TrojanSpy.Win16.Keylogger Spyware

How To Remove TrojanSpy.Win16.Keylogger?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

TrojanSpy.Win16.Keylogger is dangerous virus:
Spyware is computer software that is installed surreptitiously on a personal computer
to intercept or take partial control over the user's interaction
with the computer, without the user's informed consent.

While the term spyware suggests software that secretly monitors the user's behavior,
the functions of spyware extend well beyond simple monitoring.

Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

---

---

TrojanSpy.Win16.Keylogger Symptoms:

Files:
[%WINDOWS%]\system\ist2.exe
[%WINDOWS%]\system\ist2.exe

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Remove Piaoyes RAT

Ofpo Trojan

How To Remove Ofpo?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Ofpo is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

---

---

Ofpo It also known as:

[Kaspersky]Rootkit.Win32.Agent.cf;
[Other]WIn32/Ofpo,Hacktool.Rootkit,Win32.Ofpo.C

---

Ofpo Symptoms:

Files:
[%SYSTEM%]\ntio256.sys
[%SYSTEM%]\ntio256.sys
[%SYSTEM%]\poof
[%SYSTEM%]\ntio256.sys
[%SYSTEM%]\ntio256.sys
[%SYSTEM%]\poof

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
ShopAtHomeSelect Adware Information
MAV Trojan Symptoms

Mzn.TroYan Backdoor

How To Remove Mzn.TroYan?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Mzn.TroYan is dangerous virus:
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

---

---

Mzn.TroYan It also known as:

[Kaspersky]Backdoor.FMTdoor;
[Panda]Backdoor Program;
[Computer Associates]Backdoor/FMTdoor,Win32.FMT.30

---

Mzn.TroYan Symptoms:

Files:
[%SYSTEM%]\~kernel.dll.exe
[%SYSTEM%]\~kernel.dll.exe

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Remove Getit753.com Trojan

Darliz Trojan

How To Remove Darliz?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Darliz is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

---

---

Darliz It also known as:

[Computer Associates]Win32.Darliz.A,Win32/Darliz.A!Trojan;
[Other]Win32/Darliz

---

Darliz Symptoms:

Files:
[%SYSTEM%]\qosicff.exe
[%WINDOWS%]\dacxvxq..exe
[%WINDOWS%]\fmdvdad..exe
[%WINDOWS%]\iylkyqc..exe
[%WINDOWS%]\kfblnhw..exe
[%SYSTEM%]\qosicff.exe
[%WINDOWS%]\dacxvxq..exe
[%WINDOWS%]\fmdvdad..exe
[%WINDOWS%]\iylkyqc..exe
[%WINDOWS%]\kfblnhw..exe

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
SmartMoney.com Tracking Cookie Information
Key.Recorder Spyware Information
Remove Mutiup Trojan
Navid Trojan Information

Internet.Optimizer Adware

How To Remove Internet.Optimizer?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Internet.Optimizer is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

---

---

Internet.Optimizer It also known as:

[Other]Adware.NetOptimizer

---

Internet.Optimizer Symptoms:

Files:
[%PROFILE_TEMP%]\optimize.exe
[%PROFILE_TEMP%]\temp.fr????\install.exe
[%PROGRAM_FILES%]\Internet Optimizer\actalert.exe
[%PROGRAM_FILES%]\Internet Optimizer\optimize.exe
[%WINDOWS%]\180ax.exe
[%WINDOWS%]\180axhook.dll
[%WINDOWS%]\876029.exe
[%WINDOWS%]\Duce6.exe
[%WINDOWS%]\msbb.exe.temp
[%WINDOWS%]\nem216.dll
[%WINDOWS%]\nem220.dll
[%WINDOWS%]\nem220.dll_tobedeleted
[%WINDOWS%]\optimize.exe
[%WINDOWS%]\pf79.exe
[%WINDOWS%]\srvettutyu.exe
[%WINDOWS%]\srvnzccwcl.exe
[%WINDOWS%]\sys027797196410.exe
[%WINDOWS%]\tct101.dll
[%WINDOWS%]\temp\optimize.exe
[%WINDOWS%]\uni_ehhhh.exe
[%WINDOWS%]\unstall.exe
[%WINDOWS%]\win3207191-4659702006.exe
[%WINDOWS%]\wsem218.dll
[%WINDOWS%]\wsem302.dll
[%WINDOWS%]\wsem303.dll
[%DESKTOP%]\optimize[1].exe
[%PROFILE_TEMP%]\msbbhook.dll
[%SYSTEM%]\saiehook.dll
[%SYSTEM%]\ssupdate.exe
[%WINDOWS%]\ixizgfcp.exe
[%WINDOWS%]\ncmyb.dll
[%WINDOWS%]\nem214.dll
[%WINDOWS%]\nem219.dll
[%WINDOWS%]\srvpbdxict.exe
[%WINDOWS%]\temp\thi6026.tmp\preinstt.exe
[%WINDOWS%]\windows\nem220.dll
[%WINDOWS%]\wsem216.dll
[%PROFILE_TEMP%]\optimize.exe
[%PROFILE_TEMP%]\temp.fr????\install.exe
[%PROGRAM_FILES%]\Internet Optimizer\actalert.exe
[%PROGRAM_FILES%]\Internet Optimizer\optimize.exe
[%WINDOWS%]\180ax.exe
[%WINDOWS%]\180axhook.dll
[%WINDOWS%]\876029.exe
[%WINDOWS%]\Duce6.exe
[%WINDOWS%]\msbb.exe.temp
[%WINDOWS%]\nem216.dll
[%WINDOWS%]\nem220.dll
[%WINDOWS%]\nem220.dll_tobedeleted
[%WINDOWS%]\optimize.exe
[%WINDOWS%]\pf79.exe
[%WINDOWS%]\srvettutyu.exe
[%WINDOWS%]\srvnzccwcl.exe
[%WINDOWS%]\sys027797196410.exe
[%WINDOWS%]\tct101.dll
[%WINDOWS%]\temp\optimize.exe
[%WINDOWS%]\uni_ehhhh.exe
[%WINDOWS%]\unstall.exe
[%WINDOWS%]\win3207191-4659702006.exe
[%WINDOWS%]\wsem218.dll
[%WINDOWS%]\wsem302.dll
[%WINDOWS%]\wsem303.dll
[%DESKTOP%]\optimize[1].exe
[%PROFILE_TEMP%]\msbbhook.dll
[%SYSTEM%]\saiehook.dll
[%SYSTEM%]\ssupdate.exe
[%WINDOWS%]\ixizgfcp.exe
[%WINDOWS%]\ncmyb.dll
[%WINDOWS%]\nem214.dll
[%WINDOWS%]\nem219.dll
[%WINDOWS%]\srvpbdxict.exe
[%WINDOWS%]\temp\thi6026.tmp\preinstt.exe
[%WINDOWS%]\windows\nem220.dll
[%WINDOWS%]\wsem216.dll

Folders:
[%PROGRAM_FILES%]\internet optimizer

Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{00000010-6F7D-442C-93E3-4A4827C2E4C8}
HKEY_CLASSES_ROOT\CLSID\{8F4E5661-F99E-4B3E-8D85-0EA71C0748E4}
HKEY_CLASSES_ROOT\clsid\{cea206e8-8057-4a04-ace9-ff0d69a92297}
HKEY_CLASSES_ROOT\CLSID\{F7F808F0-6F7D-442C-93E3-4A4827C2E4C8}
HKEY_CLASSES_ROOT\dyfuca_bh.bhobj
HKEY_CLASSES_ROOT\dyfuca_bh.bhobj.1
HKEY_CLASSES_ROOT\dyfuca_bh.sinkobj
HKEY_CLASSES_ROOT\dyfuca_bh.sinkobj.1
HKEY_CLASSES_ROOT\interface\{1c01d150-91a4-4de0-9bf8-a35d1bdf1001}
HKEY_CLASSES_ROOT\typelib\{40b1d454-9ca4-43cc-86aa-cb175eac52fb}
HKEY_CURRENT_USER\software\avenue media
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\ameopt
HKEY_CURRENT_USER\software\policies\avenue media
HKEY_LOCAL_MACHINE\software\avenue media
HKEY_LOCAL_MACHINE\software\fci
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00000010-6F7D-442C-93E3-4A4827C2E4C8}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F7F808F0-6F7D-442C-93E3-4A4827C2E4C8}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\ameopt
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\dyfuca
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\internet optimizer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\internet optimizer active alert
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\kapabout
HKEY_LOCAL_MACHINE\software\policies\avenue media
HKEY_CLASSES_ROOT\clsid\{00000001-c003-4a2f-9142-7cb1d78de6c1}
HKEY_CLASSES_ROOT\clsid\{00000010-6f7d-442c-93e3-4a4827c2e4c8}
HKEY_CLASSES_ROOT\clsid\{8f4e5661-f99e-4b3e-8d85-0ea71c0748e4}
HKEY_CLASSES_ROOT\clsid\{d8e25c53-9508-4f5c-9249-d98d438891d5}
HKEY_CLASSES_ROOT\clsid\{f7f808f0-6f7d-442c-93e3-4a4827c2e4c8}
HKEY_CLASSES_ROOT\dyfuca_bh.bhobj bhobj class
HKEY_CLASSES_ROOT\dyfuca_bh.bhobj.1 bhobj class
HKEY_CLASSES_ROOT\dyfuca_bh_bucket.bucket
HKEY_CLASSES_ROOT\dyfuca_bh_bucket.bucket.1
HKEY_CLASSES_ROOT\interface\{a421f74f-bd61-427e-a400-9e5f7cadbc85}
HKEY_CLASSES_ROOT\safesurfinghelper.iebho
HKEY_CLASSES_ROOT\safesurfinghelper.iebho.1
HKEY_CLASSES_ROOT\typelib\{00211813-6223-4c6a-be8d-4d2676cd1361}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{00000001-c003-4a2f-9142-7cb1d78de6c1}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{00000010-6f7d-442c-93e3-4a4827c2e4c8}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{f7f808f0-6f7d-442c-93e3-4a4827c2e4c8}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run internet optimizer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\a95kfrhe
HKEY_LOCAL_MACHINE\software\safesurfing\update

Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\urlsearchhooks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\tcontext
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\tcontext

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
VCX.91b Trojan Information
Remove SpywareWall Adware
XHX Backdoor Information
Bancos.HRD Trojan Information

Actual.Keylogger Spyware

How To Remove Actual.Keylogger?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Actual.Keylogger is dangerous virus:
Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

---

---

Actual.Keylogger Symptoms:

Files:
[%WINDOWS%]\system\akstart.lnk
[%WINDOWS%]\system\akstart.lnk

Folders:
[%PROGRAM_FILES%]\akprog
[%PROGRAMS%]\actual keylogger

Registry Keys:
HKEY_LOCAL_MACHINE\software\akprogram
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\actual keylogger_is1

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Briss Spyware Cleaner
Delf.he Backdoor Removal
180Solutions.Seekmo Adware Cleaner
QQPass Trojan Removal
Aureate.Radiate Spyware Information

ERRN Adware

How To Remove ERRN?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

ERRN is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

---

---

ERRN Symptoms:

Files:
[%APPDATA%]\errn.exe
[%WINDOWS%]\prefetch\errn.exe-3b359f7f.pf
[%APPDATA%]\errn.exe
[%WINDOWS%]\prefetch\errn.exe-3b359f7f.pf

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Win32.Voyager!Trojan Backdoor Cleaner
Remove RemoteWatch Spyware

InstantBuzz Adware

How To Remove InstantBuzz?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

InstantBuzz is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

---

---

InstantBuzz Symptoms:

Files:
[%PROGRAM_FILES%]\Instant Buzz\IBDaemon.exe
[%PROGRAM_FILES%]\Instant Buzz\IBMH.dll
[%PROGRAM_FILES%]\Instant Buzz\IBDaemon.exe
[%PROGRAM_FILES%]\Instant Buzz\IBMH.dll

Folders:
[%PROGRAM_FILES%]\instant buzz

Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{7475D3FD-5D85-49DB-8B9B-6968467B2D80}
HKEY_CLASSES_ROOT\CLSID\{B8D60EBB-5565-4392-957B-7164BA087AD4}
HKEY_CURRENT_USER\software\instant buzz
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\ext\stats\{066040f0-5018-4e15-8aa0-81d36136d989}
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\ext\stats\{7475d3fd-5d85-49db-8b9b-6968467b2d80}
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\ext\stats\{b8d60ebb-5565-4392-957b-7164ba087ad4}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{066040F0-5018-4E15-8AA0-81D36136D989}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B8D60EBB-5565-4392-957B-7164BA087AD4}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\instant buzz
HKEY_CLASSES_ROOT\clsid\{7475d3fd-5d85-49db-8b9b-6968467b2d80}
HKEY_CLASSES_ROOT\clsid\{b8d60ebb-5565-4392-957b-7164ba087ad4}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{066040f0-5018-4e15-8aa0-81d36136d989}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{b8d60ebb-5565-4392-957b-7164ba087ad4}

Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\new windows\allow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Dowque Trojan Symptoms
Bancos.HEO Trojan Information
MoneyGainer Malware Information
Ferthiz Trojan Removal instruction

AdShooter.SearchForIt Adware

How To Remove AdShooter.SearchForIt?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

AdShooter.SearchForIt is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Hijackers take control of various parts of your web browser, including your home page,
search pages, and search bar. They may also redirect you to certain sites should you
mistype an address or prevent you from going to a website they would rather you not,
such as sites that combat malware. Some will even redirect you to their own search engine
when you attempt a search.
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.

---

---

AdShooter.SearchForIt It also known as:

[Panda]Adware/eZula

---

AdShooter.SearchForIt Symptoms:

Files:
[%PROGRAMS%]\EARN\About EARN.lnk
[%SYSTEM%]\syssfitb.dll
[%WINDOWS%]\system\syssfitb.dll
[%PROGRAMS%]\EARN\About EARN.lnk
[%SYSTEM%]\syssfitb.dll
[%WINDOWS%]\system\syssfitb.dll

Folders:
[%PROGRAMS%]\earn
[%FAVORITES%]\hot sites

Registry Keys:
HKEY_CURRENT_USER\software\searchforit
HKEY_CLASSES_ROOT\interface\{2db1a6df-8120-47bd-9dce-cfcd47b17b24}
HKEY_CLASSES_ROOT\interface\{ab94d42b-64e9-436f-887c-cf38fe475cfc}
HKEY_CLASSES_ROOT\syi.syiobj
HKEY_CLASSES_ROOT\syi.syiobj.1
HKEY_CLASSES_ROOT\typelib\{f43085a3-5fbd-4954-b7bf-00a8f1a1b9fe}

Registry Values:
HKEY_CLASSES_ROOT\drs.n
HKEY_CLASSES_ROOT\drs.n
HKEY_CLASSES_ROOT\drs.n
HKEY_CLASSES_ROOT\drs.n
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\searchforitsearchforit
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\searchforitsearchforit

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Bancos.HCO Trojan Removal instruction
Removing ZZB Toolbar
FakeAlert.TrojanFactory Trojan Information
Vxidl.AFZ Trojan Information
CRAT.Pro RAT Removal

Yprel Trojan

How To Remove Yprel?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Yprel is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

---

---

Yprel It also known as:

[Kaspersky]Trojan-Spy.Win32.Sters,Trojan-Spy.win32.Sters.x,Backdoor.Win32.Vb.apc,Trojan-Spy.Win32.Sters.x,Backdoor.Win32.VB.aug,Trojan-Spy.Win32.Sters.y,Trojan-Proxy.Win32.VB.v;
[McAfee]Backdoor-CWW,BackDoor-CWW;
[Other]Win32/Yprel,Win32/Yprel.G,Win32/Yprel.A,Win32/Yprel.H,Infostealer,Win32/Yprel.E,Win32/Yprel.F,Win32/Yprel.M

---

Yprel Symptoms:

Files:
[%WINDOWS%]\cxplib.dll
[%WINDOWS%]\cxplib.dll

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Vxidl.APN Trojan Cleaner
DedRunner Trojan Symptoms
Ooops Trojan Removal instruction
Webber.O!downloader Trojan Cleaner

BrowserAid Adware

How To Remove BrowserAid?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

BrowserAid is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits
As this information is entered by the user, it is captured by the BHO (Browser Helper Object) and
sent back to the attacker.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.A Search hijacker redirects search results to other pages and may
transmit search and browsing data to unknown servers. An error page hijacker directs
the browser to another page, usually an advertising page, instead of the usual error
page when the requested URL is not found.
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.Malware includes a range of programs that do not threaten computers directly,
but are used to create viruses or Trojans, or used to carry out illegal activities
such as DoS attacks and breaking into other computers.

---

---

BrowserAid Symptoms:

Files:
[%SYSTEM%]\e6f1873b.dll
[%SYSTEM%]\stlb2.xml
[%SYSTEM%]\broweraidtoolbar.dll
[%SYSTEM%]\highlighthelper.dll
[%SYSTEM%]\quicklaunchie.dll
[%SYSTEM%]\rsstoolbar.dll
[%WINDOWS%]\downloaded program files\bbarwnd.dll
[%WINDOWS%]\downloaded program files\conflict.1\letssearch.exe
[%WINDOWS%]\downloaded program files\letssearch.exe
[%WINDOWS%]\downloaded program files\letssearchie.dll
[%WINDOWS%]\downloaded program files\lstoolbarconfig.inf
[%WINDOWS%]\system\broweraidtoolbar.dll
[%WINDOWS%]\system\highlighthelper.dll
[%WINDOWS%]\system\rsstoolbar.dll
[%SYSTEM%]\e6f1873b.dll
[%SYSTEM%]\stlb2.xml
[%SYSTEM%]\broweraidtoolbar.dll
[%SYSTEM%]\highlighthelper.dll
[%SYSTEM%]\quicklaunchie.dll
[%SYSTEM%]\rsstoolbar.dll
[%WINDOWS%]\downloaded program files\bbarwnd.dll
[%WINDOWS%]\downloaded program files\conflict.1\letssearch.exe
[%WINDOWS%]\downloaded program files\letssearch.exe
[%WINDOWS%]\downloaded program files\letssearchie.dll
[%WINDOWS%]\downloaded program files\lstoolbarconfig.inf
[%WINDOWS%]\system\broweraidtoolbar.dll
[%WINDOWS%]\system\highlighthelper.dll
[%WINDOWS%]\system\rsstoolbar.dll

Folders:
[%APPDATA%]\browser pal
[%PROGRAM_FILES%]\browser pal
[%PROGRAM_FILES%]\letssearch

Registry Keys:
HKEY_CLASSES_ROOT\AppID\My404.DLL
HKEY_CLASSES_ROOT\AppID\{418B46A9-5343-4E1A-A654-42B04E3F869E}
HKEY_CLASSES_ROOT\AppID\{87690003-2714-45E7-8A1B-DC0658DE778C}
HKEY_CLASSES_ROOT\bho.FResultsRequest
HKEY_CLASSES_ROOT\bho.FResultsRequest.1
HKEY_CLASSES_ROOT\bho.FResultsRequestDispatcher
HKEY_CLASSES_ROOT\bho.FResultsRequestDispatcher.1
HKEY_CLASSES_ROOT\CLSID\{12EE7A5E-0674-42f9-A76B-000000004D00}
HKEY_CLASSES_ROOT\CLSID\{606220AE-90E0-41CA-BF6D-C89272ED680C}
HKEY_CLASSES_ROOT\CLSID\{DBD7AAA2-1725-4663-8C8B-52A840693469}
HKEY_CLASSES_ROOT\CLSID\{E004800A-73C6-4587-B855-98D0CE0C16B1}
HKEY_CLASSES_ROOT\Interface\{4B0FCEB7-8163-46EE-9EAF-85BD933D0A46}
HKEY_CLASSES_ROOT\Interface\{670801FD-C247-4E44-9424-69E5D77C6725}
HKEY_CLASSES_ROOT\Interface\{E58F4168-608C-45C2-9BFF-061229730B2E}
HKEY_CLASSES_ROOT\Interface\{EE06D877-386F-4A44-A9ED-75EB6C3E7E80}
HKEY_CLASSES_ROOT\Interface\{EE06D877-386F-4A44-A9ED-75EB6C3E7E81}
HKEY_CLASSES_ROOT\Interface\{F8D96098-E9F7-42E1-88F3-A3719D70EA8D}
HKEY_CLASSES_ROOT\My404.Bho404
HKEY_CLASSES_ROOT\My404.Bho404.1
HKEY_CLASSES_ROOT\TypeLib\{12EE7A5E-0674-42F9-A76C-000000004D00}
HKEY_CURRENT_USER\Software\A70F6A1D-0195-42a2-934C-D8AC0F7C08EB
HKEY_CURRENT_USER\software\{2cf0b992-5eeb-4143-99c0-5297ef71f444}
HKEY_CURRENT_USER\software\{2cf0b992-5eeb-4143-99c2-5297ef71f44b}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{12EE7A5E-0674-42f9-A76B-000000004D00}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\explorer bars\{2cf0b992-5eeb-4143-99c2-5297ef71f44b}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runwindowsupdate
HKEY_LOCAL_MACHINE\software\{2cf0b992-5eeb-4143-99c0-5297ef71f444}
HKEY_CLASSES_ROOT\AppID\bho.DLL
HKEY_CLASSES_ROOT\CLSID\{80672997-D58C-4190-9843-C6C61AF8FE97}
HKEY_CLASSES_ROOT\TypeLib\{85C2C2A1-3F20-4EAD-ADC3-BD3217391543}
HKEY_CURRENT_USER\Software\{12EE7A5E-0674-42f9-A76B-000000004D00}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{80672997-D58C-4190-9843-C6C61AF8FE97}
HKEY_CLASSES_ROOT\appid\my404.dll
HKEY_CLASSES_ROOT\appid\{418b46a9-5343-4e1a-a654-42b04e3f869e}
HKEY_CLASSES_ROOT\appid\{87690003-2714-45e7-8a1b-dc0658de778c}
HKEY_CLASSES_ROOT\bho.featuredresultsbho
HKEY_CLASSES_ROOT\bho.featuredresultsbho.1
HKEY_CLASSES_ROOT\bho.fresultsrequest
HKEY_CLASSES_ROOT\bho.fresultsrequest.1
HKEY_CLASSES_ROOT\bho.fresultsrequestdispatcher
HKEY_CLASSES_ROOT\bho.fresultsrequestdispatcher.1
HKEY_CLASSES_ROOT\bho.iadvertisementbho
HKEY_CLASSES_ROOT\bho.iadvertisementbho.1
HKEY_CLASSES_ROOT\browseraidtoolbar.helper
HKEY_CLASSES_ROOT\browseraidtoolbar.helper.1
HKEY_CLASSES_ROOT\browseraidtoolbar.ieshower
HKEY_CLASSES_ROOT\browseraidtoolbar.ieshower.1
HKEY_CLASSES_ROOT\browseraidtoolbar.ietoolbar
HKEY_CLASSES_ROOT\browseraidtoolbar.ietoolbar.1
HKEY_CLASSES_ROOT\browserpaltoolbar.helper
HKEY_CLASSES_ROOT\browserpaltoolbar.helper.1
HKEY_CLASSES_ROOT\browserpaltoolbar.ieshower
HKEY_CLASSES_ROOT\browserpaltoolbar.ieshower.1
HKEY_CLASSES_ROOT\browserpaltoolbar.ietoolbar
HKEY_CLASSES_ROOT\browserpaltoolbar.ietoolbar.1
HKEY_CLASSES_ROOT\clsid\{087173ef-9829-4f49-8340-a524177d3f60}
HKEY_CLASSES_ROOT\clsid\{0ddbb570-0396-44c9-986a-8f6f61a51c2f}
HKEY_CLASSES_ROOT\clsid\{12ee7a5e-0674-42f9-a76a-000000004d00}
HKEY_CLASSES_ROOT\clsid\{12ee7a5e-0674-42f9-a76b-000000004d00}
HKEY_CLASSES_ROOT\clsid\{2a167e61-d100-450d-a1b0-6eaf394bcb87}
HKEY_CLASSES_ROOT\clsid\{2cf0b992-5eeb-4143-99c0-5297ef71f443}
HKEY_CLASSES_ROOT\clsid\{2cf0b992-5eeb-4143-99c0-5297ef71f444}
HKEY_CLASSES_ROOT\clsid\{2cf0b992-5eeb-4143-99c2-5297ef71f44a}
HKEY_CLASSES_ROOT\clsid\{2cf0b992-5eeb-4143-99c2-5297ef71f44b}
HKEY_CLASSES_ROOT\clsid\{337d0c1d-4053-4fab-af2b-45c2f7b0faa6}
HKEY_CLASSES_ROOT\clsid\{337d0c1d-4053-4fab-af2b-45c2f7b0faa7}
HKEY_CLASSES_ROOT\clsid\{4a2563c7-fc68-4ee8-a11c-2022ebcc1b0f}
HKEY_CLASSES_ROOT\clsid\{5f5564ac-de7a-4dcd-9296-32e71a35dcb6}
HKEY_CLASSES_ROOT\clsid\{606220ae-90e0-41ca-bf6d-c89272ed680c}
HKEY_CLASSES_ROOT\clsid\{6d55490c-1bd4-4790-ba31-84d261316e28}
HKEY_CLASSES_ROOT\clsid\{7313bfd0-62c4-40f4-8041-3fbdbc80ac07}
HKEY_CLASSES_ROOT\clsid\{80672997-d58c-4190-9843-c6c61af8fe97}
HKEY_CLASSES_ROOT\clsid\{8a7d38be-849d-478f-a7cf-55ec95722358}
HKEY_CLASSES_ROOT\clsid\{d7258abe-571f-4dc2-abd1-8393b13b1269}
HKEY_CLASSES_ROOT\clsid\{dbd7aaa2-1725-4663-8c8b-52a840693469}
HKEY_CLASSES_ROOT\clsid\{e004800a-73c6-4587-b855-98d0ce0c16b1}
HKEY_CLASSES_ROOT\clsid\{f20ae630-6de2-43ca-a988-7cd40c36ef0b}
HKEY_CLASSES_ROOT\interface\{2a167e61-d100-450d-a1b0-6eaf394bcb87}
HKEY_CLASSES_ROOT\interface\{2a167e61-d100-450d-a1b0-6eaf394bcb89}
HKEY_CLASSES_ROOT\interface\{4a2563c7-fc68-4ee8-a11c-2022ebcc1b0f}
HKEY_CLASSES_ROOT\interface\{4a2563c7-fc68-4ee8-a11c-2022ebcc1b10}
HKEY_CLASSES_ROOT\interface\{4b0fceb7-8163-46ee-9eaf-85bd933d0a46}
HKEY_CLASSES_ROOT\interface\{670801fd-c247-4e44-9424-69e5d77c6725}
HKEY_CLASSES_ROOT\interface\{8a7d38be-849d-478f-a7cf-55ec95722358}
HKEY_CLASSES_ROOT\interface\{8a7d38be-849d-478f-a7cf-55ec95722359}
HKEY_CLASSES_ROOT\interface\{e58f4168-608c-45c2-9bff-061229730b2e}
HKEY_CLASSES_ROOT\interface\{ee06d877-386f-4a44-a9ed-75eb6c3e7e80}
HKEY_CLASSES_ROOT\interface\{ee06d877-386f-4a44-a9ed-75eb6c3e7e81}
HKEY_CLASSES_ROOT\interface\{f8d96098-e9f7-42e1-88f3-a3719d70ea8d}
HKEY_CLASSES_ROOT\my404.bho404
HKEY_CLASSES_ROOT\my404.bho404.1
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{6d55490c-1bd4-4790-ba31-84d261316e28}
HKEY_CLASSES_ROOT\typelib\{12ee7a5e-0674-42f9-a76c-000000004d00}
HKEY_CLASSES_ROOT\typelib\{7313bfd0-62c4-40f4-8041-3fbdbc80ac07}
HKEY_CLASSES_ROOT\typelib\{7313bfd0-62c4-40f4-8041-3fbdbc80ac08}
HKEY_CLASSES_ROOT\typelib\{7eb64065-dfd1-41b0-99d7-6ba3e0a15916}
HKEY_CLASSES_ROOT\typelib\{85c2c2a1-3f20-4ead-adc3-bd3217391543}
HKEY_CLASSES_ROOT\typelib\{ba87b15b-7de7-4da4-8bf7-5c616d6c99da}
HKEY_CLASSES_ROOT\_atl_generated.searchtoolbarbho
HKEY_CLASSES_ROOT\_atl_generated.searchtoolbarbho.1
HKEY_CLASSES_ROOT\_atl_generated.searchtoolbarname
HKEY_CLASSES_ROOT\_atl_generated.searchtoolbarname.1
HKEY_CURRENT_USER\software\a70f6a1d-0195-42a2-934c-d8ac0f7c08eb
HKEY_CURRENT_USER\software\popup stopper
HKEY_LOCAL_MACHINE\software\classes\clsid\{337d0c1d-4053-4fab-af2b-45c2f7b0faa7}
HKEY_LOCAL_MACHINE\software\classes\clsid\{6d55490c-1bd4-4790-ba31-84d261316e28}
HKEY_LOCAL_MACHINE\software\classes\clsid\{d7258abe-571f-4dc2-abd1-8393b13b1269}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{f20ae630-6de2-43ca-a988-7cd40c36ef0b}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\explorer bars\{12ee7a5e-0674-42f9-a76b-000000004d00}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\explorer bars\{2cf0b992-5eeb-4143-99c0-5297ef71f444}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{07b7f771-1b8e-4b7b-823e-ffac1732aa9e}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{12ee7a5e-0674-42f9-a76a-000000004d00}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{2cf0b992-5eeb-4143-99c0-5297ef71f443}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{2cf0b992-5eeb-4143-99c2-5297ef71f44a}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6d55490c-1bd4-4790-ba31-84d261316e28}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{80672997-d58c-4190-9843-c6c61af8fe97}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\letssearch
HKEY_LOCAL_MACHINE\software\{2cf0b992-5eeb-4143-99c2-5297ef71f44b}

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
PWS.Ghost Trojan Removal
Tanukbot Trojan Symptoms
Remove God Trojan

Krepper.ab Trojan

How To Remove Krepper.ab?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Krepper.ab is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

---

---

Krepper.ab Symptoms:

Files:
[%APPDATA%]\heck more cast iso\cash warn.exe
[%PROGRAM_FILES%]\objcdrom\kakglfzi.exe
[%PROGRAM_FILES%]\objcdrom\nnjefajv.exe
[%PROGRAM_FILES%]\objcdrom\wxfmrwjk.exe
[%PROGRAM_FILES%]\progra~1\qyaeaoqs.exe
[%PROGRAM_FILES%]\progra~1\tyywymvc.exe
[%APPDATA%]\heck more cast iso\cash warn.exe
[%PROGRAM_FILES%]\objcdrom\kakglfzi.exe
[%PROGRAM_FILES%]\objcdrom\nnjefajv.exe
[%PROGRAM_FILES%]\objcdrom\wxfmrwjk.exe
[%PROGRAM_FILES%]\progra~1\qyaeaoqs.exe
[%PROGRAM_FILES%]\progra~1\tyywymvc.exe

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Remove Delf.il Trojan
Pigeon.AOO Trojan Information

Afcore.au Backdoor

How To Remove Afcore.au?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Afcore.au is dangerous virus:
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.

---

---

Afcore.au Symptoms:

Files:
[%SYSTEM%]\ole2cisp.dll
[%SYSTEM%]\ole2cisp.dll

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Win32.BO2K.Plugin Trojan Cleaner
Random.Wallpaper.Changer Trojan Removal

Qinq Trojan

How To Remove Qinq?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Qinq is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

---

---

Qinq It also known as:

[Other]Win32/Qinq.2ff!Dropper

---

Qinq Symptoms:

Files:
[%PROFILE_TEMP%]\webhitlogtmp.dat
[%SYSTEM%]\d3d1caps.SRG
[%SYSTEM%]\downews.ini
[%SYSTEM%]\mprmsgse.axz
[%SYSTEM%]\mywebhit.ini
[%WINDOWS%]\mywinsys.ini
[%PROFILE_TEMP%]\bind_50202.pif
[%PROFILE_TEMP%]\p_star_1.jpg
[%PROFILE_TEMP%]\SCI10.tmp
[%SYSTEM%]\11680262935.exe
[%SYSTEM%]\11680264376.exe
[%SYSTEM%]\11680264767.exe
[%SYSTEM%]\11680271234.exe
[%SYSTEM%]\11680271975.exe
[%SYSTEM%]\11680272941.exe
[%SYSTEM%]\drivers\restore.dll
[%SYSTEM%]\drivers\restore.ini
[%SYSTEM%]\drivers\s1218.exe
[%SYSTEM%]\drivers\wsuuxv47.sys
[%SYSTEM%]\js1168026106.web
[%SYSTEM%]\js1168027022.web
[%SYSTEM%]\mywebhit.ini.tmp
[%SYSTEM%]\popnews.ini
[%SYSTEM%]\QQhx.dat
[%SYSTEM%]\s1168026049.web
[%SYSTEM%]\s1168027022.web
[%WINDOWS%]\hitpop_tmp.txt
[%WINDOWS%]\system\10034.exe
[%WINDOWS%]\system\dodolook069.exe
[%WINDOWS%]\system\Setup-139.exe
[%PROFILE_TEMP%]\webhitlogtmp.dat
[%SYSTEM%]\d3d1caps.SRG
[%SYSTEM%]\downews.ini
[%SYSTEM%]\mprmsgse.axz
[%SYSTEM%]\mywebhit.ini
[%WINDOWS%]\mywinsys.ini
[%PROFILE_TEMP%]\bind_50202.pif
[%PROFILE_TEMP%]\p_star_1.jpg
[%PROFILE_TEMP%]\SCI10.tmp
[%SYSTEM%]\11680262935.exe
[%SYSTEM%]\11680264376.exe
[%SYSTEM%]\11680264767.exe
[%SYSTEM%]\11680271234.exe
[%SYSTEM%]\11680271975.exe
[%SYSTEM%]\11680272941.exe
[%SYSTEM%]\drivers\restore.dll
[%SYSTEM%]\drivers\restore.ini
[%SYSTEM%]\drivers\s1218.exe
[%SYSTEM%]\drivers\wsuuxv47.sys
[%SYSTEM%]\js1168026106.web
[%SYSTEM%]\js1168027022.web
[%SYSTEM%]\mywebhit.ini.tmp
[%SYSTEM%]\popnews.ini
[%SYSTEM%]\QQhx.dat
[%SYSTEM%]\s1168026049.web
[%SYSTEM%]\s1168027022.web
[%WINDOWS%]\hitpop_tmp.txt
[%WINDOWS%]\system\10034.exe
[%WINDOWS%]\system\dodolook069.exe
[%WINDOWS%]\system\Setup-139.exe

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Fax.Free.Pisello Trojan Removal instruction
Remove SillyDl.DDI Trojan

Win32.InjectDLL Trojan

How To Remove Win32.InjectDLL?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Win32.InjectDLL is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

---

---

Win32.InjectDLL It also known as:

[Kaspersky]Trojan.Win32.Urbin;
[Computer Associates]Win32.Urbin

---

Win32.InjectDLL Symptoms:

Files:
[%INTERNET_CACHE%]\content.ie5\5377T10E\sb87[1].gif
[%SYSTEM%]\msvsres.dll
[%INTERNET_CACHE%]\content.ie5\5377T10E\sb87[1].gif
[%SYSTEM%]\msvsres.dll

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Remove ZCom Downloader
Remove Sharer Trojan
Psycfile.Server Backdoor Symptoms

PromulGate Adware

How To Remove PromulGate?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

PromulGate is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

---

---

PromulGate Symptoms:

Files:
[%APPDATA%]\Tenebril\GhostSurf\3.0\Spyware history\Restore\d22428bb0b0bd18a61917f100a90ebeb
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinAF.edx
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinBD.edx
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinCO.edx
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinDL.edx
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinED.edx
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinID.edx
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinLD.edx
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinLO.ebd
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinST.ebd
[%COMMON_APPDATA%]\nfo\arch\286.dfn
[%COMMON_APPDATA%]\nfo\mon0106.ddx
[%COMMON_APPDATA%]\nfo\mon0204.ddx
[%COMMON_APPDATA%]\nfo\mon0315.ddx
[%COMMON_APPDATA%]\nfo\mon0412.ddx
[%COMMON_APPDATA%]\nfo\mon0504.ddx
[%COMMON_APPDATA%]\nfo\mon0904.ddx
[%COMMON_APPDATA%]\nfo\mon1125.ddx
[%COMMON_APPDATA%]\nfo\mon1204.ddx
[%COMMON_APPDATA%]\nfo\mon1215.dbd
[%COMMON_APPDATA%]\nfo\mon1909.ddx
[%COMMON_APPDATA%]\nfo\mon1920.dbd
[%COMMON_APPDATA%]\nfo\mon2007.dbd
[%COMMON_APPDATA%]\nsv\cache\286.dfn
[%COMMON_APPDATA%]\nsv\cache\538.dfn
[%COMMON_APPDATA%]\nsv\wmv0106.ddx
[%COMMON_APPDATA%]\nsv\wmv0204.ddx
[%COMMON_APPDATA%]\nsv\wmv0315.ddx
[%COMMON_APPDATA%]\nsv\wmv0412.ddx
[%COMMON_APPDATA%]\nsv\wmv0504.ddx
[%COMMON_APPDATA%]\nsv\wmv0904.ddx
[%COMMON_APPDATA%]\nsv\wmv1125.ddx
[%COMMON_APPDATA%]\nsv\wmv1204.ddx
[%COMMON_APPDATA%]\nsv\wmv1215.dbd
[%COMMON_APPDATA%]\nsv\wmv1909.ddx
[%COMMON_APPDATA%]\nsv\wmv1920.dbd
[%COMMON_APPDATA%]\nsv\wmv2007.dbd
[%COMMON_APPDATA%]\pcsvc\delfinAF.edx
[%COMMON_APPDATA%]\pcsvc\delfinBD.edx
[%COMMON_APPDATA%]\pcsvc\delfinCO.edx
[%COMMON_APPDATA%]\pcsvc\delfinDL.edx
[%COMMON_APPDATA%]\pcsvc\delfinED.edx
[%COMMON_APPDATA%]\pcsvc\delfinID.edx
[%COMMON_APPDATA%]\pcsvc\delfinKY.edx
[%COMMON_APPDATA%]\pcsvc\delfinLD.edx
[%COMMON_APPDATA%]\pcsvc\delfinLO.ebd
[%COMMON_APPDATA%]\pcsvc\delfinSI.edx
[%COMMON_APPDATA%]\pcsvc\delfinST.ebd
[%COMMON_APPDATA%]\pcsvc\delfinTG.ebd
[%COMMON_APPDATA%]\wsxs\Adverts\286.dfn
[%COMMON_APPDATA%]\wsxs\delfinAF.edx
[%COMMON_APPDATA%]\wsxs\delfinBD.edx
[%COMMON_APPDATA%]\wsxs\delfinCO.edx
[%COMMON_APPDATA%]\wsxs\delfinDL.edx
[%COMMON_APPDATA%]\wsxs\delfinED.edx
[%COMMON_APPDATA%]\wsxs\delfinID.edx
[%COMMON_APPDATA%]\wsxs\delfinKY.edx
[%COMMON_APPDATA%]\wsxs\delfinLD.edx
[%COMMON_APPDATA%]\wsxs\delfinLO.ebd
[%COMMON_APPDATA%]\wsxs\delfinSI.edx
[%COMMON_APPDATA%]\wsxs\delfinST.ebd
[%COMMON_APPDATA%]\wsxs\delfinTG.ebd
[%SYSTEM%]\wsxsvc\License.txt
[%SYSTEM%]\wsxsvc\uninstall.html
[%SYSTEM%]\dp-b23011805.exe
[%APPDATA%]\Tenebril\GhostSurf\3.0\Spyware history\Restore\d22428bb0b0bd18a61917f100a90ebeb
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinAF.edx
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinBD.edx
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinCO.edx
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinDL.edx
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinED.edx
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinID.edx
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinLD.edx
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinLO.ebd
[%COMMON_APPDATA%]\DelFin\PromulGate\delfinST.ebd
[%COMMON_APPDATA%]\nfo\arch\286.dfn
[%COMMON_APPDATA%]\nfo\mon0106.ddx
[%COMMON_APPDATA%]\nfo\mon0204.ddx
[%COMMON_APPDATA%]\nfo\mon0315.ddx
[%COMMON_APPDATA%]\nfo\mon0412.ddx
[%COMMON_APPDATA%]\nfo\mon0504.ddx
[%COMMON_APPDATA%]\nfo\mon0904.ddx
[%COMMON_APPDATA%]\nfo\mon1125.ddx
[%COMMON_APPDATA%]\nfo\mon1204.ddx
[%COMMON_APPDATA%]\nfo\mon1215.dbd
[%COMMON_APPDATA%]\nfo\mon1909.ddx
[%COMMON_APPDATA%]\nfo\mon1920.dbd
[%COMMON_APPDATA%]\nfo\mon2007.dbd
[%COMMON_APPDATA%]\nsv\cache\286.dfn
[%COMMON_APPDATA%]\nsv\cache\538.dfn
[%COMMON_APPDATA%]\nsv\wmv0106.ddx
[%COMMON_APPDATA%]\nsv\wmv0204.ddx
[%COMMON_APPDATA%]\nsv\wmv0315.ddx
[%COMMON_APPDATA%]\nsv\wmv0412.ddx
[%COMMON_APPDATA%]\nsv\wmv0504.ddx
[%COMMON_APPDATA%]\nsv\wmv0904.ddx
[%COMMON_APPDATA%]\nsv\wmv1125.ddx
[%COMMON_APPDATA%]\nsv\wmv1204.ddx
[%COMMON_APPDATA%]\nsv\wmv1215.dbd
[%COMMON_APPDATA%]\nsv\wmv1909.ddx
[%COMMON_APPDATA%]\nsv\wmv1920.dbd
[%COMMON_APPDATA%]\nsv\wmv2007.dbd
[%COMMON_APPDATA%]\pcsvc\delfinAF.edx
[%COMMON_APPDATA%]\pcsvc\delfinBD.edx
[%COMMON_APPDATA%]\pcsvc\delfinCO.edx
[%COMMON_APPDATA%]\pcsvc\delfinDL.edx
[%COMMON_APPDATA%]\pcsvc\delfinED.edx
[%COMMON_APPDATA%]\pcsvc\delfinID.edx
[%COMMON_APPDATA%]\pcsvc\delfinKY.edx
[%COMMON_APPDATA%]\pcsvc\delfinLD.edx
[%COMMON_APPDATA%]\pcsvc\delfinLO.ebd
[%COMMON_APPDATA%]\pcsvc\delfinSI.edx
[%COMMON_APPDATA%]\pcsvc\delfinST.ebd
[%COMMON_APPDATA%]\pcsvc\delfinTG.ebd
[%COMMON_APPDATA%]\wsxs\Adverts\286.dfn
[%COMMON_APPDATA%]\wsxs\delfinAF.edx
[%COMMON_APPDATA%]\wsxs\delfinBD.edx
[%COMMON_APPDATA%]\wsxs\delfinCO.edx
[%COMMON_APPDATA%]\wsxs\delfinDL.edx
[%COMMON_APPDATA%]\wsxs\delfinED.edx
[%COMMON_APPDATA%]\wsxs\delfinID.edx
[%COMMON_APPDATA%]\wsxs\delfinKY.edx
[%COMMON_APPDATA%]\wsxs\delfinLD.edx
[%COMMON_APPDATA%]\wsxs\delfinLO.ebd
[%COMMON_APPDATA%]\wsxs\delfinSI.edx
[%COMMON_APPDATA%]\wsxs\delfinST.ebd
[%COMMON_APPDATA%]\wsxs\delfinTG.ebd
[%SYSTEM%]\wsxsvc\License.txt
[%SYSTEM%]\wsxsvc\uninstall.html
[%SYSTEM%]\dp-b23011805.exe

Folders:
[%PROFILE%]\all users\application data\dpi
[%PROFILE%]\all users\application data\wsxs

Registry Keys:
HKEY_CLASSES_ROOT\interface\{2bb15d36-43be-4743-a3a0-3308f4b1a610}
HKEY_CLASSES_ROOT\interface\{41700749-a109-4254-af13-be54011e8783}
HKEY_CLASSES_ROOT\typelib\{2a7db8d1-43be-4ad3-a81e-9bb8c9d00073}
HKEY_LOCAL_MACHINE\software\dpi
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\dmvlite
HKEY_CURRENT_USER\software\dvx
HKEY_LOCAL_MACHINE\software\vmss

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
VB.kq Trojan Cleaner
Remove SearchTool Adware

Lookster Toolbar

How To Remove Lookster?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Lookster is dangerous virus:
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.
It replaces your start page, continuosly open a number of pop up windows and so on.

---

---

Lookster Symptoms:

Folders:
[%PROGRAM_FILES%]\Lookster Toolbar

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{6ae02e1c-8859-4f57-9097-5a55a56a4caf}
HKEY_CLASSES_ROOT\clsid\{7401e786-66e2-4086-9859-13f005862992}
HKEY_CLASSES_ROOT\toolband.xbtp02016
HKEY_CLASSES_ROOT\toolband.xbtp02016.1
HKEY_CLASSES_ROOT\typelib\{ac0114eb-f42f-4d77-aa0c-c0e33ee42ff6}
HKEY_CLASSES_ROOT\xbtb02016.ietoolbar
HKEY_CLASSES_ROOT\xbtb02016.ietoolbar.1
HKEY_CLASSES_ROOT\xbtb02016.xbtb02016
HKEY_CLASSES_ROOT\xbtb02016.xbtb02016.1
HKEY_CURRENT_USER\software\xbtb02016
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{7401e786-66e2-4086-9859-13f005862992}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xbtb02016.xbtb02016toolbar

Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\main
HKEY_CURRENT_USER\software\microsoft\internet explorer\main
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Knoospa Trojan Cleaner

WinSession.Logger Spyware

How To Remove WinSession.Logger?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

WinSession.Logger is dangerous virus:
Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

---

---

WinSession.Logger Symptoms:

Files:
[%DESKTOP%]\ws logger.lnk
[%SYSTEM%]\9500\svchost.exe
[%SYSTEM%]\bootldr.exe
[%SYSTEM%]\conwxrl.bin
[%SYSTEM%]\delservicew.exe
[%SYSTEM%]\digiwin.dll
[%SYSTEM%]\exwin32m.exe
[%SYSTEM%]\nxkernel32.dll
[%SYSTEM%]\Old_date32.dll
[%SYSTEM%]\svclsv.exe
[%SYSTEM%]\unicode_digi.dll
[%SYSTEM%]\xwboot.exe
[%DESKTOP%]\ws logger.lnk
[%SYSTEM%]\9500\svchost.exe
[%SYSTEM%]\bootldr.exe
[%SYSTEM%]\conwxrl.bin
[%SYSTEM%]\delservicew.exe
[%SYSTEM%]\digiwin.dll
[%SYSTEM%]\exwin32m.exe
[%SYSTEM%]\nxkernel32.dll
[%SYSTEM%]\Old_date32.dll
[%SYSTEM%]\svclsv.exe
[%SYSTEM%]\unicode_digi.dll
[%SYSTEM%]\xwboot.exe

Folders:
[%PROGRAMS%]\WinSession Logger
[%PROGRAM_FILES%]\wlogs
[%PROGRAM_FILES%]\wslogger

Registry Keys:
HKEY_LOCAL_MACHINE\software\mcap4_software
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{ebt9l2db0-b607-11d2-9cbd-0000f87a369e}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\winsession logger_is1
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\subsystem64r

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\msc_software

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Removing Pigeon.EOM Trojan
QuickShl Adware Symptoms
TrojanDownloader.Win32.GoldenPalace Trojan Removal instruction
Remove QQPass.AFN Trojan

ShopForGood Adware

How To Remove ShopForGood?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

ShopForGood is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

The BHO (Browser Helper Object) waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
A Search hijacker redirects search results to other pages and may
transmit search and browsing data to unknown servers. An error page hijacker directs
the browser to another page, usually an advertising page, instead of the usual error
page when the requested URL is not found.
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.

---

---

ShopForGood Symptoms:

Files:
[%SYSTEM%]\winy.dll
[%WINDOWS%]\system\winy.dll
[%SYSTEM%]\winy.dll
[%WINDOWS%]\system\winy.dll

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{05bbb56a-2a69-4a5c-bfda-43295dd67434}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{05bbb56a-2a69-4a5c-bfda-43295dd67434}
HKEY_LOCAL_MACHINE\software\classes\clsid\{05bbb56a-2a69-4a5c-bfda-43295dd67434}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{05bbb56a-2a69-4a5c-bfda-43295dd67434}

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Bancos.GTO Trojan Information
Lineage.ABS Trojan Cleaner
Removing Lineage Trojan
Unpdoor Backdoor Cleaner

CWS.OEMSysPNP Hijacker

How To Remove CWS.OEMSysPNP?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

CWS.OEMSysPNP is dangerous virus:
Hijackers are software programs that modify users' default browser home page,
search settings, error page settings, or desktop wallpaper without adequate notice, disclosure,
or user consent.

---

---

CWS.OEMSysPNP Symptoms:

Files:
[%WINDOWS%]\inf\drvupd.inf
[%WINDOWS%]\inf\keymgr3.inf
[%WINDOWS%]\inf\oemsyspnp.inf
[%WINDOWS%]\inf\drvupd.inf
[%WINDOWS%]\inf\keymgr3.inf
[%WINDOWS%]\inf\oemsyspnp.inf

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Pigeon.ERW Trojan Cleaner
NHVMP Trojan Information
Wasteful DoS Removal
KAKSOFT.Keylogger Spyware Removal
Miskur Trojan Cleaner

SpyArsenal.ICQ.Logger Spyware

How To Remove SpyArsenal.ICQ.Logger?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

SpyArsenal.ICQ.Logger is dangerous virus:
Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

---

---

SpyArsenal.ICQ.Logger Symptoms:

Files:
[%DESKTOP%]\spyarsenal icq logger.lnk
[%SYSTEM%]\admparseq.dll
[%DESKTOP%]\spyarsenal icq logger.lnk
[%SYSTEM%]\admparseq.dll

Folders:
[%PROGRAMS%]\spyarsenal icq logger
[%SYSTEM%]\csvdeq

Registry Keys:
HKEY_LOCAL_MACHINE\software\kmint21\spyarsenal-icq-logger
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spyarsenal-icq-logger

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
clickbooth.com Tracking Cookie Information
Remove SillyP2P Backdoor
Vxidl.AZH Trojan Symptoms
Removing Remote.Command.Router Trojan
Backdoor.Prowler Trojan Symptoms

VBS.Toren Trojan

How To Remove VBS.Toren?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

VBS.Toren is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

---

---

VBS.Toren It also known as:

[Kaspersky]Trojan.VBS.Toren;
[Panda]VBS/Sanz;
[Computer Associates]VBS/Toren!Trojan

---

VBS.Toren Symptoms:

Files:
[%DESKTOP%]\easy mp3 alarm clock.lnk
[%SYSTEM%]\stub.exe
[%DESKTOP%]\easy mp3 alarm clock.lnk
[%SYSTEM%]\stub.exe

Folders:
[%PROGRAMS%]\easy mp3 alarm clock
[%PROGRAM_FILES%]\easy mp3 alarm clock

Registry Keys:
HKEY_CLASSES_ROOT\appid\ezulabootexe.exe
HKEY_CLASSES_ROOT\appid\{c0335198-6755-11d4-8a73-0050da2ee1be}
HKEY_CLASSES_ROOT\clsid\{07f0a543-47ba-11d4-8a6d-0050da2ee1be}
HKEY_CLASSES_ROOT\clsid\{07f0a545-47ba-11d4-8a6d-0050da2ee1be}
HKEY_CLASSES_ROOT\clsid\{19dfb2cb-9b27-11d4-b192-0050dab79376}
HKEY_CLASSES_ROOT\clsid\{2079884b-6ef3-11d4-8a74-0050da2ee1be}
HKEY_CLASSES_ROOT\clsid\{2babd334-5c3f-11d4-b184-0050dab79376}
HKEY_CLASSES_ROOT\clsid\{3d7247e8-5db8-11d4-8a72-0050da2ee1be}
HKEY_CLASSES_ROOT\clsid\{55910916-8b4e-4c1e-9253-cce296ea71eb}
HKEY_CLASSES_ROOT\clsid\{58359010-bf36-11d3-99a2-0050da2ee1be}
HKEY_CLASSES_ROOT\clsid\{c03351a4-6755-11d4-8a73-0050da2ee1be}
HKEY_CLASSES_ROOT\clsid\{c4fee4a7-4b8b-11d4-8a6d-0050da2ee1be}
HKEY_CLASSES_ROOT\clsid\{d290d6e7-bf9d-42f0-9c1b-3bc8ae769b57}
HKEY_CLASSES_ROOT\ezulaagent.ezulactrlhost
HKEY_CLASSES_ROOT\ezulaagent.ezulactrlhost.1
HKEY_CLASSES_ROOT\ezulaagent.plugprot
HKEY_CLASSES_ROOT\ezulaagent.plugprot.1
HKEY_CLASSES_ROOT\ezulaagent.toolbarband
HKEY_CLASSES_ROOT\ezulaagent.toolbarband.1
HKEY_CLASSES_ROOT\ezulabootexe.installctrl
HKEY_CLASSES_ROOT\ezulabootexe.installctrl.1
HKEY_CLASSES_ROOT\ezulamain.ezulasearchpipe
HKEY_CLASSES_ROOT\ezulamain.ezulasearchpipe.1
HKEY_CLASSES_ROOT\interface\{07f0a542-47ba-11d4-8a6d-0050da2ee1be}
HKEY_CLASSES_ROOT\interface\{07f0a544-47ba-11d4-8a6d-0050da2ee1be}
HKEY_CLASSES_ROOT\interface\{1823bc4b-a253-4767-9cfc-9aca62a6b136}
HKEY_CLASSES_ROOT\interface\{19dfb2ca-9b27-11d4-b192-0050dab79376}
HKEY_CLASSES_ROOT\interface\{27bc6871-4d5a-11d4-8a6d-0050da2ee1be}
HKEY_CLASSES_ROOT\interface\{3d7247f1-5db8-11d4-8a72-0050da2ee1be}
HKEY_CLASSES_ROOT\interface\{4fd8645f-9b3e-46c1-9727-9837842a84ab}
HKEY_CLASSES_ROOT\interface\{58359012-bf36-11d3-99a2-0050da2ee1be}
HKEY_CLASSES_ROOT\typelib\{07f0a536-47ba-11d4-8a6d-0050da2ee1be}
HKEY_CLASSES_ROOT\typelib\{58359011-bf36-11d3-99a2-0050da2ee1be}
HKEY_CLASSES_ROOT\typelib\{8a044396-5da2-11d4-b185-0050dab79376}
HKEY_CLASSES_ROOT\typelib\{c0335197-6755-11d4-8a73-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\appid\ezulabootexe.exe
HKEY_LOCAL_MACHINE\software\classes\appid\{c0335198-6755-11d4-8a73-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\clsid\{07f0a543-47ba-11d4-8a6d-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\clsid\{07f0a545-47ba-11d4-8a6d-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\clsid\{19dfb2cb-9b27-11d4-b192-0050dab79376}
HKEY_LOCAL_MACHINE\software\classes\clsid\{2079884b-6ef3-11d4-8a74-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\clsid\{2babd334-5c3f-11d4-b184-0050dab79376}
HKEY_LOCAL_MACHINE\software\classes\clsid\{3c368c4a-827f-4f25-9c52-371bdf049912}
HKEY_LOCAL_MACHINE\software\classes\clsid\{3d7247e8-5db8-11d4-8a72-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\clsid\{55910916-8b4e-4c1e-9253-cce296ea71eb}
HKEY_LOCAL_MACHINE\software\classes\clsid\{58359010-bf36-11d3-99a2-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\clsid\{c03351a4-6755-11d4-8a73-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\clsid\{c4fee4a7-4b8b-11d4-8a6d-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\clsid\{d290d6e7-bf9d-42f0-9c1b-3bc8ae769b57}
HKEY_LOCAL_MACHINE\software\classes\ezulaagent.ezulactrlhost
HKEY_LOCAL_MACHINE\software\classes\ezulaagent.ezulactrlhost.1
HKEY_LOCAL_MACHINE\software\classes\ezulaagent.plugprot
HKEY_LOCAL_MACHINE\software\classes\ezulaagent.plugprot.1
HKEY_LOCAL_MACHINE\software\classes\ezulaagent.toolbarband
HKEY_LOCAL_MACHINE\software\classes\ezulaagent.toolbarband.1
HKEY_LOCAL_MACHINE\software\classes\ezulabootexe.installctrl
HKEY_LOCAL_MACHINE\software\classes\ezulabootexe.installctrl.1
HKEY_LOCAL_MACHINE\software\classes\ezulamain.ezulasearchpipe
HKEY_LOCAL_MACHINE\software\classes\ezulamain.ezulasearchpipe.1
HKEY_LOCAL_MACHINE\software\classes\interface\{07f0a542-47ba-11d4-8a6d-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\interface\{07f0a544-47ba-11d4-8a6d-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\interface\{1823bc4b-a253-4767-9cfc-9aca62a6b136}
HKEY_LOCAL_MACHINE\software\classes\interface\{19dfb2ca-9b27-11d4-b192-0050dab79376}
HKEY_LOCAL_MACHINE\software\classes\interface\{27bc6871-4d5a-11d4-8a6d-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\interface\{3d7247f1-5db8-11d4-8a72-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\interface\{4fd8645f-9b3e-46c1-9727-9837842a84ab}
HKEY_LOCAL_MACHINE\software\classes\interface\{58359012-bf36-11d3-99a2-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\interface\{7edc96e1-5dd3-11d4-b185-0050dab79376}
HKEY_LOCAL_MACHINE\software\classes\interface\{8ebb1743-9a2f-11d4-8a7e-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\interface\{c03351a3-6755-11d4-8a73-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\interface\{c4fee4a6-4b8b-11d4-8a6d-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\interface\{ef0372dc-f552-11d3-8528-0050dab79376}
HKEY_LOCAL_MACHINE\software\classes\interface\{ef0372de-f552-11d3-8528-0050dab79376}
HKEY_LOCAL_MACHINE\software\classes\typelib\{07f0a536-47ba-11d4-8a6d-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\typelib\{58359011-bf36-11d3-99a2-0050da2ee1be}
HKEY_LOCAL_MACHINE\software\classes\typelib\{c0335197-6755-11d4-8a73-0050da2ee1be}

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Removing ICMPNemesy DoS
Vxidl.BBX Trojan Removal instruction
Cobfinn Trojan Symptoms

Busted Spyware

How To Remove Busted?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Busted is dangerous virus:
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.

---

---

Busted Symptoms:

Files:
[%DESKTOP%]\Busted!.lnk
[%DESKTOP%]\Busted!.lnk

Folders:
[%PROGRAMS%]\PCSentinel's Busted!

Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\busted.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\pcsentinel's busted!
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\eventlog\application\sentinellistener

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
QDel106 Trojan Symptoms
Oxana Trojan Cleaner
WordMacro.Eraser Trojan Symptoms
Remove Sinnum Trojan
superstats.com Tracking Cookie Symptoms

BagleDl.AH Trojan

How To Remove BagleDl.AH?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

BagleDl.AH is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

---

---

BagleDl.AH Symptoms:

Files:
[%SYSTEM%]\winlog.exe
[%SYSTEM%]\winlog.exe

Registry Values:
HKEY_CURRENT_USER\Software\FirstRRRun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Services
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Pigeon.ASH Trojan Removal instruction
Mendrem Trojan Removal instruction
Removing Shellbot Trojan
Phishbank.AXD Trojan Removal instruction

PigSearch Trojan

How To Remove PigSearch?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

PigSearch is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

---

---

PigSearch It also known as:

[Kaspersky]AdWare.Win32.WSearch.j,Trojan-Downloader.Win32.AdLoad.ji;
[McAfee]Adware-PigSearch;
[Other]Adware.PigSearch,W32/Adload.FPQ

---

PigSearch Symptoms:

Files:
[%SYSTEM%]\CharSet.dll
[%SYSTEM%]\CreateDomTree.dll
[%SYSTEM%]\drivers\mspcidrv.sys
[%SYSTEM%]\CharSet.dll
[%SYSTEM%]\CreateDomTree.dll
[%SYSTEM%]\drivers\mspcidrv.sys

Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{8E25AC4A-B129-451B-BEE2-3B510BB751DA}
HKEY_CLASSES_ROOT\ntdll32.advance
HKEY_CLASSES_ROOT\ntdll32.advance.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E25AC4A-B129-451B-BEE2-3B510BB751DA}
HKEY_CLASSES_ROOT\clsid\{8e25ac4a-b129-451b-bee2-3b510bb751da}
HKEY_CLASSES_ROOT\clsid\{d0903a3b-f0ea-434a-9742-98c5335c7946}
HKEY_CLASSES_ROOT\iehelper.bho
HKEY_CLASSES_ROOT\iehelper.bho.1
HKEY_CLASSES_ROOT\interface\{900f9840-be29-48cc-8a4e-acad94164139}
HKEY_CLASSES_ROOT\typelib\{8899d7f9-c544-4bab-8cdc-d16c9d6b3af4}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{8e25ac4a-b129-451b-bee2-3b510bb751da}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{d0903a3b-f0ea-434a-9742-98c5335c7946}
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_mspcidrv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mspcidrv

Registry Values:
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\internet connection manager
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\internet connection manager
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\internet connection manager
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\internet connection manager
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\internet connection manager
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\internet connection manager
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\internet connection manager
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\internet connection manager\security
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mspath

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Wincontrol Trojan Removal instruction
Enuairs Trojan Removal
Removing GDE3 Trojan
Removing Coffee Trojan
Inviter.BoT DoS Cleaner

Zlob.Fam.MediaCodec Trojan

How To Remove Zlob.Fam.MediaCodec?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Zlob.Fam.MediaCodec is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
The pop-ups generally will not be stopped by pop-up stoppers, and often are
not dependent on your having Internet Explorer open.

---

---

Zlob.Fam.MediaCodec Symptoms:

Files:
[%PROGRAM_FILES%]\MediaCodec\iesuninst.exe
[%PROGRAM_FILES%]\MediaCodec\isaddon.dll
[%PROGRAM_FILES%]\MediaCodec\isamini.exe
[%PROGRAM_FILES%]\MediaCodec\isamonitor.exe
[%PROGRAM_FILES%]\MediaCodec\isauninst.exe
[%PROGRAM_FILES%]\MediaCodec\ot.ico
[%PROGRAM_FILES%]\MediaCodec\pmmon.exe
[%PROGRAM_FILES%]\MediaCodec\pmsngr.exe
[%PROGRAM_FILES%]\MediaCodec\pmuninst.exe
[%PROGRAM_FILES%]\MediaCodec\ts.ico
[%PROGRAM_FILES%]\MediaCodec\iesuninst.exe
[%PROGRAM_FILES%]\MediaCodec\isaddon.dll
[%PROGRAM_FILES%]\MediaCodec\isamini.exe
[%PROGRAM_FILES%]\MediaCodec\isamonitor.exe
[%PROGRAM_FILES%]\MediaCodec\isauninst.exe
[%PROGRAM_FILES%]\MediaCodec\ot.ico
[%PROGRAM_FILES%]\MediaCodec\pmmon.exe
[%PROGRAM_FILES%]\MediaCodec\pmsngr.exe
[%PROGRAM_FILES%]\MediaCodec\pmuninst.exe
[%PROGRAM_FILES%]\MediaCodec\ts.ico

Folders:
[%PROGRAM_FILES%]\MediaCodec

Registry Keys:
HKEY_CLASSES_ROOT\emediacodek.chl
HKEY_CLASSES_ROOT\VSEnchancer.Chl
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\EMediaCodek.Chl
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VSEnchancer.Chl
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaCodec

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Exploit Trojan Removal instruction
Keylog.KaiserLog Trojan Symptoms

Icemenell Trojan

How To Remove Icemenell?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Icemenell is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

---

---

Icemenell It also known as:

[Kaspersky]Trojan-PSW.Win32.OnLineGames.jj;
[McAfee]PWS-Gamania.dr;
[Other]Win32/Icemenell.H,Infostealer

---

Icemenell Symptoms:

Files:
[%WINDOWS%]\Syswm3\svchost.exe
[%WINDOWS%]\Syswm3\svchost.exe

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
startpage.yq Hijacker Removal instruction
Chopenoz!downloader Trojan Removal
StarFlood DoS Removal
MagicCenter Trojan Information

ClearStream.Accelerator Adware

How To Remove ClearStream.Accelerator?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

ClearStream.Accelerator is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

The BHO (Browser Helper Object) waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.

---

---

ClearStream.Accelerator Symptoms:

Files:
[%PROFILE%]\all users\application data\x0ff\x0ff.dll
[%SYSTEM%]\x0ff.dll
[%WINDOWS%]\system\x0ff.dll
[%PROFILE%]\all users\application data\x0ff\x0ff.dll
[%SYSTEM%]\x0ff.dll
[%WINDOWS%]\system\x0ff.dll

Registry Keys:
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{d319662b-d5bf-4538-adf3-8d3e36362608}
HKEY_LOCAL_MACHINE\software\classes\clsid\{d319662b-d5bf-4538-adf3-8d3e36362608}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{d319662b-d5bf-4538-adf3-8d3e36362608}

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Win32.Sneaker Trojan Removal
Removing Win32.Secdrop Trojan
Lula Backdoor Information
PSW.Lmir.fe Trojan Symptoms
Removing Lospad Trojan

Litmus Trojan

How To Remove Litmus?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Litmus is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

---

---

Litmus It also known as:

[Kaspersky]Backdoor.Litmus.108,Backdoor.Litmus.II;
[Eset]Win32/Litmus.203 trojan,Win32/Litmus.203.A trojan,Win32/Litmus.203.B trojan,Win32/Litmus.202 trojan,Win32/Litmus.II trojan,Win32/Litmus.002 trojan;
[McAfee]BackDoor-JZ;
[F-Prot]security risk or a "backdoor" program;
[Panda]Backdoor Program.LC,Backdoor Program;
[Computer Associates]Backdoor/Litmus.203!Server,Backdoor/Litmus.203.Server,Win32.Litmus.203,Backdoor/Litmus.108,Backdoor/Litmus.202,Win32.Litmus.202,Win32.Litmus.002

---

Litmus Symptoms:

Folders:
[%WINDOWS%]\litmus

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Removing Look2Me Hijacker
Win32.Bambo Trojan Symptoms
Seecha Adware Information
PowerStrip Adware Symptoms
WebD Trojan Removal instruction

Trymedia Adware

How To Remove Trymedia?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Trymedia is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

---

---

Trymedia It also known as:

[Kaspersky]AdWare.Win32.Trymedia.b;
[F-Prot]W32/Adware.BNO;
[Other]W32/Trymedia.G,Adware.Trymedia

---

Trymedia Symptoms:

Registry Keys:
HKEY_CURRENT_USER\software\trymedia systems
HKEY_LOCAL_MACHINE\software\trymedia systems

Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Removing Mumuboy Trojan
Win32.Coced.Ninel!PWS!Trojan Trojan Cleaner
Backdoor.Progent.11!DLL Trojan Removal
Forbot.R Worm Removal

Nomat Trojan

How To Remove Nomat?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Nomat is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

---

---

Nomat It also known as:

[Kaspersky]Trojan-Spy.Win32.Agent.ahg;
[McAfee]Spy-Agent.cf;
[Other]Win32/Nomat.A,TROJ_MDROPPER.WO,Mal/Behav-119

---

Nomat Symptoms:

Files:
[%SYSTEM%]\GenuineLicence.exe
[%SYSTEM%]\kbd.dll
[%SYSTEM%]\test.dll
[%SYSTEM%]\GenuineLicence.exe
[%SYSTEM%]\kbd.dll
[%SYSTEM%]\test.dll

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Bancos.AHP Trojan Symptoms
Win32.ShotGun DoS Removal
RCPrograms Adware Removal
Win32.ControlTotal Trojan Cleaner

PM.Annoyer Trojan

How To Remove PM.Annoyer?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

PM.Annoyer is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

---

---

PM.Annoyer Symptoms:

Files:
[%SYSTEM%]\BrAiN.dll
[%SYSTEM%]\Hackpro.dll
[%SYSTEM%]\Phaze.dll
[%SYSTEM%]\YM11.DLL
[%SYSTEM%]\YM11AUTH.DLL
[%SYSTEM%]\BrAiN.dll
[%SYSTEM%]\Hackpro.dll
[%SYSTEM%]\Phaze.dll
[%SYSTEM%]\YM11.DLL
[%SYSTEM%]\YM11AUTH.DLL

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
TS Trojan Removal instruction
Backdoor.Progent.11!DLL Trojan Symptoms
NCase.Alert Downloader Cleaner
Removing Delf.FN.Server Trojan

Vefisi Trojan

How To Remove Vefisi?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Vefisi is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

---

---

Vefisi Symptoms:

Files:
[%PROGRAM_FILES_COMMON%]\osa9.exe
[%PROGRAM_FILES_COMMON%]\OSAB.dll
[%SYSTEM%]\drivers\HWRegProt.sys
[%WINDOWS%]\30001.exe
[%PROGRAM_FILES_COMMON%]\osa9.exe
[%PROGRAM_FILES_COMMON%]\OSAB.dll
[%SYSTEM%]\drivers\HWRegProt.sys
[%WINDOWS%]\30001.exe

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Pigeon.EPL Trojan Removal
Removing TrojanClicker.Win32.Myxq Trojan