Divago.Surfairy BHO

How To Remove Remove Divago.Surfairy?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Divago.Surfairy is dangerous virus:
The BHO (Browser Helper Object) waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.

---

---

Divago.Surfairy Symptoms:

Files:
[%SYSTEM%]\surfairypp.dll
[%SYSTEM%]\surfairyhlp.dll
[%WINDOWS%]\system\surfairyhlp.dll
[%WINDOWS%]\system\surfairypp.dll
[%SYSTEM%]\surfairypp.dll
[%SYSTEM%]\surfairyhlp.dll
[%WINDOWS%]\system\surfairyhlp.dll
[%WINDOWS%]\system\surfairypp.dll

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{e0b9b5fe-b66e-4fb0-a1d9-726f0e743cfd}
HKEY_LOCAL_MACHINE\software\classes\clsid\{e0b9b5fe-b66e-4fb0-a1d9-726f0e743cfd}
HKEY_CLASSES_ROOT\clsid\{bb9aaaf3-4f8d-48b5-a565-ff3e58433dc2}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{bb9aaaf3-4f8d-48b5-a565-ff3e58433dc2}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{e0b9b5fe-b66e-4fb0-a1d9-726f0e743cfd}
HKEY_LOCAL_MACHINE\software\classes\clsid\{bb9aaaf3-4f8d-48b5-a565-ff3e58433dc2}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{bb9aaaf3-4f8d-48b5-a565-ff3e58433dc2}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{e0b9b5fe-b66e-4fb0-a1d9-726f0e743cfd}

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:

Bancos.IMY Trojan

How To Remove Remove Bancos.IMY?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Bancos.IMY is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

---

---

Bancos.IMY It also known as:

[Kaspersky]Trojan-PSW.Win32.Gametea.l

---

Bancos.IMY Symptoms:

Registry Keys:
HKEY_CURRENT_USER\symantecfiltercheck

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:

QaBar.Adult.Links.Toolband BHO

How To Remove Remove QaBar.Adult.Links.Toolband?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

QaBar.Adult.Links.Toolband is dangerous virus:
As this information is entered by the user, it is captured by the BHO (Browser Helper Object) and
sent back to the attacker.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.

---

---

QaBar.Adult.Links.Toolband Symptoms:

Files:
[%SYSTEM%]\insqcb.ins
[%SYSTEM%]\QaBar.dll
[%WINDOWS%]\downloaded program files\qabar.dll
[%WINDOWS%]\downloaded program files\qabar.inf
[%WINDOWS%]\temp\qabar.dll
[%WINDOWS%]\temp\qabar.inf
[%SYSTEM%]\insqcb.ins
[%SYSTEM%]\QaBar.dll
[%WINDOWS%]\downloaded program files\qabar.dll
[%WINDOWS%]\downloaded program files\qabar.inf
[%WINDOWS%]\temp\qabar.dll
[%WINDOWS%]\temp\qabar.inf

Registry Keys:
HKEY_LOCAL_MACHINE\software\classes\qabar\clsid
HKEY_LOCAL_MACHINE\software\classes\qabar\curver
HKEY_CLASSES_ROOT\clsid\{6d7d135e-f7c2-4a27-a87c-c0dfeb3a628f}
HKEY_CLASSES_ROOT\clsid\{d02ee3a0-1881-419f-a5ed-737223463292}
HKEY_CLASSES_ROOT\clsid\{d1320cbb-403d-483d-ae9a-688960a96977}
HKEY_LOCAL_MACHINE\software\classes\qabar.adultsearch\clsid
HKEY_LOCAL_MACHINE\software\classes\qabar.adultsearch\curver

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:

Haxdoor.cu Backdoor

How To Remove Remove Haxdoor.cu?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Haxdoor.cu is dangerous virus:
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.

---

---

Haxdoor.cu Symptoms:

Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avpx32
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\avpx32.sys
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\avpx64.sys
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\network\avpx32.sys
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\network\avpx64.sys
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\avpx32
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\avpx64

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:

Digital.Spy Backdoor

How To Remove Remove Digital.Spy?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Digital.Spy is dangerous virus:
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

---

---

Digital.Spy It also known as:

[Kaspersky]Backdoor.Digispy,HackTool.Win32.Evigen;
[McAfee]New BackDoor1;
[Panda]Hacktool Program;
[Computer Associates]Backdoor/Digispy!Server

---

Digital.Spy Symptoms:

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:

PCFlashBang Backdoor

How To Remove Remove PCFlashBang?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

PCFlashBang is dangerous virus:
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.

---

---

PCFlashBang Symptoms:

Files:
[%DESKTOP%]\PC FlashBang.lnk
[%SYSTEM%]\PCFlashBangUninstall.exe
[%DESKTOP%]\PC FlashBang.lnk
[%SYSTEM%]\PCFlashBangUninstall.exe

Folders:
[%PROGRAM_FILES%]\PCFlashBang

Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\pcflashbang

Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\pcflashbang
HKEY_CURRENT_USER\software\pcflashbang

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:

IEBarUp Adware

How To Remove Remove IEBarUp?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

IEBarUp is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

---

---

IEBarUp Symptoms:

Files:
[%SYSTEM%]\eeeeee.ini
[%SYSTEM%]\eeeeee1.ini
[%SYSTEM%]\IeBar1.dll
[%SYSTEM%]\prawned.exe
[%SYSTEM%]\prawnedhk.dll
[%SYSTEM%]\prawnedr.exe
[%SYSTEM%]\prawnedwb.dll
[%SYSTEM%]\eeeeee.ini
[%SYSTEM%]\eeeeee1.ini
[%SYSTEM%]\IeBar1.dll
[%SYSTEM%]\prawned.exe
[%SYSTEM%]\prawnedhk.dll
[%SYSTEM%]\prawnedr.exe
[%SYSTEM%]\prawnedwb.dll

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
MenaceRescue Ransomware Cleaner
CoolWeb Adware Cleaner
TrafficJam Adware Symptoms
Praize Toolbar Cleaner
CMD Backdoor Removal instruction