Wednesday, November 12, 2008

BrowserToolbar Adware

Removing BrowserToolbar
Categories: Adware,Downloader
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Trojans-downloaders downloads and installs new malware or adware on the computer.


Visible Symptoms:
Files in system folders:
[%WINDOWS%]\absr.exe
[%WINDOWS%]\abstr.exe
[%WINDOWS%]\ausvc.exe
[%WINDOWS%]\auupg.exe
[%WINDOWS%]\bvt.exe
[%WINDOWS%]\coolstuff.ocx
[%WINDOWS%]\ea.bin
[%WINDOWS%]\mnsvc.exe
[%WINDOWS%]\mtbcd.bak
[%WINDOWS%]\undo.exe
[%WINDOWS%]\absr.exe
[%WINDOWS%]\abstr.exe
[%WINDOWS%]\ausvc.exe
[%WINDOWS%]\auupg.exe
[%WINDOWS%]\bvt.exe
[%WINDOWS%]\coolstuff.ocx
[%WINDOWS%]\ea.bin
[%WINDOWS%]\mnsvc.exe
[%WINDOWS%]\mtbcd.bak
[%WINDOWS%]\undo.exe

How to detect BrowserToolbar:

Files:
[%WINDOWS%]\absr.exe
[%WINDOWS%]\abstr.exe
[%WINDOWS%]\ausvc.exe
[%WINDOWS%]\auupg.exe
[%WINDOWS%]\bvt.exe
[%WINDOWS%]\coolstuff.ocx
[%WINDOWS%]\ea.bin
[%WINDOWS%]\mnsvc.exe
[%WINDOWS%]\mtbcd.bak
[%WINDOWS%]\undo.exe
[%WINDOWS%]\absr.exe
[%WINDOWS%]\abstr.exe
[%WINDOWS%]\ausvc.exe
[%WINDOWS%]\auupg.exe
[%WINDOWS%]\bvt.exe
[%WINDOWS%]\coolstuff.ocx
[%WINDOWS%]\ea.bin
[%WINDOWS%]\mnsvc.exe
[%WINDOWS%]\mtbcd.bak
[%WINDOWS%]\undo.exe

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{6541b981-2e27-46b1-a2cc-8264a75b74fe}
HKEY_CLASSES_ROOT\clsid\{6d8b1b74-4ab8-473b-b479-253fa1936802}
HKEY_CLASSES_ROOT\clsid\{868b015f-3515-44db-b0ad-182cd058985e}
HKEY_CLASSES_ROOT\clsid\{9a05fe9b-5b52-4d13-a77d-fa7c38557a8e}
HKEY_CLASSES_ROOT\clsid\{bae85c97-2cd4-45c3-a1ed-e4cef7c6aa52}
HKEY_CLASSES_ROOT\clsid\{c76be992-2bc3-41a4-8b87-a8c01fe419a7}
HKEY_CLASSES_ROOT\clsid\{f53c844a-d9c8-4e92-b923-c05b46c4a7e3}
HKEY_LOCAL_MACHINE\software\classes\appid\{8b034058-08b0-4cb3-b2e8-60238b4967f2}
HKEY_LOCAL_MACHINE\software\classes\clsid\{6541b981-2e27-46b1-a2cc-8264a75b74fe}
HKEY_LOCAL_MACHINE\software\classes\clsid\{868b015f-3515-44db-b0ad-182cd058985e}
HKEY_LOCAL_MACHINE\software\classes\clsid\{9a05fe9b-5b52-4d13-a77d-fa7c38557a8e}
HKEY_LOCAL_MACHINE\software\classes\clsid\{bae85c97-2cd4-45c3-a1ed-e4cef7c6aa52}
HKEY_LOCAL_MACHINE\software\classes\clsid\{c76be992-2bc3-41a4-8b87-a8c01fe419a7}
HKEY_LOCAL_MACHINE\software\classes\clsid\{f53c844a-d9c8-4e92-b923-c05b46c4a7e3}
HKEY_LOCAL_MACHINE\software\classes\clsid\{fbe091e5-df43-4ffb-aecc-7e3a3bc7b0d9}
HKEY_LOCAL_MACHINE\software\classes\typelib\{6d8b1b74-4ab8-473b-b479-253fa1936802}

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing BrowserToolbar:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:

No comments: