Sunday, November 30, 2008

Tenbytes Trojan

Tenbytes malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]TenBytes.1411;
[Eset]Tenbytes.1451.A virus;
[McAfee]Tenbytes;
[Panda]Diskjeb,TenBytes.1554.A;
[Computer Associates]Tenbytes 1451,Tenbytes.1514

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Tenbytes:

An up-to-date copy of ExterminateIt should detect and prevent infection from Tenbytes.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Tenbytes manually.

To completely manually remove Tenbytes malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Tenbytes.

  1. Use Task Manager to terminate the Tenbytes process.
  2. Delete the original Tenbytes file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Tenbytes from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Tenbytes!


Also Be Aware of the Following Threats:
SillyDl.BZD Downloader Removal instruction
Pigeon.AVKL Trojan Symptoms
Remove Bancos.HWS Trojan
Bancos.GYD Trojan Removal instruction

Bancos.FZI Trojan

Bancos.FZI malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.FZI:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.FZI.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Bancos.FZI manually.

To completely manually remove Bancos.FZI malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.FZI.

  1. Use Task Manager to terminate the Bancos.FZI process.
  2. Delete the original Bancos.FZI file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Bancos.FZI from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Bancos.FZI!


Also Be Aware of the Following Threats:
Azara Trojan Symptoms
IWantSearch Adware Removal instruction

Config.Boot Trojan

Config.Boot malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Virus.Boot-DOS.Config_Boot.b;
[Panda]HMABoot.512.B;
[Computer Associates]Config_Boot.b

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Config.Boot:

An up-to-date copy of ExterminateIt should detect and prevent infection from Config.Boot.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Config.Boot manually.

To completely manually remove Config.Boot malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Config.Boot.

  1. Use Task Manager to terminate the Config.Boot process.
  2. Delete the original Config.Boot file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Config.Boot from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Config.Boot!


Also Be Aware of the Following Threats:
Osmosis RAT Removal

QSD23 Trojan

QSD23 malware description and removal detail
Categories:Trojan
Also known as:

[Eset]Win32/Asit trojan;
[McAfee]QSD23;
[F-Prot]destructive program;
[Panda]Trj/Asit;
[Computer Associates]Win.Asit,Win/Bomber!Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing QSD23:

An up-to-date copy of ExterminateIt should detect and prevent infection from QSD23.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove QSD23 manually.

To completely manually remove QSD23 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with QSD23.

  1. Use Task Manager to terminate the QSD23 process.
  2. Delete the original QSD23 file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes QSD23 from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of QSD23!


Also Be Aware of the Following Threats:
Removing cl Trojan
Remove Backdoor.Jaedus.Server Backdoor
Removing IstBar.ga Trojan
Racchel Trojan Removal instruction

Vxidl.ATP Trojan

Vxidl.ATP malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Vxidl.ATP:

An up-to-date copy of ExterminateIt should detect and prevent infection from Vxidl.ATP.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Vxidl.ATP manually.

To completely manually remove Vxidl.ATP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.ATP.

  1. Use Task Manager to terminate the Vxidl.ATP process.
  2. Delete the original Vxidl.ATP file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Vxidl.ATP from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Vxidl.ATP!


Also Be Aware of the Following Threats:
Vxidl.ANW Trojan Removal instruction

Bancos.HMF Trojan

Bancos.HMF malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.HMF:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.HMF.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Bancos.HMF manually.

To completely manually remove Bancos.HMF malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.HMF.

  1. Use Task Manager to terminate the Bancos.HMF process.
  2. Delete the original Bancos.HMF file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Bancos.HMF from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Bancos.HMF!


Also Be Aware of the Following Threats:
Removing SillyDI Trojan
HGZ Backdoor Symptoms
Remove Searchaid.URL.Search.Hook Adware
Bancos.HZI Trojan Information
Attune Adware Cleaner

startpage.ajj Adware

startpage.ajj malware description and removal detail
Categories:Adware

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing startpage.ajj:

An up-to-date copy of ExterminateIt should detect and prevent infection from startpage.ajj.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove startpage.ajj manually.

To completely manually remove startpage.ajj malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with startpage.ajj.

  1. Use Task Manager to terminate the startpage.ajj process.
  2. Delete the original startpage.ajj file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes startpage.ajj from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of startpage.ajj!


Also Be Aware of the Following Threats:
Cydoor Adware Information

Pigeon.EHI Trojan

Pigeon.EHI malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.EHI:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.EHI.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.EHI manually.

To completely manually remove Pigeon.EHI malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EHI.

  1. Use Task Manager to terminate the Pigeon.EHI process.
  2. Delete the original Pigeon.EHI file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Pigeon.EHI from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Pigeon.EHI!


Also Be Aware of the Following Threats:
Removing GaduGadu Trojan
Removing Vxidl.AVG Trojan
SillyDl.CHK Trojan Removal

Kryptonic.Ghost.Command Trojan

Kryptonic.Ghost.Command malware description and removal detail
Categories:Trojan,Backdoor,RAT,Hacker Tool
Also known as:

[Kaspersky]Backdoor.Kryptonic.10,Backdoor.Kryptonic.20,Backdoor.Kryptonic.13,Backdoor.Kryptonic.15.a,Trojan.Win32.Killav.n,Backdoor.Kryptonic.15.b;
[Eset]Win32/Kryptonic.15 trojan;
[McAfee]BackDoor-AFZ,ProcKill;
[F-Prot]destructive program,security risk or a "backdoor" program;
[Panda]Backdoor Program,Bck/Kryptonic.15.b;
[Computer Associates]Backdoor/Kryptoni!Server,Backdoor/Krypto13!Server,Win32.Kryptonic.A,Backdoor/Kryptonic.15!Client,Win32.Kryptonic.B,Win32.KryptonicKill.12,Win32/Kryptonic.15!Trojan,Win32/KryptonicKill.12!Trojan,Backdoor/Kryptonic.15.b,Backdoor/Kryptonic.15.b!Server,Win32.Kryptonic.C

Visible Symptoms:
Files in system folders:
[%WINDOWS%]\netode.exe
[%WINDOWS%]\system\msgp.exe
[%WINDOWS%]\system\mtr2.exe
[%WINDOWS%]\netode.exe
[%WINDOWS%]\system\msgp.exe
[%WINDOWS%]\system\mtr2.exe

In order to ensure that the Kryptonic.Ghost.Command is launched automatically each time the system is booted, the Kryptonic.Ghost.Command adds a link to its executable file in the system registry:
HKLM\Microsoft\Windows\CurrentVersion\Run
[%WINDOWS%]\netode.exe
[%WINDOWS%]\system\msgp.exe
[%WINDOWS%]\system\mtr2.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Kryptonic.Ghost.Command:

Files:
[%WINDOWS%]\netode.exe
[%WINDOWS%]\system\msgp.exe
[%WINDOWS%]\system\mtr2.exe
[%WINDOWS%]\netode.exe
[%WINDOWS%]\system\msgp.exe
[%WINDOWS%]\system\mtr2.exe

Folders:
[%WINDOWS%]\system\smp

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Kryptonic.Ghost.Command:

An up-to-date copy of ExterminateIt should detect and prevent infection from Kryptonic.Ghost.Command.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Kryptonic.Ghost.Command manually.

To completely manually remove Kryptonic.Ghost.Command malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Kryptonic.Ghost.Command.

  1. Use Task Manager to terminate the Kryptonic.Ghost.Command process.
  2. Delete the original Kryptonic.Ghost.Command file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Kryptonic.Ghost.Command from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Kryptonic.Ghost.Command!


Also Be Aware of the Following Threats:
AprilFool Trojan Cleaner
Error.Inspector Ransomware Information
SillyDl.CBF Trojan Symptoms
Removing Support Trojan

API.PM.Bomber Trojan

API.PM.Bomber malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing API.PM.Bomber:

An up-to-date copy of ExterminateIt should detect and prevent infection from API.PM.Bomber.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove API.PM.Bomber manually.

To completely manually remove API.PM.Bomber malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with API.PM.Bomber.

  1. Use Task Manager to terminate the API.PM.Bomber process.
  2. Delete the original API.PM.Bomber file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes API.PM.Bomber from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of API.PM.Bomber!


Also Be Aware of the Following Threats:
Removing Stealth.Keyboard.Interceptor.Auto.Sender Spyware
Bazooka Ransomware Cleaner
Small.ct Backdoor Removal instruction

Rattler.ICQ Trojan

Rattler.ICQ malware description and removal detail
Categories:Trojan,Backdoor,RAT
Also known as:

[Kaspersky]Backdoor.BO2K.plugin.Ricq.a,Backdoor.BO2K.plugin;
[Eset]Win32/BO2K.Plugin.Ricq.A trojan;
[Panda]Bck/BO2K.Plugin.Ricq.a,Backdoor Program;
[Computer Associates]Backdoor/BO2K!plugin.Ricq.a,Backdoor/BO2K!plugin

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Rattler.ICQ:

An up-to-date copy of ExterminateIt should detect and prevent infection from Rattler.ICQ.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Rattler.ICQ manually.

To completely manually remove Rattler.ICQ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Rattler.ICQ.

  1. Use Task Manager to terminate the Rattler.ICQ process.
  2. Delete the original Rattler.ICQ file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Rattler.ICQ from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Rattler.ICQ!


Also Be Aware of the Following Threats:
WM.Komcon Trojan Removal
Tainted.Bot DoS Cleaner
Bancos.IFX Trojan Information
Offer.Companion Adware Symptoms

Sprincape Trojan

Sprincape malware description and removal detail
Categories:Trojan
Also known as:

[Kaspersky]Trojan.Win32.Qhost.oc;
[McAfee]Spy-Agent.cj;
[Other]Win32/Sprincape.B,Trojan Horse,Win32/Sprincape.H,Backdoor:Win32/Stealbot.gen

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\fsdutil.exe
[%SYSTEM%]\lkavs32.exe
[%SYSTEM%]\netstdll2.exe
[%SYSTEM%]\ntvdc.exe
[%SYSTEM%]\nvsvcsb.exe
[%SYSTEM%]\rdatasys2.exe
[%SYSTEM%]\wdtcp.exe
[%SYSTEM%]\wingtsv.exe
[%SYSTEM%]\fsdutil.exe
[%SYSTEM%]\lkavs32.exe
[%SYSTEM%]\netstdll2.exe
[%SYSTEM%]\ntvdc.exe
[%SYSTEM%]\nvsvcsb.exe
[%SYSTEM%]\rdatasys2.exe
[%SYSTEM%]\wdtcp.exe
[%SYSTEM%]\wingtsv.exe

In order to ensure that the Sprincape is launched automatically each time the system is booted, the Sprincape adds a link to its executable file in the system registry:
HKLM\Microsoft\Windows\CurrentVersion\Run
[%SYSTEM%]\fsdutil.exe
[%SYSTEM%]\lkavs32.exe
[%SYSTEM%]\netstdll2.exe
[%SYSTEM%]\ntvdc.exe
[%SYSTEM%]\nvsvcsb.exe
[%SYSTEM%]\rdatasys2.exe
[%SYSTEM%]\wdtcp.exe
[%SYSTEM%]\wingtsv.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Sprincape:

Files:
[%SYSTEM%]\fsdutil.exe
[%SYSTEM%]\lkavs32.exe
[%SYSTEM%]\netstdll2.exe
[%SYSTEM%]\ntvdc.exe
[%SYSTEM%]\nvsvcsb.exe
[%SYSTEM%]\rdatasys2.exe
[%SYSTEM%]\wdtcp.exe
[%SYSTEM%]\wingtsv.exe
[%SYSTEM%]\fsdutil.exe
[%SYSTEM%]\lkavs32.exe
[%SYSTEM%]\netstdll2.exe
[%SYSTEM%]\ntvdc.exe
[%SYSTEM%]\nvsvcsb.exe
[%SYSTEM%]\rdatasys2.exe
[%SYSTEM%]\wdtcp.exe
[%SYSTEM%]\wingtsv.exe

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce

Removing Sprincape:

An up-to-date copy of ExterminateIt should detect and prevent infection from Sprincape.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Sprincape manually.

To completely manually remove Sprincape malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Sprincape.

  1. Use Task Manager to terminate the Sprincape process.
  2. Delete the original Sprincape file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Sprincape from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Sprincape!


Also Be Aware of the Following Threats:
Y!F**ker DoS Removal instruction
QDel354 Trojan Cleaner

Win95.Coce2225 Trojan

Win95.Coce2225 malware description and removal detail
Categories:Trojan,Spyware,Backdoor,Hacker Tool
Also known as:

[Panda]Trj/PSW.Coced.216.c,Trj/PSW.Coced.237.A,Trj/Doscin.A,Backdoor Program;
[Computer Associates]Win95/Coce2225!Dropper

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Win95.Coce2225:

An up-to-date copy of ExterminateIt should detect and prevent infection from Win95.Coce2225.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Win95.Coce2225 manually.

To completely manually remove Win95.Coce2225 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win95.Coce2225.

  1. Use Task Manager to terminate the Win95.Coce2225 process.
  2. Delete the original Win95.Coce2225 file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Win95.Coce2225 from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Win95.Coce2225!


Also Be Aware of the Following Threats:
SillyDl.DNO Trojan Symptoms

TrojanDownloader.Win32.Apher Downloader

TrojanDownloader.Win32.Apher malware description and removal detail
Categories:Downloader,Hacker Tool
Also known as:

[Kaspersky]Constructor.Win32.Shiber;
[Panda]Virus Constructor

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing TrojanDownloader.Win32.Apher:

An up-to-date copy of ExterminateIt should detect and prevent infection from TrojanDownloader.Win32.Apher.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove TrojanDownloader.Win32.Apher manually.

To completely manually remove TrojanDownloader.Win32.Apher malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with TrojanDownloader.Win32.Apher.

  1. Use Task Manager to terminate the TrojanDownloader.Win32.Apher process.
  2. Delete the original TrojanDownloader.Win32.Apher file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes TrojanDownloader.Win32.Apher from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of TrojanDownloader.Win32.Apher!


Also Be Aware of the Following Threats:
System33 Trojan Information
Remove Diedix.Sys Trojan
Removing PerfLogger Trojan
Arsd Trojan Removal instruction
Remove Pigeon.ELW Trojan

SpyAll Spyware

SpyAll malware description and removal detail
Categories:Spyware

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing SpyAll:

An up-to-date copy of ExterminateIt should detect and prevent infection from SpyAll.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove SpyAll manually.

To completely manually remove SpyAll malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SpyAll.

  1. Use Task Manager to terminate the SpyAll process.
  2. Delete the original SpyAll file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes SpyAll from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of SpyAll!


Also Be Aware of the Following Threats:
Spliff RAT Removal
FreeWire Worm Removal
Danschl Trojan Removal instruction
PhoneTerror Adware Removal instruction

Zrk Trojan

Zrk malware description and removal detail
Categories:Trojan,Backdoor,Downloader,DoS
Also known as:

[Kaspersky]Loz.1958;
[Eset]Zherkov.1958 virus;
[McAfee]Univ/f;
[F-Prot]Zherkov.1958;
[Panda]Zherkov.1958;
[Computer Associates]Zherkov 2970

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Zrk:

An up-to-date copy of ExterminateIt should detect and prevent infection from Zrk.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Zrk manually.

To completely manually remove Zrk malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Zrk.

  1. Use Task Manager to terminate the Zrk process.
  2. Delete the original Zrk file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Zrk from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Zrk!


Also Be Aware of the Following Threats:
MagicCenter Trojan Removal instruction
Removing mcgaming.com Tracking Cookie
Octa Spyware Removal

Krepper Trojan

Krepper malware description and removal detail
Categories:Trojan,Spyware,Downloader
Also known as:

[Kaspersky]Trojan.Win32.Krepper.a;
[Panda]Trojan Horse;
[Computer Associates]Win32/Krepper.b!PWS!Trojan,Win32/Krepper!Trojan,Win32.Azara

Visible Symptoms:
Files in system folders:
[%WINDOWS%]\temp\svshost.exe
[%WINDOWS%]\temp\svshost.exe

In order to ensure that the Krepper is launched automatically each time the system is booted, the Krepper adds a link to its executable file in the system registry:
HKLM\Microsoft\Windows\CurrentVersion\Run
[%WINDOWS%]\temp\svshost.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Krepper:

Files:
[%WINDOWS%]\temp\svshost.exe
[%WINDOWS%]\temp\svshost.exe

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/qabar.dll

Removing Krepper:

An up-to-date copy of ExterminateIt should detect and prevent infection from Krepper.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Krepper manually.

To completely manually remove Krepper malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Krepper.

  1. Use Task Manager to terminate the Krepper process.
  2. Delete the original Krepper file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Krepper from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Krepper!


Also Be Aware of the Following Threats:
Removing MailSpam.DMail Hacker Tool
Begemot Trojan Information
Robobot Backdoor Removal

Hooker.Keylogger Spyware

Hooker.Keylogger malware description and removal detail
Categories:Spyware,Hacker Tool

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Hooker.Keylogger:

An up-to-date copy of ExterminateIt should detect and prevent infection from Hooker.Keylogger.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Hooker.Keylogger manually.

To completely manually remove Hooker.Keylogger malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Hooker.Keylogger.

  1. Use Task Manager to terminate the Hooker.Keylogger process.
  2. Delete the original Hooker.Keylogger file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Hooker.Keylogger from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Hooker.Keylogger!


Also Be Aware of the Following Threats:
Removing SillyDl.CUA Trojan

Neter Trojan

Neter malware description and removal detail
Categories:Trojan,Downloader,Hacker Tool
Also known as:

[Kaspersky]TrojanDownloader.Win32.Webaut.a;
[Panda]Trj/Trifor,Trojan Horse,W32/Weko;
[Computer Associates]Win32.Neter,Win32/Neter!Trojan,Win32.Neter.B,Win32/Neter.B!Trojan,Win32/Neter.A!PWS!Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Neter:

An up-to-date copy of ExterminateIt should detect and prevent infection from Neter.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Neter manually.

To completely manually remove Neter malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Neter.

  1. Use Task Manager to terminate the Neter process.
  2. Delete the original Neter file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Neter from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Neter!


Also Be Aware of the Following Threats:
SillyDl.DCW Trojan Cleaner
Integr Trojan Symptoms
ROCI Backdoor Removal

Loadax Trojan

Loadax malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Loadax:

An up-to-date copy of ExterminateIt should detect and prevent infection from Loadax.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Loadax manually.

To completely manually remove Loadax malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Loadax.

  1. Use Task Manager to terminate the Loadax process.
  2. Delete the original Loadax file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Loadax from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Loadax!


Also Be Aware of the Following Threats:
Pigeon.AOY Trojan Removal
Sadhound Trojan Information
Zombie.version RAT Removal instruction
CFSK Trojan Symptoms
KeenValue.Incredifind Hijacker Removal

CoolWeb Adware

CoolWeb malware description and removal detail
Categories:Adware
Visible Symptoms:
Files in system folders:
[%DESKTOP%]\htmlcore75.dll
[%DESKTOP%]\htmlcore75.dll

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting CoolWeb:

Files:
[%DESKTOP%]\htmlcore75.dll
[%DESKTOP%]\htmlcore75.dll

Removing CoolWeb:

An up-to-date copy of ExterminateIt should detect and prevent infection from CoolWeb.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove CoolWeb manually.

To completely manually remove CoolWeb malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with CoolWeb.

  1. Use Task Manager to terminate the CoolWeb process.
  2. Delete the original CoolWeb file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes CoolWeb from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of CoolWeb!


Also Be Aware of the Following Threats:
Remove PeerEnabler Worm

Netrax Backdoor

Netrax malware description and removal detail
Categories:Backdoor,RAT
Also known as:

[Panda]Bck/Netrax;
[Computer Associates]Backdoor/Netrax.A

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Netrax:

An up-to-date copy of ExterminateIt should detect and prevent infection from Netrax.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Netrax manually.

To completely manually remove Netrax malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Netrax.

  1. Use Task Manager to terminate the Netrax process.
  2. Delete the original Netrax file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Netrax from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Netrax!


Also Be Aware of the Following Threats:
Server.Sockets Trojan Symptoms
Desktop.Doodle Adware Removal instruction

Win32.Neurotic Trojan

Win32.Neurotic malware description and removal detail
Categories:Trojan,Backdoor
Also known as:

[Kaspersky]Backdoor.Neurotic.12.a;
[Eset]Win32/Neurotic.10.B trojan;
[McAfee]BackDoor-TI;
[F-Prot]security risk or a "backdoor" program;
[Panda]Bck/Neurotic.12

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Win32.Neurotic:

An up-to-date copy of ExterminateIt should detect and prevent infection from Win32.Neurotic.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Win32.Neurotic manually.

To completely manually remove Win32.Neurotic malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.Neurotic.

  1. Use Task Manager to terminate the Win32.Neurotic process.
  2. Delete the original Win32.Neurotic file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Win32.Neurotic from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Win32.Neurotic!


Also Be Aware of the Following Threats:
combrepl.dll Adware Symptoms
Help.Express Adware Removal
Remove Lucie Trojan
Bancos.HEO Trojan Removal

Virus.Ray Ransomware

Virus.Ray malware description and removal detail
Categories:Ransomware
Visible Symptoms:
Files in system folders:
[%DESKTOP%]\VirusRay 3.8.lnk
[%STARTMENU%]\VirusRay 3.8.lnk
[%DESKTOP%]\VirusRay 3.8.lnk
[%STARTMENU%]\VirusRay 3.8.lnk

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Virus.Ray:

Files:
[%DESKTOP%]\VirusRay 3.8.lnk
[%STARTMENU%]\VirusRay 3.8.lnk
[%DESKTOP%]\VirusRay 3.8.lnk
[%STARTMENU%]\VirusRay 3.8.lnk

Folders:
[%PROGRAMS%]\VirusRay 3.8
[%PROGRAM_FILES%]\VirusRay 3.8

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{97c6e0e9-1d24-48ca-11e7-dc22c5308aba}
HKEY_CLASSES_ROOT\interface\{1d723c81-2c9f-44dd-8f94-a2d3a06845e9}
HKEY_CLASSES_ROOT\interface\{41fc2ebd-79f5-4fe0-8558-708dcb7fe255}
HKEY_CLASSES_ROOT\interface\{45db217b-965d-4917-a653-c2a871534b4c}
HKEY_CLASSES_ROOT\interface\{48a95844-a761-4d96-8191-0913d493823e}
HKEY_CLASSES_ROOT\interface\{60fd2747-818b-4242-a041-4c1209f3d3a6}
HKEY_CLASSES_ROOT\interface\{70f731fd-6c5f-4d46-a29c-6b97fabef0d0}
HKEY_CLASSES_ROOT\interface\{77f6abaa-c14b-4e0c-975e-0cffa568b0be}
HKEY_CLASSES_ROOT\interface\{78aa9209-ded5-4f37-93a0-89fbee57e4fc}
HKEY_CLASSES_ROOT\interface\{869b656b-142e-47e6-b4f6-973d17e80bbf}
HKEY_CLASSES_ROOT\interface\{89f84a04-f5ef-4f4a-af97-7da43dd0371f}
HKEY_CLASSES_ROOT\interface\{8f9c1393-41d7-4be1-8752-098bc97514d2}
HKEY_CLASSES_ROOT\interface\{9097fa96-8efd-4d04-8024-c920ab56bbea}
HKEY_CLASSES_ROOT\interface\{acd5d550-4481-4f05-b6d8-a78566bd81d3}
HKEY_CLASSES_ROOT\interface\{be096ecd-d62e-4b2d-bba5-cbf9bfa4ab23}
HKEY_CLASSES_ROOT\interface\{dda20808-84a0-48c3-902a-7e31ff47ea6b}
HKEY_CLASSES_ROOT\interface\{e9c4cbeb-7bdf-47ff-8edf-d72b50bb50ef}
HKEY_CLASSES_ROOT\typelib\{1ae427b0-e3b7-4d2e-a6b9-36605b0f214e}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\virusray 3.8.exe 3.8
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virusray 3.8
HKEY_LOCAL_MACHINE\software\virusray 3.8

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Virus.Ray:

An up-to-date copy of ExterminateIt should detect and prevent infection from Virus.Ray.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Virus.Ray manually.

To completely manually remove Virus.Ray malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Virus.Ray.

  1. Use Task Manager to terminate the Virus.Ray process.
  2. Delete the original Virus.Ray file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Virus.Ray from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Virus.Ray!


Also Be Aware of the Following Threats:
DES.ActiveX.Control RAT Removal

Bat.Frog Trojan

Bat.Frog malware description and removal detail
Categories:Trojan
Also known as:

[Eset]Bat.Frog virus;
[Panda]BAT/Froggy.1476;
[Computer Associates]Bat/Frog

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bat.Frog:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bat.Frog.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Bat.Frog manually.

To completely manually remove Bat.Frog malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bat.Frog.

  1. Use Task Manager to terminate the Bat.Frog process.
  2. Delete the original Bat.Frog file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Bat.Frog from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Bat.Frog!


Also Be Aware of the Following Threats:
Removing Aliseru Trojan
Pigeon.AVRJ Trojan Cleaner

Pigeon.EVS Trojan

Pigeon.EVS malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.EVS:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.EVS.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.EVS manually.

To completely manually remove Pigeon.EVS malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EVS.

  1. Use Task Manager to terminate the Pigeon.EVS process.
  2. Delete the original Pigeon.EVS file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Pigeon.EVS from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Pigeon.EVS!


Also Be Aware of the Following Threats:
TrojanDownloader.Win32.Small.rn Downloader Removal instruction
Divago.Surfairy BHO Symptoms
Junk.NavQuar Spyware Removal
RAS Adware Removal

Saturday, November 29, 2008

EmTee Trojan

EmTee malware description and removal detail
Categories:Trojan,Backdoor

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing EmTee:

An up-to-date copy of ExterminateIt should detect and prevent infection from EmTee.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove EmTee manually.

To completely manually remove EmTee malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with EmTee.

  1. Use Task Manager to terminate the EmTee process.
  2. Delete the original EmTee file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes EmTee from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of EmTee!


Also Be Aware of the Following Threats:
Bancos.AEH Trojan Information
Pigeon.ASU Trojan Information
SpyDldr.J Trojan Information
Spy.Goldun Trojan Information
revsci.net Tracking Cookie Removal

ELF.R40!Rootkit!Trojan Backdoor

ELF.R40!Rootkit!Trojan malware description and removal detail
Categories:Backdoor
Also known as:

[Panda]Linux/RootKit.40

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing ELF.R40!Rootkit!Trojan:

An up-to-date copy of ExterminateIt should detect and prevent infection from ELF.R40!Rootkit!Trojan.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove ELF.R40!Rootkit!Trojan manually.

To completely manually remove ELF.R40!Rootkit!Trojan malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ELF.R40!Rootkit!Trojan.

  1. Use Task Manager to terminate the ELF.R40!Rootkit!Trojan process.
  2. Delete the original ELF.R40!Rootkit!Trojan file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes ELF.R40!Rootkit!Trojan from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of ELF.R40!Rootkit!Trojan!


Also Be Aware of the Following Threats:
Zdesnado Downloader Information
PSW.Platan Trojan Information
Removing SdBot.ar Backdoor

Pigeon.FAK Trojan

Pigeon.FAK malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.FAK:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.FAK.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.FAK manually.

To completely manually remove Pigeon.FAK malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.FAK.

  1. Use Task Manager to terminate the Pigeon.FAK process.
  2. Delete the original Pigeon.FAK file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Pigeon.FAK from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Pigeon.FAK!


Also Be Aware of the Following Threats:
Removing SillyDl.CLG Trojan

Tobort Trojan

Tobort malware description and removal detail
Categories:Trojan,Backdoor
Also known as:

[Kaspersky]Backdoor.Win32.Delf.apv;
[Other]Win32/Tobort.A,Win32/Jilor.A!Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Tobort:

An up-to-date copy of ExterminateIt should detect and prevent infection from Tobort.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Tobort manually.

To completely manually remove Tobort malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Tobort.

  1. Use Task Manager to terminate the Tobort process.
  2. Delete the original Tobort file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Tobort from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Tobort!


Also Be Aware of the Following Threats:
ICanNews Adware Cleaner
Bancos.HKT Trojan Symptoms
Bancos.ADP Trojan Information

Huey RAT

Huey malware description and removal detail
Categories:RAT

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Huey:

An up-to-date copy of ExterminateIt should detect and prevent infection from Huey.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Huey manually.

To completely manually remove Huey malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Huey.

  1. Use Task Manager to terminate the Huey process.
  2. Delete the original Huey file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Huey from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Huey!


Also Be Aware of the Following Threats:
Pigeon.AXH Trojan Removal instruction

VB.ri Backdoor

VB.ri malware description and removal detail
Categories:Backdoor

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing VB.ri:

An up-to-date copy of ExterminateIt should detect and prevent infection from VB.ri.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove VB.ri manually.

To completely manually remove VB.ri malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with VB.ri.

  1. Use Task Manager to terminate the VB.ri process.
  2. Delete the original VB.ri file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes VB.ri from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of VB.ri!


Also Be Aware of the Following Threats:
Removing SillyDl.CFO Downloader

Pigeon.EDE Trojan

Pigeon.EDE malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.EDE:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.EDE.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.EDE manually.

To completely manually remove Pigeon.EDE malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.EDE.

  1. Use Task Manager to terminate the Pigeon.EDE process.
  2. Delete the original Pigeon.EDE file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Pigeon.EDE from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Pigeon.EDE!


Also Be Aware of the Following Threats:
Windows.TaskAd Adware Symptoms
FCHelp Adware Removal instruction
Banker.anv Spyware Removal instruction
Pigeon.AVBB Trojan Removal
Tarliver Trojan Cleaner

DelFin.Media.Viewer Trojan

DelFin.Media.Viewer malware description and removal detail
Categories:Trojan,Adware,Hijacker
Also known as:

[Panda]Adware/DelFinMedia,Trj/StartPage.AP

Visible Symptoms:
Files in system folders:
[%APPDATA%]\Tenebril\GhostSurf\3.0\Spyware history\Restore\4c86fe3d62ffa37a994ed2f0b782ea70
[%APPDATA%]\Tenebril\GhostSurf\3.0\Spyware history\Restore\c16f68d6210b3cc44609682e83fa1f60
[%APPDATA%]\Tenebril\GhostSurf\3.0\Spyware history\Restore\d3d3bfa84849ee8f41f8cab8bc2ccce4
[%COMMON_APPDATA%]\wsxs\Adverts\195.dfn
[%COMMON_APPDATA%]\wsxs\patchme.exe
[%PROGRAM_FILES_COMMON%]\remove_tools.html
[%PROGRAM_FILES%]\PeDevice\PeDev.dll
[%SYSTEM%]\nfomon\nfom.dll
[%SYSTEM%]\nfomon\nfomon.exe
[%SYSTEM%]\vidmon\vidmon.exe
[%APPDATA%]\picsvr\picsvr.inf
[%DESKTOP%]\wtsdfi.exe
[%PROGRAM_FILES%]\common files\remove_tools.html
[%SYSTEM%]\delfin.dll
[%SYSTEM%]\vmss\vmss.exe
[%WINDOWS%]\windows\system32\vmss\vmss.exe
[%WINDOWS%]\windows\system32\wsxsvc\uninstall.html
[%WINDOWS%]\windows\system32\wsxsvc\wsx.dll
[%WINDOWS%]\windows\system32\wsxsvc\wsx.ocx
[%WINDOWS%]\windows\system32\wsxsvc\wsxsvc.exe
[%APPDATA%]\Tenebril\GhostSurf\3.0\Spyware history\Restore\4c86fe3d62ffa37a994ed2f0b782ea70
[%APPDATA%]\Tenebril\GhostSurf\3.0\Spyware history\Restore\c16f68d6210b3cc44609682e83fa1f60
[%APPDATA%]\Tenebril\GhostSurf\3.0\Spyware history\Restore\d3d3bfa84849ee8f41f8cab8bc2ccce4
[%COMMON_APPDATA%]\wsxs\Adverts\195.dfn
[%COMMON_APPDATA%]\wsxs\patchme.exe
[%PROGRAM_FILES_COMMON%]\remove_tools.html
[%PROGRAM_FILES%]\PeDevice\PeDev.dll
[%SYSTEM%]\nfomon\nfom.dll
[%SYSTEM%]\nfomon\nfomon.exe
[%SYSTEM%]\vidmon\vidmon.exe
[%APPDATA%]\picsvr\picsvr.inf
[%DESKTOP%]\wtsdfi.exe
[%PROGRAM_FILES%]\common files\remove_tools.html
[%SYSTEM%]\delfin.dll
[%SYSTEM%]\vmss\vmss.exe
[%WINDOWS%]\windows\system32\vmss\vmss.exe
[%WINDOWS%]\windows\system32\wsxsvc\uninstall.html
[%WINDOWS%]\windows\system32\wsxsvc\wsx.dll
[%WINDOWS%]\windows\system32\wsxsvc\wsx.ocx
[%WINDOWS%]\windows\system32\wsxsvc\wsxsvc.exe

In order to ensure that the DelFin.Media.Viewer is launched automatically each time the system is booted, the DelFin.Media.Viewer adds a link to its executable file in the system registry:
HKLM\Microsoft\Windows\CurrentVersion\Run
[%COMMON_APPDATA%]\wsxs\patchme.exe
[%SYSTEM%]\nfomon\nfomon.exe
[%SYSTEM%]\vidmon\vidmon.exe
[%DESKTOP%]\wtsdfi.exe
[%SYSTEM%]\vmss\vmss.exe
[%WINDOWS%]\windows\system32\vmss\vmss.exe
[%WINDOWS%]\windows\system32\wsxsvc\wsxsvc.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting DelFin.Media.Viewer:

Files:
[%APPDATA%]\Tenebril\GhostSurf\3.0\Spyware history\Restore\4c86fe3d62ffa37a994ed2f0b782ea70
[%APPDATA%]\Tenebril\GhostSurf\3.0\Spyware history\Restore\c16f68d6210b3cc44609682e83fa1f60
[%APPDATA%]\Tenebril\GhostSurf\3.0\Spyware history\Restore\d3d3bfa84849ee8f41f8cab8bc2ccce4
[%COMMON_APPDATA%]\wsxs\Adverts\195.dfn
[%COMMON_APPDATA%]\wsxs\patchme.exe
[%PROGRAM_FILES_COMMON%]\remove_tools.html
[%PROGRAM_FILES%]\PeDevice\PeDev.dll
[%SYSTEM%]\nfomon\nfom.dll
[%SYSTEM%]\nfomon\nfomon.exe
[%SYSTEM%]\vidmon\vidmon.exe
[%APPDATA%]\picsvr\picsvr.inf
[%DESKTOP%]\wtsdfi.exe
[%PROGRAM_FILES%]\common files\remove_tools.html
[%SYSTEM%]\delfin.dll
[%SYSTEM%]\vmss\vmss.exe
[%WINDOWS%]\windows\system32\vmss\vmss.exe
[%WINDOWS%]\windows\system32\wsxsvc\uninstall.html
[%WINDOWS%]\windows\system32\wsxsvc\wsx.dll
[%WINDOWS%]\windows\system32\wsxsvc\wsx.ocx
[%WINDOWS%]\windows\system32\wsxsvc\wsxsvc.exe
[%APPDATA%]\Tenebril\GhostSurf\3.0\Spyware history\Restore\4c86fe3d62ffa37a994ed2f0b782ea70
[%APPDATA%]\Tenebril\GhostSurf\3.0\Spyware history\Restore\c16f68d6210b3cc44609682e83fa1f60
[%APPDATA%]\Tenebril\GhostSurf\3.0\Spyware history\Restore\d3d3bfa84849ee8f41f8cab8bc2ccce4
[%COMMON_APPDATA%]\wsxs\Adverts\195.dfn
[%COMMON_APPDATA%]\wsxs\patchme.exe
[%PROGRAM_FILES_COMMON%]\remove_tools.html
[%PROGRAM_FILES%]\PeDevice\PeDev.dll
[%SYSTEM%]\nfomon\nfom.dll
[%SYSTEM%]\nfomon\nfomon.exe
[%SYSTEM%]\vidmon\vidmon.exe
[%APPDATA%]\picsvr\picsvr.inf
[%DESKTOP%]\wtsdfi.exe
[%PROGRAM_FILES%]\common files\remove_tools.html
[%SYSTEM%]\delfin.dll
[%SYSTEM%]\vmss\vmss.exe
[%WINDOWS%]\windows\system32\vmss\vmss.exe
[%WINDOWS%]\windows\system32\wsxsvc\uninstall.html
[%WINDOWS%]\windows\system32\wsxsvc\wsx.dll
[%WINDOWS%]\windows\system32\wsxsvc\wsx.ocx
[%WINDOWS%]\windows\system32\wsxsvc\wsxsvc.exe

Folders:
[%PROGRAM_FILES_COMMON%]\dpi
[%PROGRAM_FILES%]\delfin
[%SYSTEM%]\nsvsvc
[%SYSTEM%]\wsxsvc
[%APPDATA%]\vidctrl
[%APPDATA%]\vmss
[%APPDATA%]\wsxs
[%PROFILE_TEMP%]\vmstmp
[%PROGRAM_FILES%]\common files\dpi
[%SYSTEM%]\vidctrl
[%SYSTEM%]\wsxsvc.exe

Registry Keys:
HKEY_CLASSES_ROOT\appid\{07d6c807-5aa2-420d-beaf-8fac74790512}
HKEY_CLASSES_ROOT\clsid\{5e47627b-d89e-442b-82a6-f2fab368621b}
HKEY_CLASSES_ROOT\clsid\{a8bd9566-9895-4fa3-918d-a51d4cd15865}
HKEY_CLASSES_ROOT\clsid\{baa62b4f-5e59-40cc-b2ec-0e19b8776fa2}
HKEY_CLASSES_ROOT\clsid\{d0070620-1e72-42e7-a14c-3a255ad31839}
HKEY_CLASSES_ROOT\CLSID\{E1412445-4FF8-410e-8D24-F2CF86B171A4}
HKEY_CLASSES_ROOT\interface\{42665363-98ba-40aa-9b0b-67ee68888942}
HKEY_CLASSES_ROOT\interface\{baa62b4f-5e59-40cc-b2ec-0e19b8776fa2}
HKEY_CLASSES_ROOT\pae_bho.pedev_ielistener
HKEY_CLASSES_ROOT\pae_bho.pedev_ielistener.1
HKEY_CLASSES_ROOT\pedev_bho.pedev
HKEY_CLASSES_ROOT\pedev_bho.pedev.1
HKEY_CLASSES_ROOT\typelib\{43a1c50a-0683-4caf-8066-3184184dfdb9}
HKEY_CLASSES_ROOT\vccpgdataaccess.pgdataaccessctrl.1
HKEY_CURRENT_USER\software\mvu
HKEY_LOCAL_MACHINE\software\classes\interface\{2bb15d36-43be-4743-a3a0-3308f4b1a610}
HKEY_LOCAL_MACHINE\software\classes\interface\{41700749-a109-4254-af13-be54011e8783}
HKEY_LOCAL_MACHINE\software\classes\typelib\{2a7db8d1-43be-4ad3-a81e-9bb8c9d00073}
HKEY_LOCAL_MACHINE\software\firlnin
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\displayutility
HKEY_LOCAL_MACHINE\software\mvu
HKEY_LOCAL_MACHINE\software\pcsv
HKEY_CLASSES_ROOT\clsid\{e1412445-4ff8-410e-8d24-f2cf86b171a4}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\pgtools
HKEY_LOCAL_MACHINE\software\tat
HKEY_LOCAL_MACHINE\software\vidctrl

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CLASSES_ROOT\appid\pedev.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing DelFin.Media.Viewer:

An up-to-date copy of ExterminateIt should detect and prevent infection from DelFin.Media.Viewer.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove DelFin.Media.Viewer manually.

To completely manually remove DelFin.Media.Viewer malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with DelFin.Media.Viewer.

  1. Use Task Manager to terminate the DelFin.Media.Viewer process.
  2. Delete the original DelFin.Media.Viewer file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes DelFin.Media.Viewer from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of DelFin.Media.Viewer!


Also Be Aware of the Following Threats:
Agent.BDO Trojan Removal