Monday, November 17, 2008

Netzip Adware

Removing Netzip
Categories: Adware,Spyware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.

Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Visible Symptoms:
Files in system folders:
[%PROFILE_TEMP%]\setup3.2\nzdd.dll
[%SYSTEM%]\npnzdad.exe
[%PROFILE_TEMP%]\setup3.2\nzdd.dll
[%SYSTEM%]\npnzdad.exe

How to detect Netzip:

Files:
[%PROFILE_TEMP%]\setup3.2\nzdd.dll
[%SYSTEM%]\npnzdad.exe
[%PROFILE_TEMP%]\setup3.2\nzdd.dll
[%SYSTEM%]\npnzdad.exe

Folders:
[%PROGRAM_FILES%]\netzip download demon
[%PROGRAMS%]\netzip download demon

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{200ceb6f-cca5-11d0-9439-00609758e95a}
HKEY_CLASSES_ROOT\clsid\{d3b7d8e1-92db-11d2-8551-0060083cfb9c}
HKEY_CLASSES_ROOT\clsid\{ebcdda5e-2a68-11d3-8a43-0060083cfb9c}\implemented categories\{7dd95801-9882-11cf-9fa9-00aa006c42c4}
HKEY_CLASSES_ROOT\clsid\{ebcdda5e-2a68-11d3-8a43-0060083cfb9c}\implemented categories\{7dd95802-9882-11cf-9fa9-00aa006c42c4}
HKEY_CLASSES_ROOT\interface\{d3b7d8e2-92db-11d2-8551-0060083cfb9c}
HKEY_CLASSES_ROOT\interface\{ebcdda5f-2a68-11d3-8a43-0060083cfb9c}
HKEY_CLASSES_ROOT\typelib\{d3b7d8e0-92db-11d2-8551-0060083cfb9c}
HKEY_CLASSES_ROOT\interface\{e8dc9c4a-12bc-11d3-9720-00500460a552}

Registry Values:
HKEY_CLASSES_ROOT\interface\{ebcdda5d-2a68-11d3-8a43-0060083cfb9c}\typelib
HKEY_CLASSES_ROOT\mime\database\content type\application/x-cnet-vsl
HKEY_CLASSES_ROOT\clsid\{ebcdda60-2a68-11d3-8a43-0060083cfb9c}\inprocserver32
HKEY_CLASSES_ROOT\interface\{ebcdda5d-2a68-11d3-8a43-0060083cfb9c}\typelib
HKEY_CLASSES_ROOT\mime\database\content type\application/x-cnet-vsl
HKEY_CLASSES_ROOT\protocols\name-space handler\ftp\smartdownload
HKEY_CLASSES_ROOT\protocols\name-space handler\http\smartdownload
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\uninstall\netzip smartdownloader
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\uninstall\netzip smartdownloader
HKEY_CURRENT_USER\software\netscape\netscape navigator\automation protocols
HKEY_CURRENT_USER\software\netscape\netscape navigator\automation protocols
HKEY_CURRENT_USER\software\smartdownload
HKEY_CURRENT_USER\software\smartdownload\2.8\options
HKEY_CURRENT_USER\software\smartdownload\2.8\options
HKEY_CURRENT_USER\software\smartdownload\2.8\options
HKEY_CURRENT_USER\software\smartdownload\2.8\options
HKEY_CURRENT_USER\software\smartdownload\2.8\options
HKEY_CURRENT_USER\software\smartdownload\2.8\options
HKEY_CURRENT_USER\software\smartdownload\2.8\options\domains
HKEY_CURRENT_USER\software\smartdownload\2.8\options\domains
HKEY_CURRENT_USER\software\smartdownload\2.8\options\extensions

Removing Netzip:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
JamesBob Downloader Information
Remove Bonzo.exe Trojan

No comments: