Agent.AIA Trojan

How To Remove Agent.AIA?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Agent.AIA is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

---

---

Agent.AIA Symptoms:

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Remove Skyfire.Spy Trojan
Removing TDPop Adware
Removing FastKill Trojan
Removing optimost.com Tracking Cookie
Pigeon.BBD Trojan Symptoms

MB.ShellSpy Spyware

How To Remove MB.ShellSpy?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

MB.ShellSpy is dangerous virus:
Spyware is computer software that is installed surreptitiously on a personal computer
to intercept or take partial control over the user's interaction
with the computer, without the user's informed consent.

While the term spyware suggests software that secretly monitors the user's behavior,
the functions of spyware extend well beyond simple monitoring.

Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

---

---

MB.ShellSpy Symptoms:

Files:
[%SYSTEM%]\MBShSpy.ocx
[%SYSTEM%]\MBShSpy.ocx

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Removing Kapart Trojan
Pigeon.AXH Trojan Removal instruction
Remove thegeoguide.com Tracking Cookie

Tedon Trojan

How To Remove Tedon?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Tedon is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

---

---

Tedon It also known as:

[Other]Win32/Tedon,Win32/Tedon.A

---

Tedon Symptoms:

Files:
[%PROGRAM_FILES%]\Windows NT\LSASS.EXE
[%PROGRAM_FILES%]\Windows NT\SVCHOST.EXE
[%PROGRAM_FILES%]\Windows NT\LSASS.EXE
[%PROGRAM_FILES%]\Windows NT\SVCHOST.EXE

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Remove KPass DoS

Bancos.INN Trojan

How To Remove Bancos.INN?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Bancos.INN is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

---

---

Bancos.INN It also known as:

[Kaspersky]Trojan-Downloader.Win32.Banload.eta;
[McAfee]PWS-Banker

---

Bancos.INN Symptoms:

Files:
[%WINDOWS%]\svc\downcompleto.txt
[%WINDOWS%]\svc\eraumavez.bat
[%WINDOWS%]\svc\downcompleto.txt
[%WINDOWS%]\svc\eraumavez.bat

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Small.ab Trojan Removal
Youth Trojan Symptoms
Tiffy Trojan Removal instruction
Bancos.CVD Trojan Removal

SearchCentrix Trojan

How To Remove SearchCentrix?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

SearchCentrix is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
BHO (Browser Helper Object) Trojan.
The BHO waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
The method of network transport used by the attacker makes this Trojan unique.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.
Instead, this Trojan encodes the data with a simple XOR algorithm before placing it into
the data section of an ICMP ping packet." explained the company.
A desktop hijacker replaces the desktop wallpaper with advertising
for products and services on the desktop.
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.
It replaces your start page, continuosly open a number of pop up windows and so on.

---

---

SearchCentrix It also known as:

[Kaspersky]Trojan.Win32.Revop.c,Trojan-Downloader.Win32.Stubby.d;
[Eset]Win32/Revop.C trojan;
[Panda]Spyware/Searchcentrix,Trj/Revop.F;
[Computer Associates]Win32.BettInet.D,Win32.SillyDl.DB,Win32/SillyDL.DB!Trojan

---

SearchCentrix Symptoms:

Files:
[%PROFILE_TEMP%]\satmat.inf
[%SYSTEM%]\ifhelper.dll
[%WINDOWS%]\satmat.exe
[%SYSTEM%]\
[%SYSTEM%]\spoolsvv.exe
[%PROGRAM_FILES%]\ieshnv.ini
[%SYSTEM%]\gssomatic.dll
[%SYSTEM%]\ifsomatic.dll
[%SYSTEM%]\pqhelper.dll
[%SYSTEM%]\s4helper.dll
[%SYSTEM%]\seantb.dll
[%WINDOWS%]\system\barbho.dll
[%WINDOWS%]\system\ifsomatic.dll
[%WINDOWS%]\system\wzhelper.dll
[%PROFILE_TEMP%]\satmat.inf
[%SYSTEM%]\ifhelper.dll
[%WINDOWS%]\satmat.exe
[%SYSTEM%]\
[%SYSTEM%]\spoolsvv.exe
[%PROGRAM_FILES%]\ieshnv.ini
[%SYSTEM%]\gssomatic.dll
[%SYSTEM%]\ifsomatic.dll
[%SYSTEM%]\pqhelper.dll
[%SYSTEM%]\s4helper.dll
[%SYSTEM%]\seantb.dll
[%WINDOWS%]\system\barbho.dll
[%WINDOWS%]\system\ifsomatic.dll
[%WINDOWS%]\system\wzhelper.dll

Folders:
[%PROGRAM_FILES%]\dynamic toolbar\wzhelper\cache

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{3646c2bd-3554-49ca-8125-44deefb881de}
HKEY_CLASSES_ROOT\clsid\{3f4d4f88-0198-4921-b630-957f3eb814e0}
HKEY_LOCAL_MACHINE\software\classes\clsid\{3646c2bd-3554-49ca-8125-44deefb881de}
HKEY_LOCAL_MACHINE\software\classes\clsid\{3f4d4f88-0198-4921-b630-957f3eb814e0}
HKEY_CLASSES_ROOT\barbho.class1
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-96f7-eb6db99aa92e}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-98f7-eb6db99aa93b}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-c0fb-ef60b19da02a}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-c0fb-ef60b19dab2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-c0fb-ef60b19dbc34}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-c0fb-ef60b19dce2e}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-d0ea-f16db186fa7d}
HKEY_CLASSES_ROOT\clsid\{c258eaa1-f9fe-491e-b8ff-ce9af7a7aff5}
HKEY_CLASSES_ROOT\clsid\{c431bf1e-9e71-4bb6-9c4e-8496d158db1f}
HKEY_CLASSES_ROOT\clsid\{cd2a865b-6c0f-44f9-baa1-7cdb31e04bc8}
HKEY_CLASSES_ROOT\interface\{7bd45240-7166-4768-a845-8ce375c5e096}
HKEY_CLASSES_ROOT\interface\{831975b3-13a0-4da4-aa6f-6c427175c30e}
HKEY_CLASSES_ROOT\interface\{9f9d3d1f-e697-4a86-90c7-58cecf6a2634}
HKEY_CLASSES_ROOT\interface\{c}
HKEY_CLASSES_ROOT\mygeek.com
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-98f7-eb6db99aa93b}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-c0fb-ef60b19da02a}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-c0fb-ef60b19dbc34}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{cd2a865b-6c0f-44f9-baa1-7cdb31e04bc8}
HKEY_CLASSES_ROOT\typelib\{47d616a1-b588-45d1-ad71-33ac15fb6940}
HKEY_CLASSES_ROOT\typelib\{48977f6e-4120-4f88-8c4b-a6399bd0dd08}
HKEY_CLASSES_ROOT\typelib\{d1020ad1-3754-4c54-bf4d-ea01652ec4be}
HKEY_CURRENT_USER\software\microsoft\internet explorer\explorer bars\{c431bf1e-9e71-4bb6-9c4e-8496d158db1f}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-96f7-eb6db99aa92e}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-98f7-eb6db99aa93b}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-c0fb-ef60b19dab2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-c0fb-ef60b19dbc34}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-c0fb-ef60b19dce2e}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-d0ea-f16db186fa7d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{c258eaa1-f9fe-491e-b8ff-ce9af7a7aff5}
HKEY_LOCAL_MACHINE\software\classes\gssomatic.gssomatic
HKEY_LOCAL_MACHINE\software\classes\interface\{831975b3-13a0-4da4-aa6f-6c427175c30e}
HKEY_LOCAL_MACHINE\software\classes\pqhelper.pqhelper
HKEY_LOCAL_MACHINE\software\classes\s4helper.s4helper
HKEY_LOCAL_MACHINE\software\classes\seantb.seantb
HKEY_LOCAL_MACHINE\software\classes\somatic.somatic
HKEY_LOCAL_MACHINE\software\classes\spoolsvv.class1
HKEY_LOCAL_MACHINE\software\classes\typelib\{d1020ad1-3754-4c54-bf4d-ea01652ec4be}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-98f7-eb6db99aa93b}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-c0fb-ef60b19da02a}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-c0fb-ef60b19dbc34}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{cd2a865b-6c0f-44f9-baa1-7cdb31e04bc8}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\expand search_is1

Registry Values:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\software\dynamic toolbar\gssomatic
HKEY_CURRENT_USER\software\dynamic toolbar\pqhelper\reports\38209
HKEY_CURRENT_USER\software\dynamic toolbar\pqhelper\reports\38209
HKEY_CURRENT_USER\software\dynamic toolbar\wzhelper
HKEY_CURRENT_USER\software\dynamic toolbar\wzhelper
HKEY_CURRENT_USER\software\dynamic toolbar\wzhelper\reports\38209
HKEY_CURRENT_USER\software\dynamic toolbar\wzhelper\reports\38209
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\streams\145
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\vb and vba program settings\mygeek\engines
HKEY_CURRENT_USER\software\vb and vba program settings\mygeek\engines
HKEY_CURRENT_USER\software\vb and vba program settings\mygeek\engines
HKEY_CURRENT_USER\software\vb and vba program settings\mygeek\engines
HKEY_CURRENT_USER\software\vb and vba program settings\mygeek\engines
HKEY_CURRENT_USER\software\vb and vba program settings\mygeek\engines
HKEY_CURRENT_USER\software\vb and vba program settings\mygeek\engines
HKEY_CURRENT_USER\software\vb and vba program settings\mygeek\engines
HKEY_CURRENT_USER\software\vb and vba program settings\mygeek\engines
HKEY_CURRENT_USER\software\vb and vba program settings\mygeek\settings
HKEY_CURRENT_USER\software\vb and vba program settings\mygeek\settings
HKEY_CURRENT_USER\software\vb and vba program settings\mygeek\settings
HKEY_CURRENT_USER\software\vb and vba program settings\mygeek\settings
HKEY_CURRENT_USER\software\vb and vba program settings\s_girl\thread
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\shnv
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\st6unst #2
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\st6unst #3

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
No.Hope Trojan Removal instruction
Corzor Downloader Symptoms
Attackthread Hostile Code Symptoms
Chinese_Keywords Adware Removal instruction

Joiner Trojan

How To Remove Joiner?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Joiner is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.

---

---

Joiner It also known as:

[Kaspersky]TrojanDropper.Win32.FC.a;
[F-Prot]security risk or a "backdoor" program;
[Panda]Trojan Horse.LC,Trj/Joiner.P;
[Computer Associates]Win32.Joiner.AA,Win32/MultiDropper.AF-0!Dropper,Win32.Joiner.Z,Win32/Joiner.Z!Joiner,Win32.Joiner.P,Win32/Joiner.P!Trojan,Win32.Joiner.R,Win32/Joiner.R!Dropper

---

Joiner Symptoms:

Files:
[%SYSTEM%]\Shex.exe
[%SYSTEM%]\Shex.exe

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Removing OpenSite Adware
Removing Mexhetm Downloader
Remove Covert.Sys.Exec Trojan
PECarlin Adware Information
Naras Trojan Removal instruction

H04x3r.Telnet.Server Trojan

How To Remove H04x3r.Telnet.Server?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

H04x3r.Telnet.Server is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

---

---

H04x3r.Telnet.Server Symptoms:

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Remove WatchPorn Trojan