Sunday, November 16, 2008

WinAntiDown Downloader

Removing WinAntiDown
Categories: Downloader
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

WinAntiDown Also known as:

[Kaspersky]Downlaoder.Win32.WinFixer.o;
[McAfee]WinFixer;
[Other]Program:Win32/Winfixer

Visible Symptoms:
Files in system folders:
[%DESKTOP%]\Instalar WinAntiVirus Pro 2007 .lnk
[%DESKTOP%]\Instalar WinAntiVirus Pro 2007 .lnk

How to detect WinAntiDown:

Files:
[%DESKTOP%]\Instalar WinAntiVirus Pro 2007 .lnk
[%DESKTOP%]\Instalar WinAntiVirus Pro 2007 .lnk

Folders:
[%PROFILE_TEMP%]\NI.UWA7PY_0001_N96M0206

Registry Keys:
HKEY_LOCAL_MACHINE\SOFTWARE\WinAntiVirus Pro 2007
HKEY_LOCAL_MACHINE\software\winantivirus pro 2007

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing WinAntiDown:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
EliteMedia Adware Information
BestSearchEngine Trojan Removal instruction
Wosrist Trojan Cleaner
Remove Diamini Trojan

No comments: