Trojan List 45: December 2008

Wednesday, December 31, 2008

Adwin Adware

Adwin description:
Adwin Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Removing Adwin:

you can run trial version of ExterminateIt, or remove Adwin manually.

To completely manually remove Adwin malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Adwin.

netidentity.com Tracking Cookie

Click here to remove netidentity.com malware

netidentity.com description:
netidentity.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing netidentity.com:

you can run trial version of ExterminateIt, or remove netidentity.com manually.

To completely manually remove netidentity.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with netidentity.com.

WordMacro.Taguchi Trojan

Click here to remove WordMacro.Taguchi malware

WordMacro.Taguchi description:
WordMacro.Taguchi Category:Trojan,Backdoor,Downloader,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.
DoS trojans conduct attacks from a single computer with the consent of the user.

Removing WordMacro.Taguchi:

you can run trial version of ExterminateIt, or remove WordMacro.Taguchi manually.

To completely manually remove WordMacro.Taguchi malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with WordMacro.Taguchi.

ChiracDance Backdoor

Click here to remove ChiracDance malware

ChiracDance description:
ChiracDance Category:Backdoor
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Removing ChiracDance:

you can run trial version of ExterminateIt, or remove ChiracDance manually.

To completely manually remove ChiracDance malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ChiracDance.

Vxidl.AZX Trojan

Vxidl.AZX description:
Vxidl.AZX Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Vxidl.AZX:

you can run trial version of ExterminateIt, or remove Vxidl.AZX manually.

To completely manually remove Vxidl.AZX malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AZX.

WhileUSurf Adware

WhileUSurf description:
WhileUSurf Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Detection WhileUSurf :

WhileUSurf Files:
[%SYSTEM%]\svchost.dll
[%SYSTEM%]\printer32.dll
[%SYSTEM%]\wys.dll
[%SYSTEM%]\wys.exe
[%SYSTEM%]\wys3.exe
[%SYSTEM%]\wys5.dll
[%SYSTEM%]\svchost.dll
[%SYSTEM%]\printer32.dll
[%SYSTEM%]\wys.dll
[%SYSTEM%]\wys.exe
[%SYSTEM%]\wys3.exe
[%SYSTEM%]\wys5.dll

WhileUSurf Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\while you surf

WhileUSurf Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing WhileUSurf:

you can run trial version of ExterminateIt, or remove WhileUSurf manually.

To completely manually remove WhileUSurf malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with WhileUSurf.

Pigeon.ADR Trojan

Pigeon.ADR description:
Pigeon.ADR Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.ADR:

you can run trial version of ExterminateIt, or remove Pigeon.ADR manually.

To completely manually remove Pigeon.ADR malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.ADR.

Delta.Remote.Access Backdoor

Click here to remove Delta.Remote.Access malware

Delta.Remote.Access description:
Delta.Remote.Access Category:Backdoor,RAT,Hacker Tool
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Detection Delta.Remote.Access :

Delta.Remote.Access Files:
[%WINDOWS%]\msdra32.exe
[%WINDOWS%]\msdra32.exe

Removing Delta.Remote.Access:

you can run trial version of ExterminateIt, or remove Delta.Remote.Access manually.

To completely manually remove Delta.Remote.Access malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Delta.Remote.Access.

ClickToSearch Adware

Click here to remove ClickToSearch malware

ClickToSearch description:
ClickToSearch Category:Adware,BHO,Hijacker
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits
As this information is entered by the user, it is captured by the BHO (Browser Helper Object) and
sent back to the attacker.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.A Search hijacker redirects search results to other pages and may
transmit search and browsing data to unknown servers. An error page hijacker directs
the browser to another page, usually an advertising page, instead of the usual error
page when the requested URL is not found.

Detection ClickToSearch :

ClickToSearch Files:
[%SYSTEM%]\bpv2t.dll
[%WINDOWS%]\system\bpv2t.dll
[%SYSTEM%]\bpv2t.dll
[%WINDOWS%]\system\bpv2t.dll

Removing ClickToSearch:

you can run trial version of ExterminateIt, or remove ClickToSearch manually.

To completely manually remove ClickToSearch malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ClickToSearch.

QDel143 Trojan

QDel143 description:
QDel143 Category:Trojan,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing QDel143:

you can run trial version of ExterminateIt, or remove QDel143 manually.

To completely manually remove QDel143 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with QDel143.

Bancos.ICO Trojan

Bancos.ICO description:
Bancos.ICO Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.ICO:

you can run trial version of ExterminateIt, or remove Bancos.ICO manually.

To completely manually remove Bancos.ICO malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.ICO.

SWEET.BOX Adware

SWEET.BOX description:
SWEET.BOX Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Detection SWEET.BOX :

SWEET.BOX Files:
[%SYSTEM%]\inetcomm.exe
[%SYSTEM%]\inetsvr.dll
[%SYSTEM%]\inetsvrhelper.dll
[%SYSTEM%]\site_history.tmp
[%SYSTEM%]\site_list.tmp
[%SYSTEM%]\sweetsetup.exe
[%WINDOWS%]\sweetbox.ini
[%SYSTEM%]\inetcomm.exe
[%SYSTEM%]\inetsvr.dll
[%SYSTEM%]\inetsvrhelper.dll
[%SYSTEM%]\site_history.tmp
[%SYSTEM%]\site_list.tmp
[%SYSTEM%]\sweetsetup.exe
[%WINDOWS%]\sweetbox.ini

SWEET.BOX Folders:
[%PROGRAM_FILES%]\sweetbox

SWEET.BOX Registry Keys:
HKEY_CLASSES_ROOT\classes\clsid\{68a7f9fa-a202-4d45-aaba-a10dcac0d899}
HKEY_CLASSES_ROOT\classes\interface\{61297440-4879-4264-9602-59dbb717778f}
HKEY_CLASSES_ROOT\classes\typelib\{1d366026-28e1-4b07-8140-b8fb929a1c19}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{68a7f9fa-a202-4d45-aaba-a10dcac0d899}
HKEY_CLASSES_ROOT\sweetbarbho.cinetsvrhelper
HKEY_CLASSES_ROOT\sweetbarbho.cinetsvrhelper.1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{68a7f9fa-a202-4d45-aaba-a10dcac0d899}
HKEY_LOCAL_MACHINE\software\sweetbar
HKEY_LOCAL_MACHINE\system\controlset001\services\iprip

Removing SWEET.BOX:

you can run trial version of ExterminateIt, or remove SWEET.BOX manually.

To completely manually remove SWEET.BOX malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SWEET.BOX.

Tuesday, December 30, 2008

Pigeon.ESO Trojan

Pigeon.ESO description:
Pigeon.ESO Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.ESO:

you can run trial version of ExterminateIt, or remove Pigeon.ESO manually.

To completely manually remove Pigeon.ESO malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.ESO.

DelfLoader Downloader

DelfLoader description:
DelfLoader Category:Downloader
Trojans-downloaders downloads and installs new malware or adware on the computer.

Removing DelfLoader:

you can run trial version of ExterminateIt, or remove DelfLoader manually.

To completely manually remove DelfLoader malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with DelfLoader.

SillyDl.CND Trojan

Click here to remove SillyDl.CND malware

SillyDl.CND description:
SillyDl.CND Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing SillyDl.CND:

you can run trial version of ExterminateIt, or remove SillyDl.CND manually.

To completely manually remove SillyDl.CND malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CND.

New.Malware.aj Trojan

Click here to remove New.Malware.aj malware

New.Malware.aj description:
New.Malware.aj Category:Trojan,Downloader
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Trojans-downloaders downloads and installs new malware or adware on the computer.

Removing New.Malware.aj:

you can run trial version of ExterminateIt, or remove New.Malware.aj manually.

To completely manually remove New.Malware.aj malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with New.Malware.aj.

Pigeon.ETH Trojan

Pigeon.ETH description:
Pigeon.ETH Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.ETH:

you can run trial version of ExterminateIt, or remove Pigeon.ETH manually.

To completely manually remove Pigeon.ETH malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.ETH.

Win32.DlAtaka Trojan

Click here to remove Win32.DlAtaka malware

Win32.DlAtaka description:
Win32.DlAtaka Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Win32.DlAtaka:

you can run trial version of ExterminateIt, or remove Win32.DlAtaka manually.

To completely manually remove Win32.DlAtaka malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.DlAtaka.

AntiSpy Ransomware

AntiSpy description:
AntiSpy Category:Ransomware
A cryptovirus, cryptotrojan or cryptoworm is a type of
malware that encrypts the data belonging to an individual on a computer,
demanding a ransom for its restoration.

The term ransomware is commonly used to describe such software,
although the field known as cryptovirology predates the term "ransomware".

This type of ransom attack can be accomplished by (for example) attaching
a specially crafted file/program to an e-mail message and sending this to the victim.

If the victim opens/executes the attachment, the program encrypts
a number of files on the victim's computer. A ransom note is then left behind for the victim.

The victim will be unable to open the encrypted files without the correct decryption key.
Once the ransom demanded in the ransom note is paid, the cracker may (or may not)
send the decryption key, enabling decryption of the "kidnapped" files.

Removing AntiSpy:

you can run trial version of ExterminateIt, or remove AntiSpy manually.

To completely manually remove AntiSpy malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with AntiSpy.

Stats.webtrendslive.Tracking.Cookie Tracking Cookie

Click here to remove Stats.webtrendslive.Tracking.Cookie malware

Stats.webtrendslive.Tracking.Cookie description:
Stats.webtrendslive.Tracking.Cookie Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing Stats.webtrendslive.Tracking.Cookie:

you can run trial version of ExterminateIt, or remove Stats.webtrendslive.Tracking.Cookie manually.

To completely manually remove Stats.webtrendslive.Tracking.Cookie malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Stats.webtrendslive.Tracking.Cookie.

Shiver RAT

Shiver description:
Shiver Category:RAT
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Removing Shiver:

you can run trial version of ExterminateIt, or remove Shiver manually.

To completely manually remove Shiver malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Shiver.

CSApp.dll BHO

CSApp.dll description:
CSApp.dll Category:BHO
BHO (Browser Helper Object) Trojan.
The BHO waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
The method of network transport used by the attacker makes this Trojan unique.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.
Instead, this Trojan encodes the data with a simple XOR algorithm before placing it into
the data section of an ICMP ping packet." explained the company.

Detection CSApp.dll :

CSApp.dll Files:
[%SYSTEM%]\csapp.dll
[%WINDOWS%]\system\csapp.dll
[%SYSTEM%]\csapp.dll
[%WINDOWS%]\system\csapp.dll

CSApp.dll Registry Keys:
HKEY_CLASSES_ROOT\clsid\{cd209a08-98b5-4669-af9f-447ac5253356}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{cd209a08-98b5-4669-af9f-447ac5253356}
HKEY_LOCAL_MACHINE\software\classes\clsid\{cd209a08-98b5-4669-af9f-447ac5253356}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{cd209a08-98b5-4669-af9f-447ac5253356}

Removing CSApp.dll:

you can run trial version of ExterminateIt, or remove CSApp.dll manually.

To completely manually remove CSApp.dll malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with CSApp.dll.

EARNBundleware Adware

Click here to remove EARNBundleware malware

EARNBundleware description:
EARNBundleware Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Removing EARNBundleware:

you can run trial version of ExterminateIt, or remove EARNBundleware manually.

To completely manually remove EARNBundleware malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with EARNBundleware.

KeyLog.Powered Spyware

Click here to remove KeyLog.Powered malware

KeyLog.Powered description:
KeyLog.Powered Category:Spyware
Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Removing KeyLog.Powered:

you can run trial version of ExterminateIt, or remove KeyLog.Powered manually.

To completely manually remove KeyLog.Powered malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with KeyLog.Powered.

Monday, December 29, 2008

Modified.Masters.Paradise RAT

Click here to remove Modified.Masters.Paradise malware

Modified.Masters.Paradise description:
Modified.Masters.Paradise Category:RAT
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Removing Modified.Masters.Paradise:

you can run trial version of ExterminateIt, or remove Modified.Masters.Paradise manually.

To completely manually remove Modified.Masters.Paradise malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Modified.Masters.Paradise.

Agent.cp Downloader

Agent.cp description:
Agent.cp Category:Downloader
This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.

Removing Agent.cp:

you can run trial version of ExterminateIt, or remove Agent.cp manually.

To completely manually remove Agent.cp malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Agent.cp.

Small.en Trojan

Small.en description:
Small.en Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Small.en:

you can run trial version of ExterminateIt, or remove Small.en manually.

To completely manually remove Small.en malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Small.en.

adverticum.net Tracking Cookie

Click here to remove adverticum.net malware

adverticum.net description:
adverticum.net Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing adverticum.net:

you can run trial version of ExterminateIt, or remove adverticum.net manually.

To completely manually remove adverticum.net malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with adverticum.net.

SillyDl.CMT Trojan

Click here to remove SillyDl.CMT malware

SillyDl.CMT description:
SillyDl.CMT Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing SillyDl.CMT:

you can run trial version of ExterminateIt, or remove SillyDl.CMT manually.

To completely manually remove SillyDl.CMT malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CMT.

QDel1 Trojan

QDel1 description:
QDel1 Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing QDel1:

you can run trial version of ExterminateIt, or remove QDel1 manually.

To completely manually remove QDel1 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with QDel1.

Pigeon.AUZT Trojan

Click here to remove Pigeon.AUZT malware

Pigeon.AUZT description:
Pigeon.AUZT Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AUZT:

you can run trial version of ExterminateIt, or remove Pigeon.AUZT manually.

To completely manually remove Pigeon.AUZT malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AUZT.

Stealthspy.Beta Trojan

Click here to remove Stealthspy.Beta malware

Stealthspy.Beta description:
Stealthspy.Beta Category:Trojan,Spyware,Backdoor,RAT
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Spyware is computer software that is installed surreptitiously on a personal computer
to intercept or take partial control over the user's interaction
with the computer, without the user's informed consent.

While the term spyware suggests software that secretly monitors the user's behavior,
the functions of spyware extend well beyond simple monitoring.

Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Detection Stealthspy.Beta :

Stealthspy.Beta Folders:
[%SYSTEM%]\SKS

Stealthspy.Beta Registry Keys:
HKEY_CLASSES_ROOT\clsid\{5114927e-b0cb-4601-94a4-40b8dcfe60a8}

Removing Stealthspy.Beta:

you can run trial version of ExterminateIt, or remove Stealthspy.Beta manually.

To completely manually remove Stealthspy.Beta malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Stealthspy.Beta.

F4 Trojan

F4 description:
F4 Category:Trojan,Backdoor,Downloader,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing F4:

you can run trial version of ExterminateIt, or remove F4 manually.

To completely manually remove F4 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with F4.

Obsolete Trojan

Obsolete description:
Obsolete Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Obsolete:

you can run trial version of ExterminateIt, or remove Obsolete manually.

To completely manually remove Obsolete malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Obsolete.

Sunday, December 28, 2008

Pigeon.AAL Trojan

Pigeon.AAL description:
Pigeon.AAL Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AAL:

you can run trial version of ExterminateIt, or remove Pigeon.AAL manually.

To completely manually remove Pigeon.AAL malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AAL.

Upsilonprog Trojan

Click here to remove Upsilonprog malware

Upsilonprog description:
Upsilonprog Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Upsilonprog:

you can run trial version of ExterminateIt, or remove Upsilonprog manually.

To completely manually remove Upsilonprog malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Upsilonprog.

Vxidl.AXI Trojan

Vxidl.AXI description:
Vxidl.AXI Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Vxidl.AXI:

you can run trial version of ExterminateIt, or remove Vxidl.AXI manually.

To completely manually remove Vxidl.AXI malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AXI.

MBS Bill (Micro Bill Systems) Trojan

Click here to remove MBS Bill (Micro Bill Systems) malware

MBS Bill (Micro Bill Systems) description:
MBS Bill (Micro Bill Systems) Category:Trojan,Popups
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
The pop-ups generally will not be stopped by pop-up stoppers, and often are
not dependent on your having Internet Explorer open.

Detection MBS Bill (Micro Bill Systems) :

MBS Bill (Micro Bill Systems) Files:
[%SYSTEM%]\mbsmon32.exe
[%SYSTEM%]\mbssm32.exe
[%SYSTEM%]\mibssys.exe
[%SYSTEM%]\monstu.exe
[%SYSTEM%]\Sexxxpassport.ico
[%SYSTEM%]\smvalid.exe
[%SYSTEM%]\u2g.f
[%SYSTEM%]\UBSauthenticateAXC.ocx
[%SYSTEM%]\UBSauthenticateAXC1.ocx
[%SYSTEM%]\vi32.exe
[%SYSTEM%]\vsm.exe
[%SYSTEM%]\winiconmon.ico
[%SYSTEM%]\winiconmon.ico.bak0
[%SYSTEM%]\winiconmon.ico.bak1
[%SYSTEM%]\winiconmon.ico.bak2
[%SYSTEM%]\mbsmon32.exe
[%SYSTEM%]\mbssm32.exe
[%SYSTEM%]\mibssys.exe
[%SYSTEM%]\monstu.exe
[%SYSTEM%]\Sexxxpassport.ico
[%SYSTEM%]\smvalid.exe
[%SYSTEM%]\u2g.f
[%SYSTEM%]\UBSauthenticateAXC.ocx
[%SYSTEM%]\UBSauthenticateAXC1.ocx
[%SYSTEM%]\vi32.exe
[%SYSTEM%]\vsm.exe
[%SYSTEM%]\winiconmon.ico
[%SYSTEM%]\winiconmon.ico.bak0
[%SYSTEM%]\winiconmon.ico.bak1
[%SYSTEM%]\winiconmon.ico.bak2

MBS Bill (Micro Bill Systems) Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-

Removing MBS Bill (Micro Bill Systems):

you can run trial version of ExterminateIt, or remove MBS Bill (Micro Bill Systems) manually.

To completely manually remove MBS Bill (Micro Bill Systems) malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with MBS Bill (Micro Bill Systems).

Su.ribbed Trojan

Su.ribbed description:
Su.ribbed Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Su.ribbed:

you can run trial version of ExterminateIt, or remove Su.ribbed manually.

To completely manually remove Su.ribbed malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Su.ribbed.

Is.My.Mate.Cheating.Online Spyware

Click here to remove Is.My.Mate.Cheating.Online malware

Is.My.Mate.Cheating.Online description:
Is.My.Mate.Cheating.Online Category:Spyware
Spyware is computer software that is installed surreptitiously on a personal computer
to intercept or take partial control over the user's interaction
with the computer, without the user's informed consent.

While the term spyware suggests software that secretly monitors the user's behavior,
the functions of spyware extend well beyond simple monitoring.

Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Removing Is.My.Mate.Cheating.Online:

you can run trial version of ExterminateIt, or remove Is.My.Mate.Cheating.Online manually.

To completely manually remove Is.My.Mate.Cheating.Online malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Is.My.Mate.Cheating.Online.

Raw.TCP.Server.Connection RAT

Click here to remove Raw.TCP.Server.Connection malware

Raw.TCP.Server.Connection description:
Raw.TCP.Server.Connection Category:RAT
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Removing Raw.TCP.Server.Connection:

you can run trial version of ExterminateIt, or remove Raw.TCP.Server.Connection manually.

To completely manually remove Raw.TCP.Server.Connection malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Raw.TCP.Server.Connection.

Hidden.Recorder Spyware

Click here to remove Hidden.Recorder malware

Hidden.Recorder description:
Hidden.Recorder Category:Spyware
Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Detection Hidden.Recorder :

Hidden.Recorder Folders:
[%PROGRAM_FILES%]\Oleansoft\HR

Hidden.Recorder Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hidden recorder

Hidden.Recorder Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Hidden.Recorder:

you can run trial version of ExterminateIt, or remove Hidden.Recorder manually.

To completely manually remove Hidden.Recorder malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Hidden.Recorder.

Saturday, December 27, 2008

VBS.First Trojan

VBS.First description:
VBS.First Category:Trojan,Backdoor,Downloader,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.
DoS trojans conduct attacks from a single computer with the consent of the user.

Removing VBS.First:

you can run trial version of ExterminateIt, or remove VBS.First manually.

To completely manually remove VBS.First malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with VBS.First.

Digital.Upload Backdoor

Click here to remove Digital.Upload malware

Digital.Upload description:
Digital.Upload Category:Backdoor,RAT,Downloader
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.
Trojans-downloaders downloads and installs new malware or adware on the computer.

Detection Digital.Upload :

Digital.Upload Files:
[%WINDOWS%]\system\kernelxp.exe
[%WINDOWS%]\system\kernelxp.exe

Digital.Upload Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\12112-121312-12342-13432

Removing Digital.Upload:

you can run trial version of ExterminateIt, or remove Digital.Upload manually.

To completely manually remove Digital.Upload malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Digital.Upload.

Vxidl.AHB Trojan

Vxidl.AHB description:
Vxidl.AHB Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Vxidl.AHB:

you can run trial version of ExterminateIt, or remove Vxidl.AHB manually.

To completely manually remove Vxidl.AHB malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AHB.

SillyDl.CDI Trojan

Click here to remove SillyDl.CDI malware

SillyDl.CDI description:
SillyDl.CDI Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing SillyDl.CDI:

you can run trial version of ExterminateIt, or remove SillyDl.CDI manually.

To completely manually remove SillyDl.CDI malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CDI.

Pigeon.EWG Trojan

Pigeon.EWG description:
Pigeon.EWG Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.EWG:

you can run trial version of ExterminateIt, or remove Pigeon.EWG manually.

To completely manually remove Pigeon.EWG malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EWG.

Mard.mIRC32 Backdoor

Click here to remove Mard.mIRC32 malware

Mard.mIRC32 description:
Mard.mIRC32 Category:Backdoor,DoS
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing Mard.mIRC32:

you can run trial version of ExterminateIt, or remove Mard.mIRC32 manually.

To completely manually remove Mard.mIRC32 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Mard.mIRC32.

SubSeven.Script.Fserve.Cheater RAT

Click here to remove SubSeven.Script.Fserve.Cheater malware

SubSeven.Script.Fserve.Cheater description:
SubSeven.Script.Fserve.Cheater Category:RAT
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

Removing SubSeven.Script.Fserve.Cheater:

you can run trial version of ExterminateIt, or remove SubSeven.Script.Fserve.Cheater manually.

To completely manually remove SubSeven.Script.Fserve.Cheater malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SubSeven.Script.Fserve.Cheater.

ESDIexplorr Adware

Click here to remove ESDIexplorr malware

ESDIexplorr description:
ESDIexplorr Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Removing ESDIexplorr:

you can run trial version of ExterminateIt, or remove ESDIexplorr manually.

To completely manually remove ESDIexplorr malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ESDIexplorr.

Friday, December 26, 2008

Backdoor.SuperSpy.Server Trojan

Click here to remove Backdoor.SuperSpy.Server malware

Backdoor.SuperSpy.Server description:
Backdoor.SuperSpy.Server Category:Trojan,Backdoor
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Removing Backdoor.SuperSpy.Server:

you can run trial version of ExterminateIt, or remove Backdoor.SuperSpy.Server manually.

To completely manually remove Backdoor.SuperSpy.Server malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Backdoor.SuperSpy.Server.

HooksHider Trojan

HooksHider description:
HooksHider Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing HooksHider:

you can run trial version of ExterminateIt, or remove HooksHider manually.

To completely manually remove HooksHider malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with HooksHider.

Basic Trojan

Basic description:
Basic Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Basic:

you can run trial version of ExterminateIt, or remove Basic manually.

To completely manually remove Basic malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Basic.

Thursday, December 25, 2008

Asylum.Web RAT

Asylum.Web description:
Asylum.Web Category:RAT
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Removing Asylum.Web:

you can run trial version of ExterminateIt, or remove Asylum.Web manually.

To completely manually remove Asylum.Web malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Asylum.Web.

mOTFv3 DoS

mOTFv3 description:
mOTFv3 Category:DoS
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing mOTFv3:

you can run trial version of ExterminateIt, or remove mOTFv3 manually.

To completely manually remove mOTFv3 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with mOTFv3.

Intelliflag Spyware

Click here to remove Intelliflag malware

Intelliflag description:
Intelliflag Category:Spyware
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.

Detection Intelliflag :

Intelliflag Folders:
[%PROGRAM_FILES%]\Intelliflag Content Monitor

Intelliflag Registry Keys:
HKEY_CLASSES_ROOT\clsid\{be51de2e-2fa0-4451-9241-8cfe5a2f9869}
HKEY_CLASSES_ROOT\interface\{05f35aa2-d3cc-4041-890c-046e9910d6bf}
HKEY_CLASSES_ROOT\sen10l2.registration
HKEY_CLASSES_ROOT\typelib\{e3324155-5645-4d6a-b0f2-89266b291c4f}
HKEY_LOCAL_MACHINE\software\intelliflag
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\intelliflag.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\intelliflag content monitor_is1

Intelliflag Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run

Removing Intelliflag:

you can run trial version of ExterminateIt, or remove Intelliflag manually.

To completely manually remove Intelliflag malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Intelliflag.

Aeta Trojan

Aeta description:
Aeta Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.
DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing Aeta:

you can run trial version of ExterminateIt, or remove Aeta manually.

To completely manually remove Aeta malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Aeta.

HllP.Mf Trojan

HllP.Mf description:
HllP.Mf Category:Trojan,Backdoor,Downloader,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Trojans-downloaders downloads and installs new malware or adware on the computer.

DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing HllP.Mf:

you can run trial version of ExterminateIt, or remove HllP.Mf manually.

To completely manually remove HllP.Mf malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with HllP.Mf.

Nympho Trojan

Nympho description:
Nympho Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Trojans-downloaders downloads and installs new malware or adware on the computer.

DoS trojans conduct attacks from a single computer with the consent of the user.

Removing Nympho:

you can run trial version of ExterminateIt, or remove Nympho manually.

To completely manually remove Nympho malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Nympho.

PSW.Defl Trojan

PSW.Defl description:
PSW.Defl Category:Trojan,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.

Removing PSW.Defl:

you can run trial version of ExterminateIt, or remove PSW.Defl manually.

To completely manually remove PSW.Defl malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PSW.Defl.

CAPTSR Spyware

CAPTSR description:
CAPTSR Category:Spyware
Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Removing CAPTSR:

you can run trial version of ExterminateIt, or remove CAPTSR manually.

To completely manually remove CAPTSR malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with CAPTSR.

PC.Acme Spyware

PC.Acme description:
PC.Acme Category:Spyware
Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Removing PC.Acme:

you can run trial version of ExterminateIt, or remove PC.Acme manually.

To completely manually remove PC.Acme malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PC.Acme.

Havar Trojan

Havar description:
Havar Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Detection Havar :

Havar Files:
[%SYSTEM%]\Example.exe
[%SYSTEM%]\Example.exe

Havar Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Havar:

you can run trial version of ExterminateIt, or remove Havar manually.

To completely manually remove Havar malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Havar.

Vxidl.AFC Trojan

Vxidl.AFC description:
Vxidl.AFC Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Vxidl.AFC:

you can run trial version of ExterminateIt, or remove Vxidl.AFC manually.

To completely manually remove Vxidl.AFC malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AFC.

WeirdOnTheWeb Adware

Click here to remove WeirdOnTheWeb malware

WeirdOnTheWeb description:
WeirdOnTheWeb Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Detection WeirdOnTheWeb :

WeirdOnTheWeb Files:
[%FAVORITES%]\weirdontheweb.url
[%WINDOWS%]\weirdontheweb_topc.exe
[%FAVORITES%]\weirdontheweb.url
[%WINDOWS%]\weirdontheweb_topc.exe

WeirdOnTheWeb Folders:
[%PROGRAM_FILES%]\weirdontheweb

WeirdOnTheWeb Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\weirdontheweb
HKEY_LOCAL_MACHINE\software\weirdontheweb

WeirdOnTheWeb Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing WeirdOnTheWeb:

you can run trial version of ExterminateIt, or remove WeirdOnTheWeb manually.

To completely manually remove WeirdOnTheWeb malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with WeirdOnTheWeb.

Wednesday, December 24, 2008

Pigeon.EGF Trojan

Pigeon.EGF description:
Pigeon.EGF Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.EGF:

you can run trial version of ExterminateIt, or remove Pigeon.EGF manually.

To completely manually remove Pigeon.EGF malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EGF.

Bancos.FWS Trojan

Bancos.FWS description:
Bancos.FWS Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.FWS:

you can run trial version of ExterminateIt, or remove Bancos.FWS manually.

To completely manually remove Bancos.FWS malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.FWS.

Win32.DeepThroat Trojan

Click here to remove Win32.DeepThroat malware

Win32.DeepThroat description:
Win32.DeepThroat Category:Trojan,Backdoor
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Removing Win32.DeepThroat:

you can run trial version of ExterminateIt, or remove Win32.DeepThroat manually.

To completely manually remove Win32.DeepThroat malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.DeepThroat.

Bat.Bingo Trojan

Bat.Bingo description:
Bat.Bingo Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bat.Bingo:

you can run trial version of ExterminateIt, or remove Bat.Bingo manually.

To completely manually remove Bat.Bingo malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bat.Bingo.

Bancos.AIA Trojan

Bancos.AIA description:
Bancos.AIA Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.AIA:

you can run trial version of ExterminateIt, or remove Bancos.AIA manually.

To completely manually remove Bancos.AIA malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.AIA.

QZap143 Trojan

QZap143 description:
QZap143 Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.
DoS trojans conduct attacks from a single computer with the consent of the user.

Removing QZap143:

you can run trial version of ExterminateIt, or remove QZap143 manually.

To completely manually remove QZap143 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with QZap143.

Win32.Simcss!Trojan Adware

Click here to remove Win32.Simcss!Trojan malware

Win32.Simcss!Trojan description:
Win32.Simcss!Trojan Category:Adware,Backdoor,Downloader,DoS
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.
DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing Win32.Simcss!Trojan:

you can run trial version of ExterminateIt, or remove Win32.Simcss!Trojan manually.

To completely manually remove Win32.Simcss!Trojan malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.Simcss!Trojan.

FDoS.Udp.Storm DoS

Click here to remove FDoS.Udp.Storm malware

FDoS.Udp.Storm description:
FDoS.Udp.Storm Category:DoS
DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing FDoS.Udp.Storm:

you can run trial version of ExterminateIt, or remove FDoS.Udp.Storm manually.

To completely manually remove FDoS.Udp.Storm malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with FDoS.Udp.Storm.

Wiadomosci.Server Trojan

Click here to remove Wiadomosci.Server malware

Wiadomosci.Server description:
Wiadomosci.Server Category:Trojan,Backdoor
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Removing Wiadomosci.Server:

you can run trial version of ExterminateIt, or remove Wiadomosci.Server manually.

To completely manually remove Wiadomosci.Server malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Wiadomosci.Server.

Pigeon.AKC Trojan

Pigeon.AKC description:
Pigeon.AKC Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AKC:

you can run trial version of ExterminateIt, or remove Pigeon.AKC manually.

To completely manually remove Pigeon.AKC malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AKC.

Zlob.Fam.XPasswordManager Trojan

Click here to remove Zlob.Fam.XPasswordManager malware

Zlob.Fam.XPasswordManager description:
Zlob.Fam.XPasswordManager Category:Trojan,Popups
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
The pop-ups generally will not be stopped by pop-up stoppers, and often are
not dependent on your having Internet Explorer open.

Detection Zlob.Fam.XPasswordManager :

Zlob.Fam.XPasswordManager Files:
[%PROGRAM_FILES%]\X Password Manager\uninst.exe
[%PROGRAM_FILES%]\X Password Manager\X Password Manager.url
[%PROGRAM_FILES%]\X Password Manager\xpassmanager.exe.manifest
[%PROGRAM_FILES%]\X Password Manager\uninst.exe
[%PROGRAM_FILES%]\X Password Manager\X Password Manager.url
[%PROGRAM_FILES%]\X Password Manager\xpassmanager.exe.manifest

Zlob.Fam.XPasswordManager Folders:
[%PROGRAM_FILES%]\X Password Manager

Zlob.Fam.XPasswordManager Registry Keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\X Password Manager

Removing Zlob.Fam.XPasswordManager:

you can run trial version of ExterminateIt, or remove Zlob.Fam.XPasswordManager manually.

To completely manually remove Zlob.Fam.XPasswordManager malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Zlob.Fam.XPasswordManager.

Nomek Trojan

Nomek description:
Nomek Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Nomek:

you can run trial version of ExterminateIt, or remove Nomek manually.

To completely manually remove Nomek malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Nomek.

Tuesday, December 23, 2008

TapiTroj Backdoor

TapiTroj description:
TapiTroj Category:Backdoor
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Removing TapiTroj:

you can run trial version of ExterminateIt, or remove TapiTroj manually.

To completely manually remove TapiTroj malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with TapiTroj.

Rbot.AGX Worm

Rbot.AGX description:
Rbot.AGX Category:Worm
Worms can be classified by installation method, launch method and finally according
to characteristics standard to all malware: polymorphism, stealth etc.

Many of the worms which managed to cause significant outbreaks use more then
one propagation method as well as more than one infection technique.

Removing Rbot.AGX:

you can run trial version of ExterminateIt, or remove Rbot.AGX manually.

To completely manually remove Rbot.AGX malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Rbot.AGX.

Vxidl.ATA Trojan

Vxidl.ATA description:
Vxidl.ATA Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Vxidl.ATA:

you can run trial version of ExterminateIt, or remove Vxidl.ATA manually.

To completely manually remove Vxidl.ATA malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.ATA.

SillyDl.CNC Trojan

Click here to remove SillyDl.CNC malware

SillyDl.CNC description:
SillyDl.CNC Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing SillyDl.CNC:

you can run trial version of ExterminateIt, or remove SillyDl.CNC manually.

To completely manually remove SillyDl.CNC malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CNC.

Online Adware

Online description:
Online Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Detection Online :

Online Files:
[%SYSTEM%]\SunInfoConnect.dll
[%WINDOWS%]\Downloaded Program Files\MaConnect.dll
[%WINDOWS%]\Downloaded Program Files\VLoading.dll
[%WINDOWS%]\downloaded program files\belcallconnect.dll
[%WINDOWS%]\downloaded program files\maconnect.dll
[%WINDOWS%]\downloaded program files\vloading.dll
[%WINDOWS%]\suninfoconnect.dll
[%SYSTEM%]\SunInfoConnect.dll
[%WINDOWS%]\Downloaded Program Files\MaConnect.dll
[%WINDOWS%]\Downloaded Program Files\VLoading.dll
[%WINDOWS%]\downloaded program files\belcallconnect.dll
[%WINDOWS%]\downloaded program files\maconnect.dll
[%WINDOWS%]\downloaded program files\vloading.dll
[%WINDOWS%]\suninfoconnect.dll

Online Folders:
[%PROGRAM_FILES%]\onlinedialer

Online Registry Keys:
HKEY_CLASSES_ROOT\clsid\{02c20140-76f8-4763-83d5-b660107b7a90}
HKEY_CLASSES_ROOT\clsid\{91df007c-2f7f-4731-be1f-38c1c13ceb8b}
HKEY_CLASSES_ROOT\clsid\{ab1e62eb-3de3-428f-a417-64ab3c9b6cf0}
HKEY_CLASSES_ROOT\clsid\{e44151c8-0c6c-4a7d-b677-4fcc9552e957}
HKEY_CLASSES_ROOT\typelib\{11bf0e2b-4229-4adc-9c11-1c6968731018}
HKEY_CLASSES_ROOT\typelib\{91df007c-2f7f-4731-be1f-38c1c13ceb8b}
HKEY_CLASSES_ROOT\typelib\{ab1e62eb-3de3-428f-a417-64ab3c9b6cf0}
HKEY_CLASSES_ROOT\typelib\{e44151c8-0c6c-4a7d-b677-4fcc9552e957}

Removing Online:

you can run trial version of ExterminateIt, or remove Online manually.

To completely manually remove Online malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Online.

Deser Trojan

Deser description:
Deser Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Deser:

you can run trial version of ExterminateIt, or remove Deser manually.

To completely manually remove Deser malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Deser.

GNotify Trojan

GNotify description:
GNotify Category:Trojan,Backdoor,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing GNotify:

you can run trial version of ExterminateIt, or remove GNotify manually.

To completely manually remove GNotify malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with GNotify.

Monday, December 22, 2008

Cyn.03a Trojan

Cyn.03a description:
Cyn.03a Category:Trojan,Backdoor,RAT
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

Removing Cyn.03a:

you can run trial version of ExterminateIt, or remove Cyn.03a manually.

To completely manually remove Cyn.03a malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Cyn.03a.

Bancos.GDF Trojan

Bancos.GDF description:
Bancos.GDF Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Bancos.GDF:

you can run trial version of ExterminateIt, or remove Bancos.GDF manually.

To completely manually remove Bancos.GDF malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.GDF.

Death.24!Editor Backdoor

Click here to remove Death.24!Editor malware

Death.24!Editor description:
Death.24!Editor Category:Backdoor
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Removing Death.24!Editor:

you can run trial version of ExterminateIt, or remove Death.24!Editor manually.

To completely manually remove Death.24!Editor malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Death.24!Editor.

Pigeon.AHP Trojan

Pigeon.AHP description:
Pigeon.AHP Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AHP:

you can run trial version of ExterminateIt, or remove Pigeon.AHP manually.

To completely manually remove Pigeon.AHP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AHP.

Tracking.Cookie Tracking Cookie

Click here to remove Tracking.Cookie malware

Tracking.Cookie description:
Tracking.Cookie Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing Tracking.Cookie:

you can run trial version of ExterminateIt, or remove Tracking.Cookie manually.

To completely manually remove Tracking.Cookie malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Tracking.Cookie.

Dol Trojan

Dol description:
Dol Category:Trojan,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing Dol:

you can run trial version of ExterminateIt, or remove Dol manually.

To completely manually remove Dol malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Dol.

Pigeon.EMH Trojan

Pigeon.EMH description:
Pigeon.EMH Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.EMH:

you can run trial version of ExterminateIt, or remove Pigeon.EMH manually.

To completely manually remove Pigeon.EMH malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EMH.

Vxidl.ADJ Trojan

Vxidl.ADJ description:
Vxidl.ADJ Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Vxidl.ADJ:

you can run trial version of ExterminateIt, or remove Vxidl.ADJ manually.

To completely manually remove Vxidl.ADJ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.ADJ.

Crystars.Proto.Bomber Hacker Tool

Click here to remove Crystars.Proto.Bomber malware

Crystars.Proto.Bomber description:
Crystars.Proto.Bomber Category:Hacker Tool,DoS
These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing Crystars.Proto.Bomber:

you can run trial version of ExterminateIt, or remove Crystars.Proto.Bomber manually.

To completely manually remove Crystars.Proto.Bomber malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Crystars.Proto.Bomber.

Sunday, December 21, 2008

Bancos.GPY Trojan

Bancos.GPY description:
Bancos.GPY Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Bancos.GPY:

you can run trial version of ExterminateIt, or remove Bancos.GPY manually.

To completely manually remove Bancos.GPY malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.GPY.

Bancos.ABU Trojan

Bancos.ABU description:
Bancos.ABU Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.ABU:

you can run trial version of ExterminateIt, or remove Bancos.ABU manually.

To completely manually remove Bancos.ABU malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.ABU.