Sunday, November 9, 2008

Win32.Qoologic.bj Downloader

Removing Win32.Qoologic.bj
Categories: Downloader
Trojans-downloaders downloads and installs new malware or adware on the computer.


Win32.Qoologic.bj Also known as:

[Kaspersky]Trojan-Downloader.Win32.Qoologic.bj;
[McAfee]Qoolaid;
[Other]Adware.QoolAid

Visible Symptoms:
Files in system folders:
[%PROFILE_TEMP%]\f219535390.exe
[%PROFILE_TEMP%]\f415187.exe
[%PROFILE_TEMP%]\f518468.exe
[%SYSTEM%]\gsqpw.dat
[%SYSTEM%]\lnrocv.exe
[%SYSTEM%]\lwvbi.dat
[%SYSTEM%]\lxcda.dat
[%SYSTEM%]\ntxut.dat
[%SYSTEM%]\qlhso.dat
[%SYSTEM%]\qtodg.dat
[%SYSTEM%]\rurptef.dll
[%COMMON_STARTUP%]\cpbiw.exe
[%PROFILE_TEMP%]\f1150625.exe
[%SYSTEM%]\arflq.exe
[%SYSTEM%]\kiohqo.exe
[%SYSTEM%]\lmmpbtl.exe
[%SYSTEM%]\pfdkd.dat
[%SYSTEM%]\qpohiww.dll
[%WINDOWS%]\idvnh.dll
[%PROFILE_TEMP%]\f219535390.exe
[%PROFILE_TEMP%]\f415187.exe
[%PROFILE_TEMP%]\f518468.exe
[%SYSTEM%]\gsqpw.dat
[%SYSTEM%]\lnrocv.exe
[%SYSTEM%]\lwvbi.dat
[%SYSTEM%]\lxcda.dat
[%SYSTEM%]\ntxut.dat
[%SYSTEM%]\qlhso.dat
[%SYSTEM%]\qtodg.dat
[%SYSTEM%]\rurptef.dll
[%COMMON_STARTUP%]\cpbiw.exe
[%PROFILE_TEMP%]\f1150625.exe
[%SYSTEM%]\arflq.exe
[%SYSTEM%]\kiohqo.exe
[%SYSTEM%]\lmmpbtl.exe
[%SYSTEM%]\pfdkd.dat
[%SYSTEM%]\qpohiww.dll
[%WINDOWS%]\idvnh.dll

How to detect Win32.Qoologic.bj:

Files:
[%PROFILE_TEMP%]\f219535390.exe
[%PROFILE_TEMP%]\f415187.exe
[%PROFILE_TEMP%]\f518468.exe
[%SYSTEM%]\gsqpw.dat
[%SYSTEM%]\lnrocv.exe
[%SYSTEM%]\lwvbi.dat
[%SYSTEM%]\lxcda.dat
[%SYSTEM%]\ntxut.dat
[%SYSTEM%]\qlhso.dat
[%SYSTEM%]\qtodg.dat
[%SYSTEM%]\rurptef.dll
[%COMMON_STARTUP%]\cpbiw.exe
[%PROFILE_TEMP%]\f1150625.exe
[%SYSTEM%]\arflq.exe
[%SYSTEM%]\kiohqo.exe
[%SYSTEM%]\lmmpbtl.exe
[%SYSTEM%]\pfdkd.dat
[%SYSTEM%]\qpohiww.dll
[%WINDOWS%]\idvnh.dll
[%PROFILE_TEMP%]\f219535390.exe
[%PROFILE_TEMP%]\f415187.exe
[%PROFILE_TEMP%]\f518468.exe
[%SYSTEM%]\gsqpw.dat
[%SYSTEM%]\lnrocv.exe
[%SYSTEM%]\lwvbi.dat
[%SYSTEM%]\lxcda.dat
[%SYSTEM%]\ntxut.dat
[%SYSTEM%]\qlhso.dat
[%SYSTEM%]\qtodg.dat
[%SYSTEM%]\rurptef.dll
[%COMMON_STARTUP%]\cpbiw.exe
[%PROFILE_TEMP%]\f1150625.exe
[%SYSTEM%]\arflq.exe
[%SYSTEM%]\kiohqo.exe
[%SYSTEM%]\lmmpbtl.exe
[%SYSTEM%]\pfdkd.dat
[%SYSTEM%]\qpohiww.dll
[%WINDOWS%]\idvnh.dll

Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run

Removing Win32.Qoologic.bj:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:

No comments: