Tuesday, November 11, 2008

Lager Trojan

Removing Lager
Categories: Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Lager Also known as:

[Kaspersky]Trojan.Proxy.Win32.Lager.ch,Trojan-Prox.Win32.Lager.dt;
[Other]W32/Crypt.gen4,TROJ_LAGER.AR

Visible Symptoms:
Files in system folders:
[%PROFILE_TEMP%]\WER54.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER55.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER56.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER57.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER58.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER59.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5A.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5B.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5C.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5D.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5E.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5F.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER60.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER61.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER62.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER63.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER64.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER65.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER66.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER67.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER68.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER69.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER6A.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER54.tmp
[%PROFILE_TEMP%]\WER55.tmp
[%PROFILE_TEMP%]\WER56.tmp
[%PROFILE_TEMP%]\WER57.tmp
[%PROFILE_TEMP%]\WER58.tmp
[%PROFILE_TEMP%]\WER59.tmp
[%PROFILE_TEMP%]\WER5A.tmp
[%PROFILE_TEMP%]\WER5B.tmp
[%PROFILE_TEMP%]\WER5C.tmp
[%PROFILE_TEMP%]\WER5D.tmp
[%PROFILE_TEMP%]\WER5E.tmp
[%PROFILE_TEMP%]\WER5F.tmp
[%PROFILE_TEMP%]\WER60.tmp
[%PROFILE_TEMP%]\WER61.tmp
[%PROFILE_TEMP%]\WER62.tmp
[%PROFILE_TEMP%]\WER63.tmp
[%PROFILE_TEMP%]\WER64.tmp
[%PROFILE_TEMP%]\WER65.tmp
[%PROFILE_TEMP%]\WER66.tmp
[%PROFILE_TEMP%]\WER67.tmp
[%PROFILE_TEMP%]\WER68.tmp
[%PROFILE_TEMP%]\WER69.tmp
[%PROFILE_TEMP%]\WER6A.tmp
[%PROFILE_TEMP%]\WER54.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER55.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER56.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER57.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER58.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER59.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5A.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5B.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5C.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5D.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5E.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5F.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER60.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER61.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER62.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER63.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER64.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER65.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER66.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER67.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER68.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER69.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER6A.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER54.tmp
[%PROFILE_TEMP%]\WER55.tmp
[%PROFILE_TEMP%]\WER56.tmp
[%PROFILE_TEMP%]\WER57.tmp
[%PROFILE_TEMP%]\WER58.tmp
[%PROFILE_TEMP%]\WER59.tmp
[%PROFILE_TEMP%]\WER5A.tmp
[%PROFILE_TEMP%]\WER5B.tmp
[%PROFILE_TEMP%]\WER5C.tmp
[%PROFILE_TEMP%]\WER5D.tmp
[%PROFILE_TEMP%]\WER5E.tmp
[%PROFILE_TEMP%]\WER5F.tmp
[%PROFILE_TEMP%]\WER60.tmp
[%PROFILE_TEMP%]\WER61.tmp
[%PROFILE_TEMP%]\WER62.tmp
[%PROFILE_TEMP%]\WER63.tmp
[%PROFILE_TEMP%]\WER64.tmp
[%PROFILE_TEMP%]\WER65.tmp
[%PROFILE_TEMP%]\WER66.tmp
[%PROFILE_TEMP%]\WER67.tmp
[%PROFILE_TEMP%]\WER68.tmp
[%PROFILE_TEMP%]\WER69.tmp
[%PROFILE_TEMP%]\WER6A.tmp

How to detect Lager:

Files:
[%PROFILE_TEMP%]\WER54.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER55.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER56.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER57.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER58.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER59.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5A.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5B.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5C.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5D.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5E.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5F.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER60.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER61.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER62.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER63.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER64.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER65.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER66.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER67.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER68.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER69.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER6A.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER54.tmp
[%PROFILE_TEMP%]\WER55.tmp
[%PROFILE_TEMP%]\WER56.tmp
[%PROFILE_TEMP%]\WER57.tmp
[%PROFILE_TEMP%]\WER58.tmp
[%PROFILE_TEMP%]\WER59.tmp
[%PROFILE_TEMP%]\WER5A.tmp
[%PROFILE_TEMP%]\WER5B.tmp
[%PROFILE_TEMP%]\WER5C.tmp
[%PROFILE_TEMP%]\WER5D.tmp
[%PROFILE_TEMP%]\WER5E.tmp
[%PROFILE_TEMP%]\WER5F.tmp
[%PROFILE_TEMP%]\WER60.tmp
[%PROFILE_TEMP%]\WER61.tmp
[%PROFILE_TEMP%]\WER62.tmp
[%PROFILE_TEMP%]\WER63.tmp
[%PROFILE_TEMP%]\WER64.tmp
[%PROFILE_TEMP%]\WER65.tmp
[%PROFILE_TEMP%]\WER66.tmp
[%PROFILE_TEMP%]\WER67.tmp
[%PROFILE_TEMP%]\WER68.tmp
[%PROFILE_TEMP%]\WER69.tmp
[%PROFILE_TEMP%]\WER6A.tmp
[%PROFILE_TEMP%]\WER54.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER55.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER56.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER57.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER58.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER59.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5A.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5B.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5C.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5D.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5E.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER5F.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER60.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER61.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER62.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER63.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER64.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER65.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER66.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER67.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER68.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER69.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER6A.tmp.dir00\appcompat.txt
[%PROFILE_TEMP%]\WER54.tmp
[%PROFILE_TEMP%]\WER55.tmp
[%PROFILE_TEMP%]\WER56.tmp
[%PROFILE_TEMP%]\WER57.tmp
[%PROFILE_TEMP%]\WER58.tmp
[%PROFILE_TEMP%]\WER59.tmp
[%PROFILE_TEMP%]\WER5A.tmp
[%PROFILE_TEMP%]\WER5B.tmp
[%PROFILE_TEMP%]\WER5C.tmp
[%PROFILE_TEMP%]\WER5D.tmp
[%PROFILE_TEMP%]\WER5E.tmp
[%PROFILE_TEMP%]\WER5F.tmp
[%PROFILE_TEMP%]\WER60.tmp
[%PROFILE_TEMP%]\WER61.tmp
[%PROFILE_TEMP%]\WER62.tmp
[%PROFILE_TEMP%]\WER63.tmp
[%PROFILE_TEMP%]\WER64.tmp
[%PROFILE_TEMP%]\WER65.tmp
[%PROFILE_TEMP%]\WER66.tmp
[%PROFILE_TEMP%]\WER67.tmp
[%PROFILE_TEMP%]\WER68.tmp
[%PROFILE_TEMP%]\WER69.tmp
[%PROFILE_TEMP%]\WER6A.tmp

Removing Lager:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:

No comments: