Tuesday, February 3, 2009

Win.Spy.Pro Spyware

How To Remove Win.Spy.Pro?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Win.Spy.Pro is dangerous virus:
Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.


Win.Spy.Pro Symptoms:

Files:
[%PROFILE_TEMP%]\Compress0\ziplog.txt
[%PROFILE_TEMP%]\Compress1\ziplog.txt
[%PROFILE_TEMP%]\Compress2\ziplog.txt
[%PROFILE_TEMP%]\Compress3\ziplog.txt
[%PROFILE_TEMP%]\Compress4\ziplog.txt
[%PROFILE_TEMP%]\Compress5\ziplog.txt
[%WINDOWS%]\Files.ico
[%WINDOWS%]\ftplog.txt
[%WINDOWS%]\jpg.ico
[%WINDOWS%]\MCLDR.dll
[%WINDOWS%]\zclient.dll
[%WINDOWS%]\ziplog.txt
[%PROFILE_TEMP%]\Compress0\ziplog.txt
[%PROFILE_TEMP%]\Compress1\ziplog.txt
[%PROFILE_TEMP%]\Compress2\ziplog.txt
[%PROFILE_TEMP%]\Compress3\ziplog.txt
[%PROFILE_TEMP%]\Compress4\ziplog.txt
[%PROFILE_TEMP%]\Compress5\ziplog.txt
[%WINDOWS%]\Files.ico
[%WINDOWS%]\ftplog.txt
[%WINDOWS%]\jpg.ico
[%WINDOWS%]\MCLDR.dll
[%WINDOWS%]\zclient.dll
[%WINDOWS%]\ziplog.txt

Folders:
[%WINDOWS%]\dll
[%PROGRAM_FILES%]\Accessories\Temp23\Archive
[%PROGRAM_FILES%]\Accessories\Temp23\WC
[%PROGRAM_FILES%]\Accessories\Temp251
[%SYSTEM%]\comroot
[%SYSTEM%]\DCOMFirewall
[%WINDOWS%]\Temp32

Registry Keys:
HKEY_CLASSES_ROOT\skinmenu.smenu
HKEY_LOCAL_MACHINE\software\cams
HKEY_LOCAL_MACHINE\software\xpdriver

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Marked Trojan Cleaner
GGC223 Backdoor Removal instruction
Removing TrojanDropper.Win32.ExeBundle Trojan
BAT.Reboot Trojan Removal instruction

No comments: