Thursday, November 6, 2008

Win32.ColdFusion Trojan

How To Remove Remove Win32.ColdFusion?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Win32.ColdFusion is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.



Win32.ColdFusion It also known as:

[Kaspersky]Backdoor.Coldfuson.11.c,Backdoor.Win32.Coldfuson.11.c,Backdoor.Win32.Coldfusion.j;
[McAfee]BackDoor-AOP;
[Panda]Backdoor Program,Bck/ColdFusion.11;
[Computer Associates]Backdoor/Billg_Satan!Server,Win32/ColdFusion.E!Backdoor;
[Other]Backdoor.Colfusion,Troj/Fusion-B

Win32.ColdFusion Symptoms:

Files:
[%PROFILE_TEMP%]\TEMP#01.EXE
[%PROFILE_TEMP%]\TEMPTTT$01.EXE
[%PROFILE_TEMP%]\~DP27.dll
[%SYSTEM%]\emgfx.exe
[%SYSTEM%]\SVCH0ST.com
[%SYSTEM%]\svchost.klg
[%WINDOWS%]\nwisse.exe
[%WINDOWS%]\winspols.scr
[%PROFILE_TEMP%]\TEMP#01.EXE
[%PROFILE_TEMP%]\TEMPTTT$01.EXE
[%PROFILE_TEMP%]\~DP27.dll
[%SYSTEM%]\emgfx.exe
[%SYSTEM%]\SVCH0ST.com
[%SYSTEM%]\svchost.klg
[%WINDOWS%]\nwisse.exe
[%WINDOWS%]\winspols.scr

Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{tt9381d8f2-0288-11d0-9501-00aa00b911a5}

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:

No comments: