Sunday, November 9, 2008

Win32.Agent.dp Rootkit

Removing Win32.Agent.dp
Categories: Rootkit
The hacker installs the rootkit after obtaining user-level access: typically this is done
by cracking a password or by exploiting a vulnerability.
This is then used to gather other user IDs until the hacker gains root, or administrator,
access to the system.

Visible Symptoms:
Files in system folders:
[%PROFILE_TEMP%]\cel90xbe.sys
[%PROGRAM_FILES%]\superutilbar\superutilbar.dll
[%WINDOWS%]\Temp\cel90xbe.sys
[%PROFILE_TEMP%]\cel90xbe.sys
[%PROGRAM_FILES%]\superutilbar\superutilbar.dll
[%WINDOWS%]\Temp\cel90xbe.sys

How to detect Win32.Agent.dp:

Files:
[%PROFILE_TEMP%]\cel90xbe.sys
[%PROGRAM_FILES%]\superutilbar\superutilbar.dll
[%WINDOWS%]\Temp\cel90xbe.sys
[%PROFILE_TEMP%]\cel90xbe.sys
[%PROGRAM_FILES%]\superutilbar\superutilbar.dll
[%WINDOWS%]\Temp\cel90xbe.sys

Folders:
[%PROGRAM_FILES%]\superutilbar

Removing Win32.Agent.dp:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:

No comments: