Friday, November 28, 2008

SafeStrip Ransomware

How To Remove SafeStrip?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
SafeStrip is dangerous virus:
The term ransomware is commonly used to describe such software,
although the field known as cryptovirology predates the term "ransomware".

This type of ransom attack can be accomplished by (for example) attaching
a specially crafted file/program to an e-mail message and sending this to the victim.


SafeStrip Symptoms:

Files:
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\SafeStrip.lnk
[%DESKTOP%]\SafeStrip.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\SafeStrip.lnk
[%DESKTOP%]\SafeStrip.lnk

Folders:
[%PROGRAM_FILES%]\SafeStrip
[%COMMON_PROGRAMS%]\SafeStrip

Registry Keys:
HKEY_CURRENT_USER\software\safestrip
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_safestripfilter
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\safestripfilter
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\safestrip_is1

Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\microsoft\windows\shellnoroam\muicache
HKEY_CURRENT_USER\software\microsoft\windows\shellnoroam\muicache


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Removing FDoS.Ras Trojan
BackDoor.CCT Backdoor Information

No comments: