Kill Computer Virus: 12/05/08

Friday, December 5, 2008

JWord.Plugin Hijacker

How To Remove JWord.Plugin?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

JWord.Plugin is dangerous virus:
Hijackers are software programs that modify users' default browser home page,
search settings, error page settings, or desktop wallpaper without adequate notice, disclosure,
or user consent.

JWord.Plugin Symptoms:

Files: [%INTERNET_CACHE%]\content.ie5\3643RHGX\CnsMinIdn[1].cab [%PROGRAM_FILES%]\INASOFT\SDEFRAG\CnsMin.dll [%WINDOWS%]\Downloaded Program Files\CnsMinSV.dll [%WINDOWS%]\Downloaded Program Files\CnsMinSV.dll_tobedeleted [%WINDOWS%]\Downloaded Program Files\idnlite.dll [%WINDOWS%]\downloaded program files\jword.ico [%WINDOWS%]\downloaded program files\jwordhot.ico [%WINDOWS%]\DOWNLO~1\CnsMinSV.dll [%WINDOWS%]\DOWNLO~1\idnlite.dll [%PROFILE%]\recent\jword plugin.lnk [%PROGRAMS%]\japanese keywords\about japanese keyword.url [%PROGRAMS%]\japanese keywords\japanese keyword setting.url [%PROGRAMS%]\japanese keywords\uninstall.lnk [%INTERNET_CACHE%]\content.ie5\3643RHGX\CnsMinIdn[1].cab [%PROGRAM_FILES%]\INASOFT\SDEFRAG\CnsMin.dll [%WINDOWS%]\Downloaded Program Files\CnsMinSV.dll [%WINDOWS%]\Downloaded Program Files\CnsMinSV.dll_tobedeleted [%WINDOWS%]\Downloaded Program Files\idnlite.dll [%WINDOWS%]\downloaded program files\jword.ico [%WINDOWS%]\downloaded program files\jwordhot.ico [%WINDOWS%]\DOWNLO~1\CnsMinSV.dll [%WINDOWS%]\DOWNLO~1\idnlite.dll [%PROFILE%]\recent\jword plugin.lnk [%PROGRAMS%]\japanese keywords\about japanese keyword.url [%PROGRAMS%]\japanese keywords\japanese keyword setting.url [%PROGRAMS%]\japanese keywords\uninstall.lnk

Registry Keys: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:\windows\downloaded program files\cnsmin.dll HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\cnsmin.dll

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Bancos.IEB Trojan Removal instruction
Pigeon.EMJ Trojan Removal
Absolute.Key.Logger Spyware Removal instruction

PLook Trojan

How To Remove PLook?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

PLook is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

PLook It also known as:


[Other]Adware.PLook,Smalldrp.CRI,PLook

PLook Symptoms:

Files: [%STARTUP%]\wink.lnk [%STARTUP%]\wink.lnk

Folders: [%PROGRAM_FILES%]\plook [%PROGRAM_FILES%]\Wink

Registry Keys: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\plook.exe HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\plook application

Registry Values: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\wink HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\wink HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\wink HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\wink HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\wink HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\wink HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\wink HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\wink

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Removing Vxidl.ABJ Trojan
BAT.Vr Trojan Removal
maxserving.com Tracking Cookie Removal instruction
Boro Trojan Removal instruction

CWS.Excel10 Hijacker

How To Remove CWS.Excel10?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

CWS.Excel10 is dangerous virus:
Hijackers take control of various parts of your web browser, including your home page,
search pages, and search bar. They may also redirect you to certain sites should you
mistype an address or prevent you from going to a website they would rather you not,
such as sites that combat malware. Some will even redirect you to their own search engine
when you attempt a search.

CWS.Excel10 Symptoms:

Files: [%APPDATA%]\microsoft\office\excel10.dll [%APPDATA%]\microsoft\office\excel10.dll

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Gnorug Trojan Information
Remove Small.alg Downloader
AntiSpyPro Ransomware Removal instruction
Pigeon.ERP Trojan Removal
PM Trojan Symptoms

GotoBar Hijacker

How To Remove GotoBar?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

GotoBar is dangerous virus:
Hijackers are software programs that modify users' default browser home page,
search settings, error page settings, or desktop wallpaper without adequate notice, disclosure,
or user consent.

GotoBar Symptoms:

Registry Values: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Removing Clear.Search Hijacker
Remove Agent.db Trojan
Myss.Variant Adware Removal instruction
Removing Retard Backdoor
Exception.Manager RAT Removal instruction

TIB.Browser Trojan

How To Remove TIB.Browser?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

TIB.Browser is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

TIB.Browser It also known as:


[Other]TROJ_PORNDIAL.BP

TIB.Browser Symptoms:

Files: [%PROFILE%]\desktop\sexcam.lnk [%PROFILE%]\start menu\sexcam.lnk [%WINDOWS%]\desktop\sexxx.lnk [%WINDOWS%]\start menu\sexxxl.lnk [%PROFILE%]\desktop\sexcam.lnk [%PROFILE%]\start menu\sexcam.lnk [%WINDOWS%]\desktop\sexxx.lnk [%WINDOWS%]\start menu\sexxxl.lnk

Folders: [%PROGRAM_FILES%]\websiteviewer

Registry Keys: HKEY_CURRENT_USER\software\websiteviewer

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Win32.Dialer.NAQ Adware Symptoms
Zlob.Fam.Brain Codec Trojan Symptoms
Pasana RAT Removal

Last Trojan

How To Remove Last?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

Last is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

Last It also known as:


[Kaspersky]Backdoor.Last2000.a;
[McAfee]BackDoor-KG;
[F-Prot]security risk or a "backdoor" program;
[Panda]Bck/Last2000,Backdoor Program.LC;
[Computer Associates]Backdoor/BT!Client,Backdoor/Last2000!Server,Backdoor/Last2000.B,Win32.Last2000

Last Symptoms:

Files: [%WINDOWS%]\system\runvxd32.exe [%WINDOWS%]\system\runvxd32.exe

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Pigeon.AMK Trojan Symptoms
Eepybot Trojan Symptoms

Oemji.Bar BHO

How To Remove Oemji.Bar?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

Oemji.Bar is dangerous virus:
BHO (Browser Helper Object) Trojan.
The BHO waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
The method of network transport used by the attacker makes this Trojan unique.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.
Instead, this Trojan encodes the data with a simple XOR algorithm before placing it into
the data section of an ICMP ping packet." explained the company.
A Search hijacker redirects search results to other pages and may
transmit search and browsing data to unknown servers. An error page hijacker directs
the browser to another page, usually an advertising page, instead of the usual error
page when the requested URL is not found.
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.
It replaces your start page, continuosly open a number of pop up windows and so on.

Oemji.Bar Symptoms:

Files: [%PROGRAM_FILES%]\Oemji\OemjiSearchPlus\sfbnsp.dll [%PROGRAM_FILES%]\Oemji\OemjiSearchPlus\sfbnsp.dll

Registry Keys: HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{d240dc29-c093-4388-b71f-a7103c796b0c}

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Remove Sneak RAT
Removing TrojanProxy.Win32.Daemonize.bv Trojan
PWS.Banker.dldr Downloader Cleaner
RedButton RAT Cleaner
Remove FlashEnhancer Adware

DownloadCoach Adware

How To Remove DownloadCoach?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

DownloadCoach is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

DownloadCoach Symptoms:

Folders: [%PROGRAM_FILES%]\download coach

Registry Values: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Removing Namop Trojan
Whale.bat Trojan Removal instruction
Win32.PWS.QQPass Trojan Cleaner
Removing Bancos.GRE Trojan
IWantSearch Adware Information

Glaze Trojan

How To Remove Glaze?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

Glaze is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Glaze It also known as:


[Kaspersky]Trojan.Win32.Small.ou,Trojan.Win32.Small.sb;
[Other]Win32/Glaze.B,Infostealer,Win32/Glaze.C,TROJ_SMALL.LAH

Glaze Symptoms:

Files: [%SYSTEM%]\winsock2.dll [%SYSTEM%]\fgprov.dll [%SYSTEM%]\winsock2.dll [%SYSTEM%]\fgprov.dll

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
BrowserAid.LetsSearch BHO Removal instruction
Removing Bancos.DQB Trojan
TrojanDownloader.Win32.Small.gt Downloader Cleaner

Dlder Trojan

How To Remove Dlder?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

Dlder is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Dlder It also known as:


[Kaspersky]Trojan.Win32.Dlder.a;
[McAfee]Dlder;
[F-Prot]destructive program;
[Panda]Trj/W32.Dlder;
[Computer Associates]Win32.Dlder,Win32/Dlder!Trojan

Dlder Symptoms:

Registry Values: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Dowque.ABJ Trojan Information
eSpyNow Spyware Cleaner
Krepper Trojan Removal instruction
AZVPWS Trojan Removal
Theefdl Trojan Symptoms

CyberSpy.build RAT

How To Remove CyberSpy.build?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

CyberSpy.build is dangerous virus:
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

CyberSpy.build Symptoms:

Files: [%WINDOWS%]\system\msgsvr16.exe [%WINDOWS%]\system\msgsvr16.exe

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Removing Pigeon.ADR Trojan
Win32.Socoten Trojan Removal

SohuGame Downloader

How To Remove SohuGame?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

SohuGame is dangerous virus:
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

SohuGame Symptoms:

Folders: [%PROGRAM_FILES_COMMON%]\CPUSH [%PROGRAM_FILES%]\SOHUGAME

Registry Keys: HKEY_LOCAL_MACHINE\software\sohu HKEY_CLASSES_ROOT\sogameadaptor.webstart HKEY_CLASSES_ROOT\sogameadaptor.webstart.1

Registry Values: HKEY_CLASSES_ROOT\clsid\{7a6eff2e-24da-4618-8362-27c4e4324542}\inprocserver32 HKEY_CLASSES_ROOT\interface\{5a930095-acb0-4131-874f-77462d13f1cf}\typelib

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
IRCFlood Trojan Cleaner

Desktop.Doodle Adware

How To Remove Desktop.Doodle?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

Desktop.Doodle is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Desktop.Doodle Symptoms:

Files: [%SYSTEM%]\acsproxy.dll [%SYSTEM%]\acsproxy.lib [%SYSTEM%]\acsproxy.dll [%SYSTEM%]\acsproxy.lib

Folders: [%PROGRAM_FILES%]\desktop doodle

Registry Keys: HKEY_CURRENT_USER\software\e-ventures n.v. HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu2\programs\desktop doodle HKEY_CURRENT_USER\software\microsoft\windows\currentversion\uninstall\desktop doodle

Registry Values: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
PD Adware Cleaner
TrojanClicker.Win32.VB.ac Trojan Removal instruction
Remove RemotanZ.Clone Backdoor
Pigeon.AUY Trojan Information
Cannabis.Dropper!Dropper Trojan Cleaner

Virtumonde.by Adware

How To Remove Virtumonde.by?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

Virtumonde.by is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Virtumonde.by Symptoms:

Files: [%SYSTEM%]\efcccbb.dll [%SYSTEM%]\efcccbb.dll

Registry Keys: HKEY_CLASSES_ROOT\CLSID\{6D794CB4-C7CD-4C6F-BFDC-9B77AFBDC02C} HKEY_CLASSES_ROOT\clsid\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6b69e170-f59b-4897-b51c-3bb214d099ae}

Registry Values: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Removing DialSteal Trojan
Remove Meplex Adware

Mainpean.Stardialer Adware

How To Remove Mainpean.Stardialer?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

Mainpean.Stardialer is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Mainpean.Stardialer It also known as:


[Panda]Dialer.Gen

Mainpean.Stardialer Symptoms:

Files: [%DESKTOP%]\clevercrackers ccs-10001.lnk [%DESKTOP%]\Hackercd-Online hcd-11514.lnk [%PROGRAMS%]\- clevercrackers -\clevercrackers ccs-10001.lnk [%DESKTOP%]\clevercrackers ccs-10001.lnk [%DESKTOP%]\Hackercd-Online hcd-11514.lnk [%PROGRAMS%]\- clevercrackers -\clevercrackers ccs-10001.lnk

Folders: [%PROGRAMS%]\- Hackercd-Online -

Registry Keys: HKEY_LOCAL_MACHINE\software\mainpean highspeed

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
KeyLog.MSNX3 Trojan Symptoms

Jadire Trojan

How To Remove Jadire?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

Jadire is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Jadire Symptoms:

Files: [%WINDOWS%]\winview.dat [%WINDOWS%]\winview.exe [%WINDOWS%]\winview.dat [%WINDOWS%]\winview.exe

Registry Keys: HKEY_CURRENT_USER\software\vb and vba program settings\jadie virus

Registry Values: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Removing Alcan.5tn Worm

H@tKeysH@@k Spyware

How To Remove H@tKeysH@@k?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

H@tKeysH@@k is dangerous virus:
Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

H@tKeysH@@k Symptoms:

Files: [%SYSTEM%]\H@tKeysH@@k.DLL [%SYSTEM%]\h@tkeysh@@k.dll [%SYSTEM%]\temp#01.exe [%SYSTEM%]\temp$01.exe [%WINDOWS%]\system\h@tkeysh@@k.dll [%WINDOWS%]\system\temp#01.exe [%WINDOWS%]\system\temp$01.exe [%SYSTEM%]\H@tKeysH@@k.DLL [%SYSTEM%]\h@tkeysh@@k.dll [%SYSTEM%]\temp#01.exe [%SYSTEM%]\temp$01.exe [%WINDOWS%]\system\h@tkeysh@@k.dll [%WINDOWS%]\system\temp#01.exe [%WINDOWS%]\system\temp$01.exe

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
PassDel Trojan Information
Remove Easyget Trojan
Remove Scynaud Trojan
Pigeon.ABS Trojan Removal

WurldMedia.Moz Hijacker

How To Remove WurldMedia.Moz?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

WurldMedia.Moz is dangerous virus:
Hijackers are software programs that modify users' default browser home page,
search settings, error page settings, or desktop wallpaper without adequate notice, disclosure,
or user consent.

When the default home page is hijacked, the browser opens to the web page set by the hijacker
instead of the user's designated home page. In some cases, the hijacker may block users from
restoring their desired home page.

A search hijacker redirects search results to other pages and may
transmit search and browsing data to unknown servers. An error page hijacker directs
the browser to another page, usually an advertising page, instead of the usual error
page when the requested URL is not found.

A desktop hijacker replaces the desktop wallpaper with advertising
for products and services on the desktop.

Hijackers take control of various parts of your web browser, including your home page,
search pages, and search bar. They may also redirect you to certain sites should you
mistype an address or prevent you from going to a website they would rather you not,
such as sites that combat malware. Some will even redirect you to their own search engine
when you attempt a search. NB: hijackers almost exclusively target Internet Explorer.

WurldMedia.Moz Symptoms:

Files: [%SYSTEM%]\moz030715s.dll [%SYSTEM%]\bkxjwqro.dll [%WINDOWS%]\system\moz030715s.dll [%SYSTEM%]\moz030715s.dll [%SYSTEM%]\bkxjwqro.dll [%WINDOWS%]\system\moz030715s.dll

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Mabuhay Trojan Symptoms
Fakealert.DriveCleaner2006 Trojan Cleaner
VB.bo Backdoor Information
Remove Delf.GEN Trojan
Tequila Trojan Removal

QBar Adware

How To Remove QBar?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

QBar is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

QBar Symptoms:

Files: [%SYSTEM%]\qbup.qup [%SYSTEM%]\qbup.qup

Folders: [%PROGRAM_FILES%]\qbar

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Rmhpy99.exe Trojan Removal instruction
Bancos.GKC Trojan Symptoms

Look2Me Hijacker

How To Remove Look2Me?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

Look2Me is dangerous virus:
A Search hijacker redirects search results to other pages and may
transmit search and browsing data to unknown servers. An error page hijacker directs
the browser to another page, usually an advertising page, instead of the usual error
page when the requested URL is not found.
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Look2Me It also known as:


[Panda]Adware/Look2Me

Look2Me Symptoms:

Files: [%SYSTEM%]\aoifile.dll [%SYSTEM%]\bzowseui.dll [%SYSTEM%]\c8000idme80a0.dll [%SYSTEM%]\cibcatq.dll [%SYSTEM%]\cimrepl.dll [%SYSTEM%]\dId9.dll [%SYSTEM%]\dn6001jme.dll [%SYSTEM%]\dptmsft.dll [%SYSTEM%]\dynet.dll [%SYSTEM%]\e6200gfme62a0.dll [%SYSTEM%]\egts.dll [%SYSTEM%]\en46l1hs1.dll [%SYSTEM%]\enlql1351.dll [%SYSTEM%]\f02m0af1ed2.dll [%SYSTEM%]\f82m0if1e82.dll [%SYSTEM%]\fA2m0if1e82.dll [%SYSTEM%]\fktlib.dll [%SYSTEM%]\fp6403jqe.dll [%SYSTEM%]\fp8803lue.dll [%SYSTEM%]\g622lgfo162c.dll [%SYSTEM%]\g8220ifoe82c0.dll [%SYSTEM%]\gE22lgfo162c.dll [%SYSTEM%]\gou32.dll [%SYSTEM%]\gp4ol3h31.dll [%SYSTEM%]\gpjql3151.dll [%SYSTEM%]\gpp6l37s1.dll [%SYSTEM%]\gru32.dll [%SYSTEM%]\h2l20c3oef.dll [%SYSTEM%]\hmetcfg.dll [%SYSTEM%]\hrl6053se.dll [%SYSTEM%]\hrn4055qe.dll [%SYSTEM%]\hrnu0559e.dll [%SYSTEM%]\hrrq0595e.dll [%SYSTEM%]\i8600ijme8oa0.dll [%SYSTEM%]\ig50_32.dll [%SYSTEM%]\incvid.dll [%SYSTEM%]\insetup.dll [%SYSTEM%]\ipmui.dll [%SYSTEM%]\ir6ml5j11.dll [%SYSTEM%]\ir6ql5j51.dll [%SYSTEM%]\irlql5351.dll [%SYSTEM%]\irnml5511.dll [%SYSTEM%]\ixetcfg.dll [%SYSTEM%]\j02qlaf51d2.dll [%SYSTEM%]\j20slcd71f0.dll [%SYSTEM%]\j2j60c1sef.dll [%SYSTEM%]\j42q0ef5eh2.dll [%SYSTEM%]\j4l40e3qeh.dll [%SYSTEM%]\k4lq0e35eh.dll [%SYSTEM%]\k880lilm18qa.dll [%SYSTEM%]\kddhe.dll [%SYSTEM%]\kt00l7dm1.dll [%SYSTEM%]\kudblr.dll [%SYSTEM%]\kzdcan.dll [%SYSTEM%]\l04qlah51d4.dll [%SYSTEM%]\l06olaj31do.dll [%SYSTEM%]\l4r00e9meh.dll [%SYSTEM%]\ljhsvc.dll [%SYSTEM%]\luadperf.dll [%SYSTEM%]\lv2q09f5e.dll [%SYSTEM%]\lvj0091me.dll [%SYSTEM%]\lvju0919e.dll [%SYSTEM%]\lvnq0955e.dll [%SYSTEM%]\lvrq0995e.dll [%SYSTEM%]\m0280afued280.dll [%SYSTEM%]\m0ju0a19ed.dll [%SYSTEM%]\m8640ijqe8oe0.dll [%SYSTEM%]\m8ju0i19e8.dll [%SYSTEM%]\masign32.dll [%SYSTEM%]\mbc40u.dll [%SYSTEM%]\mfyuv.dll [%SYSTEM%]\mmcat32.dll [%SYSTEM%]\mpvcr70.dll [%SYSTEM%]\mv2ml9f11.dll [%SYSTEM%]\mvl8l93u1.dll [%SYSTEM%]\mxjet35.dll [%SYSTEM%]\n0l80a3ued.dll [%SYSTEM%]\n44s0eh7eh4.dll [%SYSTEM%]\n64slgh7164.dll [%SYSTEM%]\n6n60g5se6.dll [%SYSTEM%]\n6n6lg5s16.dll [%SYSTEM%]\n8n6li5s18.dll [%SYSTEM%]\n8r2li9o18.dll [%SYSTEM%]\noobjapi.dll [%SYSTEM%]\o4pq0e75eh.dll [%SYSTEM%]\o8pq0i75e8.dll [%SYSTEM%]\ojeaut32.dll [%SYSTEM%]\okbcint.dll [%SYSTEM%]\oktext32.dll [%SYSTEM%]\osbc.dll [%SYSTEM%]\oveaut32.dll [%SYSTEM%]\oVkley.dll [%SYSTEM%]\p0r40a9qed.dll [%SYSTEM%]\p66slgj716o.dll [%SYSTEM%]\p6p6lg7s16.dll [%SYSTEM%]\pJutoenr.dll [%SYSTEM%]\pmwrprof.dll [%SYSTEM%]\ppdgen.dll [%SYSTEM%]\q0680ajuedo80.dll [%SYSTEM%]\q268lcju1fo8.dll [%SYSTEM%]\q4nu0e59eh.dll [%SYSTEM%]\r86ulij918o.dll [%SYSTEM%]\rcmotepg.dll [%SYSTEM%]\rdcss.dll [%SYSTEM%]\rkched20.dll [%SYSTEM%]\rlutils.dll [%SYSTEM%]\rNsauto.dll [%SYSTEM%]\rnvpperf.dll [%SYSTEM%]\rQsdlg.dll [%SYSTEM%]\sdellstyle.dll [%SYSTEM%]\senceng.dll [%SYSTEM%]\sjbiop.dll [%SYSTEM%]\sjdpapi.dll [%SYSTEM%]\sNmlib.dll [%SYSTEM%]\sxncui.dll [%SYSTEM%]\tBpi.dll [%SYSTEM%]\vooy.dll [%SYSTEM%]\VZCodec.dll [%SYSTEM%]\wahtcpip.dll [%SYSTEM%]\WAVADVE.DLL [%SYSTEM%]\wcbhits.dll [%SYSTEM%]\wnps2.dll [%SYSTEM%]\wopencen.dll [%SYSTEM%]\wwd_ci.dll [%SYSTEM%]\xzlprov.dll [%WINDOWS%]\icont.exe [%WINDOWS%]\iconz.exe [%WINDOWS%]\Temp\bw2.com [%SYSTEM%]\aEaamon.dll [%SYSTEM%]\db32gt.dll [%SYSTEM%]\dn6o01j3e.dll [%SYSTEM%]\en8ol1l31.dll [%SYSTEM%]\explorer.dll [%SYSTEM%]\fp4003hme.dll [%SYSTEM%]\iPlmdnt5.dll [%SYSTEM%]\j40s0ed7eh0.dll [%SYSTEM%]\lnfax11n.dll [%SYSTEM%]\winlog.exe [%SYSTEM%]\wlwfax.dll [%WINDOWS%]\$NtUninstallKB823559$\run.dll [%SYSTEM%]\allui.dll [%SYSTEM%]\bqotvid.dll [%SYSTEM%]\chmpstui.dll [%SYSTEM%]\guard.tmp [%SYSTEM%]\iqmon.dll [%SYSTEM%]\k6080gdue6080.dll [%SYSTEM%]\l2p20c7oef.dll [%SYSTEM%]\merd2x40.dll [%SYSTEM%]\mgl_hp.dll [%SYSTEM%]\msg{1e253d5d-6add-4fe9-829c-f51038158be5}0110.dll [%SYSTEM%]\msg{1e253d5d-6add-4fe9-829c-f51038158be5}0111.dll [%SYSTEM%]\msg{46b08877-2be4-4f35-8e77-034c2142321c}0115.dll [%SYSTEM%]\msg{5bef546a-e3c1-489c-996a-c9688d985ae0}0110.dll [%SYSTEM%]\msg{5bef546a-e3c1-489c-996a-c9688d985ae0}0111.dll [%SYSTEM%]\msg{63de1ad9-f0c6-4dac-886a-5a9707b0d23c}0110.dll [%SYSTEM%]\msg{63de1ad9-f0c6-4dac-886a-5a9707b0d23c}0111.dll [%SYSTEM%]\msg{93396c3f-aea3-4ac0-bb55-81f0f0414a24}0113.dll [%SYSTEM%]\msg{9d4f5b7c-2a4b-46c5-99a7-4c775b688d45}0110.dll [%SYSTEM%]\msg{9d4f5b7c-2a4b-46c5-99a7-4c775b688d45}0111.dll [%SYSTEM%]\msg{aac5700f-954a-47b7-9746-871ae8e634e4}0115.dll [%SYSTEM%]\msg{b9a9ac6a-2cc9-4a24-a250-bea974703ff8}0110.dll [%SYSTEM%]\msg{b9a9ac6a-2cc9-4a24-a250-bea974703ff8}0111.dll [%SYSTEM%]\msg{d331b768-d6da-41e8-a7b6-78ed724126c0}0115.dll [%SYSTEM%]\msg{e01b47a7-a499-4fee-83c2-b0684ca28e6b}0115.dll [%SYSTEM%]\msg{e8d8ffef-30a4-4df1-a618-e0599a0d0a15}0110.dll [%SYSTEM%]\msg{e8d8ffef-30a4-4df1-a618-e0599a0d0a15}0111.dll [%SYSTEM%]\mtdart.dll [%SYSTEM%]\mvgsvc.dll [%SYSTEM%]\namarta.dll [%SYSTEM%]\tgkwks.dll [%SYSTEM%]\wbdmtpdr.dll [%SYSTEM%]\wgvadvd.dll [%WINDOWS%]\iconu.exe [%WINDOWS%]\system\msg{15dd85c0-1b81-11d8-a1e4-00a0cc251329}0113.dll [%SYSTEM%]\aoifile.dll [%SYSTEM%]\bzowseui.dll [%SYSTEM%]\c8000idme80a0.dll [%SYSTEM%]\cibcatq.dll [%SYSTEM%]\cimrepl.dll [%SYSTEM%]\dId9.dll [%SYSTEM%]\dn6001jme.dll [%SYSTEM%]\dptmsft.dll [%SYSTEM%]\dynet.dll [%SYSTEM%]\e6200gfme62a0.dll [%SYSTEM%]\egts.dll [%SYSTEM%]\en46l1hs1.dll [%SYSTEM%]\enlql1351.dll [%SYSTEM%]\f02m0af1ed2.dll [%SYSTEM%]\f82m0if1e82.dll [%SYSTEM%]\fA2m0if1e82.dll [%SYSTEM%]\fktlib.dll [%SYSTEM%]\fp6403jqe.dll [%SYSTEM%]\fp8803lue.dll [%SYSTEM%]\g622lgfo162c.dll [%SYSTEM%]\g8220ifoe82c0.dll [%SYSTEM%]\gE22lgfo162c.dll [%SYSTEM%]\gou32.dll [%SYSTEM%]\gp4ol3h31.dll [%SYSTEM%]\gpjql3151.dll [%SYSTEM%]\gpp6l37s1.dll [%SYSTEM%]\gru32.dll [%SYSTEM%]\h2l20c3oef.dll [%SYSTEM%]\hmetcfg.dll [%SYSTEM%]\hrl6053se.dll [%SYSTEM%]\hrn4055qe.dll [%SYSTEM%]\hrnu0559e.dll [%SYSTEM%]\hrrq0595e.dll [%SYSTEM%]\i8600ijme8oa0.dll [%SYSTEM%]\ig50_32.dll [%SYSTEM%]\incvid.dll [%SYSTEM%]\insetup.dll [%SYSTEM%]\ipmui.dll [%SYSTEM%]\ir6ml5j11.dll [%SYSTEM%]\ir6ql5j51.dll [%SYSTEM%]\irlql5351.dll [%SYSTEM%]\irnml5511.dll [%SYSTEM%]\ixetcfg.dll [%SYSTEM%]\j02qlaf51d2.dll [%SYSTEM%]\j20slcd71f0.dll [%SYSTEM%]\j2j60c1sef.dll [%SYSTEM%]\j42q0ef5eh2.dll [%SYSTEM%]\j4l40e3qeh.dll [%SYSTEM%]\k4lq0e35eh.dll [%SYSTEM%]\k880lilm18qa.dll [%SYSTEM%]\kddhe.dll [%SYSTEM%]\kt00l7dm1.dll [%SYSTEM%]\kudblr.dll [%SYSTEM%]\kzdcan.dll [%SYSTEM%]\l04qlah51d4.dll [%SYSTEM%]\l06olaj31do.dll [%SYSTEM%]\l4r00e9meh.dll [%SYSTEM%]\ljhsvc.dll [%SYSTEM%]\luadperf.dll [%SYSTEM%]\lv2q09f5e.dll [%SYSTEM%]\lvj0091me.dll [%SYSTEM%]\lvju0919e.dll [%SYSTEM%]\lvnq0955e.dll [%SYSTEM%]\lvrq0995e.dll [%SYSTEM%]\m0280afued280.dll [%SYSTEM%]\m0ju0a19ed.dll [%SYSTEM%]\m8640ijqe8oe0.dll [%SYSTEM%]\m8ju0i19e8.dll [%SYSTEM%]\masign32.dll [%SYSTEM%]\mbc40u.dll [%SYSTEM%]\mfyuv.dll [%SYSTEM%]\mmcat32.dll [%SYSTEM%]\mpvcr70.dll [%SYSTEM%]\mv2ml9f11.dll [%SYSTEM%]\mvl8l93u1.dll [%SYSTEM%]\mxjet35.dll [%SYSTEM%]\n0l80a3ued.dll [%SYSTEM%]\n44s0eh7eh4.dll [%SYSTEM%]\n64slgh7164.dll [%SYSTEM%]\n6n60g5se6.dll [%SYSTEM%]\n6n6lg5s16.dll [%SYSTEM%]\n8n6li5s18.dll [%SYSTEM%]\n8r2li9o18.dll [%SYSTEM%]\noobjapi.dll [%SYSTEM%]\o4pq0e75eh.dll [%SYSTEM%]\o8pq0i75e8.dll [%SYSTEM%]\ojeaut32.dll [%SYSTEM%]\okbcint.dll [%SYSTEM%]\oktext32.dll [%SYSTEM%]\osbc.dll [%SYSTEM%]\oveaut32.dll [%SYSTEM%]\oVkley.dll [%SYSTEM%]\p0r40a9qed.dll [%SYSTEM%]\p66slgj716o.dll [%SYSTEM%]\p6p6lg7s16.dll [%SYSTEM%]\pJutoenr.dll [%SYSTEM%]\pmwrprof.dll [%SYSTEM%]\ppdgen.dll [%SYSTEM%]\q0680ajuedo80.dll [%SYSTEM%]\q268lcju1fo8.dll [%SYSTEM%]\q4nu0e59eh.dll [%SYSTEM%]\r86ulij918o.dll [%SYSTEM%]\rcmotepg.dll [%SYSTEM%]\rdcss.dll [%SYSTEM%]\rkched20.dll [%SYSTEM%]\rlutils.dll [%SYSTEM%]\rNsauto.dll [%SYSTEM%]\rnvpperf.dll [%SYSTEM%]\rQsdlg.dll [%SYSTEM%]\sdellstyle.dll [%SYSTEM%]\senceng.dll [%SYSTEM%]\sjbiop.dll [%SYSTEM%]\sjdpapi.dll [%SYSTEM%]\sNmlib.dll [%SYSTEM%]\sxncui.dll [%SYSTEM%]\tBpi.dll [%SYSTEM%]\vooy.dll [%SYSTEM%]\VZCodec.dll [%SYSTEM%]\wahtcpip.dll [%SYSTEM%]\WAVADVE.DLL [%SYSTEM%]\wcbhits.dll [%SYSTEM%]\wnps2.dll [%SYSTEM%]\wopencen.dll [%SYSTEM%]\wwd_ci.dll [%SYSTEM%]\xzlprov.dll [%WINDOWS%]\icont.exe [%WINDOWS%]\iconz.exe [%WINDOWS%]\Temp\bw2.com [%SYSTEM%]\aEaamon.dll [%SYSTEM%]\db32gt.dll [%SYSTEM%]\dn6o01j3e.dll [%SYSTEM%]\en8ol1l31.dll [%SYSTEM%]\explorer.dll [%SYSTEM%]\fp4003hme.dll [%SYSTEM%]\iPlmdnt5.dll [%SYSTEM%]\j40s0ed7eh0.dll [%SYSTEM%]\lnfax11n.dll [%SYSTEM%]\winlog.exe [%SYSTEM%]\wlwfax.dll [%WINDOWS%]\$NtUninstallKB823559$\run.dll [%SYSTEM%]\allui.dll [%SYSTEM%]\bqotvid.dll [%SYSTEM%]\chmpstui.dll [%SYSTEM%]\guard.tmp [%SYSTEM%]\iqmon.dll [%SYSTEM%]\k6080gdue6080.dll [%SYSTEM%]\l2p20c7oef.dll [%SYSTEM%]\merd2x40.dll [%SYSTEM%]\mgl_hp.dll [%SYSTEM%]\msg{1e253d5d-6add-4fe9-829c-f51038158be5}0110.dll [%SYSTEM%]\msg{1e253d5d-6add-4fe9-829c-f51038158be5}0111.dll [%SYSTEM%]\msg{46b08877-2be4-4f35-8e77-034c2142321c}0115.dll [%SYSTEM%]\msg{5bef546a-e3c1-489c-996a-c9688d985ae0}0110.dll [%SYSTEM%]\msg{5bef546a-e3c1-489c-996a-c9688d985ae0}0111.dll [%SYSTEM%]\msg{63de1ad9-f0c6-4dac-886a-5a9707b0d23c}0110.dll [%SYSTEM%]\msg{63de1ad9-f0c6-4dac-886a-5a9707b0d23c}0111.dll [%SYSTEM%]\msg{93396c3f-aea3-4ac0-bb55-81f0f0414a24}0113.dll [%SYSTEM%]\msg{9d4f5b7c-2a4b-46c5-99a7-4c775b688d45}0110.dll [%SYSTEM%]\msg{9d4f5b7c-2a4b-46c5-99a7-4c775b688d45}0111.dll [%SYSTEM%]\msg{aac5700f-954a-47b7-9746-871ae8e634e4}0115.dll [%SYSTEM%]\msg{b9a9ac6a-2cc9-4a24-a250-bea974703ff8}0110.dll [%SYSTEM%]\msg{b9a9ac6a-2cc9-4a24-a250-bea974703ff8}0111.dll [%SYSTEM%]\msg{d331b768-d6da-41e8-a7b6-78ed724126c0}0115.dll [%SYSTEM%]\msg{e01b47a7-a499-4fee-83c2-b0684ca28e6b}0115.dll [%SYSTEM%]\msg{e8d8ffef-30a4-4df1-a618-e0599a0d0a15}0110.dll [%SYSTEM%]\msg{e8d8ffef-30a4-4df1-a618-e0599a0d0a15}0111.dll [%SYSTEM%]\mtdart.dll [%SYSTEM%]\mvgsvc.dll [%SYSTEM%]\namarta.dll [%SYSTEM%]\tgkwks.dll [%SYSTEM%]\wbdmtpdr.dll [%SYSTEM%]\wgvadvd.dll [%WINDOWS%]\iconu.exe [%WINDOWS%]\system\msg{15dd85c0-1b81-11d8-a1e4-00a0cc251329}0113.dll

Registry Keys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\App Management HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\BITS HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Control Panel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Controls Folder HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\CSCSettings HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Dynamic Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\explorer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Extensions HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Hints HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Installer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Internet Settings HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Media Center HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ModuleUsage HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Nls HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OemStartMenuData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\policies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Reliability HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Run HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\RunOnce HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\RunOnceEx HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SharedDlls HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Shell Extensions HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ShellCompatibility HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ShellScrap HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ShellServiceObjectDelayLoad HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Syncmgr HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Telephony HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Unimodem HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\URL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WindowsUpdate HKEY_CLASSES_ROOT\clsid\{3c874920-bb96-452c-94c4-bdd73e451be3} HKEY_CLASSES_ROOT\clsid\{3ec78605-05b4-4b17-b84c-80087b3e02e3} HKEY_CLASSES_ROOT\clsid\{b8ffec76-fd26-4bc4-bcd5-6c7bb2b02b14} HKEY_CLASSES_ROOT\clsid\{ddffa75a-e81d-4454-89fc-b9fd0631e726} HKEY_CURRENT_USER\software\look2me HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\guardianorvcb

Registry Values: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\control panel HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\control panel HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\control panel HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\control panel HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\control panel HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\control panel HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\optimallayout HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\optimallayout HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\optimallayout HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\optimallayout HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\optimallayout HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\optimallayout HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Services HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices_Disabled HKEY_CURRENT_USER\software\microsoft\internet explorer\main HKEY_CURRENT_USER\software\microsoft\internet explorer\main HKEY_CURRENT_USER\software\microsoft\internet explorer\main HKEY_CURRENT_USER\software\microsoft\internet explorer\main HKEY_CURRENT_USER\software\microsoft\internet explorer\main HKEY_CURRENT_USER\software\microsoft\internet explorer\main HKEY_CURRENT_USER\software\microsoft\internet explorer\main HKEY_CURRENT_USER\software\microsoft\internet explorer\search HKEY_CURRENT_USER\software\microsoft\internet explorer\search HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\search HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\app paths HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\control panel HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\control panel HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\control panel HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\control panel HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\control panel HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\control panel HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\optimallayout HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\optimallayout HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\optimallayout HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\optimallayout HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\optimallayout HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\optimallayout HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\runonce HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\runonce HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\runonce HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\runonce HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\runonce HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\runonce HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\syncmgr HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\telephony HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\user agent\post platform HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\user agent\post platform HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions\approved HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions\approved HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions\approved HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions\approved HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions\approved

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Pigeon.ABI Trojan Cleaner

Internet Security Add-On Trojan

How To Remove Internet Security Add-On?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

Internet Security Add-On is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Adware is the class of programs that place advertisements on your screen.
These may be in the form of pop-ups, pop-unders, advertisements embedded in programs,
advertisements placed on top of ads in web sites, or any other way the authors can
think of showing you an ad.

The pop-ups generally will not be stopped by pop-up stoppers, and often are
not dependent on your having Internet Explorer open.
They may show up when you are playing a game, writing a document, listening to music,
or anything else. Should you be surfing, the advertisements will often be related to
the web page you are viewing.

Internet Security Add-On Symptoms:

Registry Keys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Security Add-On

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
BagleDl.AH Trojan Removal instruction
TargetSaver Downloader Removal instruction
Remove Spy.Win32.Banker.mt Trojan
Idimdoor Backdoor Cleaner
LiveAntispy Ransomware Symptoms

FormatA Trojan

How To Remove FormatA?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

FormatA is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

FormatA It also known as:


[Kaspersky]/See The World!.bat infected: Trojan.BAT.FormatA.d,Trojan.BAT.FormatA.d;
[McAfee]FormatA;
[Panda]Trj/FormatA;
[Computer Associates]FormatA,Formatter

FormatA Symptoms:

Files: [%PROGRAM_FILES%]\accele~1\anti-v~1\email_update.exe [%PROGRAM_FILES%]\accele~1\anti-v~1\email_update.exe

Folders: [%PROGRAM_FILES%]\musicmagnet

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Vxidl.BCZ Trojan Symptoms

Win32.VB.apq Trojan

How To Remove Win32.VB.apq?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

Win32.VB.apq is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.
As this information is entered by the user, it is captured by the BHO (Browser Helper Object) and
sent back to the attacker.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.

Win32.VB.apq Symptoms:

Files: [%SYSTEM%]\msnhlp32.dll [%SYSTEM%]\msnhlp32.dll

Registry Keys: HKEY_CLASSES_ROOT\CLSID\{EEFBE5D6-FEFF-4CB4-AA26-6A464090CB89} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEFBE5D6-FEFF-4CB4-AA26-6A464090CB89}

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
BookedSpace Adware Symptoms
SillyDl.DBH Trojan Cleaner
Bancos.IDV Trojan Removal
DedRunner Trojan Removal

Ashlt Spyware

How To Remove Ashlt?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

Ashlt is dangerous virus:
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.

Ashlt Symptoms:

Files: [%WINDOWS%]\Ashlt.exe [%WINDOWS%]\Ashlt.exe

Registry Keys: HKEY_LOCAL_MACHINE\software\ashlt

Registry Values: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
UltraVNC RAT Cleaner
Unknown Trojan Symptoms

AQP Trojan

How To Remove AQP?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

AQP is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.

AQP Symptoms:

Files: [%PROGRAM_FILES%]\Microsoft\svhost32.exe [%PROGRAM_FILES%]\Microsoft\svhost32.exe

Registry Values: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Stats Trojan Information

DuduAccelerator Adware

How To Remove DuduAccelerator?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

DuduAccelerator is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

DuduAccelerator It also known as:


[Kaspersky]Trojan-Dropper.Win32.Agent.xz;
[McAfee]Downloader-AW

DuduAccelerator Symptoms:

Files: [%WINDOWS%]\Downloaded Installations\{23710A32-F648-42F4-8E67-29F800D6A4A1}\1033.MST [%WINDOWS%]\Downloaded Installations\{23710A32-F648-42F4-8E67-29F800D6A4A1}\DuDu Speed.msi [%COMMON_DESKTOPDIRECTORY%]\DuDu Speed.lnk [%COMMON_STARTUP%]\DuDu Speed.lnk [%DESKTOP%]\remotesetup.exe [%PROFILE%]\Recent\dddspocx.lnk [%PROFILE_TEMP%]\dddsetup.exe [%WINDOWS%]\Downloaded Installations\{23710A32-F648-42F4-8E67-29F800D6A4A1}\1033.MST [%WINDOWS%]\Downloaded Installations\{23710A32-F648-42F4-8E67-29F800D6A4A1}\DuDu Speed.msi [%COMMON_DESKTOPDIRECTORY%]\DuDu Speed.lnk [%COMMON_STARTUP%]\DuDu Speed.lnk [%DESKTOP%]\remotesetup.exe [%PROFILE%]\Recent\dddspocx.lnk [%PROFILE_TEMP%]\dddsetup.exe

Folders: [%APPDATA%]\DuDu [%COMMON_PROGRAMS%]\DuDu Speed [%PROGRAM_FILES%]\DuDu

Registry Keys: HKEY_CLASSES_ROOT\.dd!\ddd.dd! HKEY_CLASSES_ROOT\ddd.dd! HKEY_CLASSES_ROOT\mime\database\content type\application\x-ddd HKEY_LOCAL_MACHINE\software\dudu HKEY_CLASSES_ROOT\clsid\{00018593-c6bd-46f7-9349-dba1aa674c90} HKEY_CLASSES_ROOT\clsid\{6bde1669-b490-48e3-b668-456314f2d6c3} HKEY_CLASSES_ROOT\clsid\{915e63f4-4733-401e-8556-6559b30a4c5a} HKEY_CLASSES_ROOT\clsid\{93f643d6-4cc8-4aa7-990f-f82c13e24373} HKEY_CLASSES_ROOT\clsid\{c572fb5d-9c65-47fd-899a-1166c90b8136} HKEY_CLASSES_ROOT\clsid\{ffd95f65-f5e4-4ab8-b7f9-f61f13878a04} HKEY_CLASSES_ROOT\dddiemon.customdl HKEY_CLASSES_ROOT\dddiemon.customdl.1 HKEY_CLASSES_ROOT\dddiemon.customdownloadmgr HKEY_CLASSES_ROOT\dddiemon.customdownloadmgr.1 HKEY_CLASSES_ROOT\dddiemon.dddmon HKEY_CLASSES_ROOT\dddiemon.dddmon.1 HKEY_CLASSES_ROOT\dddiemon.dddmont HKEY_CLASSES_ROOT\dddiemon.dddmont.1 HKEY_CLASSES_ROOT\dddmext.dlmgr HKEY_CLASSES_ROOT\dddmext.dlmgr.1 HKEY_CLASSES_ROOT\installer\features\3084c4b986a154d49bccd7f9b97fba7e HKEY_CLASSES_ROOT\installer\products\3084c4b986a154d49bccd7f9b97fba7e HKEY_CLASSES_ROOT\interface\{1bbfa226-6a38-4b6b-80c2-35b829773c2e} HKEY_CLASSES_ROOT\interface\{2f3482f8-819f-49bc-a272-c91fe2605f45} HKEY_CLASSES_ROOT\interface\{7b242faa-d828-4492-8223-b543f17df940} HKEY_CLASSES_ROOT\interface\{8cd1fee0-45ca-4bb0-a9d7-a353c7823226} HKEY_CLASSES_ROOT\interface\{a678febf-7787-448e-955b-7be5a29f1002} HKEY_CLASSES_ROOT\typelib\{2e59452c-8826-43a2-b28a-927bff705bf9} HKEY_CLASSES_ROOT\typelib\{49bd048a-3eba-4234-a408-df92ad121fd8} HKEY_CLASSES_ROOT\typelib\{e984b17c-7fae-4e2b-8d80-e1c9ea96b0cb} HKEY_CURRENT_USER\software\microsoft\internet explorer\menuext\&detect video by dudu HKEY_CURRENT_USER\software\microsoft\internet explorer\menuext\&download all by dudu HKEY_CURRENT_USER\software\microsoft\internet explorer\menuext\&download by dudu HKEY_CURRENT_USER\software\microsoft\internet explorer\menuext\&download selection by dudu HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{00018593-c6bd-46f7-9349-dba1aa674c90} HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{9b4c4803-1a68-4d45-b9cc-7d9f9bf7abe7}

Registry Values: HKEY_CLASSES_ROOT\installer\upgradecodes\1b6e6a7925ff6484380f73cc3a32b617 HKEY_CURRENT_USER\software\microsoft\internet explorer HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\folders HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\folders HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\folders HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\upgradecodes\1b6e6a7925ff6484380f73cc3a32b617

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Deepdo Toolbar Symptoms
Hupion Trojan Cleaner
Win32.Hotmail.C!Flooder!Trojan DoS Removal instruction

Ren.Bat Trojan

How To Remove Ren.Bat?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

Ren.Bat is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Ren.Bat Symptoms:

Files: [%DESKTOP%]\grl realhidden.lnk [%DESKTOP%]\grl realhidden.lnk

Folders: [%PROGRAMS%]\grl realhidden [%PROGRAM_FILES%]\grl realhidden

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Meplex Adware Removal
Harnig Trojan Removal instruction

CyberPaky Trojan

How To Remove CyberPaky?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

CyberPaky is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

CyberPaky It also known as:


[Kaspersky]Backdoor.CyberPaky.18;
[Eset]Win32/CyberPaky.18.A trojan;
[McAfee]BackDoor-ZU;
[F-Prot]security risk or a "backdoor" program;
[Panda]Backdoor Program.LC

CyberPaky Symptoms:

Files: [%STARTUP%]\serv4.exe [%WINDOWS%]\system\cyberpaky.exe [%STARTUP%]\serv4.exe [%WINDOWS%]\system\cyberpaky.exe

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Adware.BlogCn Adware Cleaner

Friday, December 5, 2008

JWord.Plugin Symptoms:

PLook Symptoms:

CWS.Excel10 Symptoms:

GotoBar Symptoms:

TIB.Browser Symptoms:

Last Symptoms:

Oemji.Bar Symptoms:

DownloadCoach Symptoms:

Glaze Symptoms:

Dlder Symptoms:

CyberSpy.build Symptoms:

SohuGame Symptoms:

Desktop.Doodle Symptoms:

Virtumonde.by Symptoms:

Mainpean.Stardialer Symptoms:

Jadire Symptoms:

H@tKeysH@@k Symptoms:

WurldMedia.Moz Symptoms:

QBar Symptoms:

Look2Me Symptoms:

Internet Security Add-On Symptoms:

FormatA Symptoms:

Win32.VB.apq Symptoms:

Ashlt Symptoms:

AQP Symptoms:

DuduAccelerator Symptoms:

Ren.Bat Symptoms:

CyberPaky Symptoms:

Blog Archive

About Me