Monday, November 3, 2008

BearShare Worm

How To Remove Remove BearShare?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
BearShare is dangerous virus:
Worms can be classified according to the propagation method they use,
i.e. how they deliver copies of themselves to new victim machines.
Worms can also be classified by installation method, launch method and finally according
to characteristics standard to all malware: polymorphism, stealth etc.

Many of the worms which managed to cause significant outbreaks use more then
one propagation method as well as more than one infection technique.
The methods are listed separately below.


BearShare Symptoms:

Files:
[%DESKTOP%]\bearshare downloads.lnk
[%DESKTOP%]\bearshare.lnk
[%PROGRAMS%]\bearshare.lnk
[%PROGRAM_FILES%]\bearsh~1\bearsh~1.exe
[%DESKTOP%]\bearshare downloads.lnk
[%DESKTOP%]\bearshare.lnk
[%PROGRAMS%]\bearshare.lnk
[%PROGRAM_FILES%]\bearsh~1\bearsh~1.exe

Folders:
[%PROGRAM_FILES%]\bearshare

Registry Keys:
HKEY_CURRENT_USER\appevents\eventlabels\bearsharechatnotifymsg
HKEY_CURRENT_USER\appevents\schemes\apps\bearshare
HKEY_LOCAL_MACHINE\software\bearshare
HKEY_LOCAL_MACHINE\software\classes\clsid\{558ec983-bedb-9168-b2de-31dbf0ee543e}
HKEY_LOCAL_MACHINE\software\classes\gnu
HKEY_LOCAL_MACHINE\software\classes\gnufile\shell\open\command
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5f95e1af-2620-4f15-bdf9-7fdce4607e17}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\bearshare
HKEY_USERS\.default\appevents\eventlabels\bearsharechatnotifymsg
HKEY_USERS\.default\appevents\schemes\apps\bearshare

Registry Values:
HKEY_LOCAL_MACHINE\software\classes\gnufile
HKEY_LOCAL_MACHINE\software\classes\gnufile
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Removing CWS.SysTime Hijacker
Keycorder Spyware Cleaner
SillyDl.BYG Downloader Removal
Removing VB.hc Downloader
Livuto Trojan Removal instruction

Zlob.Fam.Key Generator Trojan

How To Remove Remove Zlob.Fam.Key Generator?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Zlob.Fam.Key Generator is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
The pop-ups generally will not be stopped by pop-up stoppers, and often are
not dependent on your having Internet Explorer open.



Zlob.Fam.Key Generator Symptoms:

Files:
[%DESKTOP%]\Key Generator.lnk
[%DESKTOP%]\Key.exe
[%PROGRAM_FILES%]\Key Generator\iesplugin.dll
[%PROGRAM_FILES%]\Key Generator\iesuninst.exe
[%PROGRAM_FILES%]\Key Generator\isaddon.dll
[%PROGRAM_FILES%]\Key Generator\isamini.exe
[%PROGRAM_FILES%]\Key Generator\isamonitor.exe
[%PROGRAM_FILES%]\Key Generator\isauninst.exe
[%PROGRAM_FILES%]\Key Generator\Key Generator.url
[%PROGRAM_FILES%]\Key Generator\keygenerator.exe
[%PROGRAM_FILES%]\Key Generator\KeyGenerator.exe.manifest
[%PROGRAM_FILES%]\Key Generator\ot.ico
[%PROGRAM_FILES%]\Key Generator\pmmon.exe
[%PROGRAM_FILES%]\Key Generator\pmsngr.exe
[%PROGRAM_FILES%]\Key Generator\pmuninst.exe
[%PROGRAM_FILES%]\Key Generator\Thumbs.db
[%PROGRAM_FILES%]\Key Generator\ts.ico
[%PROGRAM_FILES%]\Key Generator\uninst.exe
[%DESKTOP%]\Key Generator.lnk
[%DESKTOP%]\Key.exe
[%PROGRAM_FILES%]\Key Generator\iesplugin.dll
[%PROGRAM_FILES%]\Key Generator\iesuninst.exe
[%PROGRAM_FILES%]\Key Generator\isaddon.dll
[%PROGRAM_FILES%]\Key Generator\isamini.exe
[%PROGRAM_FILES%]\Key Generator\isamonitor.exe
[%PROGRAM_FILES%]\Key Generator\isauninst.exe
[%PROGRAM_FILES%]\Key Generator\Key Generator.url
[%PROGRAM_FILES%]\Key Generator\keygenerator.exe
[%PROGRAM_FILES%]\Key Generator\KeyGenerator.exe.manifest
[%PROGRAM_FILES%]\Key Generator\ot.ico
[%PROGRAM_FILES%]\Key Generator\pmmon.exe
[%PROGRAM_FILES%]\Key Generator\pmsngr.exe
[%PROGRAM_FILES%]\Key Generator\pmuninst.exe
[%PROGRAM_FILES%]\Key Generator\Thumbs.db
[%PROGRAM_FILES%]\Key Generator\ts.ico
[%PROGRAM_FILES%]\Key Generator\uninst.exe

Folders:
[%PROGRAMS%]\Key Generator
[%PROGRAM_FILES%]\Key Generator

Registry Keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Key Generator


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Removing KooWo BHO
Relevant.Knowledge Spyware Information
SillyDl.BYG Downloader Removal
Remove Netsphere Trojan
Removing HyperBar Adware

InsideClick Toolbar

How To Remove Remove InsideClick?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
InsideClick is dangerous virus:
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.
It replaces your start page, continuosly open a number of pop up windows and so on.


InsideClick Symptoms:

Files:
[%SYSTEM%]\DINSIDE.dll
[%SYSTEM%]\DINSIDEinstall.exe
[%SYSTEM%]\DINSIDEuninstall.exe
[%SYSTEM%]\DINSIDE.dll
[%SYSTEM%]\DINSIDEinstall.exe
[%SYSTEM%]\DINSIDEuninstall.exe

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{a393d149-bb14-4e4f-99ab-976430cbcbc7}
HKEY_CLASSES_ROOT\dinside.search
HKEY_CLASSES_ROOT\interface\{03dfe8b6-910b-4136-aa1a-d74f8f87e4b4}
HKEY_CLASSES_ROOT\typelib\{6cc30010-197b-43a1-84e0-975d648ff344}
HKEY_LOCAL_MACHINE\software\dinside
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{a393d149-bb14-4e4f-99ab-976430cbcbc7}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\dinside


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
DlRhifrem Trojan Removal instruction
Remove TopSurfer Toolbar
Remove IamBigBrother Spyware
TrafficJam Adware Symptoms
NetHack RAT Information

PestCapture Ransomware

How To Remove Remove PestCapture?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
PestCapture is dangerous virus:
The term ransomware is commonly used to describe such software,
although the field known as cryptovirology predates the term "ransomware".

This type of ransom attack can be accomplished by (for example) attaching
a specially crafted file/program to an e-mail message and sending this to the victim.


PestCapture Symptoms:

Files:
[%DESKTOP%]\PestCapture.lnk
[%PROFILE%]\start
[%PROGRAM_FILES%]\PestCapture\PestCapture.exe
[%DESKTOP%]\PestCapture.lnk
[%PROFILE%]\start
[%PROGRAM_FILES%]\PestCapture\PestCapture.exe

Folders:
[%PROGRAMS%]\Pest-Capture
[%PROGRAMS%]\PestCapture
[%PROGRAM_FILES%]\PestCapture

Registry Keys:
HKEY_CURRENT_USER\SOFTWARE\Pest-Capture
HKEY_CURRENT_USER\Software\PestCapture
HKEY_CURRENT_USER\SOFTWARE\PestCaptureSetup
HKEY_CURRENT_USER\Software\PestCapture\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Pest-Capture
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PestCapture

Registry Values:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Dollar.Revenue Adware Symptoms
Removing Win32.Afrootix Trojan
Propo Trojan Removal
Removing TrojanDownloader.Win32.GoldenPalace Trojan
Cuebot Trojan Symptoms

CWS.SysTime Hijacker

How To Remove Remove CWS.SysTime?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
CWS.SysTime is dangerous virus:
Hijackers are software programs that modify users' default browser home page,
search settings, error page settings, or desktop wallpaper without adequate notice, disclosure,
or user consent.

When the default home page is hijacked, the browser opens to the web page set by the hijacker
instead of the user's designated home page. In some cases, the hijacker may block users from
restoring their desired home page.

A search hijacker redirects search results to other pages and may
transmit search and browsing data to unknown servers. An error page hijacker directs
the browser to another page, usually an advertising page, instead of the usual error
page when the requested URL is not found.

A desktop hijacker replaces the desktop wallpaper with advertising
for products and services on the desktop.

Hijackers take control of various parts of your web browser, including your home page,
search pages, and search bar. They may also redirect you to certain sites should you
mistype an address or prevent you from going to a website they would rather you not,
such as sites that combat malware. Some will even redirect you to their own search engine
when you attempt a search. NB: hijackers almost exclusively target Internet Explorer.


CWS.SysTime Symptoms:

Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\main
HKEY_CURRENT_USER\software\microsoft\internet explorer\main
HKEY_CURRENT_USER\software\microsoft\internet explorer\main
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Network.Monitor Spyware Symptoms
Remove Malware.Alarm Trojan
FTP Trojan Symptoms
Media.Tickets Spyware Cleaner
Dialer.RAS.aj Adware Information

Agent.ECM Trojan

How To Remove Remove Agent.ECM?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Agent.ECM is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.


Agent.ECM Symptoms:

Files:
[%SYSTEM%]\v6.exe
[%SYSTEM%]\v6.exe

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
All.In.One.Spy Spyware Removal
Removing Online Adware
Remove Zlob.Fam.Video AX Enhancement Trojan
Removing HuntBar.MSIn Hijacker
TrojanDownloader.Win32.GoldenPalace Trojan Removal instruction

Delf.az Trojan

How To Remove Remove Delf.az?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Delf.az is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.


Delf.az Symptoms:

Files:
[%SYSTEM%]\comnt32.dll
[%SYSTEM%]\inetconnect.dll
[%SYSTEM%]\comnt32.dll
[%SYSTEM%]\inetconnect.dll

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{1bb87441-6b7f-4b60-885c-b7af9f9afde3}
HKEY_CLASSES_ROOT\clsid\{fd3a6ab4-5527-4b52-90af-f90cd3270861}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{0cdaaec2-e245-44cc-8357-cab70172d017}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{77566c2a-2987-44bc-ac81-a02d19ee271b}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8e668361-c801-41b7-bf89-2fc2c8de9167}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{c0dadd7e-d3f1-430d-b735-39dc6033592c}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{1bb87441-6b7f-4b60-885c-b7af9f9afde3}


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Matcash Trojan Information
Zlob.Fam.Image ActiveX Access Trojan Removal
Guard Trojan Cleaner
Win32.TrojanDropper.Small Trojan Removal instruction
Win32 Trojan Removal instruction

Praize Toolbar

How To Remove Remove Praize?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Praize is dangerous virus:
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.

Praize Symptoms:

Files:
[%SYSTEM%]\praizetoolbar.dll
[%WINDOWS%]\system\praizetoolbar.dll
[%SYSTEM%]\praizetoolbar.dll
[%WINDOWS%]\system\praizetoolbar.dll

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{c6335b00-e8d9-423e-a691-48d17cbb6c5a}
HKEY_LOCAL_MACHINE\software\classes\clsid\{c6335b00-e8d9-423e-a691-48d17cbb6c5a}

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
HGZ Backdoor Information
OneStep.Search Toolbar Cleaner
TrojanDownloader.Win32.Small.rn Downloader Removal instruction
Webmisc Adware Information
Bancos.ILP Trojan Removal

AntiVirGear Ransomware

How To Remove Remove AntiVirGear?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
AntiVirGear is dangerous virus:
The term ransomware is commonly used to describe such software,
although the field known as cryptovirology predates the term "ransomware".

This type of ransom attack can be accomplished by (for example) attaching
a specially crafted file/program to an e-mail message and sending this to the victim.


AntiVirGear Symptoms:

Files:
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AntiVirGear 3.8.lnk
[%DESKTOP%]\AntiVirGear 3.8.lnk
[%PROFILE_TEMP%]\~nsu.tmp\Au_.exe
[%PROFILE_TEMP%]\~nsu.tmp\Bu_.exe
[%PROGRAM_FILES%]\AntiVirGear 3.8\AntiVirGear 3.8.exe
[%STARTMENU%]\AntiVirGear 3.8.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AntiVirGear 3.7.lnk
[%DESKTOP%]\AntiVirGear 3.7.lnk
[%PROFILE_TEMP%]\VPPLanguage.ini
[%PROGRAM_FILES%]\AntiVirGear 3.7\AntiVirGear 3.7.exe
[%STARTMENU%]\AntiVirGear 3.7.lnk
[%SYSTEM%]\bubbj.dll
[%SYSTEM%]\jrpkmgh.dll
[%DESKTOP%]\AntiVirGear 3.8.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AntiVirGear 3.8.lnk
[%DESKTOP%]\AntiVirGear 3.8.lnk
[%PROFILE_TEMP%]\~nsu.tmp\Au_.exe
[%PROFILE_TEMP%]\~nsu.tmp\Bu_.exe
[%PROGRAM_FILES%]\AntiVirGear 3.8\AntiVirGear 3.8.exe
[%STARTMENU%]\AntiVirGear 3.8.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\AntiVirGear 3.7.lnk
[%DESKTOP%]\AntiVirGear 3.7.lnk
[%PROFILE_TEMP%]\VPPLanguage.ini
[%PROGRAM_FILES%]\AntiVirGear 3.7\AntiVirGear 3.7.exe
[%STARTMENU%]\AntiVirGear 3.7.lnk
[%SYSTEM%]\bubbj.dll
[%SYSTEM%]\jrpkmgh.dll
[%DESKTOP%]\AntiVirGear 3.8.lnk

Folders:
[%PROGRAMS%]\AntiVirGear 3.8
[%PROGRAM_FILES%]\AntiVirGear 3.8
[%PROGRAMS%]\AntiVirGear 3.7
[%PROGRAM_FILES%]\AntiVirGear 3.7

Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{3BC3AC5B-3BBB-9DBE-8166-EC650E3B9B48}
HKEY_CLASSES_ROOT\Interface\{0A0FC1A4-41D4-4793-9AC5-0B55CDC95AE9}
HKEY_CLASSES_ROOT\Interface\{14F47CA3-2291-4B3E-9ED4-8C7E6AE80851}
HKEY_CLASSES_ROOT\Interface\{2447284F-3590-4E8C-A869-049BD87CAD07}
HKEY_CLASSES_ROOT\Interface\{38EEEF46-CA24-4ACA-A90D-540978DF7252}
HKEY_CLASSES_ROOT\Interface\{3D5E5AE1-5DED-4520-BDC2-B9292EA708CA}
HKEY_CLASSES_ROOT\Interface\{409A05EF-1B48-4198-B6BF-993B8B52790C}
HKEY_CLASSES_ROOT\Interface\{47A93011-1004-440C-9960-BD3B0348A7C2}
HKEY_CLASSES_ROOT\Interface\{50B388D5-4A80-4191-8BCC-5DD031D7F3EE}
HKEY_CLASSES_ROOT\Interface\{58A1ACE6-0DBA-45D2-8154-E8253A7B87BB}
HKEY_CLASSES_ROOT\Interface\{73D25394-992F-43D1-BF92-48494CC0D1AE}
HKEY_CLASSES_ROOT\Interface\{7D2A83A4-0687-4704-937E-A29045826F77}
HKEY_CLASSES_ROOT\Interface\{A7FE54B2-B167-4017-BCCC-CF73B2F678E3}
HKEY_CLASSES_ROOT\Interface\{C183B073-2D7F-45BC-8967-80147CECEE45}
HKEY_CLASSES_ROOT\Interface\{F6FDBF9A-19A7-4F0A-9F46-6F015A067B44}
HKEY_CLASSES_ROOT\Interface\{F90A7969-20A0-4257-B39D-9C73D64CE3B0}
HKEY_CLASSES_ROOT\Interface\{FA38F299-57F8-4FEB-9096-715460AE943C}
HKEY_CLASSES_ROOT\TypeLib\{DE6AE29A-EB7D-4656-9418-26D5FCC9ADF5}
HKEY_LOCAL_MACHINE\SOFTWARE\AntiVirGear 3.8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AntiVirGear 3.8.exe 3.8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVirGear 3.8
HKEY_CLASSES_ROOT\Interface\{418985AE-4FE4-448D-83EE-238C887D8FC2}
HKEY_CLASSES_ROOT\Interface\{5F251303-F8C4-44C3-A7C2-9E8A93C59322}
HKEY_CLASSES_ROOT\Interface\{61840430-C7CF-43A0-9D49-3B3ED563FED1}
HKEY_CLASSES_ROOT\Interface\{765A8F7D-F57B-4601-A038-3F463A4D3193}
HKEY_CLASSES_ROOT\Interface\{77E616D5-5DB4-4B6A-8BDA-2BE4103A9921}
HKEY_CLASSES_ROOT\Interface\{8742F319-C916-4930-B781-1C148134C05C}
HKEY_CLASSES_ROOT\Interface\{897F5CB6-C1C1-494E-8F17-972784193442}
HKEY_CLASSES_ROOT\Interface\{A2224C72-745E-4046-882F-1A48C9311D77}
HKEY_CLASSES_ROOT\Interface\{AA500EFC-3C92-44C9-B1D6-7A7033343A50}
HKEY_CLASSES_ROOT\Interface\{AB5E9971-7086-4E6E-ADFA-BE9C685BE68B}
HKEY_CLASSES_ROOT\Interface\{AD7CA0BC-693A-4AF9-B31A-60472248F761}
HKEY_CLASSES_ROOT\Interface\{B2882CC2-0077-426B-916D-E0B9EA23A1B5}
HKEY_CLASSES_ROOT\Interface\{EE241504-6F15-49E4-847F-B4D7DA9EA8F9}
HKEY_CLASSES_ROOT\Interface\{F1666E4E-45C8-462A-97FF-BFD5A103BFFA}
HKEY_CLASSES_ROOT\Interface\{FD9A05E8-4A1E-45E6-B3B6-37CE20140278}
HKEY_CLASSES_ROOT\TypeLib\{AF0C5CBA-52E1-4B29-A2DC-58D91D599612}
HKEY_LOCAL_MACHINE\SOFTWARE\AntiVirGear 3.7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AntiVirGear 3.7.exe 3.7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVirGear 3.7
HKEY_CLASSES_ROOT\clsid\{1817ab5d-25bf-4d5e-ba90-6e5fe658fc5f}\inprocserver32
HKEY_CLASSES_ROOT\clsid\{3bc3ac5b-3bbb-9dbe-8166-ec650e3b9b48}
HKEY_CLASSES_ROOT\clsid\{60dea04c-9817-4309-bfa2-f8a1766c3cd1}\inprocserver32
HKEY_CLASSES_ROOT\interface\{0a0fc1a4-41d4-4793-9ac5-0b55cdc95ae9}
HKEY_CLASSES_ROOT\interface\{14f47ca3-2291-4b3e-9ed4-8c7e6ae80851}
HKEY_CLASSES_ROOT\interface\{2447284f-3590-4e8c-a869-049bd87cad07}
HKEY_CLASSES_ROOT\interface\{38eeef46-ca24-4aca-a90d-540978df7252}
HKEY_CLASSES_ROOT\interface\{3d5e5ae1-5ded-4520-bdc2-b9292ea708ca}
HKEY_CLASSES_ROOT\interface\{409a05ef-1b48-4198-b6bf-993b8b52790c}
HKEY_CLASSES_ROOT\interface\{47a93011-1004-440c-9960-bd3b0348a7c2}
HKEY_CLASSES_ROOT\interface\{50b388d5-4a80-4191-8bcc-5dd031d7f3ee}
HKEY_CLASSES_ROOT\interface\{58a1ace6-0dba-45d2-8154-e8253a7b87bb}
HKEY_CLASSES_ROOT\interface\{73d25394-992f-43d1-bf92-48494cc0d1ae}
HKEY_CLASSES_ROOT\interface\{7d2a83a4-0687-4704-937e-a29045826f77}
HKEY_CLASSES_ROOT\interface\{a7fe54b2-b167-4017-bccc-cf73b2f678e3}
HKEY_CLASSES_ROOT\interface\{c183b073-2d7f-45bc-8967-80147cecee45}
HKEY_CLASSES_ROOT\interface\{f6fdbf9a-19a7-4f0a-9f46-6f015a067b44}
HKEY_CLASSES_ROOT\interface\{f90a7969-20a0-4257-b39d-9c73d64ce3b0}
HKEY_CLASSES_ROOT\interface\{fa38f299-57f8-4feb-9096-715460ae943c}
HKEY_CLASSES_ROOT\typelib\{de6ae29a-eb7d-4656-9418-26d5fcc9adf5}
HKEY_LOCAL_MACHINE\software\antivirgear 3.8
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\antivirgear 3.8.exe 3.8
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\antivirgear 3.8

Registry Values:
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\software\microsoft\windows\shellnoroam\muicache
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\licenses
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
EliteMedia Adware Information
Remove Dollar.Revenue Adware
Remove Win32.TrojanDropper.Delf.NAC Trojan
VB.hc Downloader Symptoms
FreeGatez Trojan Removal instruction

Probot Spyware

How To Remove Remove Probot?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Probot is dangerous virus:
Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.


Probot It also known as:

[Other]Other

Probot Symptoms:

Files:
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\deployment package wizard.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\instant viewer 2.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\license.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\ordering.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\probot control panel.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\probot help.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\readme.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\tools\configuration.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\tools\export wizard.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\tools\log search wizard.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\uninstall.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\deployment package wizard.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\instant viewer 2.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\license.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\ordering.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\probot control panel.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\probot help.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\readme.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\tools\configuration.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\tools\export wizard.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\tools\log search wizard.lnk
[%PROFILE%]\administrator\start menu\programs\nethunter group\probot se\uninstall.lnk

Folders:
[%PROFILE%]\start menu\programs\nethunter group\probot se
[%PROGRAMS%]\nethunter group\probot
[%PROGRAMS%]\nethunter group\probot se
[%PROGRAM_FILES%]\nethunter group\probotse
[%PROGRAM_FILES%]\probot

Registry Values:
HKEY_CLASSES_ROOT\appid\pblib32.dll
HKEY_CLASSES_ROOT\appid\pbselib.dll
HKEY_CLASSES_ROOT\interface\{f40ccb3f-a677-4eca-8a94-29e801edc71e}\typelib


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Remove Nunci Hijacker
Removing All.In.One.Spy Spyware
Dialer.RAS.aj Adware Removal
Livuto Trojan Removal instruction
STOPzilla Hijacker Information