Monday, November 24, 2008

PassThisOn Hijacker

Removing PassThisOn
Categories: Hijacker
A desktop hijacker replaces the desktop wallpaper with advertising
for products and services on the desktop.

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\ImmunizeDatabase
[%SYSTEM%]\SDPImmData.dll
[%DESKTOP%]\spydeleter v2.0.lnk
[%PROFILE%]\administrator\my documents\spydeleter-setup.exe
[%STARTUP%]\reg.hta
[%STARTUP%]\reg.vbs
[%STARTUP%]\reg2.hta
[%SYSTEM%]\ImmunizeDatabase
[%SYSTEM%]\SDPImmData.dll
[%DESKTOP%]\spydeleter v2.0.lnk
[%PROFILE%]\administrator\my documents\spydeleter-setup.exe
[%STARTUP%]\reg.hta
[%STARTUP%]\reg.vbs
[%STARTUP%]\reg2.hta

How to detect PassThisOn:

Files:
[%SYSTEM%]\ImmunizeDatabase
[%SYSTEM%]\SDPImmData.dll
[%DESKTOP%]\spydeleter v2.0.lnk
[%PROFILE%]\administrator\my documents\spydeleter-setup.exe
[%STARTUP%]\reg.hta
[%STARTUP%]\reg.vbs
[%STARTUP%]\reg2.hta
[%SYSTEM%]\ImmunizeDatabase
[%SYSTEM%]\SDPImmData.dll
[%DESKTOP%]\spydeleter v2.0.lnk
[%PROFILE%]\administrator\my documents\spydeleter-setup.exe
[%STARTUP%]\reg.hta
[%STARTUP%]\reg.vbs
[%STARTUP%]\reg2.hta

Folders:
[%PROGRAMS%]\spydeleter v2.0
[%PROGRAM_FILES%]\spydeleter

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spydeleter v2.0
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spydeleter v2.0

Removing PassThisOn:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Clibcklog Trojan Removal

No comments: