Wednesday, January 28, 2009

Hatter.dr Trojan

Hatter.dr malware description and removal detail
Categories:Trojan
Also known as:

[Kaspersky]Win32.Hatred.a;
[McAfee]W32/Hatter.dr;
[F-Prot]W32/Hatter.10583;
[Computer Associates]Win32.Hatred.4190/4382,Win95/Hatred
Visible Symptoms:
Files in system folders:
[%WINDOWS%]\bbstore\dss\dssagent.exe
[%WINDOWS%]\bbstore\dss\dssagent.exe

In order to ensure that the Hatter.dr is launched automatically each time the system is booted, the Hatter.dr adds a link to its executable file in the system registry:
HKLM\Microsoft\Windows\CurrentVersion\Run
[%WINDOWS%]\bbstore\dss\dssagent.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting Hatter.dr:

Files:
[%WINDOWS%]\bbstore\dss\dssagent.exe
[%WINDOWS%]\bbstore\dss\dssagent.exe

Registry Values:
HKEY_LOCAL_MACHINE\software\broderbund software\dss
HKEY_LOCAL_MACHINE\software\broderbund software\dss
HKEY_LOCAL_MACHINE\software\broderbund software\dss
HKEY_LOCAL_MACHINE\software\broderbund software\dss
HKEY_LOCAL_MACHINE\software\broderbund software\dss

Removing Hatter.dr:

An up-to-date copy of ExterminateIt should detect and prevent infection from Hatter.dr.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Hatter.dr manually.

To completely manually remove Hatter.dr malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Hatter.dr.

  1. Use Task Manager to terminate the Hatter.dr process.
  2. Delete the original Hatter.dr file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

ExterminateIt effectively and automatically removes Hatter.dr from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Hatter.dr!

Also Be Aware of the Following Threats:
Removing WinLL Trojan
Downloader.AUE.dll Trojan Removal instruction
traceics.co.nz Tracking Cookie Removal

Posted by at No comments:

Pigeon.BAH Trojan

Pigeon.BAH malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Pigeon.BAH:

An up-to-date copy of ExterminateIt should detect and prevent infection from Pigeon.BAH.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Pigeon.BAH manually.

To completely manually remove Pigeon.BAH malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.BAH.

  1. Use Task Manager to terminate the Pigeon.BAH process.
  2. Delete the original Pigeon.BAH file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

ExterminateIt effectively and automatically removes Pigeon.BAH from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Pigeon.BAH!

Also Be Aware of the Following Threats:
Vxidl.BCR Trojan Removal

Posted by at No comments:

Poltergeist.A!Backdoor Trojan

Poltergeist.A!Backdoor malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Poltergeist.A!Backdoor:

An up-to-date copy of ExterminateIt should detect and prevent infection from Poltergeist.A!Backdoor.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Poltergeist.A!Backdoor manually.

To completely manually remove Poltergeist.A!Backdoor malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Poltergeist.A!Backdoor.

  1. Use Task Manager to terminate the Poltergeist.A!Backdoor process.
  2. Delete the original Poltergeist.A!Backdoor file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

ExterminateIt effectively and automatically removes Poltergeist.A!Backdoor from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Poltergeist.A!Backdoor!

Also Be Aware of the Following Threats:
Acid.Horse Trojan Cleaner

Posted by at No comments:

Win32.Regexp Trojan

Win32.Regexp malware description and removal detail
Categories:Trojan,Hacker Tool
Also known as:

[Panda]Trojan Horse.LC

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Win32.Regexp:

An up-to-date copy of ExterminateIt should detect and prevent infection from Win32.Regexp.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Win32.Regexp manually.

To completely manually remove Win32.Regexp malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.Regexp.

  1. Use Task Manager to terminate the Win32.Regexp process.
  2. Delete the original Win32.Regexp file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

ExterminateIt effectively and automatically removes Win32.Regexp from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Win32.Regexp!

Also Be Aware of the Following Threats:
Removing Checkin Adware
webcertain.com Tracking Cookie Removal instruction
Removing Small.na Trojan

Posted by at No comments:

Bling Trojan

Bling malware description and removal detail
Categories:Trojan,Backdoor,Hacker Tool,DoS
Also known as:

[Kaspersky]Backdoor.VB.by;
[Eset]Win32/VB.BY trojan;
[McAfee]Blingping;
[F-Prot]security risk or a "backdoor" program;
[Computer Associates]Backdoor/VB.B.Y

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bling:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bling.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Bling manually.

To completely manually remove Bling malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bling.

  1. Use Task Manager to terminate the Bling process.
  2. Delete the original Bling file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

ExterminateIt effectively and automatically removes Bling from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Bling!

Also Be Aware of the Following Threats:
Agobot.az Trojan Removal
UPIN RAT Removal instruction

Posted by at No comments:

Bancos.CBZ Trojan

Bancos.CBZ malware description and removal detail
Categories:Trojan

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Removing Bancos.CBZ:

An up-to-date copy of ExterminateIt should detect and prevent infection from Bancos.CBZ.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove Bancos.CBZ manually.

To completely manually remove Bancos.CBZ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.CBZ.

  1. Use Task Manager to terminate the Bancos.CBZ process.
  2. Delete the original Bancos.CBZ file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

ExterminateIt effectively and automatically removes Bancos.CBZ from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of Bancos.CBZ!

Also Be Aware of the Following Threats:
Rumor Trojan Cleaner
Vxidl.AVE Trojan Symptoms
Oeminfo Trojan Symptoms
Radiate.com Tracking Cookie Cleaner
Win95.Angriff Trojan Removal instruction

Posted by at No comments:

ActMon Spyware

ActMon malware description and removal detail
Categories:Spyware
Visible Symptoms:
Files in system folders:
[%PROFILE%]\start menu\programs\actmoncm\actmon cm control center.lnk
[%PROFILE%]\start menu\programs\actmoncm\actmon computer monitoring manual.lnk
[%PROGRAMS%]\actmoncm\actmon cm control center.lnk
[%PROGRAMS%]\actmoncm\actmon computer monitoring manual.lnk
[%SYSTEM%]\acm-manual.chm
[%SYSTEM%]\acmcc.exe
[%SYSTEM%]\actmon.exe
[%SYSTEM%]\drivers\acm-manual.chm
[%SYSTEM%]\drivers\wskrnlc.sys
[%SYSTEM%]\rbwinx1.dll
[%SYSTEM%]\wskrnl.exe
[%SYSTEM%]\wskrnlb.dll
[%SYSTEM%]\wskrnlb.exe
[%SYSTEM%]\wskrnlc.dll
[%SYSTEM%]\wskrnlc.vxd
[%SYSTEM%]\wskrnld.dll
[%SYSTEM%]\wskrnle.dll
[%PROFILE%]\start menu\programs\actmoncm\actmon cm control center.lnk
[%PROFILE%]\start menu\programs\actmoncm\actmon computer monitoring manual.lnk
[%PROGRAMS%]\actmoncm\actmon cm control center.lnk
[%PROGRAMS%]\actmoncm\actmon computer monitoring manual.lnk
[%SYSTEM%]\acm-manual.chm
[%SYSTEM%]\acmcc.exe
[%SYSTEM%]\actmon.exe
[%SYSTEM%]\drivers\acm-manual.chm
[%SYSTEM%]\drivers\wskrnlc.sys
[%SYSTEM%]\rbwinx1.dll
[%SYSTEM%]\wskrnl.exe
[%SYSTEM%]\wskrnlb.dll
[%SYSTEM%]\wskrnlb.exe
[%SYSTEM%]\wskrnlc.dll
[%SYSTEM%]\wskrnlc.vxd
[%SYSTEM%]\wskrnld.dll
[%SYSTEM%]\wskrnle.dll

In order to ensure that the ActMon is launched automatically each time the system is booted, the ActMon adds a link to its executable file in the system registry:
HKLM\Microsoft\Windows\CurrentVersion\Run
[%SYSTEM%]\acmcc.exe
[%SYSTEM%]\actmon.exe
[%SYSTEM%]\wskrnl.exe
[%SYSTEM%]\wskrnlb.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

Detecting ActMon:

Files:
[%PROFILE%]\start menu\programs\actmoncm\actmon cm control center.lnk
[%PROFILE%]\start menu\programs\actmoncm\actmon computer monitoring manual.lnk
[%PROGRAMS%]\actmoncm\actmon cm control center.lnk
[%PROGRAMS%]\actmoncm\actmon computer monitoring manual.lnk
[%SYSTEM%]\acm-manual.chm
[%SYSTEM%]\acmcc.exe
[%SYSTEM%]\actmon.exe
[%SYSTEM%]\drivers\acm-manual.chm
[%SYSTEM%]\drivers\wskrnlc.sys
[%SYSTEM%]\rbwinx1.dll
[%SYSTEM%]\wskrnl.exe
[%SYSTEM%]\wskrnlb.dll
[%SYSTEM%]\wskrnlb.exe
[%SYSTEM%]\wskrnlc.dll
[%SYSTEM%]\wskrnlc.vxd
[%SYSTEM%]\wskrnld.dll
[%SYSTEM%]\wskrnle.dll
[%PROFILE%]\start menu\programs\actmoncm\actmon cm control center.lnk
[%PROFILE%]\start menu\programs\actmoncm\actmon computer monitoring manual.lnk
[%PROGRAMS%]\actmoncm\actmon cm control center.lnk
[%PROGRAMS%]\actmoncm\actmon computer monitoring manual.lnk
[%SYSTEM%]\acm-manual.chm
[%SYSTEM%]\acmcc.exe
[%SYSTEM%]\actmon.exe
[%SYSTEM%]\drivers\acm-manual.chm
[%SYSTEM%]\drivers\wskrnlc.sys
[%SYSTEM%]\rbwinx1.dll
[%SYSTEM%]\wskrnl.exe
[%SYSTEM%]\wskrnlb.dll
[%SYSTEM%]\wskrnlb.exe
[%SYSTEM%]\wskrnlc.dll
[%SYSTEM%]\wskrnlc.vxd
[%SYSTEM%]\wskrnld.dll
[%SYSTEM%]\wskrnle.dll

Folders:
[%APPDATA%]\vxdkrn

Registry Keys:
HKEY_LOCAL_MACHINE\software\lxass
HKEY_LOCAL_MACHINE\software\srvprc
HKEY_LOCAL_MACHINE\software\syswin
HKEY_LOCAL_MACHINE\software\vxdkrn
HKEY_LOCAL_MACHINE\software\wskrnl
HKEY_LOCAL_MACHINE\system\controlset001\services\wskrnlc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\lxass
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\srvprc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\syswinc
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vxdkrn
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wskrnlc

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run

Removing ActMon:

An up-to-date copy of ExterminateIt should detect and prevent infection from ActMon.

If you do not have ExterminateIt and you are worried that you may have infected computer, you could run trial version of ExterminateIt, or remove ActMon manually.

To completely manually remove ActMon malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ActMon.

  1. Use Task Manager to terminate the ActMon process.
  2. Delete the original ActMon file and folders.
  3. Delete the system registry key parameters
  4. Update your antivirus databases or buy antivirus software and perform a full scan of the computer.

We recommends that all Internet users back up any important information on their computers, enable maximum protection from network attacks and malicious code on their computers, refrain from executing suspicious programs received from untrustworthy sources.

ExterminateIt effectively and automatically removes ActMon from you computer and is a good solution for those who are seeking easy and effective protection for their computer from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).

Download ExterminateIt! to instantly get rid of ActMon!

Also Be Aware of the Following Threats:
Remove accessdeka.com Tracking Cookie
Removing Win32.VB.kz Trojan

Posted by at No comments:
Subscribe to: Posts (Atom)