Sunday, January 25, 2009

IntermixMedia.PowerSearch BHO

How To Remove IntermixMedia.PowerSearch?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
IntermixMedia.PowerSearch is dangerous virus:
BHO (Browser Helper Object) Trojan.
The BHO waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
The method of network transport used by the attacker makes this Trojan unique.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.
Instead, this Trojan encodes the data with a simple XOR algorithm before placing it into
the data section of an ICMP ping packet." explained the company.
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.

IntermixMedia.PowerSearch Symptoms:

Files:
[%PROGRAM_FILES%]\powers~1\toolbar\pwrs0102.dll
[%SYSTEM%]\flgobar.dll
[%SYSTEM%]\infobar.dll
[%SYSTEM%]\pwrs0102.dll
[%SYSTEM%]\pwrs0104.dll
[%SYSTEM%]\pwrs0108.dll
[%SYSTEM%]\pwrs0rbi.dll
[%SYSTEM%]\pwrsaimf.dll
[%SYSTEM%]\pwrsbikd.dll
[%SYSTEM%]\pwrsc032.dll
[%SYSTEM%]\pwrscuz3.dll
[%SYSTEM%]\pwrscznc.dll
[%SYSTEM%]\pwrsqsim.dll
[%SYSTEM%]\pwrswmda.dll
[%SYSTEM%]\searchbr.dll
[%WINDOWS%]\system\flgobar.dll
[%WINDOWS%]\system\infobar.dll
[%WINDOWS%]\system\pwrs0102.dll
[%WINDOWS%]\system\pwrs0104.dll
[%WINDOWS%]\system\pwrs0108.dll
[%WINDOWS%]\system\pwrs0rbi.dll
[%WINDOWS%]\system\pwrsaimf.dll
[%WINDOWS%]\system\pwrsbikd.dll
[%WINDOWS%]\system\pwrsc032.dll
[%WINDOWS%]\system\pwrscuz3.dll
[%WINDOWS%]\system\pwrscznc.dll
[%WINDOWS%]\system\pwrsqsim.dll
[%WINDOWS%]\system\pwrswmda.dll
[%WINDOWS%]\system\searchbr.dll
[%PROGRAM_FILES%]\powers~1\toolbar\pwrs0102.dll
[%SYSTEM%]\flgobar.dll
[%SYSTEM%]\infobar.dll
[%SYSTEM%]\pwrs0102.dll
[%SYSTEM%]\pwrs0104.dll
[%SYSTEM%]\pwrs0108.dll
[%SYSTEM%]\pwrs0rbi.dll
[%SYSTEM%]\pwrsaimf.dll
[%SYSTEM%]\pwrsbikd.dll
[%SYSTEM%]\pwrsc032.dll
[%SYSTEM%]\pwrscuz3.dll
[%SYSTEM%]\pwrscznc.dll
[%SYSTEM%]\pwrsqsim.dll
[%SYSTEM%]\pwrswmda.dll
[%SYSTEM%]\searchbr.dll
[%WINDOWS%]\system\flgobar.dll
[%WINDOWS%]\system\infobar.dll
[%WINDOWS%]\system\pwrs0102.dll
[%WINDOWS%]\system\pwrs0104.dll
[%WINDOWS%]\system\pwrs0108.dll
[%WINDOWS%]\system\pwrs0rbi.dll
[%WINDOWS%]\system\pwrsaimf.dll
[%WINDOWS%]\system\pwrsbikd.dll
[%WINDOWS%]\system\pwrsc032.dll
[%WINDOWS%]\system\pwrscuz3.dll
[%WINDOWS%]\system\pwrscznc.dll
[%WINDOWS%]\system\pwrsqsim.dll
[%WINDOWS%]\system\pwrswmda.dll
[%WINDOWS%]\system\searchbr.dll

Folders:
[%PROGRAM_FILES%]\powersearch
[%PROGRAM_FILES%]\powersoft\toolbar

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{bbbe1c1a-89f7-4af6-abd1-f8fbcfa47408}
HKEY_CLASSES_ROOT\accent-graphics.powersearch.2.0
HKEY_CLASSES_ROOT\clsid\{47801270-3ce6-434f-8e71-75b7e0cd64b2}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-a08d-8f6fa787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-a08e-8e1ca787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-a1e4-ea6fa787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-a68e-8e1ca787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-aa8e-8e1ca787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-c0fc-f378a787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-c0fc-f76fa694bf2e}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-c0ff-fd63b29bb37d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-c0ff-fd63b399bc7d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-d1f0-e56fa787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-d3fa-f27ba787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-d4f3-f66da787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-d6f5-f66ea787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-dbfc-ed1ca787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-dff7-ec7da787ad2d}
HKEY_CLASSES_ROOT\clsid\{5154cbed-e3ea-4bf6-90c9-32776282076b}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-c0fc-f76fa694bf2e}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-d6f5-f66ea787ad2d}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-dff7-ec7da787ad2d}
HKEY_CLASSES_ROOT\toolband.xbtb03439
HKEY_CLASSES_ROOT\toolband.xbtb03439.1
HKEY_CLASSES_ROOT\typelib\{d737944e-4270-4774-b3ce-062fa7369a23}
HKEY_CLASSES_ROOT\xbtb03439.ietoolbar
HKEY_CLASSES_ROOT\xbtb03439.ietoolbar.1
HKEY_CLASSES_ROOT\xbtb03439.xbtb03439.1
HKEY_CURRENT_USER\software\xbtb03439\toolbar
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-a08d-8f6fa787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-a08e-8e1ca787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-a1e4-ea6fa787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-a68e-8e1ca787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-aa8e-8e1ca787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-c0fc-f378a787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-c0fc-f76fa694bf2e}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-c0ff-fd63b29bb37d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-d1f0-e56fa787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-d3fa-f27ba787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-d4f3-f66da787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-d6f5-f66ea787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-dbfc-ed1ca787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-dff7-ec7da787ad2d}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5629aaa8-dad0-493d-b8a7-fe3e0b06be37}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-c0fc-f76fa694bf2e}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-dff7-ec7da787ad2d}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]\downloaded program files\powersearch_toolbar.dll

Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/about.html
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/basis.xml
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/error.html
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/logo.bmp
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/nav.bmp
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/options.html
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/toolbar.crc
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\[%WINDOWS%]/downloaded program files/version.txt


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Real.Spy.Common.Components Spyware Removal instruction
Removing Simon Trojan
Backdoor.Netbus Trojan Cleaner
W112.hitbox.Tracking.Cookie Tracking Cookie Removal instruction
Cabronator.12b Backdoor Removal

2020Search Adware

How To Remove 2020Search?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
2020Search is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits
BHO (Browser Helper Object) Trojan.
The BHO waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
The method of network transport used by the attacker makes this Trojan unique.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.
Instead, this Trojan encodes the data with a simple XOR algorithm before placing it into
the data section of an ICMP ping packet." explained the company.
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.

2020Search It also known as:

[Panda]Adware/ToolbarCC

2020Search Symptoms:

Files:
[%WINDOWS%]\2020search2.dll
[%WINDOWS%]\mssvr.exe
[%SYSTEM%]\2020search.dll
[%SYSTEM%]\2020search2.dll
[%WINDOWS%]\2020install.exe
[%WINDOWS%]\downloaded program files\2020search.dll
[%WINDOWS%]\downloaded program files\2020search.inf
[%WINDOWS%]\system\2020search.dll
[%WINDOWS%]\system\2020search2.dll
[%WINDOWS%]\2020search2.dll
[%WINDOWS%]\mssvr.exe
[%SYSTEM%]\2020search.dll
[%SYSTEM%]\2020search2.dll
[%WINDOWS%]\2020install.exe
[%WINDOWS%]\downloaded program files\2020search.dll
[%WINDOWS%]\downloaded program files\2020search.inf
[%WINDOWS%]\system\2020search.dll
[%WINDOWS%]\system\2020search2.dll

Registry Keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-92C6-CE7EB590A94D}
HKEY_CLASSES_ROOT\clsid\{4e1075f4-eec4-4a86-add7-cd5f52858c31}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-92c6-ce7eb590a94d}
HKEY_CLASSES_ROOT\clsid\{fc2493d6-a673-49fe-a2ee-efe03e95c27c}
HKEY_CLASSES_ROOT\gorsdn.contextitem
HKEY_CLASSES_ROOT\gorsdn.contextitem.1
HKEY_CLASSES_ROOT\interface\{eaf2ccee-21a1-4203-9f36-4929fd104d43}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-92c6-ce7eb590a94d}
HKEY_CLASSES_ROOT\typelib\{48da6120-a779-4c12-8584-47b625efb469}
HKEY_CURRENT_USER\software\microsoft\internet explorer\menuext\&rsdn search
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-92c6-ce7eb590a94d}

Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Removing CWS.IEFeads Hijacker

Lookup.Absnro Hijacker

How To Remove Lookup.Absnro?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Lookup.Absnro is dangerous virus:
A Search hijacker redirects search results to other pages and may
transmit search and browsing data to unknown servers. An error page hijacker directs
the browser to another page, usually an advertising page, instead of the usual error
page when the requested URL is not found.


Lookup.Absnro Symptoms:

Files:
[%SYSTEM%]\absnro.dll
[%WINDOWS%]\system\absnro.dll
[%SYSTEM%]\absnro.dll
[%WINDOWS%]\system\absnro.dll


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Removing Pigeon.AJN Trojan

SpywareSecure Ransomware

How To Remove SpywareSecure?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
SpywareSecure is dangerous virus:
The term ransomware is commonly used to describe such software,
although the field known as cryptovirology predates the term "ransomware".

This type of ransom attack can be accomplished by (for example) attaching
a specially crafted file/program to an e-mail message and sending this to the victim.


SpywareSecure Symptoms:

Files:
[%DESKTOP%]\Spyware-Secure.lnk
[%WINDOWS%]\pack.epk
[%DESKTOP%]\Spyware-Secure.lnk
[%WINDOWS%]\pack.epk

Folders:
[%PROGRAMS%]\Spyware-Secure
[%PROGRAM_FILES%]\Spyware-Secure

Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\spyware-secure
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spyware-secure

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\spyware-secure
HKEY_LOCAL_MACHINE\software\spyware-secure
HKEY_LOCAL_MACHINE\software\spyware-secure
HKEY_LOCAL_MACHINE\software\spyware-secure
HKEY_LOCAL_MACHINE\software\spyware-secure
HKEY_LOCAL_MACHINE\software\spyware-secure


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Removing Backdoor.Tetris Trojan
Pap Trojan Removal instruction
Removing Razor.Wintrinoo DoS

BAT.SMF Trojan

How To Remove BAT.SMF?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
BAT.SMF is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.


BAT.SMF It also known as:

[Kaspersky]BAT.MF.b,BAT.SMF.b,BAT.SMF.d;
[Eset]BAT/102 virus,BAT/SMF.120.A virus,BAT/SMF.121.A virus,BAT/SMF.137.A virus,BAT/SMF.155.A virus,BAT/SMF.166.A virus;
[Panda]BAT/BAT91.A,Univ.EP,BAT/SMF.137,BAT/SMF.155,BAT/SMF.166;
[Computer Associates]Bat/SMF.102,Bat/SMF.120,Bat/SMF.137,Bat/SMF.155

BAT.SMF Symptoms:

Files:
[%PROGRAM_FILES%]\support software\ss2.dll
[%PROGRAM_FILES%]\support software\ss2.dll


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Remove PS.MPC.Family Trojan
Adware.DesktopMedia Hijacker Information
Remove Pigeon.AOR Trojan
SillyDl.CSB Trojan Removal instruction
Removing Frethog.ADQ Trojan

IEHlpr Adware

How To Remove IEHlpr?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
IEHlpr is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits


IEHlpr It also known as:

[Kaspersky]AdWare.win32.IEHlpr.g,AdWare.win32.IEHlpr.I,AdWare.Win32.AdHelper.bv,AdWare.Win32.IEHlpr.w;
[McAfee]Generic Downloader.g;
[Other]Adware.IEhlpr,Adware.IEHlpr

IEHlpr Symptoms:

Files:
[%PROGRAM_FILES%]\Internet Explorer\Connection Wizard\iccon.dll
[%PROGRAM_FILES%]\Internet Explorer\Connection Wizard\Q902220.cat
[%PROGRAM_FILES%]\Internet Explorer\Connection Wizard\Q902222.cat
[%PROGRAM_FILES%]\internet explorer\hmapi.dll
[%PROGRAM_FILES%]\internet explorer\licenses.txt
[%PROGRAM_FILES%]\internet explorer\supports.txt
[%PROGRAM_FILES%]\Internet Explorer\Connection Wizard\iccon.dll
[%PROGRAM_FILES%]\Internet Explorer\Connection Wizard\Q902220.cat
[%PROGRAM_FILES%]\Internet Explorer\Connection Wizard\Q902222.cat
[%PROGRAM_FILES%]\internet explorer\hmapi.dll
[%PROGRAM_FILES%]\internet explorer\licenses.txt
[%PROGRAM_FILES%]\internet explorer\supports.txt

Registry Keys:
HKEY_CLASSES_ROOT\iehlprobj.iehlprobj
HKEY_CLASSES_ROOT\iehlprobj.iehlprobj.1
HKEY_CLASSES_ROOT\clsid\{02c9b9ab-6372-46c5-b356-773faf3b6b1e}
HKEY_CLASSES_ROOT\clsid\{ee7c3cf0-4b15-11d1-abed-709549c10000}
HKEY_CLASSES_ROOT\clsid\{ee7c3cf0-4b15-11d1-abed-709549c10001}
HKEY_CLASSES_ROOT\iehelper.winhelper
HKEY_CLASSES_ROOT\iehelper.winhelper.1
HKEY_CLASSES_ROOT\interface\{ee7c3cef-4b15-11d1-abed-709549c10000}
HKEY_CLASSES_ROOT\interface\{ee7c3cef-4b15-11d1-abed-709549c10001}
HKEY_CLASSES_ROOT\typelib\{ee7c3ce2-4b15-11d1-abed-709549c10000}
HKEY_CLASSES_ROOT\typelib\{ee7c3ce2-4b15-11d1-abed-709549c10001}\1.0
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\ext\stats\{ee7c3cf0-4b15-11d1-abed-709549c10000}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{ee7c3cf0-4b15-11d1-abed-709549c10000}


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Mesfed Trojan Removal instruction
HaczYK Adware Symptoms
Reboot Trojan Removal

Dratawl Trojan

How To Remove Dratawl?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Dratawl is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits


Dratawl Symptoms:

Files:
[%SYSTEM%]\AlxTool.dll
[%SYSTEM%]\Com\atlgui.tlb
[%SYSTEM%]\AlxTool.dll
[%SYSTEM%]\Com\atlgui.tlb

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{6cf4d74b-e6bd-4c8f-83d7-90d6439705b9}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6cf4d74b-e6bd-4c8f-83d7-90d6439705b9}


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
hitvirus Ransomware Information
Cotmonger Trojan Information
Remove Kastem Trojan
Bat.P69 Trojan Cleaner
Coreflood.Tracker.Serve Trojan Information