Wednesday, October 22, 2008

Starimp Trojan

Removing Starimp
Categories: Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Starimp Also known as:

[Kaspersky]Trojan-Spy.Win32.Haxspy.ab,Trojan-Spy.Win32.Goldun.lz,Trojan-Spy.Win32.Goldun.md,Trojan-Spy.W32.Haxspy.ai,Trojan-Spy.Win32.Goldun.pb;
[McAfee]PWS-Goldun.dr,ProcKill-DC;
[F-Prot]W32/Goldun.OT;
[Other]Win32.Starimp.AI,Backdoor.Haxdoor.K,Win32/Starimp!generic,Win32/Starimp.AM,Win32/Starimp.AS,Trojan:Win32/HideDrv.gen!sys,Troj/Goldun-FI

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\qhdtvv.dll
[%SYSTEM%]\qhdtvv.dll

How to detect Starimp:

Files:
[%SYSTEM%]\qhdtvv.dll
[%SYSTEM%]\qhdtvv.dll

Folders:
[%PROFILE_TEMP%]\4185XXXX
[%WINDOWS%]\Temp\4185XXXX

Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\qhdtvv

Registry Values:
HKEY_LOCAL_MACHINE\system\currentcontrolset\control
HKEY_LOCAL_MACHINE\system\currentcontrolset\control

Removing Starimp:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Removing DomainHelper Adware
Spabot.x Trojan Cleaner
Neol Backdoor Cleaner
Remove BullsEye.Network Adware
Bifrost Trojan Removal instruction

No comments: