Monday, January 26, 2009

PD Adware

How To Remove PD?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
PD is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits


PD It also known as:

[Kaspersky]Trojan.Win32.Dialer.pd;
[McAfee]Dialer-311;
[Other]Dialer.Sfonditalia,winmovie dialer,Plugin

PD Symptoms:

Files:
[%FAVORITES%]\exp1orer.lnk
[%PROGRAMS%]\exp1orer.lnk
[%APPDATA%]\faretoraci\disinstalla.htm
[%APPDATA%]\faretoraci\sysvmtrs.exe
[%DESKTOP%]\exp1orer.lnk
[%DESKTOP%]\Private Area.lnk
[%FAVORITES%]\Private Area.lnk
[%FAVORITES%]\WinMoviePlugin.lnk
[%PROFILE%]\My Documents\exp1orer.lnk
[%PROFILE%]\My Documents\Private Area.lnk
[%PROFILE%]\My Documents\WinMoviePlugin.lnk
[%PROGRAMS%]\Private Area.lnk
[%PROGRAMS%]\WinMoviePlugin.lnk
[%STARTMENU%]\exp1orer.lnk
[%STARTMENU%]\Private Area.lnk
[%STARTMENU%]\WinMoviePlugin.lnk
[%FAVORITES%]\exp1orer.lnk
[%PROGRAMS%]\exp1orer.lnk
[%APPDATA%]\faretoraci\disinstalla.htm
[%APPDATA%]\faretoraci\sysvmtrs.exe
[%DESKTOP%]\exp1orer.lnk
[%DESKTOP%]\Private Area.lnk
[%FAVORITES%]\Private Area.lnk
[%FAVORITES%]\WinMoviePlugin.lnk
[%PROFILE%]\My Documents\exp1orer.lnk
[%PROFILE%]\My Documents\Private Area.lnk
[%PROFILE%]\My Documents\WinMoviePlugin.lnk
[%PROGRAMS%]\Private Area.lnk
[%PROGRAMS%]\WinMoviePlugin.lnk
[%STARTMENU%]\exp1orer.lnk
[%STARTMENU%]\Private Area.lnk
[%STARTMENU%]\WinMoviePlugin.lnk

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\emitt
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\domains\adslconnection.name\www
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\domains\contentdiscount.info\www
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\domains\extremeaccess.info\www
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\domains\softlab.name\www
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\emitt
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\user agent\post platform
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Removing Kadir.Basol.Devastator Backdoor
NetMaster Backdoor Cleaner
PSW.VB.cb Trojan Removal
Brotherhood Trojan Symptoms

No comments: