Thursday, January 22, 2009

Turown Downloader

How To Remove Turown?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Turown is dangerous virus:
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.


Turown Symptoms:

Files:
[%PROFILE%]\temp\ckz4417f\files\5.exe
[%PROFILE%]\temp\ckz4417f\files\ieupdate.exe
[%PROFILE_TEMP%]\ckz4417f\files\5.exe
[%PROFILE_TEMP%]\ckz4417f\files\ieupdate.exe
[%PROFILE_TEMP%]\ckz55981\files\3.exe
[%PROFILE_TEMP%]\ckz55981\files\5.exe
[%PROFILE_TEMP%]\ckz55981\files\ieupdate.exe
[%SYSTEM%]\TD.exe
[%PROFILE%]\temp\ckz4417f\files\5.exe
[%PROFILE%]\temp\ckz4417f\files\ieupdate.exe
[%PROFILE_TEMP%]\ckz4417f\files\5.exe
[%PROFILE_TEMP%]\ckz4417f\files\ieupdate.exe
[%PROFILE_TEMP%]\ckz55981\files\3.exe
[%PROFILE_TEMP%]\ckz55981\files\5.exe
[%PROFILE_TEMP%]\ckz55981\files\ieupdate.exe
[%SYSTEM%]\TD.exe

Folders:
[%SYSTEM%]\IEDriver
[%WINDOWS%]\iedriver

Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{14d108c8-dd97-4b78-8b50-c981500abb8f}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{bc3bbf86-e4ec-4412-9676-8355468b3b05}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{f20239cb-33dc-4ec6-959e-73edea0fe4d7}
HKEY_LOCAL_MACHINE\software\turbodownload

Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\cmdmapping
HKEY_LOCAL_MACHINE\software\microsoft\internet
HKEY_LOCAL_MACHINE\software\microsoft\internet
HKEY_LOCAL_MACHINE\software\microsoft\internet
HKEY_LOCAL_MACHINE\software\microsoft\internet
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
MyCoolScreen Adware Information
Vxidl.AVC Trojan Symptoms
Passgrab.Cab Hostile Code Cleaner
Plimp Trojan Removal
Glacier Trojan Information

No comments: