Friday, October 17, 2008

Agent.kf Trojan

Removing Agent.kf
Categories: Trojan,Downloader
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

How to detect Agent.kf:

Registry Keys:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\{41D3DBE5-21B8-4286-ACC9-DD7FCC0C2855}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\{4FA9768D-1F89-42F9-AF30-03A9F30BBB8F}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\{676968C8-EEC2-4025-9DF4-5A64D9236A76}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\{C10310C0-8BA8-4693-9217-9D934C99B52B}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\{D740CC68-1D26-4645-9126-267C705396E7}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\{DBAB53CD-8DA6-4924-ACA2-AAAF3AA6B769}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{682294A5-AEC2-4DC1-AB51-A97B6BAA2017}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{6E2B3C99-61AE-4229-9118-012F683B0DB1}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{70EF126A-AC69-412A-9CB8-604BA73B0327}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{79CC158C-F830-4987-9177-BB4C4BD37A4F}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{8DA6E125-9D73-4BEA-803A-EF0CEDAE05B7}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{8EF99716-3487-481D-B477-E1431E768796}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{90B059C7-DCDF-465A-AFA1-A5A7A9349B4B}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{A0310F3D-AAE3-4BEE-B1B4-8B9CAF748EC7}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{B13E57E1-45C4-4899-B07F-528B2749CAF6}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{B16C98D4-AAE4-49D2-9B80-6AA254F7ADD3}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{B576791D-D62F-48F6-9C51-D1BCD231DB80}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{B585442A-5A5E-4BA1-97F9-FB790B55C32C}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{C0E07037-EB79-4A47-B8C5-62D5ADCEC470}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{C3702658-C621-48BE-8945-D9033C665C92}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{CFE5E3D5-408A-4FE8-B25A-8ECE94A61F3B}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{D375B428-62C0-4144-9794-56D2549C56DB}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{D71224B4-09E1-4B5B-A32C-E996379C05EA}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{DC46F8DC-9A85-40CC-939A-BDD2A2500CC7}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{E2A18919-F303-4B58-935A-521FE0E6389C}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{E50B8038-719E-4706-9591-0A0D3DBB0FE1}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{EC18A809-1972-4FD4-815D-6FE32C57572E}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{FFFFD7B7-0843-4513-99BF-461EEE3E6628}

Removing Agent.kf:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Removing MyTool Adware
BBot Trojan Removal
GoSocks Trojan Removal instruction
Removal.Wizard Adware Cleaner
Neol Backdoor Information

No comments: