Tuesday, December 2, 2008

NowBox Adware

How To Remove NowBox?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
NowBox is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits
A Search hijacker redirects search results to other pages and may
transmit search and browsing data to unknown servers. An error page hijacker directs
the browser to another page, usually an advertising page, instead of the usual error
page when the requested URL is not found.


NowBox Symptoms:

Files:
[%DESKTOP%]\nowbox.lnk
[%PROGRAMS%]\nowbox\nowbox.lnk
[%STARTUP%]\nowbox.lnk
[%SYSTEM%]\systrayuser.dll
[%WINDOWS%]\system\systrayuser.dll
[%DESKTOP%]\nowbox.lnk
[%PROGRAMS%]\nowbox\nowbox.lnk
[%STARTUP%]\nowbox.lnk
[%SYSTEM%]\systrayuser.dll
[%WINDOWS%]\system\systrayuser.dll

Folders:
[%PROFILE%]\start menu\programs\nowbox
[%PROGRAM_FILES%]\vflash

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{a0bd4ff5-d828-11d3-9eb5-00600837e6ee}
HKEY_CLASSES_ROOT\interface\{a0bd4ff6-d828-11d3-9eb5-00600837e6ee}
HKEY_CLASSES_ROOT\systrayuser.energenicsystrayuser
HKEY_CLASSES_ROOT\systrayuser.energenicsystrayuser.1
HKEY_CLASSES_ROOT\typelib\{a0bd4fe6-d828-11d3-9eb5-00600837e6ee}
HKEY_CURRENT_USER\software\valueflash
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{9dc5d4a4-3f21-40e2-aaa5-000000000004}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\nowbox

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Pigeon.EPE Trojan Removal

No comments: