Thursday, December 4, 2008

Contextual Adware

Contextual malware description and removal detail
Categories:Adware,Toolbar

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Contextual:

Folders:
[%PROGRAM_FILES%]\ContextualToolbar

Registry Keys:
HKEY_CLASSES_ROOT\typelib\{1b8b502e-455b-4022-be77-fb6d9f808a18}
HKEY_CLASSES_ROOT\clsid\{9f7a6f30-90c3-4222-af59-c73467018f59}
HKEY_CLASSES_ROOT\clsid\{9f9f7a6f30-90c3-4222-af59-c73467018f59}
HKEY_CLASSES_ROOT\clsid\{e0eb37db-33de-4448-a124-233b9a43f064}
HKEY_CLASSES_ROOT\interface\{65bb0e9a-d57b-485b-828b-15d1b8c3e9d3}
HKEY_CLASSES_ROOT\interface\{ab5c05ae-a2b0-45c3-bae9-ba2f082343a6}
HKEY_CLASSES_ROOT\toolband.xbtb09298
HKEY_CLASSES_ROOT\toolband.xbtb09298.1
HKEY_CLASSES_ROOT\typelib\{b9799a6c-ffc4-44eb-a8b0-71eb09e6ad3b}
HKEY_CLASSES_ROOT\xbtb09298.ietoolbar
HKEY_CLASSES_ROOT\xbtb09298.ietoolbar.1
HKEY_CLASSES_ROOT\xbtb09298.xbtb09298
HKEY_CLASSES_ROOT\xbtb09298.xbtb09298.1
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\ext\stats\{9f7a6f30-90c3-4222-af59-c73467018f59}
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\ext\stats\{e0eb37db-33de-4448-a124-233b9a43f064}
HKEY_CURRENT_USER\software\xbtb09298
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{eoeb37db-33de-4448-a124-233b9a43f064}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xbtb09298.xbtb09298toolbar

Registry Values:
HKEY_CLASSES_ROOT\clsid\{994d478a-45d0-4db4-ae77-288b1e346e99}\inprocserver32
HKEY_CLASSES_ROOT\protocols\filter\text/html
HKEY_CURRENT_USER\software\fcadvice
HKEY_CURRENT_USER\software\fcadvice
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser

Removing Contextual:

An up-to-date copy of ExterminateIt should detect and prevent infection from Contextual.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Contextual manually.

To completely manually remove Contextual malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Contextual.

  1. Use Task Manager to terminate the Contextual process.
  2. Delete the original Contextual file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.


ExterminateIt effectively and automatically removes Contextual from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Contextual!


Also Be Aware of the Following Threats:
Downloader.ADT Downloader Symptoms
Bancos.HPF Trojan Information
Removing FakeRecycled Trojan
Pigeon.AZO Trojan Removal

No comments: