Monday, February 2, 2009

AdClicker.AU.dll Trojan

How To Remove AdClicker.AU.dll?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
AdClicker.AU.dll is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.


AdClicker.AU.dll It also known as:

[Kaspersky]Trojan-Dropper.Win32.Delf.de;
[McAfee]AdClicker-AU.dll;
[F-Prot]W32/Dropper.BI;
[Other]Win32/QHosts.AG,Adware.MainSearch,Troj/AdClick-AU

AdClicker.AU.dll Symptoms:

Files:
[%WINDOWS%]\twain_32.exe
[%COMMON_STARTUP%]\dwin32.exe
[%COMMON_STARTUP%]\screensaver.scr
[%SYSTEM%]\bhrw.dll
[%WINDOWS%]\mshotfix.exe
[%WINDOWS%]\twain_32.exe
[%COMMON_STARTUP%]\dwin32.exe
[%COMMON_STARTUP%]\screensaver.scr
[%SYSTEM%]\bhrw.dll
[%WINDOWS%]\mshotfix.exe

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{40d20724-5d3a-43c8-9ff5-2b6f209dbd27}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{40d20724-5d3a-43c8-9ff5-2b6f209dbd27}

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{99b782af-0b9a-4fb5-bdd1-d83f4b6218ba}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{99b782af-0b9a-4fb5-bdd1-d83f4b6218ba}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{99b782af-0b9a-4fb5-bdd1-d83f4b6218ba}, version=2,00,045
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{ad88bec6-2be4-4e8a-a47f-dd87fa67a2a7}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{ad88bec6-2be4-4e8a-a47f-dd87fa67a2a7}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{ad88bec6-2be4-4e8a-a47f-dd87fa67a2a7}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{ad88bec6-2be4-4e8a-a47f-dd87fa67a2a7}, version=1,00,000
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
BBSHelper Trojan Information
Pigeon.ETU Trojan Removal instruction

No comments: