Sunday, October 26, 2008

Rbot.GHJ Worm

How To Remove Remove Rbot.GHJ?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Rbot.GHJ is dangerous virus:
Worms can be classified by installation method, launch method and finally according
to characteristics standard to all malware: polymorphism, stealth etc.

Many of the worms which managed to cause significant outbreaks use more then
one propagation method as well as more than one infection technique.



Rbot.GHJ Symptoms:

Files:
[%SYSTEM%]\bbvmwxxf.hml
[%SYSTEM%]\filesms.fms
[%SYSTEM%]\langeinf.lin
[%SYSTEM%]\nonrunso.ber
[%SYSTEM%]\rubezahl.rub
[%SYSTEM%]\runstop.rst
[%WINDOWS%]\WinSecurity\csrss.PIF
[%WINDOWS%]\WinSecurity\mssock1.dli
[%WINDOWS%]\WinSecurity\mssock2.dli
[%WINDOWS%]\WinSecurity\mssock3.dli
[%WINDOWS%]\WinSecurity\nichtnem.nop
[%WINDOWS%]\WinSecurity\starter.run
[%WINDOWS%]\WinSecurity\sysonce.tst
[%WINDOWS%]\WinSecurity\winmem1.ory
[%WINDOWS%]\WinSecurity\winmem2.ory
[%WINDOWS%]\WinSecurity\winmem3.ory
[%SYSTEM%]\bbvmwxxf.hml
[%SYSTEM%]\filesms.fms
[%SYSTEM%]\langeinf.lin
[%SYSTEM%]\nonrunso.ber
[%SYSTEM%]\rubezahl.rub
[%SYSTEM%]\runstop.rst
[%WINDOWS%]\WinSecurity\csrss.PIF
[%WINDOWS%]\WinSecurity\mssock1.dli
[%WINDOWS%]\WinSecurity\mssock2.dli
[%WINDOWS%]\WinSecurity\mssock3.dli
[%WINDOWS%]\WinSecurity\nichtnem.nop
[%WINDOWS%]\WinSecurity\starter.run
[%WINDOWS%]\WinSecurity\sysonce.tst
[%WINDOWS%]\WinSecurity\winmem1.ory
[%WINDOWS%]\WinSecurity\winmem2.ory
[%WINDOWS%]\WinSecurity\winmem3.ory

Folders:
[%WINDOWS%]\WinSecurity

Registry Values:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
All.In.One.Spy Spyware Symptoms
BEsys Downloader Cleaner
CWS.DNSRelay Hijacker Information
Remove Relevant.Knowledge Spyware
Remove Infotel.srl Adware

No comments: