Thursday, December 4, 2008

Danmec Trojan

How To Remove Danmec?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Danmec is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.


Danmec It also known as:

[Kaspersky]Backdoor.Win32.Rbot.bkz,Trojan.Win32.Agent.xm,Trojan-Proxy.Win32.Agent.hx,Backdoor.Win32.Agent.aju,Trojan-Dropper.Win32.Small.aus,Backdoor.Win32.Agent.crk;
[F-Prot]W32/Proxy.JK;
[Other]Win32/Danmec!generic,Trojan.Proxy.RemLoad.B,Trojan.MulDrop.3098,W32.Mytob@mm,Win32/Danmec.F,Trojan.Danmec,W32/Agent.LDE,Troj/Agent-JV,Win32/Danmec.W,Troj/Danmec-V,Win32/Danmec.Y,Malware.BGBC,TROJ_DROPPER.KAP,Troj/Agent-GGA

Danmec Symptoms:

Files:
[%SYSTEM%]\aspimgr.exe
[%WINDOWS%]\s32.txt
[%WINDOWS%]\ws386.ini
[%SYSTEM%]\aspi183287.exe
[%WINDOWS%]\db32.txt
[%SYSTEM%]\aspimgr.exe
[%WINDOWS%]\s32.txt
[%WINDOWS%]\ws386.ini
[%SYSTEM%]\aspi183287.exe
[%WINDOWS%]\db32.txt

Registry Keys:
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_aspimgr
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\aspimgr
HKEY_CURRENT_USER\software\microsoft\sft
HKEY_LOCAL_MACHINE\software\microsoft\sft
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_aspi113210
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\aspi113210

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Removing VB.vh Backdoor
Sgfingerd Trojan Cleaner

No comments: