Monday, November 24, 2008

PD Adware

How To Remove PD?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
PD is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.



PD It also known as:

[Kaspersky]Trojan.Win32.Dialer.pd;
[McAfee]Dialer-311;
[Other]Dialer.Sfonditalia,winmovie dialer,Plugin

PD Symptoms:

Files:
[%FAVORITES%]\exp1orer.lnk
[%PROGRAMS%]\exp1orer.lnk
[%APPDATA%]\faretoraci\disinstalla.htm
[%APPDATA%]\faretoraci\sysvmtrs.exe
[%DESKTOP%]\exp1orer.lnk
[%DESKTOP%]\Private Area.lnk
[%FAVORITES%]\Private Area.lnk
[%FAVORITES%]\WinMoviePlugin.lnk
[%PROFILE%]\My Documents\exp1orer.lnk
[%PROFILE%]\My Documents\Private Area.lnk
[%PROFILE%]\My Documents\WinMoviePlugin.lnk
[%PROGRAMS%]\Private Area.lnk
[%PROGRAMS%]\WinMoviePlugin.lnk
[%STARTMENU%]\exp1orer.lnk
[%STARTMENU%]\Private Area.lnk
[%STARTMENU%]\WinMoviePlugin.lnk
[%FAVORITES%]\exp1orer.lnk
[%PROGRAMS%]\exp1orer.lnk
[%APPDATA%]\faretoraci\disinstalla.htm
[%APPDATA%]\faretoraci\sysvmtrs.exe
[%DESKTOP%]\exp1orer.lnk
[%DESKTOP%]\Private Area.lnk
[%FAVORITES%]\Private Area.lnk
[%FAVORITES%]\WinMoviePlugin.lnk
[%PROFILE%]\My Documents\exp1orer.lnk
[%PROFILE%]\My Documents\Private Area.lnk
[%PROFILE%]\My Documents\WinMoviePlugin.lnk
[%PROGRAMS%]\Private Area.lnk
[%PROGRAMS%]\WinMoviePlugin.lnk
[%STARTMENU%]\exp1orer.lnk
[%STARTMENU%]\Private Area.lnk
[%STARTMENU%]\WinMoviePlugin.lnk

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\emitt
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\domains\adslconnection.name\www
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\domains\contentdiscount.info\www
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\domains\extremeaccess.info\www
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\domains\softlab.name\www
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\emitt
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\user agent\post platform
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
SubSearch Adware Information
Bowl Trojan Removal
Removing Allsum.5bk Trojan
Remove bastaya.exe Malware

No comments: