Friday, November 14, 2008

Myss Trojan

How To Remove Myss?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Myss is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
Hijackers take control of various parts of your web browser, including your home page,
search pages, and search bar. They may also redirect you to certain sites should you
mistype an address or prevent you from going to a website they would rather you not,
such as sites that combat malware. Some will even redirect you to their own search engine
when you attempt a search.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.


Myss It also known as:

[Kaspersky]Trojan.Win32.Krepper.a,Server-Proxy.Win32.3proxy.f;
[Panda]Trj/Tofger.A,Trj/Downloader.G,Trj/Tofger.J,Trj/Tofger.I,Trj/Tofger.Q,Bck/Daemonize.D,W32/Nahata,Trj/Downloader.BQ,Trj/Small.U,Trj/Tofger.T,Trj/Tofger.Y,Trj/Tofger.X,Trj/Tofger.AE,Trj/Tofger.N,Trojan Horse;
[Computer Associates]Win32.Myss,Win32/Myss.Variant!Trojan,Win32.Myss.H,Win32/Small.cn!Dropper,Win32.Myss.Q,Win32.Myss.AI,Win32/Tofger!Trojan,Win32.Myss.AS,Win32/Myss.AN!Trojan,Win32/Myss!Trojan,Win32.Myss.AF,Win32/Idwi!Spy!DLL.3072!Trojan,Win32.Myss.M,Win32/Myss.M!Trojan,Win32.Myss.AW,Win32/HookDLL!Trojan,Win32.Myss.BB,Win32/Myss.U!Dropper,Win32.Myss.BU,Win32/Tofger.AT!Trojan,Win32.Myss.CD,Win32.Myss.AC,Win32/Myss.AC.3072!DLL1!Trojan,Win32/Myss.T!Trojan,Win32.Myss.T;
[Other]Win32/Myss.DA,Hacktool.Proxy

Myss Symptoms:

Files:
[%DESKTOP%]\Blackjack.url
[%PROFILE_TEMP%]\twtini.inf
[%PROFILE_TEMP%]\bi.ini
[%PROFILE_TEMP%]\twaintec.ini
[%PROFILE_TEMP%]\twtini.cab
[%SYSTEM%]\SVCHOST32.EXE
[%SYSTEM%]\viagra.ico
[%WINDOWS%]\smdat32a.sys
[%WINDOWS%]\smdat32m.sys
[%WINDOWS%]\system\svchost32.exe
[%WINDOWS%]\twaintec.ini
[%DESKTOP%]\air tickets.url
[%DESKTOP%]\big tits.url
[%DESKTOP%]\blackjack.url
[%DESKTOP%]\britney spears.url
[%DESKTOP%]\car insurance.url
[%DESKTOP%]\cheap cigarettes.url
[%DESKTOP%]\credit card.url
[%DESKTOP%]\cruises.url
[%DESKTOP%]\currency trading.url
[%DESKTOP%]\lesbian sex.url
[%DESKTOP%]\mp3.url
[%DESKTOP%]\online betting.url
[%DESKTOP%]\online gambling.url
[%DESKTOP%]\oral sex.url
[%DESKTOP%]\pharmacy.url
[%DESKTOP%]\phentermine.url
[%DESKTOP%]\pornstars.url
[%DESKTOP%]\viagra.url
[%PROFILE%]\locals~1\temp\twtini.inf
[%SYSTEM%]\air tickets.ico
[%SYSTEM%]\big tits.ico
[%SYSTEM%]\blackjack.ico
[%SYSTEM%]\britney spears.ico
[%SYSTEM%]\car insurance.ico
[%SYSTEM%]\cheap cigarettes.ico
[%SYSTEM%]\credit card.ico
[%SYSTEM%]\cruises.ico
[%SYSTEM%]\currency trading.ico
[%SYSTEM%]\lesbian sex.ico
[%SYSTEM%]\mp3.ico
[%SYSTEM%]\online betting.ico
[%SYSTEM%]\online gambling.ico
[%SYSTEM%]\oral sex.ico
[%SYSTEM%]\party poker.ico
[%SYSTEM%]\pharmacy.ico
[%SYSTEM%]\phentermine.ico
[%SYSTEM%]\pornstars.ico
[%SYSTEM%]\remove spyware.ico
[%SYSTEM%]\svchost32.exe
[%DESKTOP%]\Blackjack.url
[%PROFILE_TEMP%]\twtini.inf
[%PROFILE_TEMP%]\bi.ini
[%PROFILE_TEMP%]\twaintec.ini
[%PROFILE_TEMP%]\twtini.cab
[%SYSTEM%]\SVCHOST32.EXE
[%SYSTEM%]\viagra.ico
[%WINDOWS%]\smdat32a.sys
[%WINDOWS%]\smdat32m.sys
[%WINDOWS%]\system\svchost32.exe
[%WINDOWS%]\twaintec.ini
[%DESKTOP%]\air tickets.url
[%DESKTOP%]\big tits.url
[%DESKTOP%]\blackjack.url
[%DESKTOP%]\britney spears.url
[%DESKTOP%]\car insurance.url
[%DESKTOP%]\cheap cigarettes.url
[%DESKTOP%]\credit card.url
[%DESKTOP%]\cruises.url
[%DESKTOP%]\currency trading.url
[%DESKTOP%]\lesbian sex.url
[%DESKTOP%]\mp3.url
[%DESKTOP%]\online betting.url
[%DESKTOP%]\online gambling.url
[%DESKTOP%]\oral sex.url
[%DESKTOP%]\pharmacy.url
[%DESKTOP%]\phentermine.url
[%DESKTOP%]\pornstars.url
[%DESKTOP%]\viagra.url
[%PROFILE%]\locals~1\temp\twtini.inf
[%SYSTEM%]\air tickets.ico
[%SYSTEM%]\big tits.ico
[%SYSTEM%]\blackjack.ico
[%SYSTEM%]\britney spears.ico
[%SYSTEM%]\car insurance.ico
[%SYSTEM%]\cheap cigarettes.ico
[%SYSTEM%]\credit card.ico
[%SYSTEM%]\cruises.ico
[%SYSTEM%]\currency trading.ico
[%SYSTEM%]\lesbian sex.ico
[%SYSTEM%]\mp3.ico
[%SYSTEM%]\online betting.ico
[%SYSTEM%]\online gambling.ico
[%SYSTEM%]\oral sex.ico
[%SYSTEM%]\party poker.ico
[%SYSTEM%]\pharmacy.ico
[%SYSTEM%]\phentermine.ico
[%SYSTEM%]\pornstars.ico
[%SYSTEM%]\remove spyware.ico
[%SYSTEM%]\svchost32.exe

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{12345678-0000-0010-8000-00aaff6d2ea4}
HKEY_CLASSES_ROOT\CLSID\{145E6FB1-1256-44ED-A336-8BBA43373BE6}
HKEY_CLASSES_ROOT\clsid\{1d27210e-2da2-41e2-a103-b5fd9d6a798b}
HKEY_CLASSES_ROOT\CLSID\{B599C57E-113A-4488-A5E9-BC552C4F1152}
HKEY_CLASSES_ROOT\clsid\{145e6fb1-1256-44ed-a336-8bba43373be6}
HKEY_CLASSES_ROOT\clsid\{3a944ba4-1ce6-43ac-b292-f74f8be58da7}
HKEY_CLASSES_ROOT\clsid\{b599c57e-113a-4488-a5e9-bc552c4f1152}
HKEY_CLASSES_ROOT\clsid\{c7edab2e-d7f9-11d8-ba48-c79b0c409d70}
HKEY_CLASSES_ROOT\clsid\{d56a1203-1452-eba1-7294-ee3377770000}
HKEY_CLASSES_ROOT\interface\{c7edab2d-d7f9-11d8-ba48-c79b0c409d70}
HKEY_CLASSES_ROOT\serch_hook.transurl
HKEY_CLASSES_ROOT\serch_hook.transurl.1
HKEY_CLASSES_ROOT\typelib\{c7edab21-d7f9-11d8-ba48-c79b0c409d70}
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\{3a944ba4-1ce6-43ac-b292-f74f8be58da7}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{3a944ba4-1ce6-43ac-b292-f74f8be58da7}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\internet connection update and homep kb234087

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\software\microsoft\internet explorer\urlsearchhooks
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Spy Spyware Information
MetaDirect.Keyword Adware Cleaner

No comments: