Friday, January 30, 2009

Clicker.Pcastor Trojan

How To Remove Clicker.Pcastor?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Clicker.Pcastor is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.


Clicker.Pcastor It also known as:

[Other]Trojan.Click.1596

Clicker.Pcastor Symptoms:

Folders:
[%PROGRAM_FILES%]\PSCastor

Registry Keys:
HKEY_CURRENT_USER\software\pscastor

Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
precisead.com Tracking Cookie Cleaner
Removing Mem.format!Trojan Trojan

MicroJoiner Trojan

How To Remove MicroJoiner?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
MicroJoiner is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.


MicroJoiner It also known as:

[Kaspersky]TrojanDropper.Win32.MultiJoiner.11,TrojanDropper.Win32.MultiJoiner.13.b,Trojan-Dropper.Win32.MicroJoiner.13.h;
[McAfee]MultiDropper-PO;
[Panda]Trojan Horse.LC,Trojan Horse,Hacktool Program,Trj/Multijoiner.A;
[Computer Associates]Win32.MicroJoiner.A;
[Other]Win32/MicroJoiner!generic,Trojan.Goldun

MicroJoiner Symptoms:

Files:
[%PROGRAM_FILES_COMMON%]\updmgr\rvupdmgr.exe
[%PROGRAM_FILES_COMMON%]\updmgr\simgr.exe
[%PROGRAM_FILES_COMMON%]\updmgr\rvupdmgr.exe
[%PROGRAM_FILES_COMMON%]\updmgr\simgr.exe


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Removing Atlas Trojan
Ehg.viacom.hitbox Tracking Cookie Removal

BombSimulator Trojan

How To Remove BombSimulator?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
BombSimulator is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.


BombSimulator It also known as:

[Kaspersky]Trojan.Jiang;
[Panda]Trj/Jiang;
[Computer Associates]BombSimulator,BombSimulator!Trojan

BombSimulator Symptoms:

Files:
[%PROGRAM_FILES%]\FileSubmit\Finding Nemo Theme\NLNP38.exe
[%SYSTEM%]\icsxml\NLNP!3.exe
[%SYSTEM%]\NLNP!3.exe
[%WINDOWS%]\system\Update_Hosts.DLL
[%PROGRAM_FILES%]\FileSubmit\Finding Nemo Theme\NLNP38.exe
[%SYSTEM%]\icsxml\NLNP!3.exe
[%SYSTEM%]\NLNP!3.exe
[%WINDOWS%]\system\Update_Hosts.DLL


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Backdoor.Phoenix.Server Trojan Information

Windows.SyncroAd Adware

How To Remove Windows.SyncroAd?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Windows.SyncroAd is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits


Windows.SyncroAd It also known as:

[Panda]Adware/WUpd

Windows.SyncroAd Symptoms:

Files:
[%PROGRAM_FILES%]\Windows SyncroAd\CComm.dll
[%PROGRAM_FILES%]\Windows SyncroAd\Info.txt
[%PROGRAM_FILES%]\Windows SyncroAd\CComm.dll
[%PROGRAM_FILES%]\Windows SyncroAd\Info.txt

Folders:
[%PROGRAM_FILES%]\windows syncroad

Registry Keys:
HKEY_LOCAL_MACHINE\software\windows syncroad
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\windows syncroad

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Mastab Trojan Cleaner
WhitehouseCn DoS Symptoms
Remove Ixepre Trojan
Install Trojan Removal

Yprel Trojan

How To Remove Yprel?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Yprel is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.


Yprel It also known as:

[Kaspersky]Trojan-Spy.Win32.Sters,Trojan-Spy.win32.Sters.x,Backdoor.Win32.Vb.apc,Trojan-Spy.Win32.Sters.x,Backdoor.Win32.VB.aug,Trojan-Spy.Win32.Sters.y,Trojan-Proxy.Win32.VB.v;
[McAfee]Backdoor-CWW,BackDoor-CWW;
[Other]Win32/Yprel,Win32/Yprel.G,Win32/Yprel.A,Win32/Yprel.H,Infostealer,Win32/Yprel.E,Win32/Yprel.F,Win32/Yprel.M

Yprel Symptoms:

Files:
[%WINDOWS%]\cxplib.dll
[%WINDOWS%]\cxplib.dll


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Pakes Trojan Removal
PSW.Vingrad Trojan Information
Remove Medel Trojan

TrojanDownloader.Win32.Small.gt Downloader

How To Remove TrojanDownloader.Win32.Small.gt?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
TrojanDownloader.Win32.Small.gt is dangerous virus:
This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.


TrojanDownloader.Win32.Small.gt It also known as:

[Panda]Adware/NetPals

TrojanDownloader.Win32.Small.gt Symptoms:

Files:
[%SYSTEM%]\90ae34.exe
[%SYSTEM%]\90ae34.exe


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Bancos.GTN Trojan Cleaner

Adware.BDSearch Adware

How To Remove Adware.BDSearch?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Adware.BDSearch is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Trojans-downloaders downloads and installs new malware or adware on the computer.



Adware.BDSearch It also known as:

[McAfee]Adware-BDSearch,Adware-BDSearch.dr,AdWare-BDSearch;
[F-Prot]W32/Downloader.AOJY;
[Other]BaiduBar,Trojan.Agent.AIX,BrowserModifier.Win32/CNNIC

Adware.BDSearch Symptoms:

Files:
[%SYSTEM%]\drivers\ejdffibc.sys
[%SYSTEM%]\drivers\ejdffibc.sys

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{352e3b3a-cab5-4dbc-b940-c7f84d0447d8}
HKEY_CLASSES_ROOT\ieupbho.bho
HKEY_CLASSES_ROOT\ieupbho.bho.1
HKEY_CLASSES_ROOT\interface\{75fcfd39-9de7-4ee8-ad31-0c9fc00f1da8}
HKEY_CLASSES_ROOT\typelib\{bd7dd6b0-68e5-44ae-9cd9-63a8e7a65f3b}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{352e3b3a-cab5-4dbc-b940-c7f84d0447d8}


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Remove WordMacro.Over.B:intended Trojan

Dluca.ag Downloader

How To Remove Dluca.ag?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Dluca.ag is dangerous virus:
Trojans-downloaders downloads and installs new malware or adware on the computer.



Dluca.ag Symptoms:

Files:
[%SYSTEM%]\szgnwplk.exe
[%SYSTEM%]\szgnwplk.exe


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
ExecTCP RAT Removal instruction
Frog.Bomb DoS Cleaner
DOS32.Vanavir Trojan Removal

Spy.Lantern.Keylogger Spyware

How To Remove Spy.Lantern.Keylogger?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Spy.Lantern.Keylogger is dangerous virus:
Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.


Spy.Lantern.Keylogger Symptoms:

Files:
[%SYSTEM%]\cybaqes.cfg
[%SYSTEM%]\cybaqes.chm
[%SYSTEM%]\cybaqes.exe
[%SYSTEM%]\cybaqes.sys
[%SYSTEM%]\cybaqesa.dll
[%SYSTEM%]\cybaqescc.exe
[%SYSTEM%]\cybaqesh.dll
[%SYSTEM%]\cybaqesl.exe
[%SYSTEM%]\cybaqesv.exe
[%WINDOWS%]\slkkey.lock
[%SYSTEM%]\cybaqes.cfg
[%SYSTEM%]\cybaqes.chm
[%SYSTEM%]\cybaqes.exe
[%SYSTEM%]\cybaqes.sys
[%SYSTEM%]\cybaqesa.dll
[%SYSTEM%]\cybaqescc.exe
[%SYSTEM%]\cybaqesh.dll
[%SYSTEM%]\cybaqesl.exe
[%SYSTEM%]\cybaqesv.exe
[%WINDOWS%]\slkkey.lock

Folders:
[%PROGRAMS%]\Spy Lantern Keylogger Viewer
[%PROGRAM_FILES%]\Spy Lantern Keylogger Viewer
[%COMMON_PROGRAMS%]\Spy Lantern Keylogger
[%PROGRAMS%]\spy lantern keylogger
[%WINDOWS%]\cybaqes

Registry Keys:
HKEY_CURRENT_USER\software\spydex, inc.\spy lantern keylogger viewer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spy lantern keylogger
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cybaqesdriver
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cybaqessrv

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
HideExec Trojan Information

XXXSoft Trojan

How To Remove XXXSoft?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
XXXSoft is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.


XXXSoft Symptoms:

Folders:
[%PROGRAMS%]\XXXSoft
[%PROGRAM_FILES%]\XXXSoft

Registry Keys:
HKEY_CLASSES_ROOT\xxxsoft
HKEY_CURRENT_USER\software\xxxsoft
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xxxsoft


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Clickxchange.com Tracking Cookie Cleaner
Remove James Trojan
Bancos.HNW Trojan Removal instruction
Remove Blood.Rage Trojan

CasinoClient Adware

How To Remove CasinoClient?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
CasinoClient is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits


CasinoClient Symptoms:

Files:
[%PROFILE_TEMP%]\cas2setup.exe
[%PROGRAM_FILES%]\System Files\System.exe
[%WINDOWS%]\pf78.exe
[%PROFILE%]\LOCAL.EXE
[%PROGRAM_FILES%]\Cas\Client\casclient.exe
[%PROGRAM_FILES%]\Cas\Client\casmf.dll
[%PROGRAM_FILES%]\Cas\Client\hf.txt
[%PROGRAM_FILES%]\Cas\Client\sf.txt
[%PROGRAM_FILES%]\Cas\Client\Uninstall.exe
[%DESKTOP%]\chat now.lnk
[%DESKTOP%]\free plasma tv.lnk
[%DESKTOP%]\poker shortcut.lnk
[%DESKTOP%]\weather.lnk
[%PROFILE_TEMP%]\cassetup.exe
[%PROFILE_TEMP%]\cas2setup.exe
[%PROGRAM_FILES%]\System Files\System.exe
[%WINDOWS%]\pf78.exe
[%PROFILE%]\LOCAL.EXE
[%PROGRAM_FILES%]\Cas\Client\casclient.exe
[%PROGRAM_FILES%]\Cas\Client\casmf.dll
[%PROGRAM_FILES%]\Cas\Client\hf.txt
[%PROGRAM_FILES%]\Cas\Client\sf.txt
[%PROGRAM_FILES%]\Cas\Client\Uninstall.exe
[%DESKTOP%]\chat now.lnk
[%DESKTOP%]\free plasma tv.lnk
[%DESKTOP%]\poker shortcut.lnk
[%DESKTOP%]\weather.lnk
[%PROFILE_TEMP%]\cassetup.exe

Folders:
[%PROGRAM_FILES%]\cmman

Registry Keys:
HKEY_CLASSES_ROOT\appid\main.dll
HKEY_CLASSES_ROOT\typelib\{67c89c18-b4f3-46a9-8800-e9e7a55afbd9}
HKEY_CLASSES_ROOT\typelib\{d4c89c18-b4f3-46a9-8800-e9e7a55afbd9}
HKEY_CURRENT_USER\software\cmsystem
HKEY_CURRENT_USER\Software\CAS
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\Main.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{E0DC5CC4-25A5-4BC7-A3AA-3525733DC796}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8293D547-38DD-4325-B35A-F1817EDFA5FC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Main.MimeFilter
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Main.MimeFilter.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{D4C89C18-B4F3-46A9-8800-E9E7A55AFBD9}

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Grog.Aver.Torto Trojan Cleaner
GoGoTools Adware Information
Remove Bancos.GYJ Trojan
Remove Actux Trojan
VCL.ow Trojan Cleaner

ErrorDoctor Ransomware

How To Remove ErrorDoctor?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
ErrorDoctor is dangerous virus:
The term ransomware is commonly used to describe such software,
although the field known as cryptovirology predates the term "ransomware".

This type of ransom attack can be accomplished by (for example) attaching
a specially crafted file/program to an e-mail message and sending this to the victim.


ErrorDoctor Symptoms:

Files:
[%COMMON_DESKTOPDIRECTORY%]\ErrorDoctor.lnk
[%PROFILE%]\Documents and Settings\All Users\Desktop\ErrorDoctor.lnk
[%COMMON_DESKTOPDIRECTORY%]\ErrorDoctor.lnk
[%PROFILE%]\Documents and Settings\All Users\Desktop\ErrorDoctor.lnk

Folders:
[%PROGRAM_FILES%]\SoftwareDoctor\ErrorDoctor
[%COMMON_PROGRAMS%]\SoftwareDoctor
[%PROFILE%]\Documents and Settings\All Users\Start Menu\Programs\SoftwareDoctor\ErrorDoctor
[%PROGRAM_FILES%]\SoftwareDoctor

Registry Keys:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\softwaredoctor
HKEY_LOCAL_MACHINE\software\errordoctor
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{b74de36a-b95c-49a1-8f41-a09f3d187747}
HKEY_LOCAL_MACHINE\software\softwaredoctor


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Bancos.HMV Trojan Removal

Unclassified Trojan

How To Remove Unclassified?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Unclassified is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.


Unclassified It also known as:

[Panda]Adware/nCase

Unclassified Symptoms:

Registry Keys:
HKEY_CURRENT_USER\software\local appwizard-generated applications\popup


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Minsk.Ghost Trojan Removal
Vxidl.ASA Trojan Symptoms
Remove VB.hh Backdoor
TrojanDownloader.Win32.Agent.nj Downloader Cleaner
Stealth.Redirector Trojan Cleaner

SillyDl.AZG Trojan

How To Remove SillyDl.AZG?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
SillyDl.AZG is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.


SillyDl.AZG Symptoms:

Files:
[%WINDOWS%]\srvcvthkxg.exe
[%WINDOWS%]\srvrmvefxv.exe
[%WINDOWS%]\srvsrjvwzt.exe
[%WINDOWS%]\srvzpgbhnd.exe
[%WINDOWS%]\srvcvthkxg.exe
[%WINDOWS%]\srvrmvefxv.exe
[%WINDOWS%]\srvsrjvwzt.exe
[%WINDOWS%]\srvzpgbhnd.exe


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Drug Trojan Symptoms
Removing MyCoolScreen Adware
Dowque.ABG Trojan Removal instruction
TFD DoS Removal

Freddy Trojan

How To Remove Freddy?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Freddy is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:


  • Launching/ deleting files

  • Sending/ receiving files

  • Deleting data

  • Displaying notification

  • Rebooting the machine

  • Executing files




Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.
Trojans-downloaders downloads and installs new malware or adware on the computer.

DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.




Freddy It also known as:

[Kaspersky]Backdoor.Freddy.03,Backdoor.Freddy.02.a,Backdoor.Freddy.02.b,Backdoor.Freddy.03.b,Backdoor.Freddy.2001,Backdoor.Win32.Freddy.02.a;
[Eset]Win32/Freddy.02.A trojan;
[McAfee]BackDoor-JX,Generic;
[F-Prot]security risk or a "backdoor" program;
[Panda]Backdoor Program,Bck/FrediK.b3,Bck/Freddy,Bck/Freddy.03.b,Bck/FrediK.b2,Trojan Horse.LC,Freddy;
[Computer Associates]Backdoor/Freddy,Backdoor/Freddy.02.a!Dropper,Backdoor/Freddy.02.b!Server,Win32.Freddy.02.A,Win32.Joiner.R,Win32/Joiner.R!Trojan,Freddy

Freddy Symptoms:

Files:
[%WINDOWS%]\temp\micronet.dll
[%WINDOWS%]\winapi.exe
[%WINDOWS%]\temp\micronet.dll
[%WINDOWS%]\winapi.exe

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Phishbank.AUX Trojan Removal
Remove Nota.dr Backdoor
Remove AdBand Adware
Remove BAT.Zop Trojan

WinTools Adware

How To Remove WinTools?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
WinTools is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits


WinTools Symptoms:

Files:
[%PROGRAM_FILES_COMMON%]\WinTools\WSup.exe
[%PROGRAM_FILES_COMMON%]\WinTools\WToolsA.exe
[%PROGRAM_FILES_COMMON%]\WinTools\WToolsB.dll
[%PROFILE_TEMP%]\tb_setup.exe
[%PROGRAM_FILES_COMMON%]\WinTools\WSup.exe
[%PROGRAM_FILES_COMMON%]\WinTools\WToolsA.exe
[%PROGRAM_FILES_COMMON%]\WinTools\WToolsB.dll
[%PROFILE_TEMP%]\tb_setup.exe

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{87067f04-de4c-4688-bc3c-4fcf39d609e7}
HKEY_CLASSES_ROOT\CLSID\{87766247-311C-43B4-8499-3D5FEC94A183}
HKEY_CLASSES_ROOT\clsid\{a8deb4a5-d9ef-4d21-b4f6-921475004e7d}
HKEY_CLASSES_ROOT\wtoolsb.resprotocol
HKEY_CURRENT_USER\software\wintools
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\wintools
HKEY_LOCAL_MACHINE\software\wintools
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wintoolssvc
HKEY_CLASSES_ROOT\clsid\{87766247-311c-43b4-8499-3d5fec94a183}
HKEY_CLASSES_ROOT\wsg.wsgobj

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservicesonce


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Remove Cryptic Downloader
Removing VCL.cmp Trojan
KeyLogger.ae Spyware Removal instruction
ULWindowsSeek (ULWindowsURL) Hijacker Symptoms
Delf.ne Downloader Cleaner

DealHelper.com Adware

How To Remove DealHelper.com?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
DealHelper.com is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits
BHO (Browser Helper Object) Trojan.
The BHO waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
The method of network transport used by the attacker makes this Trojan unique.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.
Instead, this Trojan encodes the data with a simple XOR algorithm before placing it into
the data section of an ICMP ping packet." explained the company.
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.


DealHelper.com It also known as:

[Panda]Adware/DealHelper,Trj/Downloader.OE;
[Other]Adware.DealHelper

DealHelper.com Symptoms:

Files:
[%PROFILE_TEMP%]\_setupx.dll
[%SYSTEM%]\Dnlelq.exe
[%SYSTEM%]\dun.exe
[%SYSTEM%]\Eyerkt.exe
[%SYSTEM%]\Gkyzbs.exe
[%SYSTEM%]\HookPopup.dll
[%SYSTEM%]\Nwrseu.exe
[%SYSTEM%]\Werxtr.exe
[%SYSTEM%]\Xiclwf.exe
[%WINDOWS%]\appsinstalled.htm
[%WINDOWS%]\dealhlpr.dll
[%WINDOWS%]\dhdom.bin
[%WINDOWS%]\dhdomp.bin
[%WINDOWS%]\dhkw.bin
[%WINDOWS%]\dhp2.dll
[%WINDOWS%]\dsearch.bin
[%DESKTOP%]\dhbrwsr.exe
[%SYSTEM%]\dealhlpr.dll
[%SYSTEM%]\dp-him.exe
[%SYSTEM%]\dp-k13w13.exe
[%WINDOWS%]\dhbrwsr.exe
[%WINDOWS%]\dhp.dll
[%WINDOWS%]\dhsigned.ocx
[%WINDOWS%]\dhsvr.exe
[%WINDOWS%]\dhun.exe
[%WINDOWS%]\dhupdt.exe
[%WINDOWS%]\edow.exe
[%WINDOWS%]\system\dealhlpr.dll
[%WINDOWS%]\timesynchronize.exe
[%PROFILE_TEMP%]\_setupx.dll
[%SYSTEM%]\Dnlelq.exe
[%SYSTEM%]\dun.exe
[%SYSTEM%]\Eyerkt.exe
[%SYSTEM%]\Gkyzbs.exe
[%SYSTEM%]\HookPopup.dll
[%SYSTEM%]\Nwrseu.exe
[%SYSTEM%]\Werxtr.exe
[%SYSTEM%]\Xiclwf.exe
[%WINDOWS%]\appsinstalled.htm
[%WINDOWS%]\dealhlpr.dll
[%WINDOWS%]\dhdom.bin
[%WINDOWS%]\dhdomp.bin
[%WINDOWS%]\dhkw.bin
[%WINDOWS%]\dhp2.dll
[%WINDOWS%]\dsearch.bin
[%DESKTOP%]\dhbrwsr.exe
[%SYSTEM%]\dealhlpr.dll
[%SYSTEM%]\dp-him.exe
[%SYSTEM%]\dp-k13w13.exe
[%WINDOWS%]\dhbrwsr.exe
[%WINDOWS%]\dhp.dll
[%WINDOWS%]\dhsigned.ocx
[%WINDOWS%]\dhsvr.exe
[%WINDOWS%]\dhun.exe
[%WINDOWS%]\dhupdt.exe
[%WINDOWS%]\edow.exe
[%WINDOWS%]\system\dealhlpr.dll
[%WINDOWS%]\timesynchronize.exe

Folders:
[%PROGRAM_FILES%]\dealhelper.com inc
[%PROGRAM_FILES%]\timesync
[%SYSTEM%]\dealhelper
[%PROGRAMS%]\dealhelper

Registry Keys:
HKEY_CLASSES_ROOT\appid\{a1f53f1d-fb2d-4fe0-8ee8-7bbe69999d9f}
HKEY_CLASSES_ROOT\appid\{a57afb0f-c63e-4ae2-8a7b-bca01ba32cc5}
HKEY_CLASSES_ROOT\clsid\{1a2883f2-fdc7-4af2-b136-203adb475dd7}
HKEY_CLASSES_ROOT\clsid\{54a41ae7-b358-4d41-98bd-bbbffdf5186b}
HKEY_CLASSES_ROOT\clsid\{5e3e1dc0-239a-4067-a4a0-88902c108e58}
HKEY_CLASSES_ROOT\clsid\{6dd8b352-21a7-4c24-ac49-e9b4730c1823}
HKEY_CLASSES_ROOT\clsid\{7bc3ec59-a4a0-4638-a3bf-c20b0665947f}
HKEY_CLASSES_ROOT\clsid\{8b477303-698c-4eed-b9f6-c715842fbe33}
HKEY_CLASSES_ROOT\clsid\{8ee1aaf5-ed6b-4601-b333-cd30ffb8b39d}
HKEY_CLASSES_ROOT\clsid\{b8e910b5-7452-4a29-b121-08e8cf09ec07}
HKEY_CLASSES_ROOT\clsid\{bfef1779-0e92-45a1-bf5e-55991007f912}
HKEY_CLASSES_ROOT\CLSID\{D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13}
HKEY_CLASSES_ROOT\clsid\{f00586de-a432-4b9f-877d-e29cd87efdd6}
HKEY_CLASSES_ROOT\clsid\{fe4bbea8-1efd-4b8a-bd1b-341ccdbeeaa6}
HKEY_CLASSES_ROOT\dealhlpr.band
HKEY_CLASSES_ROOT\dealhlpr.band.1
HKEY_CLASSES_ROOT\dealpop.cdealhelperpopup
HKEY_CLASSES_ROOT\dealpop.cdealhelperpopup.1
HKEY_CLASSES_ROOT\dealpop.dealpopevents
HKEY_CLASSES_ROOT\dealpop.dealpopevents.1
HKEY_CLASSES_ROOT\dhbrwsr.browserwindows
HKEY_CLASSES_ROOT\dhbrwsr.browserwindows.1
HKEY_CLASSES_ROOT\dhp.dhevents
HKEY_CLASSES_ROOT\dhp.dhevents.1
HKEY_CLASSES_ROOT\dhp.popup
HKEY_CLASSES_ROOT\dhp.popup.1
HKEY_CLASSES_ROOT\dhsigned.dhsignedctrl.1
HKEY_CLASSES_ROOT\dhsvr.cfiledatabase
HKEY_CLASSES_ROOT\dhsvr.cfiledatabase.1
HKEY_CLASSES_ROOT\dhsvr.dbhelper
HKEY_CLASSES_ROOT\dhsvr.dbhelper.1
HKEY_CLASSES_ROOT\dhsvr.even
HKEY_CLASSES_ROOT\dhsvr.even.1
HKEY_CLASSES_ROOT\dhsvr.webdealevents
HKEY_CLASSES_ROOT\dhsvr.webdealevents.1
HKEY_CLASSES_ROOT\interface\{06e53101-654c-45eb-bff6-e37e13b5972a}
HKEY_CLASSES_ROOT\interface\{0b16b278-b2e3-4cbf-85b5-e058878f728f}
HKEY_CLASSES_ROOT\interface\{1da40091-14b4-4c21-8170-a2ceede90b10}
HKEY_CLASSES_ROOT\interface\{3afae37a-56a3-4850-b599-4da9a9104b82}
HKEY_CLASSES_ROOT\interface\{3d89a731-9f4a-418f-a997-2d633c7c404c}
HKEY_CLASSES_ROOT\interface\{81739076-56b7-42ec-a0aa-692794fded1a}
HKEY_CLASSES_ROOT\interface\{a2cdafb4-eb9c-4efc-bcfc-a7aa6745ff7e}
HKEY_CLASSES_ROOT\interface\{b5146c72-3328-4240-97ed-3a23dcb656cf}
HKEY_CLASSES_ROOT\interface\{bf9ee3a0-1a02-4265-a65f-ac4d4447f6bf}
HKEY_CLASSES_ROOT\interface\{c2e6831b-822b-4a1f-9ef1-1d3eb7d3e985}
HKEY_CLASSES_ROOT\interface\{c9679631-7060-443f-bd37-88f9410ed8c3}
HKEY_CLASSES_ROOT\interface\{deba1742-2bec-4b78-a987-5837971193f7}
HKEY_CLASSES_ROOT\interface\{e9468a08-f790-48ce-ad30-eadeeab9b40c}
HKEY_CLASSES_ROOT\interface\{f3816084-9608-485a-b63b-cad8f931577e}
HKEY_LOCAL_MACHINE\software\classes\appid\{a1f53f1d-fb2d-4fe0-8ee8-7bbe69999d9f}
HKEY_LOCAL_MACHINE\software\classes\appid\{a57afb0f-c63e-4ae2-8a7b-bca01ba32cc5}
HKEY_LOCAL_MACHINE\software\classes\clsid\{1a2883f2-fdc7-4af2-b136-203adb475dd7}
HKEY_LOCAL_MACHINE\software\classes\clsid\{54a41ae7-b358-4d41-98bd-bbbffdf5186b}
HKEY_LOCAL_MACHINE\software\classes\clsid\{5e3e1dc0-239a-4067-a4a0-88902c108e58}
HKEY_LOCAL_MACHINE\software\classes\clsid\{6dd8b352-21a7-4c24-ac49-e9b4730c1823}
HKEY_LOCAL_MACHINE\software\classes\clsid\{7bc3ec59-a4a0-4638-a3bf-c20b0665947f}
HKEY_LOCAL_MACHINE\software\classes\clsid\{8b477303-698c-4eed-b9f6-c715842fbe33}
HKEY_LOCAL_MACHINE\software\classes\clsid\{8ee1aaf5-ed6b-4601-b333-cd30ffb8b39d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{b8e910b5-7452-4a29-b121-08e8cf09ec07}
HKEY_LOCAL_MACHINE\software\classes\clsid\{bfef1779-0e92-45a1-bf5e-55991007f912}
HKEY_LOCAL_MACHINE\software\classes\clsid\{d848a3ca-0bfb-4de0-ba9e-a57f0cca1c13}
HKEY_LOCAL_MACHINE\software\classes\clsid\{f00586de-a432-4b9f-877d-e29cd87efdd6}
HKEY_LOCAL_MACHINE\software\classes\clsid\{fe4bbea8-1efd-4b8a-bd1b-341ccdbeeaa6}
HKEY_LOCAL_MACHINE\software\classes\interface\{06e53101-654c-45eb-bff6-e37e13b5972a}
HKEY_LOCAL_MACHINE\software\classes\interface\{0b16b278-b2e3-4cbf-85b5-e058878f728f}
HKEY_LOCAL_MACHINE\software\classes\interface\{1da40091-14b4-4c21-8170-a2ceede90b10}
HKEY_LOCAL_MACHINE\software\classes\interface\{3afae37a-56a3-4850-b599-4da9a9104b82}
HKEY_LOCAL_MACHINE\software\classes\interface\{3d89a731-9f4a-418f-a997-2d633c7c404c}
HKEY_LOCAL_MACHINE\software\classes\interface\{81739076-56b7-42ec-a0aa-692794fded1a}
HKEY_LOCAL_MACHINE\software\classes\interface\{a2cdafb4-eb9c-4efc-bcfc-a7aa6745ff7e}
HKEY_LOCAL_MACHINE\software\classes\interface\{b5146c72-3328-4240-97ed-3a23dcb656cf}
HKEY_LOCAL_MACHINE\software\classes\interface\{bf9ee3a0-1a02-4265-a65f-ac4d4447f6bf}
HKEY_LOCAL_MACHINE\software\classes\interface\{c2e6831b-822b-4a1f-9ef1-1d3eb7d3e985}
HKEY_LOCAL_MACHINE\software\classes\interface\{c9679631-7060-443f-bd37-88f9410ed8c3}
HKEY_LOCAL_MACHINE\software\classes\interface\{deba1742-2bec-4b78-a987-5837971193f7}
HKEY_LOCAL_MACHINE\software\classes\interface\{e9468a08-f790-48ce-ad30-eadeeab9b40c}
HKEY_LOCAL_MACHINE\software\classes\interface\{f3816084-9608-485a-b63b-cad8f931577e}
HKEY_LOCAL_MACHINE\software\classes\typelib\{25ab1639-3f81-45a8-8318-2dafba8b8f3d}
HKEY_LOCAL_MACHINE\software\classes\typelib\{4b76f69e-247a-4617-aba9-95774658afc5}
HKEY_LOCAL_MACHINE\software\classes\typelib\{5e19a321-635e-4ba5-8828-a5b6427cc61d}
HKEY_LOCAL_MACHINE\software\classes\typelib\{771262e0-8feb-4e78-b292-b01c4071b9d1}
HKEY_LOCAL_MACHINE\software\classes\typelib\{b82b9ecf-40ae-46f2-b98e-b87cf17f70d0}
HKEY_LOCAL_MACHINE\software\classes\typelib\{c2e2f4d7-2c20-492f-b179-d15ff876ab83}
HKEY_LOCAL_MACHINE\software\dealhelper
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{FE4BBEA8-1EFD-4B8A-BD1B-341CCDBEEAA6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\dealhelper
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\windh
HKEY_CLASSES_ROOT\clsid\{d848a3ca-0bfb-4de0-ba9e-a57f0cca1c13}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{d848a3ca-0bfb-4de0-ba9e-a57f0cca1c13}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{fe4bbea8-1efd-4b8a-bd1b-341ccdbeeaa6}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{d848a3ca-0bfb-4de0-ba9e-a57f0cca1c13}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{8ce1d4a8-93fa-4815-8d95-baf6fe38483c}

Registry Values:
HKEY_LOCAL_MACHINE\software\classes\appid\dhbrwsr.exe
HKEY_LOCAL_MACHINE\software\classes\appid\dhsvr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CLASSES_ROOT\appid\dhbrwsr.exe
HKEY_CLASSES_ROOT\appid\dhsvr.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\classes\appid\dhbrwsr.exe
HKEY_LOCAL_MACHINE\software\classes\appid\dhsvr.exe
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/dhsigned.ocx
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/dhsigned.ocx
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\timesync
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\timesync
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\timesync
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\timesync
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\timesync
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\timesync
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\timesync
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\timesync
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\timesync
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\timesync
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\timesync
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\timesync
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\timesync


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Pigeon.ACX Trojan Information
Removing Zenmaster Backdoor
Remove Calknil Trojan
Ashaden.Pinger DoS Symptoms

Cufrab Downloader

How To Remove Cufrab?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Cufrab is dangerous virus:
This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.


Cufrab It also known as:

[Kaspersky]Email-Worm.Win32.Zhelatin.gk;
[McAfee]Downloader-ASH.gen.b;
[Other]Troj/Krone-A,Trojan:Win32/Tibs.DE

Cufrab Symptoms:

Files:
[%SYSTEM%]\kr_done1
[%SYSTEM%]\kr_done1

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft
HKEY_LOCAL_MACHINE\software\microsoft
HKEY_LOCAL_MACHINE\software\microsoft
HKEY_LOCAL_MACHINE\software\microsoft
HKEY_LOCAL_MACHINE\software\microsoft
HKEY_LOCAL_MACHINE\software\microsoft
HKEY_LOCAL_MACHINE\software\microsoft
HKEY_LOCAL_MACHINE\software\microsoft
HKEY_LOCAL_MACHINE\software\microsoft


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Austr.Para.153B Trojan Removal

Surfiage Trojan

How To Remove Surfiage?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Surfiage is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.


Surfiage Symptoms:

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
snoobi.com Tracking Cookie Cleaner

Awax Trojan

How To Remove Awax?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Awax is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.


Awax It also known as:

[Kaspersky]AdWare.Win32.Virtumonde.jd;
[Other]Trojan.Awax

Awax Symptoms:

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{3106e6f3-84b4-4a08-b7b7-6efe2d7596f9}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{3106e6f3-84b4-4a08-b7b7-6efe2d7596f9}

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
BackDoor.AFF Trojan Removal instruction
Removing Pigeon.EQS Trojan
Removing NavExcel Adware