Trojan List 30: December 2008

Wednesday, December 31, 2008

BAT.DeltreeY.bj Trojan

Click here to remove BAT.DeltreeY.bj malware

BAT.DeltreeY.bj description:
BAT.DeltreeY.bj Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing BAT.DeltreeY.bj:

you can run trial version of ExterminateIt, or remove BAT.DeltreeY.bj manually.

To completely manually remove BAT.DeltreeY.bj malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BAT.DeltreeY.bj.

Apicke Trojan

Apicke description:
Apicke Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Apicke:

you can run trial version of ExterminateIt, or remove Apicke manually.

To completely manually remove Apicke malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Apicke.

Screen.Logger Spyware

Click here to remove Screen.Logger malware

Screen.Logger description:
Screen.Logger Category:Spyware
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.

Removing Screen.Logger:

you can run trial version of ExterminateIt, or remove Screen.Logger manually.

To completely manually remove Screen.Logger malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Screen.Logger.

Vxidl.AXA Trojan

Vxidl.AXA description:
Vxidl.AXA Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Vxidl.AXA:

you can run trial version of ExterminateIt, or remove Vxidl.AXA manually.

To completely manually remove Vxidl.AXA malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.AXA.

AccessMembre Adware

Click here to remove AccessMembre malware

AccessMembre description:
AccessMembre Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Detection AccessMembre :

AccessMembre Registry Keys:
HKEY_CLASSES_ROOT\clsid\{d1b80ebf-1a26-4fec-b0b9-dcb934c6507e}
HKEY_CLASSES_ROOT\typelib\{a41c6220-6f42-4646-b119-fbe6f4d38e3c}

Removing AccessMembre:

you can run trial version of ExterminateIt, or remove AccessMembre manually.

To completely manually remove AccessMembre malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with AccessMembre.

WhyPPC Adware

WhyPPC description:
WhyPPC Category:Adware,Hijacker
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits
When the default home page is hijacked, the browser opens to the web page set by the hijacker
instead of the user's designated home page. In some cases, the hijacker may block users from
restoring their desired home page.

Removing WhyPPC:

you can run trial version of ExterminateIt, or remove WhyPPC manually.

To completely manually remove WhyPPC malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with WhyPPC.

Adult.Search.bar Toolbar

Click here to remove Adult.Search.bar malware

Adult.Search.bar description:
Adult.Search.bar Category:Toolbar
Toolbar presents itself as a helpful add-on for Internet Explorer but it is a real pest.

Detection Adult.Search.bar :

Adult.Search.bar Registry Values:
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\shellbrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\shellbrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\shellbrowser

Removing Adult.Search.bar:

you can run trial version of ExterminateIt, or remove Adult.Search.bar manually.

To completely manually remove Adult.Search.bar malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Adult.Search.bar.

No.Netbus.v1.for.Windows Trojan

Click here to remove No.Netbus.v1.for.Windows malware

No.Netbus.v1.for.Windows description:
No.Netbus.v1.for.Windows Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing No.Netbus.v1.for.Windows:

you can run trial version of ExterminateIt, or remove No.Netbus.v1.for.Windows manually.

To completely manually remove No.Netbus.v1.for.Windows malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with No.Netbus.v1.for.Windows.

Pigeon.AVDB Trojan

Click here to remove Pigeon.AVDB malware

Pigeon.AVDB description:
Pigeon.AVDB Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AVDB:

you can run trial version of ExterminateIt, or remove Pigeon.AVDB manually.

To completely manually remove Pigeon.AVDB malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVDB.

Tofsee Trojan

Tofsee description:
Tofsee Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Detection Tofsee :

Tofsee Files:
[%PROFILE_TEMP%]\vx1t3.game
[%PROFILE_TEMP%]\vx1t3.game

Removing Tofsee:

you can run trial version of ExterminateIt, or remove Tofsee manually.

To completely manually remove Tofsee malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Tofsee.

Pigeon.DZF Trojan

Pigeon.DZF description:
Pigeon.DZF Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.DZF:

you can run trial version of ExterminateIt, or remove Pigeon.DZF manually.

To completely manually remove Pigeon.DZF malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.DZF.

maxlab.ru Tracking Cookie

maxlab.ru description:
maxlab.ru Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing maxlab.ru:

you can run trial version of ExterminateIt, or remove maxlab.ru manually.

To completely manually remove maxlab.ru malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with maxlab.ru.

ControlTotal.beta Trojan

Click here to remove ControlTotal.beta malware

ControlTotal.beta description:
ControlTotal.beta Category:Trojan,Backdoor,RAT
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Removing ControlTotal.beta:

you can run trial version of ExterminateIt, or remove ControlTotal.beta manually.

To completely manually remove ControlTotal.beta malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ControlTotal.beta.

Tuesday, December 30, 2008

Backdoor.LittleWitch Trojan

Click here to remove Backdoor.LittleWitch malware

Backdoor.LittleWitch description:
Backdoor.LittleWitch Category:Trojan,Backdoor
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.

Removing Backdoor.LittleWitch:

you can run trial version of ExterminateIt, or remove Backdoor.LittleWitch manually.

To completely manually remove Backdoor.LittleWitch malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Backdoor.LittleWitch.

Voimeda Trojan

Voimeda description:
Voimeda Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Detection Voimeda :

Voimeda Registry Keys:
HKEY_CLASSES_ROOT\clsid\{c142cf63-724f-3561-94ac-e683d962c63c}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{c142cf63-724f-3561-94ac-e683d962c63c}

Voimeda Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{c666cf63-767f-4831-94ac-e683d962c63c}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload

Removing Voimeda:

you can run trial version of ExterminateIt, or remove Voimeda manually.

To completely manually remove Voimeda malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Voimeda.

QQspouse Trojan

QQspouse description:
QQspouse Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing QQspouse:

you can run trial version of ExterminateIt, or remove QQspouse manually.

To completely manually remove QQspouse malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with QQspouse.

REQ Trojan

REQ description:
REQ Category:Trojan,Backdoor,Downloader,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing REQ:

you can run trial version of ExterminateIt, or remove REQ manually.

To completely manually remove REQ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with REQ.

usdmsdc.net Tracking Cookie

Click here to remove usdmsdc.net malware

usdmsdc.net description:
usdmsdc.net Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing usdmsdc.net:

you can run trial version of ExterminateIt, or remove usdmsdc.net manually.

To completely manually remove usdmsdc.net malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with usdmsdc.net.

shopathome.com Tracking Cookie

Click here to remove shopathome.com malware

shopathome.com description:
shopathome.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing shopathome.com:

you can run trial version of ExterminateIt, or remove shopathome.com manually.

To completely manually remove shopathome.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with shopathome.com.

Family.Key.Logger Spyware

Click here to remove Family.Key.Logger malware

Family.Key.Logger description:
Family.Key.Logger Category:Spyware,Backdoor
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Detection Family.Key.Logger :

Family.Key.Logger Files:
[%PROFILE_TEMP%]\Temporary Directory 3 for familykeylogger.zip\FamilyKeyLogger-setup.exe
[%DESKTOP%]\family key logger.lnk
[%PROFILE_TEMP%]\Temporary Directory 3 for familykeylogger.zip\FamilyKeyLogger-setup.exe
[%DESKTOP%]\family key logger.lnk

Family.Key.Logger Folders:
[%PROGRAMS%]\family keylogger
[%PROGRAM_FILES%]\familykeylogger
[%SYSTEM%]\ctf
[%PROGRAMS%]\family key logger

Family.Key.Logger Registry Keys:
HKEY_LOCAL_MACHINE\software\kmint21\familykeylogger
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\familykeylogger
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\family keylogger

Family.Key.Logger Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Family.Key.Logger:

you can run trial version of ExterminateIt, or remove Family.Key.Logger manually.

To completely manually remove Family.Key.Logger malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Family.Key.Logger.

JS.Wonka Hostile Code

JS.Wonka description:
JS.Wonka Category:Hostile Code
Hostile code is any process running on a system that is
not authorized by the system administrator, such as Trojans, viruses, or spyware.

Removing JS.Wonka:

you can run trial version of ExterminateIt, or remove JS.Wonka manually.

To completely manually remove JS.Wonka malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with JS.Wonka.

SillyDl.CUD Trojan

Click here to remove SillyDl.CUD malware

SillyDl.CUD description:
SillyDl.CUD Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing SillyDl.CUD:

you can run trial version of ExterminateIt, or remove SillyDl.CUD manually.

To completely manually remove SillyDl.CUD malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CUD.

Mircgirl DoS

Mircgirl description:
Mircgirl Category:DoS
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing Mircgirl:

you can run trial version of ExterminateIt, or remove Mircgirl manually.

To completely manually remove Mircgirl malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Mircgirl.

WinReg.AntiSecurity Trojan

Click here to remove WinReg.AntiSecurity malware

WinReg.AntiSecurity description:
WinReg.AntiSecurity Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing WinReg.AntiSecurity:

you can run trial version of ExterminateIt, or remove WinReg.AntiSecurity manually.

To completely manually remove WinReg.AntiSecurity malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with WinReg.AntiSecurity.

Ebates.Moe.Money.Maker BHO

Click here to remove Ebates.Moe.Money.Maker malware

Ebates.Moe.Money.Maker description:
Ebates.Moe.Money.Maker Category:BHO
As this information is entered by the user, it is captured by the BHO (Browser Helper Object) and
sent back to the attacker.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.

Detection Ebates.Moe.Money.Maker :

Ebates.Moe.Money.Maker Folders:
[%PROGRAMS%]\ebates moe money maker
[%PROGRAM_FILES%]\ebatesmoemoneymaker4

Ebates.Moe.Money.Maker Registry Keys:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\{F2B441CC-E026-47FB-BDC3-A07750FA3D2C}
HKEY_CURRENT_USER\software\microsoft\internet explorer\menuext\ebates.
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\unebmm10350
HKEY_CURRENT_USER\software\microsoft\internet explorer\extensions\{f2b441cc-e026-47fb-bdc3-a07750fa3d2c}

Removing Ebates.Moe.Money.Maker:

you can run trial version of ExterminateIt, or remove Ebates.Moe.Money.Maker manually.

To completely manually remove Ebates.Moe.Money.Maker malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Ebates.Moe.Money.Maker.

Monday, December 29, 2008

Cof Trojan

Cof description:
Cof Category:Trojan,Backdoor
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.

Removing Cof:

you can run trial version of ExterminateIt, or remove Cof manually.

To completely manually remove Cof malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Cof.

Pigeon.AWIQ Trojan

Click here to remove Pigeon.AWIQ malware

Pigeon.AWIQ description:
Pigeon.AWIQ Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AWIQ:

you can run trial version of ExterminateIt, or remove Pigeon.AWIQ manually.

To completely manually remove Pigeon.AWIQ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AWIQ.

TrojanDownloader.Win32.IstBar.fj Downloader

Click here to remove TrojanDownloader.Win32.IstBar.fj malware

TrojanDownloader.Win32.IstBar.fj description:
TrojanDownloader.Win32.IstBar.fj Category:Downloader
Trojans-downloaders downloads and installs new malware or adware on the computer.

Removing TrojanDownloader.Win32.IstBar.fj:

you can run trial version of ExterminateIt, or remove TrojanDownloader.Win32.IstBar.fj manually.

To completely manually remove TrojanDownloader.Win32.IstBar.fj malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with TrojanDownloader.Win32.IstBar.fj.

T543 Backdoor

T543 description:
T543 Category:Backdoor
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Removing T543:

you can run trial version of ExterminateIt, or remove T543 manually.

To completely manually remove T543 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with T543.

Vxidl.BAS Trojan

Vxidl.BAS description:
Vxidl.BAS Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Vxidl.BAS:

you can run trial version of ExterminateIt, or remove Vxidl.BAS manually.

To completely manually remove Vxidl.BAS malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.BAS.

Pigeon.ALT Trojan

Pigeon.ALT description:
Pigeon.ALT Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.ALT:

you can run trial version of ExterminateIt, or remove Pigeon.ALT manually.

To completely manually remove Pigeon.ALT malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.ALT.

Sex.Cookie Tracking Cookie

Sex.Cookie description:
Sex.Cookie Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing Sex.Cookie:

you can run trial version of ExterminateIt, or remove Sex.Cookie manually.

To completely manually remove Sex.Cookie malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Sex.Cookie.

Twinj Trojan

Twinj description:
Twinj Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Twinj:

you can run trial version of ExterminateIt, or remove Twinj manually.

To completely manually remove Twinj malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Twinj.

Pigeon.BBH Trojan

Pigeon.BBH description:
Pigeon.BBH Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.BBH:

you can run trial version of ExterminateIt, or remove Pigeon.BBH manually.

To completely manually remove Pigeon.BBH malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.BBH.

Digress Trojan

Digress description:
Digress Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Digress:

you can run trial version of ExterminateIt, or remove Digress manually.

To completely manually remove Digress malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Digress.

Pigeon.AUZH Trojan

Click here to remove Pigeon.AUZH malware

Pigeon.AUZH description:
Pigeon.AUZH Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AUZH:

you can run trial version of ExterminateIt, or remove Pigeon.AUZH manually.

To completely manually remove Pigeon.AUZH malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AUZH.

Hunling Trojan

Hunling description:
Hunling Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Hunling:

you can run trial version of ExterminateIt, or remove Hunling manually.

To completely manually remove Hunling malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Hunling.

Sadyprots Adware

Sadyprots description:
Sadyprots Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Removing Sadyprots:

you can run trial version of ExterminateIt, or remove Sadyprots manually.

To completely manually remove Sadyprots malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Sadyprots.

Bancos.GWZ Trojan

Bancos.GWZ description:
Bancos.GWZ Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Bancos.GWZ:

you can run trial version of ExterminateIt, or remove Bancos.GWZ manually.

To completely manually remove Bancos.GWZ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.GWZ.

AIMVision Trojan

AIMVision description:
AIMVision Category:Trojan,Spyware,Backdoor,RAT
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.

Detection AIMVision :

AIMVision Files:
[%WINDOWS%]\system\win32hlp.exe
[%WINDOWS%]\system\winrunhelp.wrh
[%WINDOWS%]\system\win32hlp.exe
[%WINDOWS%]\system\winrunhelp.wrh

AIMVision Registry Keys:
HKEY_CLASSES_ROOT\windows runtime help 4.881.1208\shell\open\command

AIMVision Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing AIMVision:

you can run trial version of ExterminateIt, or remove AIMVision manually.

To completely manually remove AIMVision malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with AIMVision.

Sunday, December 28, 2008

Pigeon.FCA Trojan

Pigeon.FCA description:
Pigeon.FCA Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Detection Pigeon.FCA :

Pigeon.FCA Files:
[%WINDOWS%]\RemoteAbc.exe
[%WINDOWS%]\RemoteAbc.exe

Pigeon.FCA Registry Keys:
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_remoteabcserver
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\remoteabcserver

Removing Pigeon.FCA:

you can run trial version of ExterminateIt, or remove Pigeon.FCA manually.

To completely manually remove Pigeon.FCA malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.FCA.

Netuoper Backdoor

Netuoper description:
Netuoper Category:Backdoor
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.

Removing Netuoper:

you can run trial version of ExterminateIt, or remove Netuoper manually.

To completely manually remove Netuoper malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Netuoper.

Implant Trojan

Implant description:
Implant Category:Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Trojans-downloaders downloads and installs new malware or adware on the computer.

DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

Removing Implant:

you can run trial version of ExterminateIt, or remove Implant manually.

To completely manually remove Implant malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Implant.

Bubonic.lame.against.Windows.machines DoS

Click here to remove Bubonic.lame.against.Windows.machines malware

Bubonic.lame.against.Windows.machines description:
Bubonic.lame.against.Windows.machines Category:DoS
DoS trojans conduct attacks from a single computer with the consent of the user.

Removing Bubonic.lame.against.Windows.machines:

you can run trial version of ExterminateIt, or remove Bubonic.lame.against.Windows.machines manually.

To completely manually remove Bubonic.lame.against.Windows.machines malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bubonic.lame.against.Windows.machines.

description:

Removing :

you can run trial version of ExterminateIt, or remove manually.

To completely manually remove malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with .

Rbot.pac Backdoor

Rbot.pac description:
Rbot.pac Category:Backdoor
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.

Removing Rbot.pac:

you can run trial version of ExterminateIt, or remove Rbot.pac manually.

To completely manually remove Rbot.pac malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Rbot.pac.

MofDemo Trojan

MofDemo description:
MofDemo Category:Trojan,Backdoor,Downloader,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing MofDemo:

you can run trial version of ExterminateIt, or remove MofDemo manually.

To completely manually remove MofDemo malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with MofDemo.

Little.Pieces Trojan

Click here to remove Little.Pieces malware

Little.Pieces description:
Little.Pieces Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Little.Pieces:

you can run trial version of ExterminateIt, or remove Little.Pieces manually.

To completely manually remove Little.Pieces malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Little.Pieces.

Zindeart Trojan

Zindeart description:
Zindeart Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Detection Zindeart :

Zindeart Files:
[%SYSTEM%]\drivers\Kanguru_SAP\RunSrv.Exe
[%SYSTEM%]\MsMsSrv.DLL
[%SYSTEM%]\drivers\Kanguru_SAP\RunSrv.Exe
[%SYSTEM%]\MsMsSrv.DLL

Zindeart Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\msmssrv

Removing Zindeart:

you can run trial version of ExterminateIt, or remove Zindeart manually.

To completely manually remove Zindeart malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Zindeart.

Pigeon.AET Trojan

Pigeon.AET description:
Pigeon.AET Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AET:

you can run trial version of ExterminateIt, or remove Pigeon.AET manually.

To completely manually remove Pigeon.AET malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AET.

Saturday, December 27, 2008

Wast Adware

Wast description:
Wast Category:Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Detection Wast :

Wast Files:
[%WINDOWS%]\syswast.exe
[%WINDOWS%]\syswast.exe

Wast Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\wast

Wast Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Wast:

you can run trial version of ExterminateIt, or remove Wast manually.

To completely manually remove Wast malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Wast.

W95.Zombie Backdoor

W95.Zombie description:
W95.Zombie Category:Backdoor,Downloader,Hacker Tool,DoS
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.
These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.
DoS trojans conduct attacks from a single computer with the consent of the user.

Removing W95.Zombie:

you can run trial version of ExterminateIt, or remove W95.Zombie manually.

To completely manually remove W95.Zombie malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with W95.Zombie.

Net.trash RAT

Net.trash description:
Net.trash Category:RAT
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Removing Net.trash:

you can run trial version of ExterminateIt, or remove Net.trash manually.

To completely manually remove Net.trash malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Net.trash.

Bancos.AGY Trojan

Bancos.AGY description:
Bancos.AGY Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.AGY:

you can run trial version of ExterminateIt, or remove Bancos.AGY manually.

To completely manually remove Bancos.AGY malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.AGY.

Phishbank.AEQ Trojan

Click here to remove Phishbank.AEQ malware

Phishbank.AEQ description:
Phishbank.AEQ Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Phishbank.AEQ:

you can run trial version of ExterminateIt, or remove Phishbank.AEQ manually.

To completely manually remove Phishbank.AEQ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Phishbank.AEQ.

Win32.Xabot Trojan

Click here to remove Win32.Xabot malware

Win32.Xabot description:
Win32.Xabot Category:Trojan,Worm,Backdoor,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Worms can be classified according to the propagation method they use,
i.e. how they deliver copies of themselves to new victim machines.
Worms can also be classified by installation method, launch method and finally according
to characteristics standard to all malware: polymorphism, stealth etc.

Many of the worms which managed to cause significant outbreaks use more then
one propagation method as well as more than one infection technique.
The methods are listed separately below.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

DoS trojans conduct attacks from a single computer with the consent of the user.

Removing Win32.Xabot:

you can run trial version of ExterminateIt, or remove Win32.Xabot manually.

To completely manually remove Win32.Xabot malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.Xabot.

Pigeon.AZC Trojan

Pigeon.AZC description:
Pigeon.AZC Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AZC:

you can run trial version of ExterminateIt, or remove Pigeon.AZC manually.

To completely manually remove Pigeon.AZC malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AZC.

SillyDl.CCW Trojan

Click here to remove SillyDl.CCW malware

SillyDl.CCW description:
SillyDl.CCW Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing SillyDl.CCW:

you can run trial version of ExterminateIt, or remove SillyDl.CCW manually.

To completely manually remove SillyDl.CCW malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.CCW.

Puper.BPA Trojan

Puper.BPA description:
Puper.BPA Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Puper.BPA:

you can run trial version of ExterminateIt, or remove Puper.BPA manually.

To completely manually remove Puper.BPA malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Puper.BPA.

Pigeon.AUC Trojan

Pigeon.AUC description:
Pigeon.AUC Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AUC:

you can run trial version of ExterminateIt, or remove Pigeon.AUC manually.

To completely manually remove Pigeon.AUC malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AUC.

Friday, December 26, 2008

WapGox Trojan

WapGox description:
WapGox Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing WapGox:

you can run trial version of ExterminateIt, or remove WapGox manually.

To completely manually remove WapGox malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with WapGox.

ICQ.Notify Trojan

ICQ.Notify description:
ICQ.Notify Category:Trojan,Backdoor,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing ICQ.Notify:

you can run trial version of ExterminateIt, or remove ICQ.Notify manually.

To completely manually remove ICQ.Notify malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with ICQ.Notify.

MultiDJ Trojan

MultiDJ description:
MultiDJ Category:Trojan,Backdoor,Downloader,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing MultiDJ:

you can run trial version of ExterminateIt, or remove MultiDJ manually.

To completely manually remove MultiDJ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with MultiDJ.

Froot.Fly DoS

Froot.Fly description:
Froot.Fly Category:DoS
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing Froot.Fly:

you can run trial version of ExterminateIt, or remove Froot.Fly manually.

To completely manually remove Froot.Fly malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Froot.Fly.

adminder.com Tracking Cookie

Click here to remove adminder.com malware

adminder.com description:
adminder.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing adminder.com:

you can run trial version of ExterminateIt, or remove adminder.com manually.

To completely manually remove adminder.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with adminder.com.

Delf.bo Downloader

Delf.bo description:
Delf.bo Category:Downloader
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

Removing Delf.bo:

you can run trial version of ExterminateIt, or remove Delf.bo manually.

To completely manually remove Delf.bo malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Delf.bo.

rbc.ru Tracking Cookie

rbc.ru description:
rbc.ru Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

If you fill out forms online with your real name and contact information,
click on banners and then purchase an item, or fill out sweepstakes or contests forms,
then it's possible that major online advertisers know your name and have associated it
with your IP address and other information.

Removing rbc.ru:

you can run trial version of ExterminateIt, or remove rbc.ru manually.

To completely manually remove rbc.ru malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with rbc.ru.

Hunt Trojan

Hunt description:
Hunt Category:Trojan,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing Hunt:

you can run trial version of ExterminateIt, or remove Hunt manually.

To completely manually remove Hunt malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Hunt.

Thursday, December 25, 2008

Network.Crack.Wizard Spyware

Click here to remove Network.Crack.Wizard malware

Network.Crack.Wizard description:
Network.Crack.Wizard Category:Spyware,Backdoor,RAT
Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

Detection Network.Crack.Wizard :

Network.Crack.Wizard Files:
[%WINDOWS%]\system\hooklib.dll
[%WINDOWS%]\system\mssys_32.exe
[%WINDOWS%]\system\hooklib.dll
[%WINDOWS%]\system\mssys_32.exe

Network.Crack.Wizard Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices

Removing Network.Crack.Wizard:

you can run trial version of ExterminateIt, or remove Network.Crack.Wizard manually.

To completely manually remove Network.Crack.Wizard malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Network.Crack.Wizard.

Le.Guardien Trojan

Click here to remove Le.Guardien malware

Le.Guardien description:
Le.Guardien Category:Trojan,Backdoor,RAT,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.
Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.

Removing Le.Guardien:

you can run trial version of ExterminateIt, or remove Le.Guardien manually.

To completely manually remove Le.Guardien malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Le.Guardien.

SillyDl.BYL Downloader

Click here to remove SillyDl.BYL malware

SillyDl.BYL description:
SillyDl.BYL Category:Downloader
Trojans-downloaders downloads and installs new malware or adware on the computer.

Removing SillyDl.BYL:

you can run trial version of ExterminateIt, or remove SillyDl.BYL manually.

To completely manually remove SillyDl.BYL malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.BYL.

Email.Observer Spyware

Click here to remove Email.Observer malware

Email.Observer description:
Email.Observer Category:Spyware
Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Detection Email.Observer :

Email.Observer Files:
[%SYSTEM%]\drivers\emos.sys
[%SYSTEM%]\emos.exe
[%WINDOWS%]\Help\emoshelp.chm
[%SYSTEM%]\drivers\emos.sys
[%SYSTEM%]\emos.exe
[%WINDOWS%]\Help\emoshelp.chm

Email.Observer Folders:
[%PROGRAMS%]\EmailObserver
[%PROGRAM_FILES%]\EmailObserver

Email.Observer Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\emailobserver
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\emos
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\emossrv

Email.Observer Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\run
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_emos
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_emossrv
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_emossrv\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_emossrv\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_emossrv\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_emossrv\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_emossrv\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_emossrv\0000\control
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_emossrv\0000\control
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_emos\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_emos\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_emos\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_emos\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_emos\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_emos\0000\control
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_emos\0000\control

Removing Email.Observer:

you can run trial version of ExterminateIt, or remove Email.Observer manually.

To completely manually remove Email.Observer malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Email.Observer.

FloodBot DoS

FloodBot description:
FloodBot Category:DoS
DoS trojans conduct attacks from a single computer with the consent of the user.

Removing FloodBot:

you can run trial version of ExterminateIt, or remove FloodBot manually.

To completely manually remove FloodBot malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with FloodBot.

against.Alibaba.WebServer DoS

Click here to remove against.Alibaba.WebServer malware

against.Alibaba.WebServer description:
against.Alibaba.WebServer Category:DoS
DoS trojans conduct attacks from a single computer with the consent of the user.

Removing against.Alibaba.WebServer:

you can run trial version of ExterminateIt, or remove against.Alibaba.WebServer manually.

To completely manually remove against.Alibaba.WebServer malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with against.Alibaba.WebServer.

Win32.Flooder.SMS.VB DoS

Click here to remove Win32.Flooder.SMS.VB malware

Win32.Flooder.SMS.VB description:
Win32.Flooder.SMS.VB Category:DoS
These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Removing Win32.Flooder.SMS.VB:

you can run trial version of ExterminateIt, or remove Win32.Flooder.SMS.VB manually.

To completely manually remove Win32.Flooder.SMS.VB malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.Flooder.SMS.VB.

Perl.SocketConnect Backdoor

Click here to remove Perl.SocketConnect malware

Perl.SocketConnect description:
Perl.SocketConnect Category:Backdoor
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Removing Perl.SocketConnect:

you can run trial version of ExterminateIt, or remove Perl.SocketConnect manually.

To completely manually remove Perl.SocketConnect malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Perl.SocketConnect.

CodeZero BHO

CodeZero description:
CodeZero Category:BHO
The BHO (Browser Helper Object) waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.

Detection CodeZero :

CodeZero Files:
[%PROGRAMS%]\codezero\codezero.lnk
[%PROGRAM_FILES%]\codezero\bpt.ini
[%PROGRAM_FILES%]\codezero\czbho.dll
[%PROGRAM_FILES%]\codezero\czoptima.exe
[%PROGRAM_FILES%]\codezero\cztray.exe
[%PROGRAM_FILES%]\codezero\czupdate.exe
[%PROGRAM_FILES%]\codezero\image\0.jpg
[%PROGRAM_FILES%]\codezero\image\1.jpg
[%PROGRAM_FILES%]\codezero\image\2.jpg
[%PROGRAM_FILES%]\codezero\image\2_1(1).jpg
[%PROGRAM_FILES%]\codezero\image\2_1.jpg
[%PROGRAM_FILES%]\codezero\image\2_2.jpg
[%PROGRAM_FILES%]\codezero\image\3.jpg
[%PROGRAM_FILES%]\codezero\image\4.jpg
[%PROGRAM_FILES%]\codezero\image\5.jpg
[%PROGRAM_FILES%]\codezero\image\background.jpg
[%PROGRAM_FILES%]\codezero\image\backup.ini
[%PROGRAM_FILES%]\codezero\image\bpt.ini
[%PROGRAM_FILES%]\codezero\image\bpt_h7.ini
[%PROGRAM_FILES%]\codezero\image\bpt_k3.ini
[%PROGRAM_FILES%]\codezero\image\btn.jpg
[%PROGRAM_FILES%]\codezero\image\btn_close.jpg
[%PROGRAM_FILES%]\codezero\image\buttoncontrol.jpg
[%PROGRAM_FILES%]\codezero\image\codezero.ico
[%PROGRAM_FILES%]\codezero\image\codezero.jpg
[%PROGRAM_FILES%]\codezero\image\codezero_main.jpg
[%PROGRAM_FILES%]\codezero\image\codezero_update.jpg
[%PROGRAM_FILES%]\codezero\image\control.jpg
[%PROGRAM_FILES%]\codezero\image\czero_16.ico
[%PROGRAM_FILES%]\codezero\image\diskcontrol.jpg
[%PROGRAM_FILES%]\codezero\image\drive.ini
[%PROGRAM_FILES%]\codezero\image\drive.jpg
[%PROGRAM_FILES%]\codezero\image\findreg.ini
[%PROGRAM_FILES%]\codezero\image\findreg.jpg
[%PROGRAM_FILES%]\codezero\image\hate.ini
[%PROGRAM_FILES%]\codezero\image\info.ini
[%PROGRAM_FILES%]\codezero\image\mad.ini
[%PROGRAM_FILES%]\codezero\image\madorreg.jpg
[%PROGRAM_FILES%]\codezero\image\main.ini
[%PROGRAM_FILES%]\codezero\image\offline.jpg
[%PROGRAM_FILES%]\codezero\image\onok.jpg
[%PROGRAM_FILES%]\codezero\image\optima.ini
[%PROGRAM_FILES%]\codezero\image\page.ini
[%PROGRAM_FILES%]\codezero\image\pcxx.ini
[%PROGRAM_FILES%]\codezero\image\person.jpg
[%PROGRAM_FILES%]\codezero\image\personcontrol.jpg
[%PROGRAM_FILES%]\codezero\image\popup_fixed.bmp
[%PROGRAM_FILES%]\codezero\image\popup_test.bmp
[%PROGRAM_FILES%]\codezero\image\popup_test2.bmp
[%PROGRAM_FILES%]\codezero\image\recdelcontrol.jpg
[%PROGRAM_FILES%]\codezero\image\record.ini
[%PROGRAM_FILES%]\codezero\image\recordcontrol.jpg
[%PROGRAM_FILES%]\codezero\image\recorddel.jpg
[%PROGRAM_FILES%]\codezero\image\regdel.ini
[%PROGRAM_FILES%]\codezero\image\regdel.jpg
[%PROGRAM_FILES%]\codezero\image\searchreg.ini
[%PROGRAM_FILES%]\codezero\image\searchreg.jpg
[%PROGRAM_FILES%]\codezero\image\skin.ini
[%PROGRAM_FILES%]\codezero\image\start.jpg
[%PROGRAM_FILES%]\codezero\image\tab.jpg
[%PROGRAM_FILES%]\codezero\image\topmenu.jpg
[%PROGRAM_FILES%]\codezero\image\update.ini
[%PROGRAM_FILES%]\codezero\image\update.jpg
[%PROGRAM_FILES%]\codezero\mfc42.dll
[%PROGRAM_FILES%]\codezero\uncz.exe
[%PROGRAM_FILES%]\codezero\uninstall.exe
[%PROGRAM_FILES%]\codezero\update\appver.log
[%PROGRAM_FILES%]\codezero\update\badcode.log
[%PROGRAM_FILES%]\codezero\update\badsite.log
[%PROGRAM_FILES%]\codezero\update\badsiteupdate.dat
[%PROGRAM_FILES%]\codezero\update\badsitever.log
[%PROGRAM_FILES%]\codezero\update\obfl.dat
[%PROGRAM_FILES%]\codezero\update\obrl.dat
[%PROGRAMS%]\codezero\codezero.lnk
[%PROGRAM_FILES%]\codezero\bpt.ini
[%PROGRAM_FILES%]\codezero\czbho.dll
[%PROGRAM_FILES%]\codezero\czoptima.exe
[%PROGRAM_FILES%]\codezero\cztray.exe
[%PROGRAM_FILES%]\codezero\czupdate.exe
[%PROGRAM_FILES%]\codezero\image\0.jpg
[%PROGRAM_FILES%]\codezero\image\1.jpg
[%PROGRAM_FILES%]\codezero\image\2.jpg
[%PROGRAM_FILES%]\codezero\image\2_1(1).jpg
[%PROGRAM_FILES%]\codezero\image\2_1.jpg
[%PROGRAM_FILES%]\codezero\image\2_2.jpg
[%PROGRAM_FILES%]\codezero\image\3.jpg
[%PROGRAM_FILES%]\codezero\image\4.jpg
[%PROGRAM_FILES%]\codezero\image\5.jpg
[%PROGRAM_FILES%]\codezero\image\background.jpg
[%PROGRAM_FILES%]\codezero\image\backup.ini
[%PROGRAM_FILES%]\codezero\image\bpt.ini
[%PROGRAM_FILES%]\codezero\image\bpt_h7.ini
[%PROGRAM_FILES%]\codezero\image\bpt_k3.ini
[%PROGRAM_FILES%]\codezero\image\btn.jpg
[%PROGRAM_FILES%]\codezero\image\btn_close.jpg
[%PROGRAM_FILES%]\codezero\image\buttoncontrol.jpg
[%PROGRAM_FILES%]\codezero\image\codezero.ico
[%PROGRAM_FILES%]\codezero\image\codezero.jpg
[%PROGRAM_FILES%]\codezero\image\codezero_main.jpg
[%PROGRAM_FILES%]\codezero\image\codezero_update.jpg
[%PROGRAM_FILES%]\codezero\image\control.jpg
[%PROGRAM_FILES%]\codezero\image\czero_16.ico
[%PROGRAM_FILES%]\codezero\image\diskcontrol.jpg
[%PROGRAM_FILES%]\codezero\image\drive.ini
[%PROGRAM_FILES%]\codezero\image\drive.jpg
[%PROGRAM_FILES%]\codezero\image\findreg.ini
[%PROGRAM_FILES%]\codezero\image\findreg.jpg
[%PROGRAM_FILES%]\codezero\image\hate.ini
[%PROGRAM_FILES%]\codezero\image\info.ini
[%PROGRAM_FILES%]\codezero\image\mad.ini
[%PROGRAM_FILES%]\codezero\image\madorreg.jpg
[%PROGRAM_FILES%]\codezero\image\main.ini
[%PROGRAM_FILES%]\codezero\image\offline.jpg
[%PROGRAM_FILES%]\codezero\image\onok.jpg
[%PROGRAM_FILES%]\codezero\image\optima.ini
[%PROGRAM_FILES%]\codezero\image\page.ini
[%PROGRAM_FILES%]\codezero\image\pcxx.ini
[%PROGRAM_FILES%]\codezero\image\person.jpg
[%PROGRAM_FILES%]\codezero\image\personcontrol.jpg
[%PROGRAM_FILES%]\codezero\image\popup_fixed.bmp
[%PROGRAM_FILES%]\codezero\image\popup_test.bmp
[%PROGRAM_FILES%]\codezero\image\popup_test2.bmp
[%PROGRAM_FILES%]\codezero\image\recdelcontrol.jpg
[%PROGRAM_FILES%]\codezero\image\record.ini
[%PROGRAM_FILES%]\codezero\image\recordcontrol.jpg
[%PROGRAM_FILES%]\codezero\image\recorddel.jpg
[%PROGRAM_FILES%]\codezero\image\regdel.ini
[%PROGRAM_FILES%]\codezero\image\regdel.jpg
[%PROGRAM_FILES%]\codezero\image\searchreg.ini
[%PROGRAM_FILES%]\codezero\image\searchreg.jpg
[%PROGRAM_FILES%]\codezero\image\skin.ini
[%PROGRAM_FILES%]\codezero\image\start.jpg
[%PROGRAM_FILES%]\codezero\image\tab.jpg
[%PROGRAM_FILES%]\codezero\image\topmenu.jpg
[%PROGRAM_FILES%]\codezero\image\update.ini
[%PROGRAM_FILES%]\codezero\image\update.jpg
[%PROGRAM_FILES%]\codezero\mfc42.dll
[%PROGRAM_FILES%]\codezero\uncz.exe
[%PROGRAM_FILES%]\codezero\uninstall.exe
[%PROGRAM_FILES%]\codezero\update\appver.log
[%PROGRAM_FILES%]\codezero\update\badcode.log
[%PROGRAM_FILES%]\codezero\update\badsite.log
[%PROGRAM_FILES%]\codezero\update\badsiteupdate.dat
[%PROGRAM_FILES%]\codezero\update\badsitever.log
[%PROGRAM_FILES%]\codezero\update\obfl.dat
[%PROGRAM_FILES%]\codezero\update\obrl.dat

CodeZero Registry Values:
HKEY_LOCAL_MACHINE\software\codezero
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\codezero
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\codezero
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\codezero
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\codezero

Removing CodeZero:

you can run trial version of ExterminateIt, or remove CodeZero manually.

To completely manually remove CodeZero malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with CodeZero.

Wednesday, December 24, 2008

Pigeon.AWY Trojan

Pigeon.AWY description:
Pigeon.AWY Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AWY:

you can run trial version of ExterminateIt, or remove Pigeon.AWY manually.

To completely manually remove Pigeon.AWY malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AWY.

Funlove Trojan

Funlove description:
Funlove Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Funlove:

you can run trial version of ExterminateIt, or remove Funlove manually.

To completely manually remove Funlove malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Funlove.

artistdirect.com Tracking Cookie

Click here to remove artistdirect.com malware

artistdirect.com description:
artistdirect.com Category:Tracking Cookie
Tracking cookies, like regular cookies, are small files that get deposited
onto your computer's hard drive as you browse the Internet.
Unlike harmless cookies that normally let you use certain websites more easily,
tracking cookies usually collect and report information about what websites you visit
and what you do at those websites.

Removing artistdirect.com:

you can run trial version of ExterminateIt, or remove artistdirect.com manually.

To completely manually remove artistdirect.com malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with artistdirect.com.

SillyDl.BCL Downloader

Click here to remove SillyDl.BCL malware

SillyDl.BCL description:
SillyDl.BCL Category:Downloader
Trojans-downloaders downloads and installs new malware or adware on the computer.

Removing SillyDl.BCL:

you can run trial version of ExterminateIt, or remove SillyDl.BCL manually.

To completely manually remove SillyDl.BCL malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with SillyDl.BCL.

Petribot.AHZ Trojan

Click here to remove Petribot.AHZ malware

Petribot.AHZ description:
Petribot.AHZ Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Petribot.AHZ:

you can run trial version of ExterminateIt, or remove Petribot.AHZ manually.

To completely manually remove Petribot.AHZ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Petribot.AHZ.

Win32.Masteseq Trojan

Click here to remove Win32.Masteseq malware

Win32.Masteseq description:
Win32.Masteseq Category:Trojan,Backdoor
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Removing Win32.Masteseq:

you can run trial version of ExterminateIt, or remove Win32.Masteseq manually.

To completely manually remove Win32.Masteseq malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.Masteseq.

Bancos.GSX Trojan

Bancos.GSX description:
Bancos.GSX Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Bancos.GSX:

you can run trial version of ExterminateIt, or remove Bancos.GSX manually.

To completely manually remove Bancos.GSX malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.GSX.

Tuesday, December 23, 2008

TrojanDownloader.Win32.IstBar Downloader

Click here to remove TrojanDownloader.Win32.IstBar malware

TrojanDownloader.Win32.IstBar description:
TrojanDownloader.Win32.IstBar Category:Downloader
Trojans-downloaders downloads and installs new malware or adware on the computer.

Removing TrojanDownloader.Win32.IstBar:

you can run trial version of ExterminateIt, or remove TrojanDownloader.Win32.IstBar manually.

To completely manually remove TrojanDownloader.Win32.IstBar malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with TrojanDownloader.Win32.IstBar.

Venuv Trojan

Venuv description:
Venuv Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Detection Venuv :

Venuv Files:
[%SYSTEM%]\cmnocfg.xml
[%SYSTEM%]\dcstream.dll
[%SYSTEM%]\mscorews.dll
[%SYSTEM%]\nvquetys.dll
[%SYSTEM%]\qviexio3.dat
[%SYSTEM%]\cmnocfg.xml
[%SYSTEM%]\dcstream.dll
[%SYSTEM%]\mscorews.dll
[%SYSTEM%]\nvquetys.dll
[%SYSTEM%]\qviexio3.dat

Venuv Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{0000DE80-AEC3-70C3-4176-CE509063E000}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0000DE80-AEC3-70C3-4176-CE509063E000}
HKEY_CLASSES_ROOT\clsid\{0000de80-aec3-70c3-4176-ce509063e000}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{0000de80-aec3-70c3-4176-ce509063e000}

Removing Venuv:

you can run trial version of ExterminateIt, or remove Venuv manually.

To completely manually remove Venuv malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Venuv.

Pigeon.ELE Trojan

Pigeon.ELE description:
Pigeon.ELE Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.ELE:

you can run trial version of ExterminateIt, or remove Pigeon.ELE manually.

To completely manually remove Pigeon.ELE malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.ELE.

PM Trojan

PM description:
PM Category:Trojan,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing PM:

you can run trial version of ExterminateIt, or remove PM manually.

To completely manually remove PM malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with PM.

Backdoor.War.20!Server Backdoor

Click here to remove Backdoor.War.20!Server malware

Backdoor.War.20!Server description:
Backdoor.War.20!Server Category:Backdoor
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.

Removing Backdoor.War.20!Server:

you can run trial version of ExterminateIt, or remove Backdoor.War.20!Server manually.

To completely manually remove Backdoor.War.20!Server malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Backdoor.War.20!Server.

Bowl Trojan

Bowl description:
Bowl Category:Trojan,Backdoor,RAT,Downloader
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.
This family of Trojans downloads and installs new malware or adware on the computer.
The downloader then either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the
Trojan or downloaded from a specified website.

Detection Bowl :

Bowl Files:
[%WINDOWS%]\netpopup.exe
[%WINDOWS%]\netpopup.exe

Removing Bowl:

you can run trial version of ExterminateIt, or remove Bowl manually.

To completely manually remove Bowl malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bowl.

Rebrand.ComputerMonitorKeylogger Spyware

Click here to remove Rebrand.ComputerMonitorKeylogger malware

Rebrand.ComputerMonitorKeylogger description:
Rebrand.ComputerMonitorKeylogger Category:Spyware
Spyware is computer software that is installed surreptitiously on a personal computer
to intercept or take partial control over the user's interaction
with the computer, without the user's informed consent.

While the term spyware suggests software that secretly monitors the user's behavior,
the functions of spyware extend well beyond simple monitoring.

Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Detection Rebrand.ComputerMonitorKeylogger :

Rebrand.ComputerMonitorKeylogger Files:
[%DESKTOP%]\computer monitor keylogger demo.lnk
[%DESKTOP%]\computer monitor keylogger demo.lnk

Rebrand.ComputerMonitorKeylogger Folders:
[%PROGRAMS%]\rebrandsoftware
[%PROGRAM_FILES%]\rscmkd

Rebrand.ComputerMonitorKeylogger Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\folders
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\upgradecodes\35dd57b63ac91b249aa3c668e74bd75e
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{ff82e055-5798-41b6-a0a7-6cee72e5c294}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{ff82e055-5798-41b6-a0a7-6cee72e5c294}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{ff82e055-5798-41b6-a0a7-6cee72e5c294}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{ff82e055-5798-41b6-a0a7-6cee72e5c294}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{ff82e055-5798-41b6-a0a7-6cee72e5c294}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{ff82e055-5798-41b6-a0a7-6cee72e5c294}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{ff82e055-5798-41b6-a0a7-6cee72e5c294}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{ff82e055-5798-41b6-a0a7-6cee72e5c294}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{ff82e055-5798-41b6-a0a7-6cee72e5c294}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{ff82e055-5798-41b6-a0a7-6cee72e5c294}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{ff82e055-5798-41b6-a0a7-6cee72e5c294}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\{ff82e055-5798-41b6-a0a7-6cee72e5c294}

Removing Rebrand.ComputerMonitorKeylogger:

you can run trial version of ExterminateIt, or remove Rebrand.ComputerMonitorKeylogger manually.

To completely manually remove Rebrand.ComputerMonitorKeylogger malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Rebrand.ComputerMonitorKeylogger.

Yazzle.Sudoku Trojan

Click here to remove Yazzle.Sudoku malware

Yazzle.Sudoku description:
Yazzle.Sudoku Category:Trojan,Adware
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Detection Yazzle.Sudoku :

Yazzle.Sudoku Files:
[%PROGRAMS%]\Yazzle Sudoku\Uninstall Yazzle Sudoku.lnk
[%PROGRAMS%]\Yazzle Sudoku\Uninstall Yazzle Sudoku.lnk

Yazzle.Sudoku Folders:
[%PROGRAMS%]\yazzle sudoku
[%PROGRAM_FILES%]\yazzle sudoku

Yazzle.Sudoku Registry Keys:
HKEY_CLASSES_ROOT\.sdu
HKEY_CLASSES_ROOT\yazzlesudokugame
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\yazzlesudoku
HKEY_LOCAL_MACHINE\software\yazzle sudoku
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\yazzle sudoku

Removing Yazzle.Sudoku:

you can run trial version of ExterminateIt, or remove Yazzle.Sudoku manually.

To completely manually remove Yazzle.Sudoku malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Yazzle.Sudoku.

Cattivik.FTP.Server Backdoor

Click here to remove Cattivik.FTP.Server malware

Cattivik.FTP.Server description:
Cattivik.FTP.Server Category:Backdoor,Hacker Tool
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:

Launching/ deleting files

Sending/ receiving files

Deleting data

Displaying notification

Rebooting the machine

Executing files

Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
These utilities are designed to penetrate remote computers
in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing Cattivik.FTP.Server:

you can run trial version of ExterminateIt, or remove Cattivik.FTP.Server manually.

To completely manually remove Cattivik.FTP.Server malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Cattivik.FTP.Server.

Xposure Backdoor

Xposure description:
Xposure Category:Backdoor,RAT
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Removing Xposure:

you can run trial version of ExterminateIt, or remove Xposure manually.

To completely manually remove Xposure malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Xposure.

Firmox Trojan

Firmox description:
Firmox Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Detection Firmox :

Firmox Files:
[%SYSTEM%]\shellext\svchs0t.exe
[%SYSTEM%]\shellext\svchs0t.exe

Firmox Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Firmox:

you can run trial version of ExterminateIt, or remove Firmox manually.

To completely manually remove Firmox malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Firmox.

Vxidl.BEM Trojan

Vxidl.BEM description:
Vxidl.BEM Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Vxidl.BEM:

you can run trial version of ExterminateIt, or remove Vxidl.BEM manually.

To completely manually remove Vxidl.BEM malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.BEM.

Bancos.FYN Trojan

Bancos.FYN description:
Bancos.FYN Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.FYN:

you can run trial version of ExterminateIt, or remove Bancos.FYN manually.

To completely manually remove Bancos.FYN malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.FYN.

Win32.PSW.Akcom Trojan

Click here to remove Win32.PSW.Akcom malware

Win32.PSW.Akcom description:
Win32.PSW.Akcom Category:Trojan,Hacker Tool
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Hacker Tools are designed to penetrate remote computers
in order to use them as zombies or to download other malicious programs to computer.

Removing Win32.PSW.Akcom:

you can run trial version of ExterminateIt, or remove Win32.PSW.Akcom manually.

To completely manually remove Win32.PSW.Akcom malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.PSW.Akcom.

Monday, December 22, 2008

Win32.Spy.GWGhost Trojan

Click here to remove Win32.Spy.GWGhost malware

Win32.Spy.GWGhost description:
Win32.Spy.GWGhost Category:Trojan,Spyware
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Removing Win32.Spy.GWGhost:

you can run trial version of ExterminateIt, or remove Win32.Spy.GWGhost manually.

To completely manually remove Win32.Spy.GWGhost malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Win32.Spy.GWGhost.

BAT.Delfile Trojan

Click here to remove BAT.Delfile malware

BAT.Delfile description:
BAT.Delfile Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing BAT.Delfile:

you can run trial version of ExterminateIt, or remove BAT.Delfile manually.

To completely manually remove BAT.Delfile malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with BAT.Delfile.

Bancos.FVP Trojan

Bancos.FVP description:
Bancos.FVP Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Bancos.FVP:

you can run trial version of ExterminateIt, or remove Bancos.FVP manually.

To completely manually remove Bancos.FVP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.FVP.

Dluca.by Trojan

Dluca.by description:
Dluca.by Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Detection Dluca.by :

Dluca.by Files:
[%SYSTEM%]\dxvid.exe
[%SYSTEM%]\dxvid.exe

Dluca.by Registry Keys:
HKEY_CURRENT_USER\software\dxvid
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\dxvid

Dluca.by Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Dluca.by:

you can run trial version of ExterminateIt, or remove Dluca.by manually.

To completely manually remove Dluca.by malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Dluca.by.

Bancos.ICY Trojan

Bancos.ICY description:
Bancos.ICY Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Bancos.ICY:

you can run trial version of ExterminateIt, or remove Bancos.ICY manually.

To completely manually remove Bancos.ICY malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Bancos.ICY.

Hacker.Brazil Backdoor

Click here to remove Hacker.Brazil malware

Hacker.Brazil description:
Hacker.Brazil Category:Backdoor,RAT
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
Often the backdoor will not be visible in the log of active programs.
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.
They usually do whimsical things like flip the screen upside-down, open the CD-ROM tray,
and swap mouse buttons. However, they can be quite hard to remove.

Detection Hacker.Brazil :

Hacker.Brazil Files:
[%WINDOWS%]\system\hacker_brasil.exe
[%WINDOWS%]\system\hacker_brasil.exe

Removing Hacker.Brazil:

you can run trial version of ExterminateIt, or remove Hacker.Brazil manually.

To completely manually remove Hacker.Brazil malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Hacker.Brazil.

Haxial.RemoteAdminTool RAT

Click here to remove Haxial.RemoteAdminTool malware

Haxial.RemoteAdminTool description:
Haxial.RemoteAdminTool Category:RAT
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Removing Haxial.RemoteAdminTool:

you can run trial version of ExterminateIt, or remove Haxial.RemoteAdminTool manually.

To completely manually remove Haxial.RemoteAdminTool malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Haxial.RemoteAdminTool.

rpc3 Trojan

rpc3 description:
rpc3 Category:Trojan,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Removing rpc3:

you can run trial version of ExterminateIt, or remove rpc3 manually.

To completely manually remove rpc3 malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with rpc3.

Virtual.Drives.Manager RAT

Click here to remove Virtual.Drives.Manager malware

Virtual.Drives.Manager description:
Virtual.Drives.Manager Category:RAT
Many trojans and backdoors now have remote administration capabilities
allowing an individual to control the victim's computer.
Many times a file called the server must be opened on the victim's computer before
the trojan can have access to it.

These are generally sent through email, P2P file sharing software,
and in internet downloads. They are usually disguised as a legitimate program or file.
Many server files will display a fake error message when opened, to make it seem like it didn't open.
Some will also kill antivirus and firewall software.

Removing Virtual.Drives.Manager:

you can run trial version of ExterminateIt, or remove Virtual.Drives.Manager manually.

To completely manually remove Virtual.Drives.Manager malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Virtual.Drives.Manager.

Vxidl.BDP Trojan

Vxidl.BDP description:
Vxidl.BDP Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Vxidl.BDP:

you can run trial version of ExterminateIt, or remove Vxidl.BDP manually.

To completely manually remove Vxidl.BDP malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Vxidl.BDP.

Sunday, December 21, 2008

Pigeon.AVOQ Trojan

Click here to remove Pigeon.AVOQ malware

Pigeon.AVOQ description:
Pigeon.AVOQ Category:Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Removing Pigeon.AVOQ:

you can run trial version of ExterminateIt, or remove Pigeon.AVOQ manually.

To completely manually remove Pigeon.AVOQ malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AVOQ.

Recorder Spyware

Recorder description:
Recorder Category:Spyware
Spyware is computer software that is installed surreptitiously on a personal computer
to intercept or take partial control over the user's interaction
with the computer, without the user's informed consent.

While the term spyware suggests software that secretly monitors the user's behavior,
the functions of spyware extend well beyond simple monitoring.

Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Removing Recorder:

you can run trial version of ExterminateIt, or remove Recorder manually.

To completely manually remove Recorder malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Recorder.

Pigeon.AOO Trojan

Pigeon.AOO description:
Pigeon.AOO Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Pigeon.AOO:

you can run trial version of ExterminateIt, or remove Pigeon.AOO manually.

To completely manually remove Pigeon.AOO malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Pigeon.AOO.

Rorcver Trojan

Rorcver description:
Rorcver Category:Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Removing Rorcver:

you can run trial version of ExterminateIt, or remove Rorcver manually.

To completely manually remove Rorcver malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Rorcver.

Lop.com.RND Spyware

Click here to remove Lop.com.RND malware

Lop.com.RND description:
Lop.com.RND Category:Spyware
Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Removing Lop.com.RND:

you can run trial version of ExterminateIt, or remove Lop.com.RND manually.

To completely manually remove Lop.com.RND malware from your computer, you need to delete the Windows registry keys and registry values, the files and folders associated with Lop.com.RND.