Friday, December 5, 2008

FormatA Trojan

How To Remove FormatA?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
FormatA is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.


FormatA It also known as:

[Kaspersky]/See The World!.bat infected: Trojan.BAT.FormatA.d,Trojan.BAT.FormatA.d;
[McAfee]FormatA;
[Panda]Trj/FormatA;
[Computer Associates]FormatA,Formatter

FormatA Symptoms:

Files:
[%PROGRAM_FILES%]\accele~1\anti-v~1\email_update.exe
[%PROGRAM_FILES%]\accele~1\anti-v~1\email_update.exe

Folders:
[%PROGRAM_FILES%]\musicmagnet


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Vxidl.BCZ Trojan Symptoms

Win32.VB.apq Trojan

How To Remove Win32.VB.apq?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Win32.VB.apq is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.
As this information is entered by the user, it is captured by the BHO (Browser Helper Object) and
sent back to the attacker.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.

Win32.VB.apq Symptoms:

Files:
[%SYSTEM%]\msnhlp32.dll
[%SYSTEM%]\msnhlp32.dll

Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{EEFBE5D6-FEFF-4CB4-AA26-6A464090CB89}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEFBE5D6-FEFF-4CB4-AA26-6A464090CB89}


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
BookedSpace Adware Symptoms
SillyDl.DBH Trojan Cleaner
Bancos.IDV Trojan Removal
DedRunner Trojan Removal

Ashlt Spyware

How To Remove Ashlt?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Ashlt is dangerous virus:
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.


Ashlt Symptoms:

Files:
[%WINDOWS%]\Ashlt.exe
[%WINDOWS%]\Ashlt.exe

Registry Keys:
HKEY_LOCAL_MACHINE\software\ashlt

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
UltraVNC RAT Cleaner
Unknown Trojan Symptoms

AQP Trojan

How To Remove AQP?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
AQP is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.


AQP Symptoms:

Files:
[%PROGRAM_FILES%]\Microsoft\svhost32.exe
[%PROGRAM_FILES%]\Microsoft\svhost32.exe

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Stats Trojan Information

DuduAccelerator Adware

How To Remove DuduAccelerator?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
DuduAccelerator is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.



DuduAccelerator It also known as:

[Kaspersky]Trojan-Dropper.Win32.Agent.xz;
[McAfee]Downloader-AW

DuduAccelerator Symptoms:

Files:
[%WINDOWS%]\Downloaded Installations\{23710A32-F648-42F4-8E67-29F800D6A4A1}\1033.MST
[%WINDOWS%]\Downloaded Installations\{23710A32-F648-42F4-8E67-29F800D6A4A1}\DuDu Speed.msi
[%COMMON_DESKTOPDIRECTORY%]\DuDu Speed.lnk
[%COMMON_STARTUP%]\DuDu Speed.lnk
[%DESKTOP%]\remotesetup.exe
[%PROFILE%]\Recent\dddspocx.lnk
[%PROFILE_TEMP%]\dddsetup.exe
[%WINDOWS%]\Downloaded Installations\{23710A32-F648-42F4-8E67-29F800D6A4A1}\1033.MST
[%WINDOWS%]\Downloaded Installations\{23710A32-F648-42F4-8E67-29F800D6A4A1}\DuDu Speed.msi
[%COMMON_DESKTOPDIRECTORY%]\DuDu Speed.lnk
[%COMMON_STARTUP%]\DuDu Speed.lnk
[%DESKTOP%]\remotesetup.exe
[%PROFILE%]\Recent\dddspocx.lnk
[%PROFILE_TEMP%]\dddsetup.exe

Folders:
[%APPDATA%]\DuDu
[%COMMON_PROGRAMS%]\DuDu Speed
[%PROGRAM_FILES%]\DuDu

Registry Keys:
HKEY_CLASSES_ROOT\.dd!\ddd.dd!
HKEY_CLASSES_ROOT\ddd.dd!
HKEY_CLASSES_ROOT\mime\database\content type\application\x-ddd
HKEY_LOCAL_MACHINE\software\dudu
HKEY_CLASSES_ROOT\clsid\{00018593-c6bd-46f7-9349-dba1aa674c90}
HKEY_CLASSES_ROOT\clsid\{6bde1669-b490-48e3-b668-456314f2d6c3}
HKEY_CLASSES_ROOT\clsid\{915e63f4-4733-401e-8556-6559b30a4c5a}
HKEY_CLASSES_ROOT\clsid\{93f643d6-4cc8-4aa7-990f-f82c13e24373}
HKEY_CLASSES_ROOT\clsid\{c572fb5d-9c65-47fd-899a-1166c90b8136}
HKEY_CLASSES_ROOT\clsid\{ffd95f65-f5e4-4ab8-b7f9-f61f13878a04}
HKEY_CLASSES_ROOT\dddiemon.customdl
HKEY_CLASSES_ROOT\dddiemon.customdl.1
HKEY_CLASSES_ROOT\dddiemon.customdownloadmgr
HKEY_CLASSES_ROOT\dddiemon.customdownloadmgr.1
HKEY_CLASSES_ROOT\dddiemon.dddmon
HKEY_CLASSES_ROOT\dddiemon.dddmon.1
HKEY_CLASSES_ROOT\dddiemon.dddmont
HKEY_CLASSES_ROOT\dddiemon.dddmont.1
HKEY_CLASSES_ROOT\dddmext.dlmgr
HKEY_CLASSES_ROOT\dddmext.dlmgr.1
HKEY_CLASSES_ROOT\installer\features\3084c4b986a154d49bccd7f9b97fba7e
HKEY_CLASSES_ROOT\installer\products\3084c4b986a154d49bccd7f9b97fba7e
HKEY_CLASSES_ROOT\interface\{1bbfa226-6a38-4b6b-80c2-35b829773c2e}
HKEY_CLASSES_ROOT\interface\{2f3482f8-819f-49bc-a272-c91fe2605f45}
HKEY_CLASSES_ROOT\interface\{7b242faa-d828-4492-8223-b543f17df940}
HKEY_CLASSES_ROOT\interface\{8cd1fee0-45ca-4bb0-a9d7-a353c7823226}
HKEY_CLASSES_ROOT\interface\{a678febf-7787-448e-955b-7be5a29f1002}
HKEY_CLASSES_ROOT\typelib\{2e59452c-8826-43a2-b28a-927bff705bf9}
HKEY_CLASSES_ROOT\typelib\{49bd048a-3eba-4234-a408-df92ad121fd8}
HKEY_CLASSES_ROOT\typelib\{e984b17c-7fae-4e2b-8d80-e1c9ea96b0cb}
HKEY_CURRENT_USER\software\microsoft\internet explorer\menuext\&detect video by dudu
HKEY_CURRENT_USER\software\microsoft\internet explorer\menuext\&download all by dudu
HKEY_CURRENT_USER\software\microsoft\internet explorer\menuext\&download by dudu
HKEY_CURRENT_USER\software\microsoft\internet explorer\menuext\&download selection by dudu
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{00018593-c6bd-46f7-9349-dba1aa674c90}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{9b4c4803-1a68-4d45-b9cc-7d9f9bf7abe7}

Registry Values:
HKEY_CLASSES_ROOT\installer\upgradecodes\1b6e6a7925ff6484380f73cc3a32b617
HKEY_CURRENT_USER\software\microsoft\internet explorer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\folders
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\folders
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\folders
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\upgradecodes\1b6e6a7925ff6484380f73cc3a32b617


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Deepdo Toolbar Symptoms
Hupion Trojan Cleaner
Win32.Hotmail.C!Flooder!Trojan DoS Removal instruction

Ren.Bat Trojan

How To Remove Ren.Bat?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
Ren.Bat is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.


Ren.Bat Symptoms:

Files:
[%DESKTOP%]\grl realhidden.lnk
[%DESKTOP%]\grl realhidden.lnk

Folders:
[%PROGRAMS%]\grl realhidden
[%PROGRAM_FILES%]\grl realhidden


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Meplex Adware Removal
Harnig Trojan Removal instruction

CyberPaky Trojan

How To Remove CyberPaky?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
CyberPaky is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.



CyberPaky It also known as:

[Kaspersky]Backdoor.CyberPaky.18;
[Eset]Win32/CyberPaky.18.A trojan;
[McAfee]BackDoor-ZU;
[F-Prot]security risk or a "backdoor" program;
[Panda]Backdoor Program.LC

CyberPaky Symptoms:

Files:
[%STARTUP%]\serv4.exe
[%WINDOWS%]\system\cyberpaky.exe
[%STARTUP%]\serv4.exe
[%WINDOWS%]\system\cyberpaky.exe


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Adware.BlogCn Adware Cleaner