Trojan List 18: January 2009

Saturday, January 31, 2009

Pigeon.AUU Trojan

Pigeon.AUU description:
Pigeon.AUU Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AUU:

you can run trial version of ExterminateIt, or remove Pigeon.AUU manually.

To completely manually remove Pigeon.AUU malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AUU.

Tokonere Trojan

Tokonere description:
Tokonere Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Tokonere:

you can run trial version of ExterminateIt, or remove Tokonere manually.

To completely manually remove Tokonere malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Tokonere.

Bancos.GAO description:
Bancos.GAO Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.GAO:

you can run trial version of ExterminateIt, or remove Bancos.GAO manually.

To completely manually remove Bancos.GAO malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.GAO.

SillyDl.BZD Downloader

Click here to remove SillyDl.BZD malware

SillyDl.BZD description:
SillyDl.BZD Category:Downloader
This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.

Detection SillyDl.BZD :

SillyDl.BZD Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing SillyDl.BZD:

you can run trial version of ExterminateIt, or remove SillyDl.BZD manually.

To completely manually remove SillyDl.BZD malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.BZD.

clickauditor.net Tracking Cookie

Click here to remove clickauditor.net malware

clickauditor.net description:
clickauditor.net Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing clickauditor.net:

you can run trial version of ExterminateIt, or remove clickauditor.net manually.

To completely manually remove clickauditor.net malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with clickauditor.net.

VB.aaa Backdoor

VB.aaa description:
VB.aaa Category:Backdoor
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Removing VB.aaa:

you can run trial version of ExterminateIt, or remove VB.aaa manually.

To completely manually remove VB.aaa malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with VB.aaa.

ConfidentUser (SystemErrorFixer) Ransomware

Click here to remove ConfidentUser (SystemErrorFixer) malware

ConfidentUser (SystemErrorFixer) description:
ConfidentUser (SystemErrorFixer) Category:Ransomware
A cryptovirus, cryptotrojan or cryptoworm is a type of
malware that encrypts the data belonging to an individual on a computer,
demanding a ransom for its restoration.

The term ransomware is commonly used to describe such software,
although the field known as cryptovirology predates the term "ransomware".

This type of ransom attack can be accomplished by (for example) attaching
a specially crafted file/program to an e-mail message and sending this to the victim.

If the victim opens/executes the attachment, the program encrypts
a number of files on the victim's computer. A ransom note is then left behind for the victim.

The victim will be unable to open the encrypted files without the correct decryption key.
Once the ransom demanded in the ransom note is paid, the cracker may (or may not)
send the decryption key, enabling decryption of the "kidnapped" files.

Removing ConfidentUser (SystemErrorFixer):

you can run trial version of ExterminateIt, or remove ConfidentUser (SystemErrorFixer) manually.

To completely manually remove ConfidentUser (SystemErrorFixer) malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ConfidentUser (SystemErrorFixer).

Pigeon.AVLX Trojan

Click here to remove Pigeon.AVLX malware

Pigeon.AVLX description:
Pigeon.AVLX Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AVLX:

you can run trial version of ExterminateIt, or remove Pigeon.AVLX manually.

To completely manually remove Pigeon.AVLX malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVLX.

Coalstill Trojan

Coalstill description:
Coalstill Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Coalstill:

you can run trial version of ExterminateIt, or remove Coalstill manually.

To completely manually remove Coalstill malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Coalstill.

Windows.ServeAd Adware

Click here to remove Windows.ServeAd malware

Windows.ServeAd description:
Windows.ServeAd Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Detection Windows.ServeAd :

Windows.ServeAd Folders:
[%PROGRAM_FILES%]\windows servead

Windows.ServeAd Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\windows servead
HKEY_LOCAL_MACHINE\software\windows servead

Windows.ServeAd Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Windows.ServeAd:

you can run trial version of ExterminateIt, or remove Windows.ServeAd manually.

To completely manually remove Windows.ServeAd malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Windows.ServeAd.

Create Trojan

Create description:
Create Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Create:

you can run trial version of ExterminateIt, or remove Create manually.

To completely manually remove Create malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Create.

PCInvader Backdoor

PCInvader description:
PCInvader Category:Backdoor,RAT
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

Removing PCInvader:

you can run trial version of ExterminateIt, or remove PCInvader manually.

To completely manually remove PCInvader malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PCInvader.

HLLP.Philis Trojan

Click here to remove HLLP.Philis malware

HLLP.Philis description:
HLLP.Philis Category:Trojan,Worm
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Many of the worms which managed to cause significant outbreaks use more then
one propagation method as well as more than one infection technique.

Detection HLLP.Philis :

HLLP.Philis Files:
[%PROFILE_TEMP%]\c0nime.exe
[%PROFILE_TEMP%]\c0nime.exe

HLLP.Philis Registry Values:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Removing HLLP.Philis:

you can run trial version of ExterminateIt, or remove HLLP.Philis manually.

To completely manually remove HLLP.Philis malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with HLLP.Philis.

Friday, January 30, 2009

Bancos.GCI Trojan

Bancos.GCI description:
Bancos.GCI Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.GCI:

you can run trial version of ExterminateIt, or remove Bancos.GCI manually.

To completely manually remove Bancos.GCI malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.GCI.

Killpar Trojan

Killpar description:
Killpar Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Killpar:

you can run trial version of ExterminateIt, or remove Killpar manually.

To completely manually remove Killpar malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Killpar.

Bat.Hdk Trojan

Bat.Hdk description:
Bat.Hdk Category:Trojan,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing Bat.Hdk:

you can run trial version of ExterminateIt, or remove Bat.Hdk manually.

To completely manually remove Bat.Hdk malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bat.Hdk.

Small.an Trojan

Small.an description:
Small.an Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Detection Small.an :

Small.an Files:
[%PROGRAM_FILES_COMMON%]\java\breg.exe
[%PROGRAM_FILES_COMMON%]\java\breg.exe

Removing Small.an:

you can run trial version of ExterminateIt, or remove Small.an manually.

To completely manually remove Small.an malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Small.an.

Vxidl.AGJ Trojan

Vxidl.AGJ description:
Vxidl.AGJ Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Vxidl.AGJ:

you can run trial version of ExterminateIt, or remove Vxidl.AGJ manually.

To completely manually remove Vxidl.AGJ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AGJ.

AdServer.Colleges Tracking Cookie

Click here to remove AdServer.Colleges malware

AdServer.Colleges description:
AdServer.Colleges Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing AdServer.Colleges:

you can run trial version of ExterminateIt, or remove AdServer.Colleges manually.

To completely manually remove AdServer.Colleges malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with AdServer.Colleges.

Thursday, January 29, 2009

Bancos.GCY Trojan

Bancos.GCY description:
Bancos.GCY Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.GCY:

you can run trial version of ExterminateIt, or remove Bancos.GCY manually.

To completely manually remove Bancos.GCY malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.GCY.

SillyDl.CEY Trojan

Click here to remove SillyDl.CEY malware

SillyDl.CEY description:
SillyDl.CEY Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing SillyDl.CEY:

you can run trial version of ExterminateIt, or remove SillyDl.CEY manually.

To completely manually remove SillyDl.CEY malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CEY.

Bancos.HWG Trojan

Bancos.HWG description:
Bancos.HWG Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Bancos.HWG:

you can run trial version of ExterminateIt, or remove Bancos.HWG manually.

To completely manually remove Bancos.HWG malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.HWG.

SearchWWW BHO

SearchWWW description:
SearchWWW Category:BHO
BHO (Browser Helper Object) Trojan.
The BHO waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
The method of network transport used by the attacker makes this Trojan unique.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.
Instead, this Trojan encodes the data with a simple XOR algorithm before placing it into
the data section of an ICMP ping packet." explained the company.

Removing SearchWWW:

you can run trial version of ExterminateIt, or remove SearchWWW manually.

To completely manually remove SearchWWW malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SearchWWW.

BackSocket Backdoor

BackSocket description:
BackSocket Category:Backdoor,RAT
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

Removing BackSocket:

you can run trial version of ExterminateIt, or remove BackSocket manually.

To completely manually remove BackSocket malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BackSocket.

Psychward.r03a RAT

Click here to remove Psychward.r03a malware

Psychward.r03a description:
Psychward.r03a Category:RAT
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Removing Psychward.r03a:

you can run trial version of ExterminateIt, or remove Psychward.r03a manually.

To completely manually remove Psychward.r03a malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Psychward.r03a.

ClickSpring.PurityScan Adware

Click here to remove ClickSpring.PurityScan malware

ClickSpring.PurityScan description:
ClickSpring.PurityScan Category:Adware,BHO
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

As this information is entered by the user, it is captured by the BHO (Browser Helper Object) and
sent back to the attacker.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.

Detection ClickSpring.PurityScan :

ClickSpring.PurityScan Files:
[%WINDOWS%]\system\ndrv.dll
[%WINDOWS%]\system\ndrv.dll

ClickSpring.PurityScan Registry Keys:
HKEY_CURRENT_USER\software\pscloner
HKEY_CURRENT_USER\software\psdream
HKEY_CLASSES_ROOT\clsid\{1b7d753b-1981-4bd2-91f3-6d055ee113a0}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{1b7d753b-1981-4bd2-91f3-6d055ee113a0}

Removing ClickSpring.PurityScan:

you can run trial version of ExterminateIt, or remove ClickSpring.PurityScan manually.

To completely manually remove ClickSpring.PurityScan malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ClickSpring.PurityScan.

Destructor Trojan

Destructor description:
Destructor Category:Trojan,Backdoor,Downloader,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing Destructor:

you can run trial version of ExterminateIt, or remove Destructor manually.

To completely manually remove Destructor malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Destructor.

SillyDl.CFW Downloader

Click here to remove SillyDl.CFW malware

SillyDl.CFW description:
SillyDl.CFW Category:Downloader
Trojans-downloaders downloads and installs new malware or adware on the computer.

Detection SillyDl.CFW :

SillyDl.CFW Files:
[%SYSTEM%]\intenat.exe
[%SYSTEM%]\intenat.exe

Removing SillyDl.CFW:

you can run trial version of ExterminateIt, or remove SillyDl.CFW manually.

To completely manually remove SillyDl.CFW malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CFW.

Pigeon.AVNM Trojan

Click here to remove Pigeon.AVNM malware

Pigeon.AVNM description:
Pigeon.AVNM Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AVNM:

you can run trial version of ExterminateIt, or remove Pigeon.AVNM manually.

To completely manually remove Pigeon.AVNM malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVNM.

BAT.IRCFlood Trojan

Click here to remove BAT.IRCFlood malware

BAT.IRCFlood description:
BAT.IRCFlood Category:Trojan,Worm,Backdoor,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Worms can be classified by installation method, launch method and finally according
to characteristics standard to all malware: polymorphism, stealth etc.

Many of the worms which managed to cause significant outbreaks use more then
one propagation method as well as more than one infection technique.

Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing BAT.IRCFlood:

you can run trial version of ExterminateIt, or remove BAT.IRCFlood manually.

To completely manually remove BAT.IRCFlood malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BAT.IRCFlood.

Pigeon.FAX Trojan

Pigeon.FAX description:
Pigeon.FAX Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.FAX:

you can run trial version of ExterminateIt, or remove Pigeon.FAX manually.

To completely manually remove Pigeon.FAX malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.FAX.

Grams.Variant!Trojan Trojan

Click here to remove Grams.Variant!Trojan malware

Grams.Variant!Trojan description:
Grams.Variant!Trojan Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Grams.Variant!Trojan:

you can run trial version of ExterminateIt, or remove Grams.Variant!Trojan manually.

To completely manually remove Grams.Variant!Trojan malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Grams.Variant!Trojan.

Mud Trojan

Mud description:
Mud Category:Trojan,Backdoor,Downloader,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Trojans-downloaders downloads and installs new malware or adware on the computer.

These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing Mud:

you can run trial version of ExterminateIt, or remove Mud manually.

To completely manually remove Mud malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Mud.

Bancos.DRU Trojan

Bancos.DRU description:
Bancos.DRU Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Bancos.DRU:

you can run trial version of ExterminateIt, or remove Bancos.DRU manually.

To completely manually remove Bancos.DRU malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.DRU.

Gustavo Trojan

Gustavo description:
Gustavo Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Gustavo:

you can run trial version of ExterminateIt, or remove Gustavo manually.

To completely manually remove Gustavo malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Gustavo.

SpySniper Ransomware

SpySniper description:
SpySniper Category:Ransomware
A cryptovirus, cryptotrojan or cryptoworm is a type of
malware that encrypts the data belonging to an individual on a computer,
demanding a ransom for its restoration.

The term ransomware is commonly used to describe such software,
although the field known as cryptovirology predates the term "ransomware".

This type of ransom attack can be accomplished by (for example) attaching
a specially crafted file/program to an e-mail message and sending this to the victim.

If the victim opens/executes the attachment, the program encrypts
a number of files on the victim's computer. A ransom note is then left behind for the victim.

The victim will be unable to open the encrypted files without the correct decryption key.
Once the ransom demanded in the ransom note is paid, the cracker may (or may not)
send the decryption key, enabling decryption of the "kidnapped" files.

Detection SpySniper :

SpySniper Files:
[%SYSTEM%]\spsmocns.dll
[%SYSTEM%]\ufpsmeat.dll
[%SYSTEM%]\vcpsmfex.dll
[%SYSTEM%]\wipsmtprdf.dll
[%SYSTEM%]\spsmocns.dll
[%SYSTEM%]\ufpsmeat.dll
[%SYSTEM%]\vcpsmfex.dll
[%SYSTEM%]\wipsmtprdf.dll

SpySniper Folders:
[%COMMON_PROGRAMS%]\Spy Sniper
[%PROGRAM_FILES%]\Spy Sniper

SpySniper Registry Keys:
HKEY_CURRENT_USER\software\vb and vba program settings\spysniper\usersettings
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spy sniper_is1

SpySniper Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing SpySniper:

you can run trial version of ExterminateIt, or remove SpySniper manually.

To completely manually remove SpySniper malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SpySniper.

Wednesday, January 28, 2009

MediaCharger\MoviePlace Adware

$Click here to remove MediaCharger\MoviePlace malware$
MediaCharger\MoviePlace description:
MediaCharger\MoviePlace Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Detection MediaCharger\MoviePlace :

MediaCharger\MoviePlace Files:
[%PROGRAMS%]\iopus password recovery xp\help manual.lnk
[%PROGRAMS%]\iopus password recovery xp\iopus password recovery xp.lnk
[%PROGRAMS%]\iopus password recovery xp\license.lnk
[%PROGRAMS%]\iopus password recovery xp\uninstall.lnk
[%PROGRAM_FILES%]\movieplace\movieplace.exe
[%WINDOWS%]\temp\icd3.tmp\activeinstall.dll
[%PROGRAMS%]\iopus password recovery xp\help manual.lnk
[%PROGRAMS%]\iopus password recovery xp\iopus password recovery xp.lnk
[%PROGRAMS%]\iopus password recovery xp\license.lnk
[%PROGRAMS%]\iopus password recovery xp\uninstall.lnk
[%PROGRAM_FILES%]\movieplace\movieplace.exe
[%WINDOWS%]\temp\icd3.tmp\activeinstall.dll

MediaCharger\MoviePlace Folders:
[%DESKTOP%]\iopus password recovery xp.lnk
[%PROFILE%]\start menu\programs\iopus password recovery xp
[%PROGRAM_FILES%]\iopus password recovery xp

MediaCharger\MoviePlace Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\iopus password recovery xp

MediaCharger\MoviePlace Registry Values:
HKEY_LOCAL_MACHINE\software\iopuspasswordrecovery\info
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\the silicon realms toolworks\armadillo

Removing MediaCharger\MoviePlace:

you can run trial version of ExterminateIt, or remove MediaCharger\MoviePlace manually.

To completely manually remove MediaCharger\MoviePlace malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with MediaCharger\MoviePlace.

Win32.PGPMorph Trojan

Click here to remove Win32.PGPMorph malware

Win32.PGPMorph description:
Win32.PGPMorph Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
Trojans-downloaders downloads and installs new malware or adware on the computer.

DoS trojans conduct attacks from a single computer with the consent of the user.

Removing Win32.PGPMorph:

you can run trial version of ExterminateIt, or remove Win32.PGPMorph manually.

To completely manually remove Win32.PGPMorph malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.PGPMorph.

stealth.nl Tracking Cookie

stealth.nl description:
stealth.nl Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing stealth.nl:

you can run trial version of ExterminateIt, or remove stealth.nl manually.

To completely manually remove stealth.nl malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with stealth.nl.

KlgDoor Trojan

KlgDoor description:
KlgDoor Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing KlgDoor:

you can run trial version of ExterminateIt, or remove KlgDoor manually.

To completely manually remove KlgDoor malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with KlgDoor.

TrojanClicker.Win32.VB.gg Trojan

Click here to remove TrojanClicker.Win32.VB.gg malware

TrojanClicker.Win32.VB.gg description:
TrojanClicker.Win32.VB.gg Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing TrojanClicker.Win32.VB.gg:

you can run trial version of ExterminateIt, or remove TrojanClicker.Win32.VB.gg manually.

To completely manually remove TrojanClicker.Win32.VB.gg malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with TrojanClicker.Win32.VB.gg.

Bancos.GUY Trojan

Bancos.GUY description:
Bancos.GUY Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Bancos.GUY:

you can run trial version of ExterminateIt, or remove Bancos.GUY manually.

To completely manually remove Bancos.GUY malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.GUY.

Digital.Hand Backdoor

Click here to remove Digital.Hand malware

Digital.Hand description:
Digital.Hand Category:Backdoor,RAT,Hacker Tool
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.
Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.

Detection Digital.Hand :

Digital.Hand Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices

Removing Digital.Hand:

you can run trial version of ExterminateIt, or remove Digital.Hand manually.

To completely manually remove Digital.Hand malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Digital.Hand.

Activex.Dialer Adware

Click here to remove Activex.Dialer malware

Activex.Dialer description:
Activex.Dialer Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Detection Activex.Dialer :

Activex.Dialer Registry Keys:
HKEY_CLASSES_ROOT\clsid\{1d2dca0d-b30f-40ad-9690-087105f214ec}
HKEY_CLASSES_ROOT\clsid\{10a1b95d-5e35-4935-8bc3-d43e81e8105e}
HKEY_CLASSES_ROOT\clsid\{a45f39dc-3608-4237-8f0e-139f1bc49464}
HKEY_CLASSES_ROOT\clsid\{c771b05e-e725-4516-97a5-4ce5eb163cfb}

Removing Activex.Dialer:

you can run trial version of ExterminateIt, or remove Activex.Dialer manually.

To completely manually remove Activex.Dialer malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Activex.Dialer.

IROffer.2b23 Backdoor

Click here to remove IROffer.2b23 malware

IROffer.2b23 description:
IROffer.2b23 Category:Backdoor
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Removing IROffer.2b23:

you can run trial version of ExterminateIt, or remove IROffer.2b23 manually.

To completely manually remove IROffer.2b23 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with IROffer.2b23.

SaSyncMgr Hijacker

SaSyncMgr description:
SaSyncMgr Category:Hijacker
A Search hijacker redirects search results to other pages and may
transmit search and browsing data to unknown servers. An error page hijacker directs
the browser to another page, usually an advertising page, instead of the usual error
page when the requested URL is not found.

Removing SaSyncMgr:

you can run trial version of ExterminateIt, or remove SaSyncMgr manually.

To completely manually remove SaSyncMgr malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SaSyncMgr.

DCN Backdoor

DCN description:
DCN Category:Backdoor
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Removing DCN:

you can run trial version of ExterminateIt, or remove DCN manually.

To completely manually remove DCN malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with DCN.

Uruguay Trojan

Uruguay description:
Uruguay Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing Uruguay:

you can run trial version of ExterminateIt, or remove Uruguay manually.

To completely manually remove Uruguay malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Uruguay.

OC.spl Trojan

OC.spl description:
OC.spl Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing OC.spl:

you can run trial version of ExterminateIt, or remove OC.spl manually.

To completely manually remove OC.spl malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with OC.spl.

Tuesday, January 27, 2009

Reckmess Trojan

Reckmess description:
Reckmess Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Reckmess:

you can run trial version of ExterminateIt, or remove Reckmess manually.

To completely manually remove Reckmess malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Reckmess.

Bancos.FZB Trojan

Bancos.FZB description:
Bancos.FZB Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.FZB:

you can run trial version of ExterminateIt, or remove Bancos.FZB manually.

To completely manually remove Bancos.FZB malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.FZB.

Pigeon.AZT Trojan

Pigeon.AZT description:
Pigeon.AZT Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AZT:

you can run trial version of ExterminateIt, or remove Pigeon.AZT manually.

To completely manually remove Pigeon.AZT malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AZT.

HacDef.INI Backdoor

HacDef.INI description:
HacDef.INI Category:Backdoor,RAT
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

Removing HacDef.INI:

you can run trial version of ExterminateIt, or remove HacDef.INI manually.

To completely manually remove HacDef.INI malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with HacDef.INI.

PSW.Organer Trojan

Click here to remove PSW.Organer malware

PSW.Organer description:
PSW.Organer Category:Trojan,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing PSW.Organer:

you can run trial version of ExterminateIt, or remove PSW.Organer manually.

To completely manually remove PSW.Organer malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PSW.Organer.

Keylog.Sters Trojan

Click here to remove Keylog.Sters malware

Keylog.Sters description:
Keylog.Sters Category:Trojan,Spyware
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Removing Keylog.Sters:

you can run trial version of ExterminateIt, or remove Keylog.Sters manually.

To completely manually remove Keylog.Sters malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Keylog.Sters.

Bancos.FZF Trojan

Bancos.FZF description:
Bancos.FZF Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Bancos.FZF:

you can run trial version of ExterminateIt, or remove Bancos.FZF manually.

To completely manually remove Bancos.FZF malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.FZF.

RCPrograms Adware

RCPrograms description:
RCPrograms Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Detection RCPrograms :

RCPrograms Registry Keys:
HKEY_CURRENT_USER\software\vb and vba program settings\mfiu\partner

Removing RCPrograms:

you can run trial version of ExterminateIt, or remove RCPrograms manually.

To completely manually remove RCPrograms malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with RCPrograms.

BDE.Projector Adware

Click here to remove BDE.Projector malware

BDE.Projector description:
BDE.Projector Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Removing BDE.Projector:

you can run trial version of ExterminateIt, or remove BDE.Projector manually.

To completely manually remove BDE.Projector malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BDE.Projector.

Matrix.Chat.Beta RAT

Click here to remove Matrix.Chat.Beta malware

Matrix.Chat.Beta description:
Matrix.Chat.Beta Category:RAT
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Removing Matrix.Chat.Beta:

you can run trial version of ExterminateIt, or remove Matrix.Chat.Beta manually.

To completely manually remove Matrix.Chat.Beta malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Matrix.Chat.Beta.

Monday, January 26, 2009

Teeny.Tiny.Booter DoS

Click here to remove Teeny.Tiny.Booter malware

Teeny.Tiny.Booter description:
Teeny.Tiny.Booter Category:DoS
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing Teeny.Tiny.Booter:

you can run trial version of ExterminateIt, or remove Teeny.Tiny.Booter manually.

To completely manually remove Teeny.Tiny.Booter malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Teeny.Tiny.Booter.

SmartTags BHO

SmartTags description:
SmartTags Category:BHO
BHO (Browser Helper Object) Trojan.
The BHO waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
The method of network transport used by the attacker makes this Trojan unique.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.
Instead, this Trojan encodes the data with a simple XOR algorithm before placing it into
the data section of an ICMP ping packet." explained the company.

Removing SmartTags:

you can run trial version of ExterminateIt, or remove SmartTags manually.

To completely manually remove SmartTags malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SmartTags.

Fancy Trojan

Fancy description:
Fancy Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Fancy:

you can run trial version of ExterminateIt, or remove Fancy manually.

To completely manually remove Fancy malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Fancy.

Pigeon.EXK Trojan

Pigeon.EXK description:
Pigeon.EXK Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.EXK:

you can run trial version of ExterminateIt, or remove Pigeon.EXK manually.

To completely manually remove Pigeon.EXK malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EXK.

srpa.de Tracking Cookie

srpa.de description:
srpa.de Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing srpa.de:

you can run trial version of ExterminateIt, or remove srpa.de manually.

To completely manually remove srpa.de malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with srpa.de.

Hallochen Trojan

Hallochen description:
Hallochen Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing Hallochen:

you can run trial version of ExterminateIt, or remove Hallochen manually.

To completely manually remove Hallochen malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Hallochen.

Vxidl.AFF Trojan

Vxidl.AFF description:
Vxidl.AFF Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Vxidl.AFF:

you can run trial version of ExterminateIt, or remove Vxidl.AFF manually.

To completely manually remove Vxidl.AFF malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AFF.

Poly Trojan

Poly description:
Poly Category:Trojan,RAT,Downloader,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.
This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.
These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing Poly:

you can run trial version of ExterminateIt, or remove Poly manually.

To completely manually remove Poly malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Poly.

Vxidl.BGB Trojan

Vxidl.BGB description:
Vxidl.BGB Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Detection Vxidl.BGB :

Vxidl.BGB Files:
[%SYSTEM%]\dllgh8jkd1q1.exe
[%SYSTEM%]\dllgh8jkd1q2.exe
[%SYSTEM%]\dllgh8jkd1q5.exe
[%SYSTEM%]\dllgh8jkd1q6.exe
[%SYSTEM%]\dllgh8jkd1q7.exe
[%SYSTEM%]\dllgh8jkd1q8.exe
[%SYSTEM%]\dllgh8jkd1q1.exe
[%SYSTEM%]\dllgh8jkd1q2.exe
[%SYSTEM%]\dllgh8jkd1q5.exe
[%SYSTEM%]\dllgh8jkd1q6.exe
[%SYSTEM%]\dllgh8jkd1q7.exe
[%SYSTEM%]\dllgh8jkd1q8.exe

Removing Vxidl.BGB:

you can run trial version of ExterminateIt, or remove Vxidl.BGB manually.

To completely manually remove Vxidl.BGB malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.BGB.

PSW.QQDragon Trojan

Click here to remove PSW.QQDragon malware

PSW.QQDragon description:
PSW.QQDragon Category:Trojan,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.

Removing PSW.QQDragon:

you can run trial version of ExterminateIt, or remove PSW.QQDragon manually.

To completely manually remove PSW.QQDragon malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PSW.QQDragon.

JIp.KeyLogger Spyware

Click here to remove JIp.KeyLogger malware

JIp.KeyLogger description:
JIp.KeyLogger Category:Spyware
Spyware is computer software that is installed surreptitiously on a personal computer
to intercept or take partial control over the user's interaction
with the computer, without the user's informed consent.

While the term spyware suggests software that secretly monitors the user's behavior,
the functions of spyware extend well beyond simple monitoring.

Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Removing JIp.KeyLogger:

you can run trial version of ExterminateIt, or remove JIp.KeyLogger manually.

To completely manually remove JIp.KeyLogger malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with JIp.KeyLogger.

Sinred.Keylogger Spyware

Click here to remove Sinred.Keylogger malware

Sinred.Keylogger description:
Sinred.Keylogger Category:Spyware
Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Removing Sinred.Keylogger:

you can run trial version of ExterminateIt, or remove Sinred.Keylogger manually.

To completely manually remove Sinred.Keylogger malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Sinred.Keylogger.

BigGluck RAT

BigGluck description:
BigGluck Category:RAT
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Removing BigGluck:

you can run trial version of ExterminateIt, or remove BigGluck manually.

To completely manually remove BigGluck malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BigGluck.

Sunday, January 25, 2009

Soclaip Trojan

Soclaip description:
Soclaip Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Soclaip:

you can run trial version of ExterminateIt, or remove Soclaip manually.

To completely manually remove Soclaip malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Soclaip.

Pigeon.AQH Trojan

Pigeon.AQH description:
Pigeon.AQH Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AQH:

you can run trial version of ExterminateIt, or remove Pigeon.AQH manually.

To completely manually remove Pigeon.AQH malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AQH.

Forced.Entry.Remote.System.Administration Backdoor

Click here to remove Forced.Entry.Remote.System.Administration malware

Forced.Entry.Remote.System.Administration description:
Forced.Entry.Remote.System.Administration Category:Backdoor,RAT
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Detection Forced.Entry.Remote.System.Administration :

Forced.Entry.Remote.System.Administration Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Forced.Entry.Remote.System.Administration:

you can run trial version of ExterminateIt, or remove Forced.Entry.Remote.System.Administration manually.

To completely manually remove Forced.Entry.Remote.System.Administration malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Forced.Entry.Remote.System.Administration.

SA Adware

SA description:
SA Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Detection SA :

SA Files:
[%WINDOWS%]\sasent.dll
[%WINDOWS%]\sasetup.dll
[%WINDOWS%]\sasent.dll
[%WINDOWS%]\sasetup.dll

SA Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{38D4D5D0-423E-4220-B6F9-30918C2AE4A4}
HKEY_CLASSES_ROOT\CLSID\{7b55bb05-0b4d-44fd-81a6-b136188f5deb}
HKEY_CLASSES_ROOT\interface\{18e6c36a-c45f-4b60-a1a4-5c0bb16d4cc2}
HKEY_CLASSES_ROOT\interface\{8a94c367-815a-4d4f-a6b6-d4eb877a126c}
HKEY_CLASSES_ROOT\interface\{d6188a7d-376c-4970-91ad-675bfcf3762e}
HKEY_CLASSES_ROOT\typelib\{00a322e2-7d50-4dba-bea4-5c8078d47269}
HKEY_CLASSES_ROOT\typelib\{8ea362bd-39cb-40f5-9226-73cd40999095}
HKEY_CLASSES_ROOT\typelib\{ced445e2-8c78-4f40-87d7-f7fb6f1b6791}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7b55bb05-0b4d-44fd-81a6-b136188f5deb}
HKEY_CLASSES_ROOT\classes\interface\{d6188a7d-376c-4970-91ad-675bfcf3762e}
HKEY_CLASSES_ROOT\clsid\{0191abf4-9421-435e-9ffd-cd827a2a82d8}
HKEY_CLASSES_ROOT\clsid\{38d4d5d0-423e-4220-b6f9-30918c2ae4a4}
HKEY_CLASSES_ROOT\clsid\{4bcf322b-9621-4e90-9678-f1424eb7584e}
HKEY_CLASSES_ROOT\clsid\{7b55bb05-0b4d-44fd-81a6-b136188f5deb}
HKEY_CLASSES_ROOT\clsid\{860ce847-8298-4114-b142-14043c2942b1}
HKEY_CLASSES_ROOT\interface\{3ca4f168-fdc3-425d-8812-bb1379581e85}
HKEY_CLASSES_ROOT\interface\{d47bd4de-b880-4610-8a8b-c173dec4272f}
HKEY_CLASSES_ROOT\sbitax7.sbitax7ctrl
HKEY_CLASSES_ROOT\sbitax7.sbitax7ctrl.1
HKEY_CLASSES_ROOT\typelib\{85a886b2-29bb-4189-8046-a66733b242e9}
HKEY_CLASSES_ROOT\typelib\{d6637f05-74ed-4ccf-80ab-20c8ec66877a}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{4bcf322b-9621-4e90-9678-f1424eb7584e}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{7b55bb05-0b4d-44fd-81a6-b136188f5deb}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{860ce847-8298-4114-b142-14043c2942b1}

SA Registry Values:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler

Removing SA:

you can run trial version of ExterminateIt, or remove SA manually.

To completely manually remove SA malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SA.

TrojanDownloader.Win32.Small.na Trojan

Click here to remove TrojanDownloader.Win32.Small.na malware

TrojanDownloader.Win32.Small.na description:
TrojanDownloader.Win32.Small.na Category:Trojan,Downloader
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

Detection TrojanDownloader.Win32.Small.na :

TrojanDownloader.Win32.Small.na Files:
[%APPDATA%]\dwnupdt.exe
[%APPDATA%]\dwnupdt.exe

Removing TrojanDownloader.Win32.Small.na:

you can run trial version of ExterminateIt, or remove TrojanDownloader.Win32.Small.na manually.

To completely manually remove TrojanDownloader.Win32.Small.na malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with TrojanDownloader.Win32.Small.na.

IROffer.2b13 Backdoor

Click here to remove IROffer.2b13 malware

IROffer.2b13 description:
IROffer.2b13 Category:Backdoor
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Removing IROffer.2b13:

you can run trial version of ExterminateIt, or remove IROffer.2b13 manually.

To completely manually remove IROffer.2b13 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with IROffer.2b13.

HBR.Server Trojan

HBR.Server description:
HBR.Server Category:Trojan,Backdoor,RAT
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Removing HBR.Server:

you can run trial version of ExterminateIt, or remove HBR.Server manually.

To completely manually remove HBR.Server malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with HBR.Server.

Trivial.Reverse Trojan

Click here to remove Trivial.Reverse malware

Trivial.Reverse description:
Trivial.Reverse Category:Trojan,Spyware,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing Trivial.Reverse:

you can run trial version of ExterminateIt, or remove Trivial.Reverse manually.

To completely manually remove Trivial.Reverse malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Trivial.Reverse.

QDel103 Trojan

QDel103 description:
QDel103 Category:Trojan,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing QDel103:

you can run trial version of ExterminateIt, or remove QDel103 manually.

To completely manually remove QDel103 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with QDel103.

Ultra.Dial Adware

Ultra.Dial description:
Ultra.Dial Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Removing Ultra.Dial:

you can run trial version of ExterminateIt, or remove Ultra.Dial manually.

To completely manually remove Ultra.Dial malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Ultra.Dial.

Backdoor.NetTe.74!Server Backdoor

Click here to remove Backdoor.NetTe.74!Server malware

Backdoor.NetTe.74!Server description:
Backdoor.NetTe.74!Server Category:Backdoor
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.

Removing Backdoor.NetTe.74!Server:

you can run trial version of ExterminateIt, or remove Backdoor.NetTe.74!Server manually.

To completely manually remove Backdoor.NetTe.74!Server malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Backdoor.NetTe.74!Server.

Bancos.GTP Trojan

Bancos.GTP description:
Bancos.GTP Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.GTP:

you can run trial version of ExterminateIt, or remove Bancos.GTP manually.

To completely manually remove Bancos.GTP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.GTP.

Bicas Spyware

Bicas description:
Bicas Category:Spyware
Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Removing Bicas:

you can run trial version of ExterminateIt, or remove Bicas manually.

To completely manually remove Bicas malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bicas.

Saturday, January 24, 2009

Bat.P69 Trojan

Bat.P69 description:
Bat.P69 Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bat.P69:

you can run trial version of ExterminateIt, or remove Bat.P69 manually.

To completely manually remove Bat.P69 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bat.P69.

Bube.k Trojan

Bube.k description:
Bube.k Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Bube.k:

you can run trial version of ExterminateIt, or remove Bube.k manually.

To completely manually remove Bube.k malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bube.k.

Pigeon.AVLC Trojan

Click here to remove Pigeon.AVLC malware

Pigeon.AVLC description:
Pigeon.AVLC Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AVLC:

you can run trial version of ExterminateIt, or remove Pigeon.AVLC manually.

To completely manually remove Pigeon.AVLC malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVLC.

adlegend.com Tracking Cookie

Click here to remove adlegend.com malware

adlegend.com description:
adlegend.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing adlegend.com:

you can run trial version of ExterminateIt, or remove adlegend.com manually.

To completely manually remove adlegend.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with adlegend.com.

Bancos.HNQ Trojan

Bancos.HNQ description:
Bancos.HNQ Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.HNQ:

you can run trial version of ExterminateIt, or remove Bancos.HNQ manually.

To completely manually remove Bancos.HNQ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.HNQ.

Win32.TrojanDownloader.INService Trojan

Click here to remove Win32.TrojanDownloader.INService malware

Win32.TrojanDownloader.INService description:
Win32.TrojanDownloader.INService Category:Trojan,Downloader
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Trojans-downloaders downloads and installs new malware or adware on the computer.

Removing Win32.TrojanDownloader.INService:

you can run trial version of ExterminateIt, or remove Win32.TrojanDownloader.INService manually.

To completely manually remove Win32.TrojanDownloader.INService malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.TrojanDownloader.INService.

Sh.FreeBSD Trojan

Sh.FreeBSD description:
Sh.FreeBSD Category:Trojan,Backdoor
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Removing Sh.FreeBSD:

you can run trial version of ExterminateIt, or remove Sh.FreeBSD manually.

To completely manually remove Sh.FreeBSD malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Sh.FreeBSD.

Friday, January 23, 2009

Rendezvous RAT

Rendezvous description:
Rendezvous Category:RAT
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Removing Rendezvous:

you can run trial version of ExterminateIt, or remove Rendezvous manually.

To completely manually remove Rendezvous malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Rendezvous.

Lock.Doc DoS

Lock.Doc description:
Lock.Doc Category:DoS
DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing Lock.Doc:

you can run trial version of ExterminateIt, or remove Lock.Doc manually.

To completely manually remove Lock.Doc malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Lock.Doc.

TailGunn Trojan

TailGunn description:
TailGunn Category:Trojan,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.

Removing TailGunn:

you can run trial version of ExterminateIt, or remove TailGunn manually.

To completely manually remove TailGunn malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with TailGunn.

PSW.Spyda Trojan

PSW.Spyda description:
PSW.Spyda Category:Trojan,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing PSW.Spyda:

you can run trial version of ExterminateIt, or remove PSW.Spyda manually.

To completely manually remove PSW.Spyda malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PSW.Spyda.

AdBand Adware

AdBand description:
AdBand Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Removing AdBand:

you can run trial version of ExterminateIt, or remove AdBand manually.

To completely manually remove AdBand malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with AdBand.

Tool.TFTP Trojan

Tool.TFTP description:
Tool.TFTP Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Tool.TFTP:

you can run trial version of ExterminateIt, or remove Tool.TFTP manually.

To completely manually remove Tool.TFTP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Tool.TFTP.

Ment Trojan

Ment description:
Ment Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Ment:

you can run trial version of ExterminateIt, or remove Ment manually.

To completely manually remove Ment malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Ment.

Screen.Cutter RAT

Click here to remove Screen.Cutter malware

Screen.Cutter description:
Screen.Cutter Category:RAT
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

Removing Screen.Cutter:

you can run trial version of ExterminateIt, or remove Screen.Cutter manually.

To completely manually remove Screen.Cutter malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Screen.Cutter.

Pigeon.AVJM Trojan

Click here to remove Pigeon.AVJM malware

Pigeon.AVJM description:
Pigeon.AVJM Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AVJM:

you can run trial version of ExterminateIt, or remove Pigeon.AVJM manually.

To completely manually remove Pigeon.AVJM malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVJM.

Pigeon.EMV Trojan

Pigeon.EMV description:
Pigeon.EMV Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.EMV:

you can run trial version of ExterminateIt, or remove Pigeon.EMV manually.

To completely manually remove Pigeon.EMV malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EMV.

Pigeon.AVHF Trojan

Click here to remove Pigeon.AVHF malware

Pigeon.AVHF description:
Pigeon.AVHF Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AVHF:

you can run trial version of ExterminateIt, or remove Pigeon.AVHF manually.

To completely manually remove Pigeon.AVHF malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVHF.

Bancos.HGQ Trojan

Bancos.HGQ description:
Bancos.HGQ Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.HGQ:

you can run trial version of ExterminateIt, or remove Bancos.HGQ manually.

To completely manually remove Bancos.HGQ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.HGQ.

XT.Bot Backdoor

XT.Bot description:
XT.Bot Category:Backdoor,DoS
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing XT.Bot:

you can run trial version of ExterminateIt, or remove XT.Bot manually.

To completely manually remove XT.Bot malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with XT.Bot.

Adopt.Hotbar.com Tracking Cookie

Click here to remove Adopt.Hotbar.com malware

Adopt.Hotbar.com description:
Adopt.Hotbar.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing Adopt.Hotbar.com:

you can run trial version of ExterminateIt, or remove Adopt.Hotbar.com manually.

To completely manually remove Adopt.Hotbar.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Adopt.Hotbar.com.

Thursday, January 22, 2009

Sc.Keylog.Pro Spyware

Click here to remove Sc.Keylog.Pro malware

Sc.Keylog.Pro description:
Sc.Keylog.Pro Category:Spyware
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.

Detection Sc.Keylog.Pro :

Sc.Keylog.Pro Files:
[%DESKTOP%]\main.lnk
[%SYSTEM%]\iexplorer.dll
[%SYSTEM%]\rerolpxei.dat
[%SYSTEM%]\rerolpxei.le
[%DESKTOP%]\main.lnk
[%SYSTEM%]\golyekcs.dat
[%SYSTEM%]\sckeylog.dll
[%SYSTEM%]\sckeylog.exe
[%SYSTEM%]\tratsniw.dat
[%SYSTEM%]\tratsniw.le
[%DESKTOP%]\main.lnk
[%SYSTEM%]\iexplorer.dll
[%SYSTEM%]\rerolpxei.dat
[%SYSTEM%]\rerolpxei.le
[%DESKTOP%]\main.lnk
[%SYSTEM%]\golyekcs.dat
[%SYSTEM%]\sckeylog.dll
[%SYSTEM%]\sckeylog.exe
[%SYSTEM%]\tratsniw.dat
[%SYSTEM%]\tratsniw.le

Sc.Keylog.Pro Folders:
[%PROGRAM_FILES%]\sc-keylog pro demo
[%PROGRAMS%]\sc-keylog pro demo

Sc.Keylog.Pro Registry Keys:
HKEY_CLASSES_ROOT\applications\main.exe
HKEY_CURRENT_USER\software\sc-keylog pro
HKEY_CLASSES_ROOT\.kla
HKEY_CLASSES_ROOT\klafile
HKEY_CURRENT_USER\applications\main.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\uninstall\sc-keylog pro
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\sckeylog
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\sc-keylog pro

Sc.Keylog.Pro Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Sc.Keylog.Pro:

you can run trial version of ExterminateIt, or remove Sc.Keylog.Pro manually.

To completely manually remove Sc.Keylog.Pro malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Sc.Keylog.Pro.

3wPlayer Adware

3wPlayer description:
3wPlayer Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Detection 3wPlayer :

3wPlayer Files:
[%DESKTOP%]\3wPlayer.lnk
[%DESKTOP%]\3wPlayer.lnk

3wPlayer Folders:
[%COMMON_PROGRAMS%]\3wPlayer
[%PROGRAM_FILES%]\3wPlayer

3wPlayer Registry Keys:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\3wplayer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\3wplayer_is1

3wPlayer Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run

Removing 3wPlayer:

you can run trial version of ExterminateIt, or remove 3wPlayer manually.

To completely manually remove 3wPlayer malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with 3wPlayer.

RewindFTP Trojan

RewindFTP description:
RewindFTP Category:Trojan,Backdoor
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Removing RewindFTP:

you can run trial version of ExterminateIt, or remove RewindFTP manually.

To completely manually remove RewindFTP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with RewindFTP.

HLL.sub Trojan

HLL.sub description:
HLL.sub Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing HLL.sub:

you can run trial version of ExterminateIt, or remove HLL.sub manually.

To completely manually remove HLL.sub malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with HLL.sub.

Elim Trojan

Elim description:
Elim Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Elim:

you can run trial version of ExterminateIt, or remove Elim manually.

To completely manually remove Elim malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Elim.

Targa Hacker Tool

Targa description:
Targa Category:Hacker Tool,DoS
Exploits use vulnerabilities in operating systems and applications to achieve the same result.
DoS trojans conduct attacks from a single computer with the consent of the user.

Removing Targa:

you can run trial version of ExterminateIt, or remove Targa manually.

To completely manually remove Targa malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Targa.

PWS.Algus Trojan

PWS.Algus description:
PWS.Algus Category:Trojan,RAT,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.

Removing PWS.Algus:

you can run trial version of ExterminateIt, or remove PWS.Algus manually.

To completely manually remove PWS.Algus malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PWS.Algus.

RBBS Trojan

RBBS description:
RBBS Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing RBBS:

you can run trial version of ExterminateIt, or remove RBBS manually.

To completely manually remove RBBS malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with RBBS.

Aladino Trojan

Aladino description:
Aladino Category:Trojan,Spyware,Backdoor,RAT
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Detection Aladino :

Aladino Files:
[%WINDOWS%]\system\regdll32.exe
[%WINDOWS%]\system\regdll32.exe

Removing Aladino:

you can run trial version of ExterminateIt, or remove Aladino manually.

To completely manually remove Aladino malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Aladino.

Bancos.HXJ Trojan

Bancos.HXJ description:
Bancos.HXJ Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Bancos.HXJ:

you can run trial version of ExterminateIt, or remove Bancos.HXJ manually.

To completely manually remove Bancos.HXJ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.HXJ.

Win32.Brosser Trojan

Click here to remove Win32.Brosser malware

Win32.Brosser description:
Win32.Brosser Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Win32.Brosser:

you can run trial version of ExterminateIt, or remove Win32.Brosser manually.

To completely manually remove Win32.Brosser malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.Brosser.

Firstborn.ow Trojan

Click here to remove Firstborn.ow malware

Firstborn.ow description:
Firstborn.ow Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Firstborn.ow:

you can run trial version of ExterminateIt, or remove Firstborn.ow manually.

To completely manually remove Firstborn.ow malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Firstborn.ow.

visionize.dk Tracking Cookie

Click here to remove visionize.dk malware

visionize.dk description:
visionize.dk Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing visionize.dk:

you can run trial version of ExterminateIt, or remove visionize.dk manually.

To completely manually remove visionize.dk malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with visionize.dk.

tracker.com.ua Tracking Cookie

Click here to remove tracker.com.ua malware

tracker.com.ua description:
tracker.com.ua Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing tracker.com.ua:

you can run trial version of ExterminateIt, or remove tracker.com.ua manually.

To completely manually remove tracker.com.ua malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with tracker.com.ua.

Vanilla Trojan

Vanilla description:
Vanilla Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Vanilla:

you can run trial version of ExterminateIt, or remove Vanilla manually.

To completely manually remove Vanilla malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vanilla.

WordMacro.Volcano Trojan

Click here to remove WordMacro.Volcano malware

WordMacro.Volcano description:
WordMacro.Volcano Category:Trojan,Backdoor,Downloader,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
Trojans-downloaders downloads and installs new malware or adware on the computer.

DoS trojans conduct attacks from a single computer with the consent of the user.

Detection WordMacro.Volcano :

WordMacro.Volcano Files:
[%PROGRAM_FILES%]\Network Monitor\netmon.exe
[%WINDOWS%]\uninstall_nmon.vbs
[%PROGRAM_FILES%]\Network Monitor\netmon.exe
[%WINDOWS%]\uninstall_nmon.vbs

WordMacro.Volcano Registry Keys:
HKEY_CLASSES_ROOT\Interface\{3E589169-86AD-44FE-B426-F0BF105D5582}
HKEY_CLASSES_ROOT\TypeLib\{57ADD57B-173E-418A-8F70-17E5C9F2BCC9}
HKEY_CURRENT_USER\Software\intexp
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{a394e835-c8d6-4b4b-884b-d2709059f3be}

WordMacro.Volcano Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar

Removing WordMacro.Volcano:

you can run trial version of ExterminateIt, or remove WordMacro.Volcano manually.

To completely manually remove WordMacro.Volcano malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with WordMacro.Volcano.

Wednesday, January 21, 2009

VBS.Voodoo Trojan

VBS.Voodoo description:
VBS.Voodoo Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing VBS.Voodoo:

you can run trial version of ExterminateIt, or remove VBS.Voodoo manually.

To completely manually remove VBS.Voodoo malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with VBS.Voodoo.

ICQ.Toolz.Y2K.Special.Edition Trojan

Click here to remove ICQ.Toolz.Y2K.Special.Edition malware

ICQ.Toolz.Y2K.Special.Edition description:
ICQ.Toolz.Y2K.Special.Edition Category:Trojan,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
DoS trojans conduct attacks from a single computer with the consent of the user.

Removing ICQ.Toolz.Y2K.Special.Edition:

you can run trial version of ExterminateIt, or remove ICQ.Toolz.Y2K.Special.Edition manually.

To completely manually remove ICQ.Toolz.Y2K.Special.Edition malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ICQ.Toolz.Y2K.Special.Edition.

Bancos.HPD Trojan

Bancos.HPD description:
Bancos.HPD Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Bancos.HPD:

you can run trial version of ExterminateIt, or remove Bancos.HPD manually.

To completely manually remove Bancos.HPD malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.HPD.

Troia RAT

Troia description:
Troia Category:RAT
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Removing Troia:

you can run trial version of ExterminateIt, or remove Troia manually.

To completely manually remove Troia malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Troia.

BOred.The.Windows.Dumb.Terminal.Plugin Trojan

Click here to remove BOred.The.Windows.Dumb.Terminal.Plugin malware

BOred.The.Windows.Dumb.Terminal.Plugin description:
BOred.The.Windows.Dumb.Terminal.Plugin Category:Trojan,Backdoor,RAT
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

Removing BOred.The.Windows.Dumb.Terminal.Plugin:

you can run trial version of ExterminateIt, or remove BOred.The.Windows.Dumb.Terminal.Plugin manually.

To completely manually remove BOred.The.Windows.Dumb.Terminal.Plugin malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BOred.The.Windows.Dumb.Terminal.Plugin.

CokeCrack Trojan

CokeCrack description:
CokeCrack Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing CokeCrack:

you can run trial version of ExterminateIt, or remove CokeCrack manually.

To completely manually remove CokeCrack malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with CokeCrack.

Pigeon.EIY Trojan

Pigeon.EIY description:
Pigeon.EIY Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.EIY:

you can run trial version of ExterminateIt, or remove Pigeon.EIY manually.

To completely manually remove Pigeon.EIY malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EIY.

Hero Trojan

Hero description:
Hero Category:Trojan,Backdoor,Downloader,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.
DoS trojans conduct attacks from a single computer with the consent of the user.

Removing Hero:

you can run trial version of ExterminateIt, or remove Hero manually.

To completely manually remove Hero malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Hero.

TKHO.com Tracking Cookie

TKHO.com description:
TKHO.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing TKHO.com:

you can run trial version of ExterminateIt, or remove TKHO.com manually.

To completely manually remove TKHO.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with TKHO.com.

Blood.Rage Trojan

Blood.Rage description:
Blood.Rage Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Trojans-downloaders downloads and installs new malware or adware on the computer.

DoS trojans conduct attacks from a single computer with the consent of the user.

Removing Blood.Rage:

you can run trial version of ExterminateIt, or remove Blood.Rage manually.

To completely manually remove Blood.Rage malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Blood.Rage.

Hacker.Brazil Backdoor

Click here to remove Hacker.Brazil malware

Hacker.Brazil description:
Hacker.Brazil Category:Backdoor,RAT
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Detection Hacker.Brazil :

Hacker.Brazil Files:
[%WINDOWS%]\system\hacker_brasil.exe
[%WINDOWS%]\system\hacker_brasil.exe

Removing Hacker.Brazil:

you can run trial version of ExterminateIt, or remove Hacker.Brazil manually.

To completely manually remove Hacker.Brazil malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Hacker.Brazil.

Tuesday, January 20, 2009

AdvertBar Adware

AdvertBar description:
AdvertBar Category:Adware,BHO
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

The BHO (Browser Helper Object) waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.

Detection AdvertBar :

AdvertBar Files:
[%DESKTOP%]\advertbar.lnk
[%DESKTOP%]\advertbar.lnk

AdvertBar Folders:
[%PROFILE%]\start menu\advertbar.lnk

AdvertBar Registry Keys:
HKEY_LOCAL_MACHINE\software\teknosurf2

AdvertBar Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main

Removing AdvertBar:

you can run trial version of ExterminateIt, or remove AdvertBar manually.

To completely manually remove AdvertBar malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with AdvertBar.

SillyDl.COY Trojan

Click here to remove SillyDl.COY malware

SillyDl.COY description:
SillyDl.COY Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing SillyDl.COY:

you can run trial version of ExterminateIt, or remove SillyDl.COY manually.

To completely manually remove SillyDl.COY malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.COY.

SillyDl.CCK Trojan

Click here to remove SillyDl.CCK malware

SillyDl.CCK description:
SillyDl.CCK Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing SillyDl.CCK:

you can run trial version of ExterminateIt, or remove SillyDl.CCK manually.

To completely manually remove SillyDl.CCK malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CCK.

page.only Adware

page.only description:
page.only Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Removing page.only:

you can run trial version of ExterminateIt, or remove page.only manually.

To completely manually remove page.only malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with page.only.

Portfu Trojan

Portfu description:
Portfu Category:Trojan,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing Portfu:

you can run trial version of ExterminateIt, or remove Portfu manually.

To completely manually remove Portfu malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Portfu.

Lula Backdoor

Lula description:
Lula Category:Backdoor,RAT
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

Detection Lula :

Lula Files:
[%WINDOWS%]\system\dllexec.exe
[%WINDOWS%]\system\_.exe
[%WINDOWS%]\system\dllexec.exe
[%WINDOWS%]\system\_.exe

Lula Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices

Removing Lula:

you can run trial version of ExterminateIt, or remove Lula manually.

To completely manually remove Lula malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Lula.

Pigeon.AYZ Trojan

Pigeon.AYZ description:
Pigeon.AYZ Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AYZ:

you can run trial version of ExterminateIt, or remove Pigeon.AYZ manually.

To completely manually remove Pigeon.AYZ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AYZ.

Pigeon.ELW Trojan

Pigeon.ELW description:
Pigeon.ELW Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.ELW:

you can run trial version of ExterminateIt, or remove Pigeon.ELW manually.

To completely manually remove Pigeon.ELW malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.ELW.

ToolbarCash.com BHO

Click here to remove ToolbarCash.com malware

ToolbarCash.com description:
ToolbarCash.com Category:BHO
The BHO (Browser Helper Object) waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.

Removing ToolbarCash.com:

you can run trial version of ExterminateIt, or remove ToolbarCash.com manually.

To completely manually remove ToolbarCash.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ToolbarCash.com.

Stats.webtrendslive.Tracking.Cookie Tracking Cookie

Click here to remove Stats.webtrendslive.Tracking.Cookie malware

Stats.webtrendslive.Tracking.Cookie description:
Stats.webtrendslive.Tracking.Cookie Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing Stats.webtrendslive.Tracking.Cookie:

you can run trial version of ExterminateIt, or remove Stats.webtrendslive.Tracking.Cookie manually.

To completely manually remove Stats.webtrendslive.Tracking.Cookie malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Stats.webtrendslive.Tracking.Cookie.

QDel354 Trojan

QDel354 description:
QDel354 Category:Trojan,Spyware,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing QDel354:

you can run trial version of ExterminateIt, or remove QDel354 manually.

To completely manually remove QDel354 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with QDel354.

Blue.Nine Trojan

Blue.Nine description:
Blue.Nine Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
Trojans-downloaders downloads and installs new malware or adware on the computer.

DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing Blue.Nine:

you can run trial version of ExterminateIt, or remove Blue.Nine manually.

To completely manually remove Blue.Nine malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Blue.Nine.

Win32.Exploit.Auriemma Trojan

Click here to remove Win32.Exploit.Auriemma malware

Win32.Exploit.Auriemma description:
Win32.Exploit.Auriemma Category:Trojan,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.

Removing Win32.Exploit.Auriemma:

you can run trial version of ExterminateIt, or remove Win32.Exploit.Auriemma manually.

To completely manually remove Win32.Exploit.Auriemma malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.Exploit.Auriemma.

12tricks Trojan

12tricks description:
12tricks Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing 12tricks:

you can run trial version of ExterminateIt, or remove 12tricks manually.

To completely manually remove 12tricks malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with 12tricks.

Divint Hacker Tool

Divint description:
Divint Category:Hacker Tool,DoS
Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing Divint:

you can run trial version of ExterminateIt, or remove Divint manually.

To completely manually remove Divint malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Divint.

Pigeon.AVKC Trojan

Click here to remove Pigeon.AVKC malware

Pigeon.AVKC description:
Pigeon.AVKC Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AVKC:

you can run trial version of ExterminateIt, or remove Pigeon.AVKC manually.

To completely manually remove Pigeon.AVKC malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVKC.

Bancos.IDM Trojan

Bancos.IDM description:
Bancos.IDM Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Bancos.IDM:

you can run trial version of ExterminateIt, or remove Bancos.IDM manually.

To completely manually remove Bancos.IDM malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.IDM.

Win32.Startpage.CQ!downloader Trojan

Click here to remove Win32.Startpage.CQ!downloader malware

Win32.Startpage.CQ!downloader description:
Win32.Startpage.CQ!downloader Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Win32.Startpage.CQ!downloader:

you can run trial version of ExterminateIt, or remove Win32.Startpage.CQ!downloader manually.

To completely manually remove Win32.Startpage.CQ!downloader malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.Startpage.CQ!downloader.