Thursday, December 11, 2008

Delf.cn Adware

How To Remove Delf.cn?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Delf.cn is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

A Search hijacker redirects search results to other pages and may
transmit search and browsing data to unknown servers. An error page hijacker directs
the browser to another page, usually an advertising page, instead of the usual error
page when the requested URL is not found.


Delf.cn Symptoms:

Files:
[%SYSTEM%]\H@tKeysH@@k.DLL
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\Night Club - Foto Annunci Video - VM18.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\SUPER VIDEOCHAT.lnk
[%DESKTOP%]\loghi suonerie e tanto altro ....lnk
[%DESKTOP%]\Night Club - Foto Annunci Video - VM18.lnk
[%DESKTOP%]\SUPER VIDEOCHAT.lnk
[%PROGRAMS%]\loghi suonerie e tanto altro ....lnk
[%PROGRAMS%]\Night Club - Foto Annunci Video - VM18.lnk
[%PROGRAMS%]\SUPER VIDEOCHAT.lnk
[%SYSTEM%]\ShellExt\SMR5.EXE
[%SYSTEM%]\shellext\stq9.exe
[%SYSTEM%]\Wintek\Videochat1.EXE
[%SYSTEM%]\H@tKeysH@@k.DLL
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\Night Club - Foto Annunci Video - VM18.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\SUPER VIDEOCHAT.lnk
[%DESKTOP%]\loghi suonerie e tanto altro ....lnk
[%DESKTOP%]\Night Club - Foto Annunci Video - VM18.lnk
[%DESKTOP%]\SUPER VIDEOCHAT.lnk
[%PROGRAMS%]\loghi suonerie e tanto altro ....lnk
[%PROGRAMS%]\Night Club - Foto Annunci Video - VM18.lnk
[%PROGRAMS%]\SUPER VIDEOCHAT.lnk
[%SYSTEM%]\ShellExt\SMR5.EXE
[%SYSTEM%]\shellext\stq9.exe
[%SYSTEM%]\Wintek\Videochat1.EXE

Registry Keys:
HKEY_CURRENT_USER\software\freeware\{da002853-42d9-4a47-a236-896d32bb7ec7}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{491a5872-c30f-4e54-8ff1-bf31cc73dc4b}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{da002853-42d9-4a47-a236-896d32bb7ec7}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{204131ab-c727-4cf2-8230-f47d6b1fff70}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{b4219433-ee00-47a0-a297-7796ea65e9ed}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{e2195c64-6a34-4896-956d-c94d384bd2a1}

Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\main
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Zindeart Trojan Information
Registration.Server.com Tracking Cookie Removal
Removing SillyDl.CFS Trojan

No comments: