Free.Keylogger Spyware

How To Remove Free.Keylogger?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Free.Keylogger is dangerous virus:
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

---

---

Free.Keylogger Symptoms:

Files:
[%SYSTEM%]\asrupdate.exe
[%SYSTEM%]\cachechk.exe
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\Free Keylogger.lnk
[%SYSTEM%]\sfklg.dat
[%SYSTEM%]\sfklg.dll
[%SYSTEM%]\sfklgcp.exe
[%SYSTEM%]\asrupdate.exe
[%SYSTEM%]\cachechk.exe
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\Free Keylogger.lnk
[%SYSTEM%]\sfklg.dat
[%SYSTEM%]\sfklg.dll
[%SYSTEM%]\sfklgcp.exe

Folders:
[%PROGRAMS%]\free keylogger

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Removing ExecuteChanger Trojan
Removing Pigeon.EPG Trojan
Pigeon.AYU Trojan Symptoms

SillyDl.AUZ Trojan

How To Remove SillyDl.AUZ?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

SillyDl.AUZ is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

---

---

SillyDl.AUZ Symptoms:

Files:
[%SYSTEM%]\3dViewerb.dll
[%SYSTEM%]\acctresv.dll
[%SYSTEM%]\adsldpcs.dll
[%SYSTEM%]\adsndsb.dll
[%SYSTEM%]\advpacka.dll
[%SYSTEM%]\advpackaa.dll
[%SYSTEM%]\advpackaas.dll
[%SYSTEM%]\alrsvcb.dll
[%SYSTEM%]\amstreamb.dll
[%SYSTEM%]\apcupsa.dll
[%SYSTEM%]\apphelpa.dll
[%SYSTEM%]\apphelpas.dll
[%SYSTEM%]\appmgrb.dll
[%SYSTEM%]\asycfiltb.dll
[%SYSTEM%]\atl71b.dll
[%SYSTEM%]\atl71v.dll
[%SYSTEM%]\audiodevb.dll
[%SYSTEM%]\AuthFWSnapinv.dll
[%SYSTEM%]\avicapb.dll
[%SYSTEM%]\avicapba.dll
[%SYSTEM%]\axaltocmv.dll
[%SYSTEM%]\axaltocmvb.dll
[%SYSTEM%]\azroleuia.dll
[%SYSTEM%]\azroleuiv.dll
[%SYSTEM%]\AzSqlExtv.dll
[%SYSTEM%]\bcrypta.dll
[%SYSTEM%]\bitsprx2v.dll
[%SYSTEM%]\bitsprx3s.dll
[%SYSTEM%]\blackboxs.dll
[%SYSTEM%]\bootvids.dll
[%SYSTEM%]\bootvidsa.dll
[%SYSTEM%]\browselca.dll
[%SYSTEM%]\browseui(5)b.dll
[%SYSTEM%]\browseuia.dll
[%SYSTEM%]\browseuis.dll
[%SYSTEM%]\browsewmb.dll
[%SYSTEM%]\browsewmv.dll
[%SYSTEM%]\browsewmvv.dll
[%SYSTEM%]\browsewmvva.dll
[%SYSTEM%]\browsewmvvv.dll
[%SYSTEM%]\bthcia.dll
[%SYSTEM%]\cabinetv.dll
[%SYSTEM%]\cabviews.dll
[%SYSTEM%]\catsrvs.dll
[%SYSTEM%]\cdmodemv.dll
[%SYSTEM%]\certcliv.dll
[%SYSTEM%]\CertEnrollUIa.dll
[%SYSTEM%]\cfgbkenda.dll
[%SYSTEM%]\cfgmgr32b.dll
[%SYSTEM%]\chsbrkrb.dll
[%SYSTEM%]\clbcatexb.dll
[%SYSTEM%]\cliconfga.dll
[%WINDOWS%]\4_cha.exe
[%WINDOWS%]\cha_111.exe
[%SYSTEM%]\3dViewerb.dll
[%SYSTEM%]\acctresv.dll
[%SYSTEM%]\adsldpcs.dll
[%SYSTEM%]\adsndsb.dll
[%SYSTEM%]\advpacka.dll
[%SYSTEM%]\advpackaa.dll
[%SYSTEM%]\advpackaas.dll
[%SYSTEM%]\alrsvcb.dll
[%SYSTEM%]\amstreamb.dll
[%SYSTEM%]\apcupsa.dll
[%SYSTEM%]\apphelpa.dll
[%SYSTEM%]\apphelpas.dll
[%SYSTEM%]\appmgrb.dll
[%SYSTEM%]\asycfiltb.dll
[%SYSTEM%]\atl71b.dll
[%SYSTEM%]\atl71v.dll
[%SYSTEM%]\audiodevb.dll
[%SYSTEM%]\AuthFWSnapinv.dll
[%SYSTEM%]\avicapb.dll
[%SYSTEM%]\avicapba.dll
[%SYSTEM%]\axaltocmv.dll
[%SYSTEM%]\axaltocmvb.dll
[%SYSTEM%]\azroleuia.dll
[%SYSTEM%]\azroleuiv.dll
[%SYSTEM%]\AzSqlExtv.dll
[%SYSTEM%]\bcrypta.dll
[%SYSTEM%]\bitsprx2v.dll
[%SYSTEM%]\bitsprx3s.dll
[%SYSTEM%]\blackboxs.dll
[%SYSTEM%]\bootvids.dll
[%SYSTEM%]\bootvidsa.dll
[%SYSTEM%]\browselca.dll
[%SYSTEM%]\browseui(5)b.dll
[%SYSTEM%]\browseuia.dll
[%SYSTEM%]\browseuis.dll
[%SYSTEM%]\browsewmb.dll
[%SYSTEM%]\browsewmv.dll
[%SYSTEM%]\browsewmvv.dll
[%SYSTEM%]\browsewmvva.dll
[%SYSTEM%]\browsewmvvv.dll
[%SYSTEM%]\bthcia.dll
[%SYSTEM%]\cabinetv.dll
[%SYSTEM%]\cabviews.dll
[%SYSTEM%]\catsrvs.dll
[%SYSTEM%]\cdmodemv.dll
[%SYSTEM%]\certcliv.dll
[%SYSTEM%]\CertEnrollUIa.dll
[%SYSTEM%]\cfgbkenda.dll
[%SYSTEM%]\cfgmgr32b.dll
[%SYSTEM%]\chsbrkrb.dll
[%SYSTEM%]\clbcatexb.dll
[%SYSTEM%]\cliconfga.dll
[%WINDOWS%]\4_cha.exe
[%WINDOWS%]\cha_111.exe

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Evolution Trojan Information
Mod Hacker Tool Information
Pigeon.ASN Trojan Cleaner
custom.click.com Tracking Cookie Information
Vxidl.AUN Trojan Cleaner

TIBS Trojan

How To Remove TIBS?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

TIBS is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.

---

---

TIBS It also known as:

[Kaspersky]Trojan-Downloader.Win32.Tibs.im,Trojan-Downloader.Win32.Small.cwj,Email-Worm.Win32.Zhelatin.bw,Packed.Win32.Tibs.w,Trojan-Downloader.Win32.Tibs.pk;
[McAfee]Generic Downloader.q,BraveSentry;
[F-Prot]W32/EmailWorm.IRB;
[Panda]Dialer.DU;
[Other]Win32/Tibs!generic,W32/DLoader.CBPU,W32/DLoader.CBPT,W32/Tibs.VWN,Trojan.Packed.13,Worm:Win32/Nuwar.gen,Mal/EncPk-E,Trojan.Vxgame.z,members area dialer,TrojanDownloader:Win32/Tibs.L,W32/Tibs.gen92,TrojanDownloader:Win32/Tibs

---

TIBS Symptoms:

Files:
[%PROFILE_TEMP%]\1.dllb
[%PROFILE_TEMP%]\2.dllb
[%PROFILE_TEMP%]\5.dllb
[%PROFILE_TEMP%]\6.dllb
[%PROFILE_TEMP%]\7.dllb
[%PROFILE_TEMP%]\qv3xt3.game
[%PROFILE_TEMP%]\qvxt34.game
[%PROFILE_TEMP%]\qvxt42.game
[%SYSTEM%]\dlh9jkd1q1.exe
[%SYSTEM%]\dlh9jkd1q2.exe
[%SYSTEM%]\dlh9jkd1q5.exe
[%SYSTEM%]\dlh9jkd1q6.exe
[%SYSTEM%]\dlh9jkd1q7.exe
[%SYSTEM%]\dlh9jkd1q8.exe
[%SYSTEM%]\dsuiexq.dll
[%SYSTEM%]\ma.exe.exe
[%PROFILE_TEMP%]\ixqlsxgh.exe
[%PROFILE_TEMP%]\ma1xdd1.game
[%SYSTEM%]\bofhn32.dll
[%SYSTEM%]\cubtzv32.dll
[%SYSTEM%]\hdefvz.sys
[%SYSTEM%]\kfejwmi.dll
[%SYSTEM%]\max1d641.exe
[%SYSTEM%]\qvx5gamet2.exe
[%SYSTEM%]\qvxga6met3.exe
[%SYSTEM%]\ufypth.dll
[%SYSTEM%]\usjbgwl.dll
[%PROFILE_TEMP%]\1.dllb
[%PROFILE_TEMP%]\2.dllb
[%PROFILE_TEMP%]\5.dllb
[%PROFILE_TEMP%]\6.dllb
[%PROFILE_TEMP%]\7.dllb
[%PROFILE_TEMP%]\qv3xt3.game
[%PROFILE_TEMP%]\qvxt34.game
[%PROFILE_TEMP%]\qvxt42.game
[%SYSTEM%]\dlh9jkd1q1.exe
[%SYSTEM%]\dlh9jkd1q2.exe
[%SYSTEM%]\dlh9jkd1q5.exe
[%SYSTEM%]\dlh9jkd1q6.exe
[%SYSTEM%]\dlh9jkd1q7.exe
[%SYSTEM%]\dlh9jkd1q8.exe
[%SYSTEM%]\dsuiexq.dll
[%SYSTEM%]\ma.exe.exe
[%PROFILE_TEMP%]\ixqlsxgh.exe
[%PROFILE_TEMP%]\ma1xdd1.game
[%SYSTEM%]\bofhn32.dll
[%SYSTEM%]\cubtzv32.dll
[%SYSTEM%]\hdefvz.sys
[%SYSTEM%]\kfejwmi.dll
[%SYSTEM%]\max1d641.exe
[%SYSTEM%]\qvx5gamet2.exe
[%SYSTEM%]\qvxga6met3.exe
[%SYSTEM%]\ufypth.dll
[%SYSTEM%]\usjbgwl.dll

Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{00009E9F-DDD7-AA59-AA7D-AA4B7D6BE000}
HKEY_CLASSES_ROOT\CLSID\{2C1CD3D7-86AC-4068-93BC-A02304B60787}
HKEY_CURRENT_USER\software\adwaredisablekey4
HKEY_LOCAL_MACHINE\software\adwaredisablekey4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00009E9F-DDD7-AA59-AA7D-AA4B7D6BE000}
HKEY_CLASSES_ROOT\clsid\{2c1cd3d7-86ac-4068-93bc-a02304b60787}
HKEY_CLASSES_ROOT\clsid\{4f67b44e-7ba5-aef4-828e-074034113a82}
HKEY_CURRENT_USER\clsid\{f862b760-0a21-1033-0729-0529050001}
HKEY_CURRENT_USER\software\classes\clsid\{f862b760-0a21-1033-0729-0529050001}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{4f67b44e-7ba5-aef4-828e-074034113a82}

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\a3dxq
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\a3dxq
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\a3dxq
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\a3dxq
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\a3dxq
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\a3dxq
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winsys2freg
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winsys2freg
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winsys2freg
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winsys2freg
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_gb
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_gb\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_gb\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_gb\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_gb\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_gb\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_gb\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_gb\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_gb\0000\control
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_runtime\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_runtime\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_runtime\0000\control
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\example
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\example
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\example
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\example
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\example
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb\enum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb\enum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb\enum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb\parameters
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb\parameters
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb\parameters
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb\parameters
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb\security
HKEY_CURRENT_USER\clsid\{1862b760-0a21-1033-0729-0529050001}
HKEY_CURRENT_USER\clsid\{1862b760-0a21-1033-0729-0529050001}
HKEY_CURRENT_USER\clsid\{1862b760-0a21-1033-0729-0529050001}
HKEY_CURRENT_USER\software\classes\clsid\{1862b760-0a21-1033-0729-0529050001}
HKEY_CURRENT_USER\software\classes\clsid\{1862b760-0a21-1033-0729-0529050001}
HKEY_CURRENT_USER\software\classes\clsid\{1862b760-0a21-1033-0729-0529050001}
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\a3dxq
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\a3dxq
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\a3dxq
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\a3dxq
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winsys2freg
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winsys2freg
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winsys2freg
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winsys2freg
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\driver
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\example
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\example
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\example
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\example
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb\enum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb\enum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb\enum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb\parameters
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb\security
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gb\security

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Remove Pigeon.AMZ Trojan
Bancos.INR Trojan Removal

Small.kz Trojan

How To Remove Small.kz?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Small.kz is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

---

---

Small.kz Symptoms:

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{d48d738b-28a3-47f8-a2e4-64e33583a3ac}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\e263c16a-a3d8-4157-a192-6e63d44d222c

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Blizzard DoS Information
Pigeon.ETM Trojan Removal
SillyDl.CDF Trojan Removal instruction
Wintrim.bi Downloader Removal instruction

Vanti Trojan

How To Remove Vanti?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

Vanti is dangerous virus:
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

---

---

Vanti It also known as:

[Kaspersky]Rootkit.Win32.Vanti.e,Rootkit.Win32.Vanti.df,Trojan-PSW.Win32.Nilage.avi,Rootkit.Win32.Vanti.ci,Trojan-PSW.Win32.OnLineGames.eb,Rootkit.Win32.Vanti.ex,Rootkit.Win32.Vanti.eu,Rootkit.Win32.Vanti.ei,Trojan.PSW.Win32.OnLineGames.dt,Trojan-PSW.Win32.Nilage.oz,Trojan-PSW.Win32.Nilage.ayp,Trojan-PSW.Win32.Magania.pf,Rootkit.Win32.Vanti.ew,Rootkit.Win32.Agent.ec;
[McAfee]Backdoor-CTV,PWS-Lineage,Generic PWS.o;
[F-Prot]W32/PWStealer.gen1,W32/PWStealer1!Generic,W32/Rootkit.OT;
[Other]Win32.Vanti.A,Hacktool.Rootkit,TROJ_VANTI.E,Win32/Vanti!generic,Win32/Vanti.AD!DLL!Trojan,Infostealer,Win32/Vanti.AE,Win32/Vanti.J,Win32/Vanti.DR,Win32/Vanti.X!Trojan,Mal/Packer,Win32/Vanti.AR,Win32/Vanti.AY,Win32/Vanti.BY,Win32/Vanti.BW,Win32/Vanti.BV,Win32/Vanti.BX,Win32/Vanti.CV,Win32/Vanti.EJ,Win32/Vanti.EK,Win32/Vanti.DZ,Win32/Vanti.DS,Win32/Vanti.DV,Win32/Vanti.CL,Win32/Vanti.CQ,VirTool:Win32/Obfuscator.A,Win32/Vanti.CT,Win32/Vanti.CU,Bloodhound.NsAnti,Win32/Vanti.CS,Win32/Vanti.CE,Win32/Vanti.CR,Win32/Vanti.BZ,Win32/Vanti.CA,Win32/Vanti.CB,Win32/Vanti.CC,Win32/Vanti.FU,Win32/Vanti.HE,Win32/Vanti.HF,Win32/Vanti.HG,Win32/Vanti.HH,Trojan.Win32.NSAnti,Win32/Vanti.FW,Win32/Vanti.FV,Win32/Vanti.FX,Troj/Agent-ELF

---

Vanti Symptoms:

Files:
[%PROFILE_TEMP%]\b104.exe
[%PROFILE_TEMP%]\cmdinst.exe
[%WINDOWS%]\UHLqZ293c2tp\oJMNtZ6awZQD.vbs
[%LOCAL_SETTINGS%]\temp.gxvr.sys
[%PROFILE_TEMP%]\4fjjtbh.dll
[%PROFILE_TEMP%]\gs5.dll
[%PROFILE_TEMP%]\h7cv.dll
[%PROFILE_TEMP%]\l88kkgkc.dll
[%PROFILE_TEMP%]\ljl.dll
[%PROFILE_TEMP%]\xbrkvewo.dll
[%PROFILE_TEMP%]\xny.dll
[%PROFILE_TEMP%]\ygg4.dll
[%PROFILE_TEMP%]\zgh.dll
[%SYSTEM%]\wincab.sys
[%PROFILE_TEMP%]\b104.exe
[%PROFILE_TEMP%]\cmdinst.exe
[%WINDOWS%]\UHLqZ293c2tp\oJMNtZ6awZQD.vbs
[%LOCAL_SETTINGS%]\temp.gxvr.sys
[%PROFILE_TEMP%]\4fjjtbh.dll
[%PROFILE_TEMP%]\gs5.dll
[%PROFILE_TEMP%]\h7cv.dll
[%PROFILE_TEMP%]\l88kkgkc.dll
[%PROFILE_TEMP%]\ljl.dll
[%PROFILE_TEMP%]\xbrkvewo.dll
[%PROFILE_TEMP%]\xny.dll
[%PROFILE_TEMP%]\ygg4.dll
[%PROFILE_TEMP%]\zgh.dll
[%SYSTEM%]\wincab.sys

Folders:
[%SYSTEM%]\cache32_hsrb

Registry Keys:
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_cmdservice
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_lzq1217
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cmdservice
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_squell
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\kingx
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\squella
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\squellab

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
TrojanDownloader.Win32.Small.gu Downloader Symptoms
Bancos.IEM Trojan Removal

RaxSearch Adware

How To Remove RaxSearch?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

RaxSearch is dangerous virus:
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

---

---

RaxSearch Symptoms:

Files:
[%DESKTOP%]\Rax Search.lnk
[%PROGRAMS%]\Rax Search\Rax Search.lnk
[%WINDOWS%]\infodll.dll
[%WINDOWS%]\underwater.scr
[%DESKTOP%]\Rax Search.lnk
[%PROGRAMS%]\Rax Search\Rax Search.lnk
[%WINDOWS%]\infodll.dll
[%WINDOWS%]\underwater.scr

Folders:
[%PROGRAM_FILES%]\Rax Search
[%PROGRAM_FILES%]\RAX Search Helper
[%PROGRAM_FILES%]\Underwater Screensaver

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{19ad8203-1538-43a0-848b-d136782e09de}
HKEY_CLASSES_ROOT\interface\{f89c6ee9-8bca-40d4-82b7-12853bb8bb55}
HKEY_CLASSES_ROOT\rxh.helper
HKEY_CLASSES_ROOT\rxh.helper.1
HKEY_CLASSES_ROOT\rxh.rxh
HKEY_CLASSES_ROOT\rxh.rxh.1
HKEY_CLASSES_ROOT\typelib\{8547ada7-fc77-4ac1-b0a2-c4b79787b460}
HKEY_CURRENT_USER\software\microsoft\currentversion\run\raxsearch
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\raxsearch.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{19ad8203-1538-43a0-848b-d136782e09de}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\rax search
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\rax search helper
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\underwater screensaver

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Cyn.03a Trojan Symptoms
Hate Trojan Symptoms

SillyDl.DFL Trojan

How To Remove SillyDl.DFL?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.

---

SillyDl.DFL is dangerous virus:
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

---

---

SillyDl.DFL Symptoms:

Files:
[%SYSTEM%]\H@tKeysH@@k.DLL
[%SYSTEM%]\H@tKeysH@@k.DLL

---

You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

---

Also Be Aware of the Following Threats:
Vxidl.BEI Trojan Cleaner
Share Trojan Symptoms
Removing SillyDl.CKE Trojan
Removing QZap Trojan
Goh Trojan Removal instruction