Tuesday, October 28, 2008

eMule Worm

How To Remove Remove eMule?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
eMule is dangerous virus:
Worms can be classified according to the propagation method they use,
i.e. how they deliver copies of themselves to new victim machines.
Worms can also be classified by installation method, launch method and finally according
to characteristics standard to all malware: polymorphism, stealth etc.

Many of the worms which managed to cause significant outbreaks use more then
one propagation method as well as more than one infection technique.
The methods are listed separately below.


eMule Symptoms:

Files:
[%WINDOWS%]\BHOBJ.dll
[%WINDOWS%]\BHOBJ.dll

Folders:
[%COMMON_PROGRAMS%]\eMule
[%PROGRAM_FILES%]\eMule

Registry Keys:
HKEY_CLASSES_ROOT\.emulecollection
HKEY_CLASSES_ROOT\bhobj.bhobj
HKEY_CLASSES_ROOT\bhobj.bhobj.1
HKEY_CLASSES_ROOT\clsid\8a406068-d45c-40b9-a096-38ac717fb608
HKEY_CLASSES_ROOT\clsid\{8a406068-d45c-40b9-a096-38ac717fb608}
HKEY_CLASSES_ROOT\emule
HKEY_CLASSES_ROOT\typelib\{930436bc-7707-4f77-9e82-771423a87c75}
HKEY_CURRENT_USER\software\emule
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\emule
HKEY_LOCAL_MACHINE\software\classes\ed2k
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{8a406068-d45c-40b9-a096-38ac717fb608}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\emule

Registry Values:
HKEY_CLASSES_ROOT\appid\bhobj.dll
HKEY_CLASSES_ROOT\interface\{0f93b148-86df-4795-bda6-920fdf9a0cc0}\typelib
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstal l\emule
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstal l\emule


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Guard Trojan Removal
Remove CWS Adware
Livuto Trojan Information
Remove HGZ Backdoor
Propo Trojan Information

No comments: