Thursday, November 27, 2008

Monkey Trojan

Removing Monkey
Categories: Trojan,Backdoor,Downloader,DoS
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.
Backdoors are the most dangerous type of Trojans and the most popular.
Backdoors open infected machines to external control via Internet.
They function in the same way as legal remote administration programs used by system administrators.
This makes them difficult to detect.

Backdoors are installed and launched without the consent of the user of computer.
Often the backdoor will not be visible in the log of active programs.

Once a backdoor has been successfully launched, the computer is wide open.
Backdoor functions can include:


  • Launching/ deleting files

  • Sending/ receiving files

  • Deleting data

  • Displaying notification

  • Rebooting the machine

  • Executing files




Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.
Backdoors combine the functionality of most other types of in one package.

Backdoors have one especially dangerous sub-class: variants that can propagate like worms.
Trojans-downloaders downloads and installs new malware or adware on the computer.

These programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.

DoS trojans conduct such attacks from a single computer with the consent of the user.

Worms can carry a DoS procedure as part of their payload.

Monkey Also known as:

[Kaspersky]Monkey.b2;
[Panda]Monkey B

Visible Symptoms:
Files in system folders:
[%COMMON_FAVORITES%]\Download Free Spyware Remover.url
[%COMMON_FAVORITES%]\NEW VIAGRA at Half Price!.url
[%COMMON_FAVORITES%]\Online Chat With Nude Girls.url
[%COMMON_FAVORITES%]\Online Pharmacy\CHEAPEST VIAGRA ONLINE.url
[%COMMON_FAVORITES%]\Online Pharmacy\Cialis at HALF PRICE!.url
[%COMMON_FAVORITES%]\Online Pharmacy\Fast Way To Loose Your Weight!.url
[%COMMON_FAVORITES%]\Online Pharmacy\Guaranteed low price at Pills..url
[%COMMON_FAVORITES%]\Online Pharmacy\SOMA at Special LOW PRICE.url
[%COMMON_FAVORITES%]\Online Pharmacy\Tramadol Special Offer!.url
[%COMMON_FAVORITES%]\Online Pharmacy\Try New VIAGRA! Works Faster and Longer!.url
[%COMMON_FAVORITES%]\Order CIALIS online without leaving home..url
[%COMMON_FAVORITES%]\PC protection in under 2 minutes!.url
[%COMMON_FAVORITES%]\Sex and Dating\Meet Girls Who Want To Get Laid!.url
[%COMMON_FAVORITES%]\Sex and Dating\Meet Horny Girls In Your Area!.url
[%COMMON_FAVORITES%]\Sex and Dating\Read profiles and Chat With Nude Girls!.url
[%COMMON_FAVORITES%]\Sex and Dating\SEX Dating - people looking for SEX.url
[%COMMON_FAVORITES%]\Sex and Dating\View XXX photos of Real Sexy Girls..url
[%COMMON_FAVORITES%]\SEX Dating - Real Girls For Real SEX.url
[%COMMON_FAVORITES%]\Spyware Uninstall\Easy Detect and Uninstall Spyware..url
[%COMMON_FAVORITES%]\Spyware Uninstall\Free Spyware Scanner..url
[%COMMON_FAVORITES%]\Spyware Uninstall\Search & Destroy Annoying Adware..url
[%COMMON_FAVORITES%]\Spyware Uninstall\Stop PopUps on your PC..url
[%COMMON_FAVORITES%]\Stop PopUps On Your Computer.url
[%COMMON_FAVORITES%]\VIAGRA at incredible low price. Bonus Pills!.url
[%COMMON_FAVORITES%]\View ADULT photos of REAL GIRLS!.url
[%SYSTEM%]\cidft.dll
[%SYSTEM%]\cidpoq32.dll
[%SYSTEM%]\gupd.dll
[%SYSTEM%]\icqrt.dll
[%SYSTEM%]\icvbr.dll
[%SYSTEM%]\sdfup.dll
[%SYSTEM%]\toolband.dll
[%SYSTEM%]\wecxg32.dll
[%SYSTEM%]\xcwer32.dll
[%SYSTEM%]\zxmsn.dll
[%WINDOWS%]\olehelp.exe
[%COMMON_FAVORITES%]\Download Free Spyware Remover.url
[%COMMON_FAVORITES%]\NEW VIAGRA at Half Price!.url
[%COMMON_FAVORITES%]\Online Chat With Nude Girls.url
[%COMMON_FAVORITES%]\Online Pharmacy\CHEAPEST VIAGRA ONLINE.url
[%COMMON_FAVORITES%]\Online Pharmacy\Cialis at HALF PRICE!.url
[%COMMON_FAVORITES%]\Online Pharmacy\Fast Way To Loose Your Weight!.url
[%COMMON_FAVORITES%]\Online Pharmacy\Guaranteed low price at Pills..url
[%COMMON_FAVORITES%]\Online Pharmacy\SOMA at Special LOW PRICE.url
[%COMMON_FAVORITES%]\Online Pharmacy\Tramadol Special Offer!.url
[%COMMON_FAVORITES%]\Online Pharmacy\Try New VIAGRA! Works Faster and Longer!.url
[%COMMON_FAVORITES%]\Order CIALIS online without leaving home..url
[%COMMON_FAVORITES%]\PC protection in under 2 minutes!.url
[%COMMON_FAVORITES%]\Sex and Dating\Meet Girls Who Want To Get Laid!.url
[%COMMON_FAVORITES%]\Sex and Dating\Meet Horny Girls In Your Area!.url
[%COMMON_FAVORITES%]\Sex and Dating\Read profiles and Chat With Nude Girls!.url
[%COMMON_FAVORITES%]\Sex and Dating\SEX Dating - people looking for SEX.url
[%COMMON_FAVORITES%]\Sex and Dating\View XXX photos of Real Sexy Girls..url
[%COMMON_FAVORITES%]\SEX Dating - Real Girls For Real SEX.url
[%COMMON_FAVORITES%]\Spyware Uninstall\Easy Detect and Uninstall Spyware..url
[%COMMON_FAVORITES%]\Spyware Uninstall\Free Spyware Scanner..url
[%COMMON_FAVORITES%]\Spyware Uninstall\Search & Destroy Annoying Adware..url
[%COMMON_FAVORITES%]\Spyware Uninstall\Stop PopUps on your PC..url
[%COMMON_FAVORITES%]\Stop PopUps On Your Computer.url
[%COMMON_FAVORITES%]\VIAGRA at incredible low price. Bonus Pills!.url
[%COMMON_FAVORITES%]\View ADULT photos of REAL GIRLS!.url
[%SYSTEM%]\cidft.dll
[%SYSTEM%]\cidpoq32.dll
[%SYSTEM%]\gupd.dll
[%SYSTEM%]\icqrt.dll
[%SYSTEM%]\icvbr.dll
[%SYSTEM%]\sdfup.dll
[%SYSTEM%]\toolband.dll
[%SYSTEM%]\wecxg32.dll
[%SYSTEM%]\xcwer32.dll
[%SYSTEM%]\zxmsn.dll
[%WINDOWS%]\olehelp.exe

How to detect Monkey:

Files:
[%COMMON_FAVORITES%]\Download Free Spyware Remover.url
[%COMMON_FAVORITES%]\NEW VIAGRA at Half Price!.url
[%COMMON_FAVORITES%]\Online Chat With Nude Girls.url
[%COMMON_FAVORITES%]\Online Pharmacy\CHEAPEST VIAGRA ONLINE.url
[%COMMON_FAVORITES%]\Online Pharmacy\Cialis at HALF PRICE!.url
[%COMMON_FAVORITES%]\Online Pharmacy\Fast Way To Loose Your Weight!.url
[%COMMON_FAVORITES%]\Online Pharmacy\Guaranteed low price at Pills..url
[%COMMON_FAVORITES%]\Online Pharmacy\SOMA at Special LOW PRICE.url
[%COMMON_FAVORITES%]\Online Pharmacy\Tramadol Special Offer!.url
[%COMMON_FAVORITES%]\Online Pharmacy\Try New VIAGRA! Works Faster and Longer!.url
[%COMMON_FAVORITES%]\Order CIALIS online without leaving home..url
[%COMMON_FAVORITES%]\PC protection in under 2 minutes!.url
[%COMMON_FAVORITES%]\Sex and Dating\Meet Girls Who Want To Get Laid!.url
[%COMMON_FAVORITES%]\Sex and Dating\Meet Horny Girls In Your Area!.url
[%COMMON_FAVORITES%]\Sex and Dating\Read profiles and Chat With Nude Girls!.url
[%COMMON_FAVORITES%]\Sex and Dating\SEX Dating - people looking for SEX.url
[%COMMON_FAVORITES%]\Sex and Dating\View XXX photos of Real Sexy Girls..url
[%COMMON_FAVORITES%]\SEX Dating - Real Girls For Real SEX.url
[%COMMON_FAVORITES%]\Spyware Uninstall\Easy Detect and Uninstall Spyware..url
[%COMMON_FAVORITES%]\Spyware Uninstall\Free Spyware Scanner..url
[%COMMON_FAVORITES%]\Spyware Uninstall\Search & Destroy Annoying Adware..url
[%COMMON_FAVORITES%]\Spyware Uninstall\Stop PopUps on your PC..url
[%COMMON_FAVORITES%]\Stop PopUps On Your Computer.url
[%COMMON_FAVORITES%]\VIAGRA at incredible low price. Bonus Pills!.url
[%COMMON_FAVORITES%]\View ADULT photos of REAL GIRLS!.url
[%SYSTEM%]\cidft.dll
[%SYSTEM%]\cidpoq32.dll
[%SYSTEM%]\gupd.dll
[%SYSTEM%]\icqrt.dll
[%SYSTEM%]\icvbr.dll
[%SYSTEM%]\sdfup.dll
[%SYSTEM%]\toolband.dll
[%SYSTEM%]\wecxg32.dll
[%SYSTEM%]\xcwer32.dll
[%SYSTEM%]\zxmsn.dll
[%WINDOWS%]\olehelp.exe
[%COMMON_FAVORITES%]\Download Free Spyware Remover.url
[%COMMON_FAVORITES%]\NEW VIAGRA at Half Price!.url
[%COMMON_FAVORITES%]\Online Chat With Nude Girls.url
[%COMMON_FAVORITES%]\Online Pharmacy\CHEAPEST VIAGRA ONLINE.url
[%COMMON_FAVORITES%]\Online Pharmacy\Cialis at HALF PRICE!.url
[%COMMON_FAVORITES%]\Online Pharmacy\Fast Way To Loose Your Weight!.url
[%COMMON_FAVORITES%]\Online Pharmacy\Guaranteed low price at Pills..url
[%COMMON_FAVORITES%]\Online Pharmacy\SOMA at Special LOW PRICE.url
[%COMMON_FAVORITES%]\Online Pharmacy\Tramadol Special Offer!.url
[%COMMON_FAVORITES%]\Online Pharmacy\Try New VIAGRA! Works Faster and Longer!.url
[%COMMON_FAVORITES%]\Order CIALIS online without leaving home..url
[%COMMON_FAVORITES%]\PC protection in under 2 minutes!.url
[%COMMON_FAVORITES%]\Sex and Dating\Meet Girls Who Want To Get Laid!.url
[%COMMON_FAVORITES%]\Sex and Dating\Meet Horny Girls In Your Area!.url
[%COMMON_FAVORITES%]\Sex and Dating\Read profiles and Chat With Nude Girls!.url
[%COMMON_FAVORITES%]\Sex and Dating\SEX Dating - people looking for SEX.url
[%COMMON_FAVORITES%]\Sex and Dating\View XXX photos of Real Sexy Girls..url
[%COMMON_FAVORITES%]\SEX Dating - Real Girls For Real SEX.url
[%COMMON_FAVORITES%]\Spyware Uninstall\Easy Detect and Uninstall Spyware..url
[%COMMON_FAVORITES%]\Spyware Uninstall\Free Spyware Scanner..url
[%COMMON_FAVORITES%]\Spyware Uninstall\Search & Destroy Annoying Adware..url
[%COMMON_FAVORITES%]\Spyware Uninstall\Stop PopUps on your PC..url
[%COMMON_FAVORITES%]\Stop PopUps On Your Computer.url
[%COMMON_FAVORITES%]\VIAGRA at incredible low price. Bonus Pills!.url
[%COMMON_FAVORITES%]\View ADULT photos of REAL GIRLS!.url
[%SYSTEM%]\cidft.dll
[%SYSTEM%]\cidpoq32.dll
[%SYSTEM%]\gupd.dll
[%SYSTEM%]\icqrt.dll
[%SYSTEM%]\icvbr.dll
[%SYSTEM%]\sdfup.dll
[%SYSTEM%]\toolband.dll
[%SYSTEM%]\wecxg32.dll
[%SYSTEM%]\xcwer32.dll
[%SYSTEM%]\zxmsn.dll
[%WINDOWS%]\olehelp.exe

Folders:
[%COMMON_FAVORITES%]\Online Pharmacy
[%COMMON_FAVORITES%]\Sex and Dating
[%COMMON_FAVORITES%]\Spyware Uninstall

Registry Keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00110011-4b0b-44d5-9718-90c88817369b}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{086ae192-23a6-48d6-96ec-715f53797e85}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{150fa160-130d-451f-b863-b655061432ba}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1f48aa48-c53a-4e21-85e7-ac7cc6b5ffb1}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1f48aa48-c53a-4e21-85e7-ac7cc6b5ffb2}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2d38a51a-23c9-48a1-a33c-48675aa2b494}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2E9CAFF6-30C7-4208-8807-E79D4EC6F806}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CF021F40-3E14-23A5-CBA2-717765721306}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7AFFF2A-1B57-49C7-BF6B-E5123394C970}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ff1bf4c7-4e08-4a28-a43f-9d60a9f7a880}

Removing Monkey:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Ehg.Oreilly.hitbox Tracking Cookie Removal instruction

No comments: