Monday, November 17, 2008

NewAds Adware

Removing NewAds
Categories: Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.


Visible Symptoms:
Files in system folders:
[%SYSTEM%]\BattyRun.dll
[%SYSTEM%]\BattyRun.dll

How to detect NewAds:

Files:
[%SYSTEM%]\BattyRun.dll
[%SYSTEM%]\BattyRun.dll

Folders:
[%PROGRAM_FILES%]\batty
[%PROGRAM_FILES%]\AdSponsor
[%PROGRAM_FILES%]\Exolon
[%PROGRAM_FILES%]\PSupport

Registry Keys:
HKEY_CLASSES_ROOT\adband.bandbho
HKEY_CLASSES_ROOT\adband.bandbho.1
HKEY_CLASSES_ROOT\adband.bandimpl
HKEY_CLASSES_ROOT\adband.bandimpl.1
HKEY_CLASSES_ROOT\appid\adband.dll
HKEY_CLASSES_ROOT\appid\{36946a0a-05a1-4cf7-934b-270571338e55}
HKEY_CLASSES_ROOT\typelib\{1b8b502e-455b-4022-be27-736d9f808a18}
HKEY_CLASSES_ROOT\typelib\{d5599fae-28aa-4c2b-a29c-6c0cd5b245aa}
HKEY_CLASSES_ROOT\clsid\{04dcb17c-ab45-83ad-a86a-6dfb90277939}
HKEY_CLASSES_ROOT\clsid\{2bc9c452-bb57-4896-a9a2-64611e06c5aa}
HKEY_CLASSES_ROOT\clsid\{6ca1c00b-90fc-4f3e-911f-95306aba43aa}
HKEY_CLASSES_ROOT\clsid\{994d478a-45d0-4db4-ae28-738b1e346f99}
HKEY_CURRENT_USER\software\adsponsor
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\ext\stats\{04dcb17c-ab45-83ad-a86a-6dfb90277939}
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\ext\stats\{6ca1c00b-90fc-4f3e-911f-95306aba43aa}
HKEY_CURRENT_USER\software\padsysassistant
HKEY_CURRENT_USER\software\psupport
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\explorer bars\{2bc9c452-bb57-4896-a9a2-64611e06c5aa}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{04dcb17c-ab45-83ad-a86a-6dfb90277939}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6ca1c00b-90fc-4f3e-911f-95306aba43aa}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\adsponsor

Registry Values:
HKEY_CLASSES_ROOT\protocols\filter\text/html

Removing NewAds:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Remove ICQ.House Trojan
Tiny.DI.Grower Trojan Information
Removing Keylogger.King Spyware

No comments: