Thursday, November 20, 2008

Tinecuf Trojan

Removing Tinecuf
Categories: Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Tinecuf Also known as:

[Kaspersky]Backdoor.Win32.Agent.ani;
[Other]Win32/Tinecuf,Win32/Tinecuf.A

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\AceExt32.dll
[%WINDOWS%]\Downloaded Program Files\CxUSBKey.exe
[%WINDOWS%]\Downloaded Program Files\ZipExt32.dll
[%SYSTEM%]\AceExt32.dll
[%WINDOWS%]\Downloaded Program Files\CxUSBKey.exe
[%WINDOWS%]\Downloaded Program Files\ZipExt32.dll

How to detect Tinecuf:

Files:
[%SYSTEM%]\AceExt32.dll
[%WINDOWS%]\Downloaded Program Files\CxUSBKey.exe
[%WINDOWS%]\Downloaded Program Files\ZipExt32.dll
[%SYSTEM%]\AceExt32.dll
[%WINDOWS%]\Downloaded Program Files\CxUSBKey.exe
[%WINDOWS%]\Downloaded Program Files\ZipExt32.dll

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{35cec8a3-2be6-11d2-8773-92e220524150}
HKEY_CLASSES_ROOT\clsid\{35cec8a3-2be6-11d2-8773-92e220524140}

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload

Removing Tinecuf:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
PStopper Adware Removal
AIG Backdoor Removal

No comments: