You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Livuto is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.
[Kaspersky]Trojan-Downloader.Win32.Agent.bgg,Trojan.Win32.Obfuscated.fr,Trojan-Downloader.Win32.QQHelper.mo,Trojan-Downloader.WIn32.Agent.dix,Trojan-Downloader.Win32.Hmir.as,Rootkit.Win32.Agent.fw;
[McAfee]Generic Downloader.ab,Downloader-BBM,AdClicker-ER.dll,BackDoor-CVM;
[Other]Win32/Livuto.Z,Win32/Livuto.X,Win32/Livuto.BW,Win32/Livuto.CB,Adware.NewWeb,Trojan.Farfi,Backdoor:Win32/Farfi.B!sys,Rootkit.gen6,Win32/Livuto.CT,Downloader,TROJ_DLOADER.MPL,Win32/Livuto.CU,Backdoor:Win32/Farfli.B.dll,Farfli.gen3,Win32/Livuto!generic,Rootkit.gen2
Livuto Symptoms:
Files:
[%PROFILE_TEMP%]\HostEx\TempA_.exe
[%PROFILE_TEMP%]\module1.exe
[%PROFILE_TEMP%]\module2.exe
[%PROGRAM_FILES%]\WZCN\cn_ie_wzcn.dll
[%PROGRAM_FILES%]\WZCN\configuration.xml
[%PROGRAM_FILES%]\WZCN\language.ini
[%PROGRAM_FILES%]\WZCN\uninst.exe
[%PROGRAM_FILES%]\WZCN\wazap.ico
[%SYSTEM%]\winttrs
[%WINDOWS%]\system\10310.exe
[%WINDOWS%]\system\Mvvp.dll
[%WINDOWS%]\system\sdfa
[%PROFILE_TEMP%]\HostEx\TempA_.exe
[%PROFILE_TEMP%]\module1.exe
[%PROFILE_TEMP%]\module2.exe
[%PROGRAM_FILES%]\WZCN\cn_ie_wzcn.dll
[%PROGRAM_FILES%]\WZCN\configuration.xml
[%PROGRAM_FILES%]\WZCN\language.ini
[%PROGRAM_FILES%]\WZCN\uninst.exe
[%PROGRAM_FILES%]\WZCN\wazap.ico
[%SYSTEM%]\winttrs
[%WINDOWS%]\system\10310.exe
[%WINDOWS%]\system\Mvvp.dll
[%WINDOWS%]\system\sdfa
Registry Keys:
HKEY_CLASSES_ROOT\clsid\{1f58177b-1cad-42d0-85c1-a4b63c2f0715}
HKEY_CLASSES_ROOT\clsid\{35ec0410-555e-4402-b372-d9a6e0bf6795}
HKEY_CLASSES_ROOT\clsid\{43e40178-0298-4789-b74c-388340a3be6b}
HKEY_CLASSES_ROOT\clsid\{d2a47409-32d6-4dae-ba00-75ed194b16a0}
HKEY_CLASSES_ROOT\clsid\{d500885e-e400-41ca-804b-cd6373a7eef2}
HKEY_CLASSES_ROOT\clsid\{f57f0570-4eeb-4af5-930d-97a35796ae82}
HKEY_CLASSES_ROOT\interface\{5aa68e42-c1f2-449a-8230-5917fa0e6a60}
HKEY_CLASSES_ROOT\interface\{77cf20d2-b091-4496-83da-acb897068778}
HKEY_CLASSES_ROOT\interface\{a0f4099e-ba1a-4d10-89b4-dc0c67db9528}
HKEY_CLASSES_ROOT\interface\{b275354a-9f09-420b-911b-29f8bb8a302d}
HKEY_CLASSES_ROOT\interface\{d99abe4e-0faf-41c3-b482-2da133c5d083}
HKEY_CLASSES_ROOT\soduisearch.datacenter
HKEY_CLASSES_ROOT\soduisearch.datacenter.1
HKEY_CLASSES_ROOT\soduisearch.sodui
HKEY_CLASSES_ROOT\soduisearch.sodui.1
HKEY_CLASSES_ROOT\soduisearch.soduicontainer
HKEY_CLASSES_ROOT\soduisearch.soduicontainer.1
HKEY_CLASSES_ROOT\typelib\{2eae3758-19ac-487a-8999-bc6bb6391e0d}\1.0
HKEY_CLASSES_ROOT\typelib\{af63ff93-7ad3-48f3-a06a-13ebf3c4ddde}\1.0
HKEY_CLASSES_ROOT\wzcn.wzcnbho
HKEY_CLASSES_ROOT\wzcn.wzcnbho.1
Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{d500885e-e400-41ca-804b-cd6373a7eef2}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.
Also Be Aware of the Following Threats:
Uptofind Toolbar Symptoms
IETray Adware Cleaner
TrojanDownloader.Win32.Small.rn Downloader Removal
BEsys Downloader Removal instruction
Zlob.Fam.Brain Codec Trojan Cleaner
No comments:
Post a Comment