Roogoo Trojan

Removing Roogoo
Categories: Trojan,Adware
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

---

Roogoo Also known as:

[Kaspersky]Adware.Win32.Roogoo.b,AdWare.Win32.AdAgent.d,AdWare.Win32.AdAgent.e,AdWare.Win32.Agent.ai;
[McAfee]Adware-Surfbar,Adware-Roogoo;
[Other]Adware.Roogoo,Adware.Win32/RooGoo

---

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\drivers\RGWatch.sys
[%SYSTEM%]\msplus.dll
[%SYSTEM%]\msplus1.dll
[%SYSTEM%]\msplus2.dll
[%SYSTEM%]\msplus3.dll
[%SYSTEM%]\msplus4.dll
[%SYSTEM%]\quartz32.dll
[%SYSTEM%]\drivers\RGWatch.sys
[%SYSTEM%]\msplus.dll
[%SYSTEM%]\msplus1.dll
[%SYSTEM%]\msplus2.dll
[%SYSTEM%]\msplus3.dll
[%SYSTEM%]\msplus4.dll
[%SYSTEM%]\quartz32.dll

How to detect Roogoo:

Files:
[%SYSTEM%]\drivers\RGWatch.sys
[%SYSTEM%]\msplus.dll
[%SYSTEM%]\msplus1.dll
[%SYSTEM%]\msplus2.dll
[%SYSTEM%]\msplus3.dll
[%SYSTEM%]\msplus4.dll
[%SYSTEM%]\quartz32.dll
[%SYSTEM%]\drivers\RGWatch.sys
[%SYSTEM%]\msplus.dll
[%SYSTEM%]\msplus1.dll
[%SYSTEM%]\msplus2.dll
[%SYSTEM%]\msplus3.dll
[%SYSTEM%]\msplus4.dll
[%SYSTEM%]\quartz32.dll

Registry Keys:
HKEY_CLASSES_ROOT\adplus.xlink
HKEY_CLASSES_ROOT\adplus.xlink.1
HKEY_CLASSES_ROOT\adplus.xlink.2
HKEY_CLASSES_ROOT\clsid\{18f57d30-ef36-4c0e-9343-7bfa6df79b4a}
HKEY_CLASSES_ROOT\interface\{2805a558-1e98-48fb-8ba5-49a3ad78b129}
HKEY_CLASSES_ROOT\typelib\{57f7a59d-8f7f-41b2-98b8-a095456716e9}
HKEY_LOCAL_MACHINE\software\ltandcj
HKEY_LOCAL_MACHINE\software\roogoo
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_rgwatch
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\rgwatch

Removing Roogoo:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

---

Also Be Aware of the Following Threats:
Stilen Trojan Removal
WinAd Trojan Symptoms
Dewnuttin Trojan Removal instruction
Remove Tarliver Trojan
Zlob.Fam.Video ActiveX Object Trojan Removal instruction