Friday, November 21, 2008

ZebraAntivirus Ransomware

How To Remove ZebraAntivirus?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
ZebraAntivirus is dangerous virus:
A cryptovirus, cryptotrojan or cryptoworm is a type of
malware that encrypts the data belonging to an individual on a computer,
demanding a ransom for its restoration.

The term ransomware is commonly used to describe software that encrypts the data
belonging to an individual on a computer, demanding a ransom for its restoration.
Although the field known as cryptovirology predates the term "ransomware".


ZebraAntivirus Symptoms:

Files:
[%COMMON_DESKTOPDIRECTORY%]\ZebraAntiVirus.lnk
[%PROFILE_TEMP%]\NI.UGA6P_0001_N122M2210\settings.ini
[%PROFILE_TEMP%]\NI.UGA6P_0001_N122M2210\setup.exe
[%PROFILE_TEMP%]\NI.UGA6P_0001_N122M2210\setup.len
[%COMMON_DESKTOPDIRECTORY%]\ZebraAntiVirus.lnk
[%PROFILE_TEMP%]\NI.UGA6P_0001_N122M2210\settings.ini
[%PROFILE_TEMP%]\NI.UGA6P_0001_N122M2210\setup.exe
[%PROFILE_TEMP%]\NI.UGA6P_0001_N122M2210\setup.len

Folders:
[%APPDATA%]\ZebraAntiVirus
[%COMMON_PROGRAMS%]\ZebraAntiVirus
[%PROGRAM_FILES%]\ZebraAntiVirus
[%PROGRAM_FILES_COMMON%]\ZebraAntiVirus

Registry Keys:
HKEY_CURRENT_USER\software\zebraantivirus
HKEY_LOCAL_MACHINE\software\zebraantivirus

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\products
HKEY_LOCAL_MACHINE\software\products


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Remove Ginwui Trojan
Remove Ranky.du Trojan

No comments: