Monday, November 17, 2008

NeoSpy Ransomware

Removing NeoSpy
Categories: Ransomware
The term ransomware is commonly used to describe such software,
although the field known as cryptovirology predates the term "ransomware".

This type of ransom attack can be accomplished by (for example) attaching
a specially crafted file/program to an e-mail message and sending this to the victim.

Visible Symptoms:
Files in system folders:
[%PROFILE%]\Desktop\NeoSpy.lnk
[%PROFILE_TEMP%]\INMEM000.REM
[%PROFILE%]\Desktop\NeoSpy.lnk
[%PROFILE_TEMP%]\INMEM000.REM

How to detect NeoSpy:

Files:
[%PROFILE%]\Desktop\NeoSpy.lnk
[%PROFILE_TEMP%]\INMEM000.REM
[%PROFILE%]\Desktop\NeoSpy.lnk
[%PROFILE_TEMP%]\INMEM000.REM

Folders:
[%PROFILE%]\Start Menu\Programs\NeoSpy
[%PROFILE_TEMP%]\RarSFX0
[%PROGRAM_FILES%]\NeoSpy

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{38ea2037-19a5-4da3-8944-9c1eb0db164f}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\neospy.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\neospy

Removing NeoSpy:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
NetSource101 Hijacker Information

No comments: