Tuesday, January 27, 2009

Vanti Trojan

How To Remove Vanti?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Vanti is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.


Vanti It also known as:

[Kaspersky]Rootkit.Win32.Vanti.e,Rootkit.Win32.Vanti.df,Trojan-PSW.Win32.Nilage.avi,Rootkit.Win32.Vanti.ci,Trojan-PSW.Win32.OnLineGames.eb,Rootkit.Win32.Vanti.ex,Rootkit.Win32.Vanti.eu,Rootkit.Win32.Vanti.ei,Trojan.PSW.Win32.OnLineGames.dt,Trojan-PSW.Win32.Nilage.oz,Trojan-PSW.Win32.Nilage.ayp,Trojan-PSW.Win32.Magania.pf,Rootkit.Win32.Vanti.ew,Rootkit.Win32.Agent.ec;
[McAfee]Backdoor-CTV,PWS-Lineage,Generic PWS.o;
[F-Prot]W32/PWStealer.gen1,W32/PWStealer1!Generic,W32/Rootkit.OT;
[Other]Win32.Vanti.A,Hacktool.Rootkit,TROJ_VANTI.E,Win32/Vanti!generic,Win32/Vanti.AD!DLL!Trojan,Infostealer,Win32/Vanti.AE,Win32/Vanti.J,Win32/Vanti.DR,Win32/Vanti.X!Trojan,Mal/Packer,Win32/Vanti.AR,Win32/Vanti.AY,Win32/Vanti.BY,Win32/Vanti.BW,Win32/Vanti.BV,Win32/Vanti.BX,Win32/Vanti.CV,Win32/Vanti.EJ,Win32/Vanti.EK,Win32/Vanti.DZ,Win32/Vanti.DS,Win32/Vanti.DV,Win32/Vanti.CL,Win32/Vanti.CQ,VirTool:Win32/Obfuscator.A,Win32/Vanti.CT,Win32/Vanti.CU,Bloodhound.NsAnti,Win32/Vanti.CS,Win32/Vanti.CE,Win32/Vanti.CR,Win32/Vanti.BZ,Win32/Vanti.CA,Win32/Vanti.CB,Win32/Vanti.CC,Win32/Vanti.FU,Win32/Vanti.HE,Win32/Vanti.HF,Win32/Vanti.HG,Win32/Vanti.HH,Trojan.Win32.NSAnti,Win32/Vanti.FW,Win32/Vanti.FV,Win32/Vanti.FX,Troj/Agent-ELF

Vanti Symptoms:

Files:
[%PROFILE_TEMP%]\b104.exe
[%PROFILE_TEMP%]\cmdinst.exe
[%WINDOWS%]\UHLqZ293c2tp\oJMNtZ6awZQD.vbs
[%LOCAL_SETTINGS%]\temp.gxvr.sys
[%PROFILE_TEMP%]\4fjjtbh.dll
[%PROFILE_TEMP%]\gs5.dll
[%PROFILE_TEMP%]\h7cv.dll
[%PROFILE_TEMP%]\l88kkgkc.dll
[%PROFILE_TEMP%]\ljl.dll
[%PROFILE_TEMP%]\xbrkvewo.dll
[%PROFILE_TEMP%]\xny.dll
[%PROFILE_TEMP%]\ygg4.dll
[%PROFILE_TEMP%]\zgh.dll
[%SYSTEM%]\wincab.sys
[%PROFILE_TEMP%]\b104.exe
[%PROFILE_TEMP%]\cmdinst.exe
[%WINDOWS%]\UHLqZ293c2tp\oJMNtZ6awZQD.vbs
[%LOCAL_SETTINGS%]\temp.gxvr.sys
[%PROFILE_TEMP%]\4fjjtbh.dll
[%PROFILE_TEMP%]\gs5.dll
[%PROFILE_TEMP%]\h7cv.dll
[%PROFILE_TEMP%]\l88kkgkc.dll
[%PROFILE_TEMP%]\ljl.dll
[%PROFILE_TEMP%]\xbrkvewo.dll
[%PROFILE_TEMP%]\xny.dll
[%PROFILE_TEMP%]\ygg4.dll
[%PROFILE_TEMP%]\zgh.dll
[%SYSTEM%]\wincab.sys

Folders:
[%SYSTEM%]\cache32_hsrb

Registry Keys:
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_cmdservice
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_lzq1217
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cmdservice
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_squell
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\kingx
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\squella
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\squellab

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
TrojanDownloader.Win32.Small.gu Downloader Symptoms
Bancos.IEM Trojan Removal

No comments: