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{9677F3F1-E994-451F-805F-7148CC8AE040}
HKEY_LOCAL_MACHINE\software\classes\clsid\{9677f3f1-e994-451f-805f-7148cc8ae040}
HKEY_CLASSES_ROOT\clsid\{9677f3f1-e994-451f-805f-7148cc8ae040}

WebCrawler Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar

Removing WebCrawler:

you can run trial version of ExterminateIt, or remove WebCrawler manually.

To completely manually remove WebCrawler malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with WebCrawler.

Arisgo Trojan

Arisgo description:
Arisgo Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Arisgo:

you can run trial version of ExterminateIt, or remove Arisgo manually.

To completely manually remove Arisgo malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Arisgo.

FDoS.IcmpBomb Trojan

Click here to remove FDoS.IcmpBomb malware

FDoS.IcmpBomb description:
FDoS.IcmpBomb Category:Trojan,Backdoor,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing FDoS.IcmpBomb:

you can run trial version of ExterminateIt, or remove FDoS.IcmpBomb manually.

To completely manually remove FDoS.IcmpBomb malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with FDoS.IcmpBomb.

Verital Trojan

Verital description:
Verital Category:Trojan,RAT
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Removing Verital:

you can run trial version of ExterminateIt, or remove Verital manually.

To completely manually remove Verital malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Verital.

AOLPS.Blackman Trojan

Click here to remove AOLPS.Blackman malware

AOLPS.Blackman description:
AOLPS.Blackman Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing AOLPS.Blackman:

you can run trial version of ExterminateIt, or remove AOLPS.Blackman manually.

To completely manually remove AOLPS.Blackman malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with AOLPS.Blackman.

Dagger.31b Backdoor

Dagger.31b description:
Dagger.31b Category:Backdoor,RAT
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

Detection Dagger.31b :

Dagger.31b Files:
[%WINDOWS%]\system\vscan.exe
[%WINDOWS%]\system\vscan.exe

Dagger.31b Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Dagger.31b:

you can run trial version of ExterminateIt, or remove Dagger.31b manually.

To completely manually remove Dagger.31b malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Dagger.31b.

PC.Flu Trojan

PC.Flu description:
PC.Flu Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.
DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing PC.Flu:

you can run trial version of ExterminateIt, or remove PC.Flu manually.

To completely manually remove PC.Flu malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PC.Flu.

Pigeon.EBO Trojan

Pigeon.EBO description:
Pigeon.EBO Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.EBO:

you can run trial version of ExterminateIt, or remove Pigeon.EBO manually.

To completely manually remove Pigeon.EBO malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EBO.

PrizeSurfer Trojan

Click here to remove PrizeSurfer malware

PrizeSurfer description:
PrizeSurfer Category:Trojan,Adware
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Detection PrizeSurfer :

PrizeSurfer Files:
[%WINDOWS%]\downloaded program files\passkey.dll
[%WINDOWS%]\downloaded program files\passkey.dll

PrizeSurfer Folders:
[%PROGRAM_FILES%]\rcprograms
[%PROGRAM_FILES%]\rcprograms1
[%PROGRAM_FILES%]\rcprograms2

PrizeSurfer Registry Keys:
HKEY_CLASSES_ROOT\clsid\{7b91df1f-96e8-42ba-ab39-e1db9ce9f371}
HKEY_CLASSES_ROOT\interface\{6d846abd-9ece-44ad-bb1b-e1b0b20e352f}
HKEY_CLASSES_ROOT\passkey.validate
HKEY_CLASSES_ROOT\passkey.validate.1
HKEY_CLASSES_ROOT\typelib\{be055af3-6567-4678-a901-d4b7d92e55fe}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{7b91df1f-96e8-42ba-ab39-e1db9ce9f371}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\passkey.dll

PrizeSurfer Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\[%WINDOWS%]\downloaded program files

Removing PrizeSurfer:

you can run trial version of ExterminateIt, or remove PrizeSurfer manually.

To completely manually remove PrizeSurfer malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PrizeSurfer.

SillyDl.CNU Trojan

Click here to remove SillyDl.CNU malware

SillyDl.CNU description:
SillyDl.CNU Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing SillyDl.CNU:

you can run trial version of ExterminateIt, or remove SillyDl.CNU manually.

To completely manually remove SillyDl.CNU malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CNU.

Monday, January 26, 2009

Aqua Trojan

Aqua description:
Aqua Category:Trojan,Backdoor,RAT
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Detection Aqua :

Aqua Folders:
[%PROGRAM_FILES%]\spytech software\spytech spyagent

Removing Aqua:

you can run trial version of ExterminateIt, or remove Aqua manually.

To completely manually remove Aqua malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Aqua.

Falling.Door Backdoor

Click here to remove Falling.Door malware

Falling.Door description:
Falling.Door Category:Backdoor,RAT
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Removing Falling.Door:

you can run trial version of ExterminateIt, or remove Falling.Door manually.

To completely manually remove Falling.Door malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Falling.Door.

Compo.cav.dr Trojan

Click here to remove Compo.cav.dr malware

Compo.cav.dr description:
Compo.cav.dr Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
Trojans-downloaders downloads and installs new malware or adware on the computer.

DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing Compo.cav.dr:

you can run trial version of ExterminateIt, or remove Compo.cav.dr manually.

To completely manually remove Compo.cav.dr malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Compo.cav.dr.

SillyDl.CBF Trojan

Click here to remove SillyDl.CBF malware

SillyDl.CBF description:
SillyDl.CBF Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing SillyDl.CBF:

you can run trial version of ExterminateIt, or remove SillyDl.CBF manually.

To completely manually remove SillyDl.CBF malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CBF.

Mike Trojan

Mike description:
Mike Category:Trojan,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing Mike:

you can run trial version of ExterminateIt, or remove Mike manually.

To completely manually remove Mike malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Mike.

SillyDl.CVZ Trojan

Click here to remove SillyDl.CVZ malware

SillyDl.CVZ description:
SillyDl.CVZ Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing SillyDl.CVZ:

you can run trial version of ExterminateIt, or remove SillyDl.CVZ manually.

To completely manually remove SillyDl.CVZ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CVZ.

WM.Agent Trojan

WM.Agent description:
WM.Agent Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing WM.Agent:

you can run trial version of ExterminateIt, or remove WM.Agent manually.

To completely manually remove WM.Agent malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with WM.Agent.

Subroot.SfX!Server Backdoor

Click here to remove Subroot.SfX!Server malware

Subroot.SfX!Server description:
Subroot.SfX!Server Category:Backdoor
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.

Removing Subroot.SfX!Server:

you can run trial version of ExterminateIt, or remove Subroot.SfX!Server manually.

To completely manually remove Subroot.SfX!Server malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Subroot.SfX!Server.

upcoming.org Tracking Cookie

Click here to remove upcoming.org malware

upcoming.org description:
upcoming.org Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing upcoming.org:

you can run trial version of ExterminateIt, or remove upcoming.org manually.

To completely manually remove upcoming.org malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with upcoming.org.

Downloader.TV.dll Trojan

Click here to remove Downloader.TV.dll malware

Downloader.TV.dll description:
Downloader.TV.dll Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Downloader.TV.dll:

you can run trial version of ExterminateIt, or remove Downloader.TV.dll manually.

To completely manually remove Downloader.TV.dll malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Downloader.TV.dll.

SillyDl.CVN Trojan

Click here to remove SillyDl.CVN malware

SillyDl.CVN description:
SillyDl.CVN Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing SillyDl.CVN:

you can run trial version of ExterminateIt, or remove SillyDl.CVN manually.

To completely manually remove SillyDl.CVN malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CVN.

Half.Life.Server.Heroin.Injector Backdoor

Click here to remove Half.Life.Server.Heroin.Injector malware

Half.Life.Server.Heroin.Injector description:
Half.Life.Server.Heroin.Injector Category:Backdoor,DoS
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
DoS trojans conduct attacks from a single computer with the consent of the user.

Removing Half.Life.Server.Heroin.Injector:

you can run trial version of ExterminateIt, or remove Half.Life.Server.Heroin.Injector manually.

To completely manually remove Half.Life.Server.Heroin.Injector malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Half.Life.Server.Heroin.Injector.

zedo.com Tracking Cookie

zedo.com description:
zedo.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing zedo.com:

you can run trial version of ExterminateIt, or remove zedo.com manually.

To completely manually remove zedo.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with zedo.com.

Win32.Flooder.MSN.Bigfly Trojan

Click here to remove Win32.Flooder.MSN.Bigfly malware

Win32.Flooder.MSN.Bigfly description:
Win32.Flooder.MSN.Bigfly Category:Trojan,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing Win32.Flooder.MSN.Bigfly:

you can run trial version of ExterminateIt, or remove Win32.Flooder.MSN.Bigfly manually.

To completely manually remove Win32.Flooder.MSN.Bigfly malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.Flooder.MSN.Bigfly.

Sunday, January 25, 2009

Win32.Sedcrop Trojan

Click here to remove Win32.Sedcrop malware

Win32.Sedcrop description:
Win32.Sedcrop Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Detection Win32.Sedcrop :

Win32.Sedcrop Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\jpupd

Win32.Sedcrop Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Win32.Sedcrop:

you can run trial version of ExterminateIt, or remove Win32.Sedcrop manually.

To completely manually remove Win32.Sedcrop malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.Sedcrop.

Radiate.com Tracking Cookie

Click here to remove Radiate.com malware

Radiate.com description:
Radiate.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing Radiate.com:

you can run trial version of ExterminateIt, or remove Radiate.com manually.

To completely manually remove Radiate.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Radiate.com.

Adware.BDSearch.dll Adware

Click here to remove Adware.BDSearch.dll malware

Adware.BDSearch.dll description:
Adware.BDSearch.dll Category:Adware,Downloader
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.

Removing Adware.BDSearch.dll:

you can run trial version of ExterminateIt, or remove Adware.BDSearch.dll manually.

To completely manually remove Adware.BDSearch.dll malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Adware.BDSearch.dll.

Austr.Para.Comic Trojan

Click here to remove Austr.Para.Comic malware

Austr.Para.Comic description:
Austr.Para.Comic Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.
DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing Austr.Para.Comic:

you can run trial version of ExterminateIt, or remove Austr.Para.Comic manually.

To completely manually remove Austr.Para.Comic malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Austr.Para.Comic.

ShenHua Trojan

ShenHua description:
ShenHua Category:Trojan,Downloader,Backdoor
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Trojans-downloaders downloads and installs new malware or adware on the computer.

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Removing ShenHua:

you can run trial version of ExterminateIt, or remove ShenHua manually.

To completely manually remove ShenHua malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ShenHua.

HorseKit Trojan

HorseKit description:
HorseKit Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing HorseKit:

you can run trial version of ExterminateIt, or remove HorseKit manually.

To completely manually remove HorseKit malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with HorseKit.

April1 Trojan

April1 description:
April1 Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing April1:

you can run trial version of ExterminateIt, or remove April1 manually.

To completely manually remove April1 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with April1.

addcontrol.net Tracking Cookie

Click here to remove addcontrol.net malware

addcontrol.net description:
addcontrol.net Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing addcontrol.net:

you can run trial version of ExterminateIt, or remove addcontrol.net manually.

To completely manually remove addcontrol.net malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with addcontrol.net.

BAT.Uisgon Trojan

BAT.Uisgon description:
BAT.Uisgon Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing BAT.Uisgon:

you can run trial version of ExterminateIt, or remove BAT.Uisgon manually.

To completely manually remove BAT.Uisgon malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BAT.Uisgon.

Lamers.Death.7b2 Backdoor

Click here to remove Lamers.Death.7b2 malware

Lamers.Death.7b2 description:
Lamers.Death.7b2 Category:Backdoor,RAT
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Removing Lamers.Death.7b2:

you can run trial version of ExterminateIt, or remove Lamers.Death.7b2 manually.

To completely manually remove Lamers.Death.7b2 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Lamers.Death.7b2.

Blackhack.mp Trojan

Click here to remove Blackhack.mp malware

Blackhack.mp description:
Blackhack.mp Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Blackhack.mp:

you can run trial version of ExterminateIt, or remove Blackhack.mp manually.

To completely manually remove Blackhack.mp malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Blackhack.mp.

Hll.No Trojan

Hll.No description:
Hll.No Category:Trojan,Backdoor,Downloader,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Trojans-downloaders downloads and installs new malware or adware on the computer.

DoS trojans conduct attacks from a single computer with the consent of the user.

Removing Hll.No:

you can run trial version of ExterminateIt, or remove Hll.No manually.

To completely manually remove Hll.No malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Hll.No.

Infector Trojan

Infector description:
Infector Category:Trojan,Backdoor,Downloader,Hacker Tool,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Trojans-downloaders downloads and installs new malware or adware on the computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing Infector:

you can run trial version of ExterminateIt, or remove Infector manually.

To completely manually remove Infector malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Infector.

Chat.ker DoS

Chat.ker description:
Chat.ker Category:DoS
DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing Chat.ker:

you can run trial version of ExterminateIt, or remove Chat.ker manually.

To completely manually remove Chat.ker malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Chat.ker.

WinReg.AntiSecurity Trojan

Click here to remove WinReg.AntiSecurity malware

WinReg.AntiSecurity description:
WinReg.AntiSecurity Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing WinReg.AntiSecurity:

you can run trial version of ExterminateIt, or remove WinReg.AntiSecurity manually.

To completely manually remove WinReg.AntiSecurity malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with WinReg.AntiSecurity.

Saturday, January 24, 2009

MailSpam.Listonosz Hacker Tool

Click here to remove MailSpam.Listonosz malware

MailSpam.Listonosz description:
MailSpam.Listonosz Category:Hacker Tool,DoS
Exploits use vulnerabilities in operating systems and applications to achieve the same result.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing MailSpam.Listonosz:

you can run trial version of ExterminateIt, or remove MailSpam.Listonosz manually.

To completely manually remove MailSpam.Listonosz malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with MailSpam.Listonosz.

Passdev Trojan

Passdev description:
Passdev Category:Trojan,RAT,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.
Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.

Removing Passdev:

you can run trial version of ExterminateIt, or remove Passdev manually.

To completely manually remove Passdev malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Passdev.

ProRat Trojan

ProRat description:
ProRat Category:Trojan,Backdoor,RAT
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

Detection ProRat :

ProRat Files:
[%SYSTEM%]\fservice.exe
[%SYSTEM%]\reginv.dll
[%SYSTEM%]\winkey.dll
[%WINDOWS%]\ktd32.atm
[%WINDOWS%]\system\sservice.exe
[%PROGRAM_FILES%]\norton systemworks\norton antivirus\quarantine\32fd2804.dll
[%PROGRAM_FILES%]\norton systemworks\norton antivirus\quarantine\331c7edf.dll
[%PROGRAM_FILES%]\norton systemworks\norton antivirus\quarantine\331f28db.dll
[%SYSTEM%]\wininv.dll
[%SYSTEM%]\fservice.exe
[%SYSTEM%]\reginv.dll
[%SYSTEM%]\winkey.dll
[%WINDOWS%]\ktd32.atm
[%WINDOWS%]\system\sservice.exe
[%PROGRAM_FILES%]\norton systemworks\norton antivirus\quarantine\32fd2804.dll
[%PROGRAM_FILES%]\norton systemworks\norton antivirus\quarantine\331c7edf.dll
[%PROGRAM_FILES%]\norton systemworks\norton antivirus\quarantine\331f28db.dll
[%SYSTEM%]\wininv.dll

ProRat Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5y99ae78-58tt-11dw-be53-y67078979y}

ProRat Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing ProRat:

you can run trial version of ExterminateIt, or remove ProRat manually.

To completely manually remove ProRat malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ProRat.

Zdziubus.beta RAT

Click here to remove Zdziubus.beta malware

Zdziubus.beta description:
Zdziubus.beta Category:RAT
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Removing Zdziubus.beta:

you can run trial version of ExterminateIt, or remove Zdziubus.beta manually.

To completely manually remove Zdziubus.beta malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Zdziubus.beta.

Pidyay Trojan

Pidyay description:
Pidyay Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pidyay:

you can run trial version of ExterminateIt, or remove Pidyay manually.

To completely manually remove Pidyay malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pidyay.

Bancos.HL!downloader Trojan

Click here to remove Bancos.HL!downloader malware

Bancos.HL!downloader description:
Bancos.HL!downloader Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.HL!downloader:

you can run trial version of ExterminateIt, or remove Bancos.HL!downloader manually.

To completely manually remove Bancos.HL!downloader malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.HL!downloader.

Win32.Senna Trojan

Click here to remove Win32.Senna malware

Win32.Senna description:
Win32.Senna Category:Trojan,Backdoor
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Removing Win32.Senna:

you can run trial version of ExterminateIt, or remove Win32.Senna manually.

To completely manually remove Win32.Senna malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.Senna.

Pigeon.EOK Trojan

Pigeon.EOK description:
Pigeon.EOK Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.EOK:

you can run trial version of ExterminateIt, or remove Pigeon.EOK manually.

To completely manually remove Pigeon.EOK malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EOK.

Bancos.HTA Trojan

Bancos.HTA description:
Bancos.HTA Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.HTA:

you can run trial version of ExterminateIt, or remove Bancos.HTA manually.

To completely manually remove Bancos.HTA malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.HTA.

Le.Guardien Trojan

Click here to remove Le.Guardien malware

Le.Guardien description:
Le.Guardien Category:Trojan,Backdoor,RAT,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing Le.Guardien:

you can run trial version of ExterminateIt, or remove Le.Guardien manually.

To completely manually remove Le.Guardien malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Le.Guardien.

Pigeon.ACW Trojan

Pigeon.ACW description:
Pigeon.ACW Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.ACW:

you can run trial version of ExterminateIt, or remove Pigeon.ACW manually.

To completely manually remove Pigeon.ACW malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.ACW.

Lacius Trojan

Lacius description:
Lacius Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Lacius:

you can run trial version of ExterminateIt, or remove Lacius manually.

To completely manually remove Lacius malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Lacius.

Delf.LX.Server Trojan

Click here to remove Delf.LX.Server malware

Delf.LX.Server description:
Delf.LX.Server Category:Trojan,Backdoor
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Removing Delf.LX.Server:

you can run trial version of ExterminateIt, or remove Delf.LX.Server manually.

To completely manually remove Delf.LX.Server malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Delf.LX.Server.

Friday, January 23, 2009

Pigeon.EGF Trojan

Pigeon.EGF description:
Pigeon.EGF Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.EGF:

you can run trial version of ExterminateIt, or remove Pigeon.EGF manually.

To completely manually remove Pigeon.EGF malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EGF.

Pigeon.ASX Trojan

Pigeon.ASX description:
Pigeon.ASX Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.ASX:

you can run trial version of ExterminateIt, or remove Pigeon.ASX manually.

To completely manually remove Pigeon.ASX malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.ASX.

Remote.Hack.Remote.Administration.Tool Backdoor

Click here to remove Remote.Hack.Remote.Administration.Tool malware

Remote.Hack.Remote.Administration.Tool description:
Remote.Hack.Remote.Administration.Tool Category:Backdoor,RAT
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

Removing Remote.Hack.Remote.Administration.Tool:

you can run trial version of ExterminateIt, or remove Remote.Hack.Remote.Administration.Tool manually.

To completely manually remove Remote.Hack.Remote.Administration.Tool malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Remote.Hack.Remote.Administration.Tool.

AUpdate Adware

AUpdate description:
AUpdate Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Removing AUpdate:

you can run trial version of ExterminateIt, or remove AUpdate manually.

To completely manually remove AUpdate malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with AUpdate.

Pigeon.AVHR Trojan

Click here to remove Pigeon.AVHR malware

Pigeon.AVHR description:
Pigeon.AVHR Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AVHR:

you can run trial version of ExterminateIt, or remove Pigeon.AVHR manually.

To completely manually remove Pigeon.AVHR malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVHR.

Hatred.Fiend Trojan

Click here to remove Hatred.Fiend malware

Hatred.Fiend description:
Hatred.Fiend Category:Trojan,RAT
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

Removing Hatred.Fiend:

you can run trial version of ExterminateIt, or remove Hatred.Fiend manually.

To completely manually remove Hatred.Fiend malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Hatred.Fiend.

Blah Trojan

Blah description:
Blah Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Blah:

you can run trial version of ExterminateIt, or remove Blah manually.

To completely manually remove Blah malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Blah.

Cidra Trojan

Cidra description:
Cidra Category:Trojan,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Detection Cidra :

Cidra Folders:
[%WINDOWS%]\winskw

Cidra Registry Keys:
HKEY_CLASSES_ROOT\clsid\{c5941ee5-6dfa-11d8-86b0-0002441a9695}
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\ext\stats\{83de62e0-5805-11d8-9b25-00e04c60faf2}

Removing Cidra:

you can run trial version of ExterminateIt, or remove Cidra manually.

To completely manually remove Cidra malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Cidra.

Vxidl.AWU Trojan

Vxidl.AWU description:
Vxidl.AWU Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Vxidl.AWU:

you can run trial version of ExterminateIt, or remove Vxidl.AWU manually.

To completely manually remove Vxidl.AWU malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AWU.

Irapture Backdoor

Irapture description:
Irapture Category:Backdoor
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Removing Irapture:

you can run trial version of ExterminateIt, or remove Irapture manually.

To completely manually remove Irapture malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Irapture.

TrojanDownloader.Win32.DaWeb Trojan

Click here to remove TrojanDownloader.Win32.DaWeb malware

TrojanDownloader.Win32.DaWeb description:
TrojanDownloader.Win32.DaWeb Category:Trojan,Downloader,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing TrojanDownloader.Win32.DaWeb:

you can run trial version of ExterminateIt, or remove TrojanDownloader.Win32.DaWeb manually.

To completely manually remove TrojanDownloader.Win32.DaWeb malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with TrojanDownloader.Win32.DaWeb.

Bancos.CYP Trojan

Bancos.CYP description:
Bancos.CYP Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.CYP:

you can run trial version of ExterminateIt, or remove Bancos.CYP manually.

To completely manually remove Bancos.CYP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.CYP.

Thursday, January 22, 2009

Stealth.Web.Page.Recorder Spyware

Click here to remove Stealth.Web.Page.Recorder malware

Stealth.Web.Page.Recorder description:
Stealth.Web.Page.Recorder Category:Spyware
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.

Detection Stealth.Web.Page.Recorder :

Stealth.Web.Page.Recorder Folders:
[%PROGRAMS%]\stealth web page recorder
[%PROGRAM_FILES%]\swpr

Stealth.Web.Page.Recorder Registry Keys:
HKEY_CLASSES_ROOT\interface\{1e1b2878-88fa-11d3-8d96-d7acac95951a}
HKEY_CLASSES_ROOT\swl.ie
HKEY_CLASSES_ROOT\swl.ie.1
HKEY_CLASSES_ROOT\typelib\{1e1b286c-88fa-11d3-8d96-d7acac95951a}
HKEY_LOCAL_MACHINE\software\blazing tools\stealth web page recorder
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\stealth web page recorder 1.0

Removing Stealth.Web.Page.Recorder:

you can run trial version of ExterminateIt, or remove Stealth.Web.Page.Recorder manually.

To completely manually remove Stealth.Web.Page.Recorder malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Stealth.Web.Page.Recorder.

Alicia.version Backdoor

Click here to remove Alicia.version malware

Alicia.version description:
Alicia.version Category:Backdoor
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.

Removing Alicia.version:

you can run trial version of ExterminateIt, or remove Alicia.version manually.

To completely manually remove Alicia.version malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Alicia.version.

Vxidl.BDH Trojan

Vxidl.BDH description:
Vxidl.BDH Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Vxidl.BDH:

you can run trial version of ExterminateIt, or remove Vxidl.BDH manually.

To completely manually remove Vxidl.BDH malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.BDH.

BufaloBot Trojan

BufaloBot description:
BufaloBot Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing BufaloBot:

you can run trial version of ExterminateIt, or remove BufaloBot manually.

To completely manually remove BufaloBot malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BufaloBot.

IAD.LivePerson Tracking Cookie

Click here to remove IAD.LivePerson malware

IAD.LivePerson description:
IAD.LivePerson Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing IAD.LivePerson:

you can run trial version of ExterminateIt, or remove IAD.LivePerson manually.

To completely manually remove IAD.LivePerson malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with IAD.LivePerson.

Pigeon.AQP Trojan

Pigeon.AQP description:
Pigeon.AQP Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AQP:

you can run trial version of ExterminateIt, or remove Pigeon.AQP manually.

To completely manually remove Pigeon.AQP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AQP.

VeryCD Toolbar

VeryCD description:
VeryCD Category:Toolbar
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.

Detection VeryCD :

VeryCD Files:
[%DESKTOP%]\YOK³¬¼¶ËÑË÷.lnk
[%DESKTOP%]\YOK³¬¼¶ËÑË÷.lnk

VeryCD Folders:
[%PROGRAM_FILES%]\YOK.com

VeryCD Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{75FE2B5A-D3A4-4EFA-AC11-ADC9C9459688}
HKEY_CLASSES_ROOT\clsid\{88351cef-bac0-4a9b-8380-31a173e2926f}
HKEY_CLASSES_ROOT\clsid\{a29f7f71-dcdb-412d-b19a-2002dc966e33}
HKEY_CLASSES_ROOT\CLSID\{F869BB38-FFEF-4589-B986-610B7AD0ADA2}
HKEY_CLASSES_ROOT\interface\{3020099a-d1ef-4bb5-bca5-63cd8d110233}
HKEY_CLASSES_ROOT\interface\{3a42c888-43d4-4bce-b3bc-99e5e15c631c}
HKEY_CLASSES_ROOT\interface\{5bf5a044-328c-42ca-8edb-c513a4a49c69}
HKEY_CLASSES_ROOT\interface\{8a74c2af-d08c-41e4-b6c0-11f1c7ed86a5}
HKEY_CLASSES_ROOT\typelib\{7b18218b-2551-4f18-b94d-10d7ca4c14ec}
HKEY_CLASSES_ROOT\yoktoolbar.band
HKEY_CLASSES_ROOT\yoktoolbar.band.1
HKEY_CLASSES_ROOT\yoktoolbar.contextsearch
HKEY_CLASSES_ROOT\yoktoolbar.contextsearch.1
HKEY_CLASSES_ROOT\yoktoolbar.yoktoolbarbho
HKEY_CLASSES_ROOT\yoktoolbar.yoktoolbarbho.1
HKEY_CURRENT_USER\software\yok
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75FE2B5A-D3A4-4EFA-AC11-ADC9C9459688}
HKEY_LOCAL_MACHINE\software\yok
HKEY_LOCAL_MACHINE\system\yserialnumber
HKEY_CLASSES_ROOT\clsid\{564cb59a-2813-4cee-b387-03d85322b54d}
HKEY_CLASSES_ROOT\clsid\{75fe2b5a-d3a4-4efa-ac11-adc9c9459688}
HKEY_CLASSES_ROOT\clsid\{7d0e8987-ba21-483a-b1ac-149da2f39a5a}
HKEY_CLASSES_ROOT\clsid\{f869bb38-ffef-4589-b986-610b7ad0ada2}
HKEY_CLASSES_ROOT\interface\{7772d684-fdc9-46d1-8b1a-977eb5596a2a}
HKEY_CLASSES_ROOT\interface\{9e3cddf5-b0a7-43fb-a882-b6b177fd4f01}
HKEY_CLASSES_ROOT\interface\{bf9920a4-f4fd-4a14-92e6-3043a31c7abe}
HKEY_CLASSES_ROOT\yoktoolbar
HKEY_CLASSES_ROOT\yoktoolbar.yokcommband
HKEY_CLASSES_ROOT\yoktoolbar.yokcommband.1
HKEY_CLASSES_ROOT\yoktoolbar.yokhttpfilter
HKEY_CLASSES_ROOT\yoktoolbar.yokhttpfilter.1
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{f869bb38-ffef-4589-b986-610b7ad0ada2}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{75fe2b5a-d3a4-4efa-ac11-adc9c9459688}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\yok.supersearch

VeryCD Registry Values:
HKEY_CLASSES_ROOT\appid\yoktoolbar.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing VeryCD:

you can run trial version of ExterminateIt, or remove VeryCD manually.

To completely manually remove VeryCD malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with VeryCD.

SogouPush Adware

SogouPush description:
SogouPush Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Detection SogouPush :

SogouPush Registry Keys:
HKEY_CLASSES_ROOT\newmacromediumspop.popboco
HKEY_CLASSES_ROOT\newmacromediumspop.popboco.1
HKEY_CLASSES_ROOT\newmediapopup.ddlogic
HKEY_CLASSES_ROOT\newmediapopup.ddlogic.1
HKEY_CLASSES_ROOT\newpushshower.bnlogic
HKEY_CLASSES_ROOT\newpushshower.bnlogic.1
HKEY_CLASSES_ROOT\newscocomediumspop.popcoco
HKEY_CLASSES_ROOT\newscocomediumspop.popcoco.1
HKEY_CLASSES_ROOT\newsmediapusher.bklogic
HKEY_CLASSES_ROOT\newsmediapusher.bklogic.1
HKEY_CLASSES_ROOT\newsmultismediumpop.aflogic
HKEY_CLASSES_ROOT\newsmultismediumpop.aflogic.1
HKEY_CLASSES_ROOT\newsmultismediumpop.bhlogic
HKEY_CLASSES_ROOT\newsmultismediumpop.bhlogic.1

Removing SogouPush:

you can run trial version of ExterminateIt, or remove SogouPush manually.

To completely manually remove SogouPush malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SogouPush.

Pigeon.AWO Trojan

Pigeon.AWO description:
Pigeon.AWO Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AWO:

you can run trial version of ExterminateIt, or remove Pigeon.AWO manually.

To completely manually remove Pigeon.AWO malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AWO.

Win32.TrojanDropper.Fearless Trojan

Click here to remove Win32.TrojanDropper.Fearless malware

Win32.TrojanDropper.Fearless description:
Win32.TrojanDropper.Fearless Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Win32.TrojanDropper.Fearless:

you can run trial version of ExterminateIt, or remove Win32.TrojanDropper.Fearless manually.

To completely manually remove Win32.TrojanDropper.Fearless malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.TrojanDropper.Fearless.

ruralpress.com Tracking Cookie

Click here to remove ruralpress.com malware

ruralpress.com description:
ruralpress.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing ruralpress.com:

you can run trial version of ExterminateIt, or remove ruralpress.com manually.

To completely manually remove ruralpress.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ruralpress.com.

Contact Trojan

Contact description:
Contact Category:Trojan,Backdoor
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Removing Contact:

you can run trial version of ExterminateIt, or remove Contact manually.

To completely manually remove Contact malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Contact.

Preferences.com Tracking Cookie

Click here to remove Preferences.com malware

Preferences.com description:
Preferences.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing Preferences.com:

you can run trial version of ExterminateIt, or remove Preferences.com manually.

To completely manually remove Preferences.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Preferences.com.

Wednesday, January 21, 2009

Win32.HellDoor Trojan

Click here to remove Win32.HellDoor malware

Win32.HellDoor description:
Win32.HellDoor Category:Trojan,Downloader
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Trojans-downloaders downloads and installs new malware or adware on the computer.

Removing Win32.HellDoor:

you can run trial version of ExterminateIt, or remove Win32.HellDoor manually.

To completely manually remove Win32.HellDoor malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.HellDoor.

DlSlime Trojan

DlSlime description:
DlSlime Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing DlSlime:

you can run trial version of ExterminateIt, or remove DlSlime manually.

To completely manually remove DlSlime malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with DlSlime.

TetriNET DoS

TetriNET description:
TetriNET Category:DoS
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing TetriNET:

you can run trial version of ExterminateIt, or remove TetriNET manually.

To completely manually remove TetriNET malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with TetriNET.

Back.Orifice.CVS RAT

Click here to remove Back.Orifice.CVS malware

Back.Orifice.CVS description:
Back.Orifice.CVS Category:RAT
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Removing Back.Orifice.CVS:

you can run trial version of ExterminateIt, or remove Back.Orifice.CVS manually.

To completely manually remove Back.Orifice.CVS malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Back.Orifice.CVS.

FTP.Generator Trojan

Click here to remove FTP.Generator malware

FTP.Generator description:
FTP.Generator Category:Trojan,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing FTP.Generator:

you can run trial version of ExterminateIt, or remove FTP.Generator manually.

To completely manually remove FTP.Generator malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with FTP.Generator.

TrojanClicker.Win32.VB.np Trojan

Click here to remove TrojanClicker.Win32.VB.np malware

TrojanClicker.Win32.VB.np description:
TrojanClicker.Win32.VB.np Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing TrojanClicker.Win32.VB.np:

you can run trial version of ExterminateIt, or remove TrojanClicker.Win32.VB.np manually.

To completely manually remove TrojanClicker.Win32.VB.np malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with TrojanClicker.Win32.VB.np.

Win32.Joiner.Joiner Trojan

Click here to remove Win32.Joiner.Joiner malware

Win32.Joiner.Joiner description:
Win32.Joiner.Joiner Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Win32.Joiner.Joiner:

you can run trial version of ExterminateIt, or remove Win32.Joiner.Joiner manually.

To completely manually remove Win32.Joiner.Joiner malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.Joiner.Joiner.

Aphex's.FireWall.Bypassing.FTP.Server.with.Screen.Capture Trojan

Click here to remove Aphex's.FireWall.Bypassing.FTP.Server.with.Screen.Capture malware

Aphex's.FireWall.Bypassing.FTP.Server.with.Screen.Capture description:
Aphex's.FireWall.Bypassing.FTP.Server.with.Screen.Capture Category:Trojan,Backdoor,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing Aphex's.FireWall.Bypassing.FTP.Server.with.Screen.Capture:

you can run trial version of ExterminateIt, or remove Aphex's.FireWall.Bypassing.FTP.Server.with.Screen.Capture manually.

To completely manually remove Aphex's.FireWall.Bypassing.FTP.Server.with.Screen.Capture malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Aphex's.FireWall.Bypassing.FTP.Server.with.Screen.Capture.

Vxidl.AGW Trojan

Vxidl.AGW description:
Vxidl.AGW Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Vxidl.AGW:

you can run trial version of ExterminateIt, or remove Vxidl.AGW manually.

To completely manually remove Vxidl.AGW malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AGW.

Pigeon.AVGJ Trojan

Click here to remove Pigeon.AVGJ malware

Pigeon.AVGJ description:
Pigeon.AVGJ Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AVGJ:

you can run trial version of ExterminateIt, or remove Pigeon.AVGJ manually.

To completely manually remove Pigeon.AVGJ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVGJ.

Vxidl.BBH Trojan

Vxidl.BBH description:
Vxidl.BBH Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Vxidl.BBH:

you can run trial version of ExterminateIt, or remove Vxidl.BBH manually.

To completely manually remove Vxidl.BBH malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.BBH.

DontRun Trojan

DontRun description:
DontRun Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing DontRun:

you can run trial version of ExterminateIt, or remove DontRun manually.

To completely manually remove DontRun malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with DontRun.

IRC.Fagot Worm

IRC.Fagot description:
IRC.Fagot Category:Worm,Backdoor
Worms can be classified by installation method, launch method and finally according
to characteristics standard to all malware: polymorphism, stealth etc.

Many of the worms which managed to cause significant outbreaks use more then
one propagation method as well as more than one infection technique.

Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.

Removing IRC.Fagot:

you can run trial version of ExterminateIt, or remove IRC.Fagot manually.

To completely manually remove IRC.Fagot malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with IRC.Fagot.

DomainHelper Adware

Click here to remove DomainHelper malware

DomainHelper description:
DomainHelper Category:Adware,BHO
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits
As this information is entered by the user, it is captured by the BHO (Browser Helper Object) and
sent back to the attacker.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.

Detection DomainHelper :

DomainHelper Files:
[%SYSTEM%]\DomainHelper.dll
[%SYSTEM%]\DomainHelper.dll

DomainHelper Registry Keys:
HKEY_CLASSES_ROOT\appid\domainhelper.dll
HKEY_CLASSES_ROOT\appid\{20f8483e-6ced-445f-af32-d9c646a6ede9}
HKEY_CLASSES_ROOT\CLSID\{B8A5DE1C-BC13-4DD2-BF00-7BE3C603F9F2}
HKEY_CLASSES_ROOT\domainhelper.dh
HKEY_CLASSES_ROOT\domainhelper.dh.1
HKEY_CLASSES_ROOT\interface\{954b641e-268e-4b09-9e53-f2d2a4551eab}
HKEY_CLASSES_ROOT\typelib\{5aa5392d-e5c9-4276-8998-44c3c578419d}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B8A5DE1C-BC13-4DD2-BF00-7BE3C603F9F2}
HKEY_CLASSES_ROOT\clsid\{b8a5de1c-bc13-4dd2-bf00-7be3c603f9f2}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{b8a5de1c-bc13-4dd2-bf00-7be3c603f9f2}

Removing DomainHelper:

you can run trial version of ExterminateIt, or remove DomainHelper manually.

To completely manually remove DomainHelper malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with DomainHelper.

NEMEZIS.SpyBot DoS

Click here to remove NEMEZIS.SpyBot malware

NEMEZIS.SpyBot description:
NEMEZIS.SpyBot Category:DoS
DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing NEMEZIS.SpyBot:

you can run trial version of ExterminateIt, or remove NEMEZIS.SpyBot manually.

To completely manually remove NEMEZIS.SpyBot malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with NEMEZIS.SpyBot.

Remote.Shut RAT

Click here to remove Remote.Shut malware

Remote.Shut description:
Remote.Shut Category:RAT
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Removing Remote.Shut:

you can run trial version of ExterminateIt, or remove Remote.Shut manually.

To completely manually remove Remote.Shut malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Remote.Shut.

Vxidl.AYT Trojan

Vxidl.AYT description:
Vxidl.AYT Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Vxidl.AYT:

you can run trial version of ExterminateIt, or remove Vxidl.AYT manually.

To completely manually remove Vxidl.AYT malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AYT.

Net.Devil Trojan

Net.Devil description:
Net.Devil Category:Trojan,Spyware,Backdoor,RAT,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.
Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.

Detection Net.Devil :

Net.Devil Files:
[%WINDOWS%]\system\shellapi32.exe
[%WINDOWS%]\system\shellapi32.exe

Removing Net.Devil:

you can run trial version of ExterminateIt, or remove Net.Devil manually.

To completely manually remove Net.Devil malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Net.Devil.

ILL.Eagle RAT

ILL.Eagle description:
ILL.Eagle Category:RAT
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

Removing ILL.Eagle:

you can run trial version of ExterminateIt, or remove ILL.Eagle manually.

To completely manually remove ILL.Eagle malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ILL.Eagle.

Tuesday, January 20, 2009

Kbd.Turkce.Aciklamasi Backdoor

Click here to remove Kbd.Turkce.Aciklamasi malware

Kbd.Turkce.Aciklamasi description:
Kbd.Turkce.Aciklamasi Category:Backdoor
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Removing Kbd.Turkce.Aciklamasi:

you can run trial version of ExterminateIt, or remove Kbd.Turkce.Aciklamasi manually.

To completely manually remove Kbd.Turkce.Aciklamasi malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Kbd.Turkce.Aciklamasi.

StartPage.gf Hijacker

Click here to remove StartPage.gf malware

StartPage.gf description:
StartPage.gf Category:Hijacker
When the default home page is hijacked, the browser opens to the web page set by the hijacker
instead of the user's designated home page. In some cases, the hijacker may block users from
restoring their desired home page.

Removing StartPage.gf:

you can run trial version of ExterminateIt, or remove StartPage.gf manually.

To completely manually remove StartPage.gf malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with StartPage.gf.

Aureate.Radiate Spyware

Click here to remove Aureate.Radiate malware

Aureate.Radiate description:
Aureate.Radiate Category:Spyware
Spyware is computer software that is installed surreptitiously on a personal computer
to intercept or take partial control over the user's interaction
with the computer, without the user's informed consent.

While the term spyware suggests software that secretly monitors the user's behavior,
the functions of spyware extend well beyond simple monitoring.

Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Detection Aureate.Radiate :

Aureate.Radiate Files:
[%SYSTEM%]\advert.dll
[%SYSTEM%]\msipcsv.exe
[%WINDOWS%]\system\advert.dll
[%WINDOWS%]\system\anadsc.ocx
[%WINDOWS%]\system\htmdeng.exe
[%WINDOWS%]\system\ipclient.dll
[%WINDOWS%]\system\msipcsv.exe
[%WINDOWS%]\system\tfde.dll
[%SYSTEM%]\advert.dll
[%SYSTEM%]\msipcsv.exe
[%WINDOWS%]\system\advert.dll
[%WINDOWS%]\system\anadsc.ocx
[%WINDOWS%]\system\htmdeng.exe
[%WINDOWS%]\system\ipclient.dll
[%WINDOWS%]\system\msipcsv.exe
[%WINDOWS%]\system\tfde.dll

Aureate.Radiate Folders:
[%PROGRAM_FILES%]\mediaring talk
[%STARTUP%]\radiate

Aureate.Radiate Registry Keys:
HKEY_CURRENT_USER\software\radiate
HKEY_CLASSES_ROOT\clsid\{ebbfe288-bdf0-11d2-bbe5-00609419f467}
HKEY_CLASSES_ROOT\clsid\{ebbfe289-bdf0-11d2-bbe5-00609419f467}
HKEY_CLASSES_ROOT\interface\{ebbfe289-bdf0-11d2-bbe5-00609419f467}

Aureate.Radiate Registry Values:
HKEY_LOCAL_MACHINE\netscape starting\clsid
HKEY_LOCAL_MACHINE\netscape starting\curver
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls

Removing Aureate.Radiate:

you can run trial version of ExterminateIt, or remove Aureate.Radiate manually.

To completely manually remove Aureate.Radiate malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Aureate.Radiate.

Double.Helix Backdoor

Click here to remove Double.Helix malware

Double.Helix description:
Double.Helix Category:Backdoor
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.

Detection Double.Helix :

Double.Helix Files:
[%WINDOWS%]\system\double helix.exe
[%WINDOWS%]\system\double helix.exe

Double.Helix Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices

Removing Double.Helix:

you can run trial version of ExterminateIt, or remove Double.Helix manually.

To completely manually remove Double.Helix malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Double.Helix.

MyGulp Trojan

MyGulp description:
MyGulp Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Detection MyGulp :

MyGulp Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing MyGulp:

you can run trial version of ExterminateIt, or remove MyGulp manually.

To completely manually remove MyGulp malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with MyGulp.

Silentframe Hostile Code

Click here to remove Silentframe malware

Silentframe description:
Silentframe Category:Hostile Code
Hostile code is any process running on a system that is
not authorized by the system administrator, such as Trojans, viruses, or spyware.

Removing Silentframe:

you can run trial version of ExterminateIt, or remove Silentframe manually.

To completely manually remove Silentframe malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Silentframe.