Wednesday, November 19, 2008

ZapSpot Adware

Removing ZapSpot
Categories: Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Visible Symptoms:
Files in system folders:
[%APPDATA%]\ZapSpot\Games\{1DCE3B3F-5F75-41ef-9F14-A1D5085B3CD8}\{1DCE3B3F-5F75-41ef-9F14-A1D5085B3CD8}.gam
[%APPDATA%]\ZapSpot\System\Etc\P3OfrMgr.exe
[%APPDATA%]\ZapSpot\System\Skins\default.skn
[%APPDATA%]\ZapSpot\ZapSpot.exe
[%PROGRAMS%]\accessories\games\zapspot.lnk
[%PROGRAMS%]\zapspot.lnk
[%APPDATA%]\ZapSpot\Games\{1DCE3B3F-5F75-41ef-9F14-A1D5085B3CD8}\{1DCE3B3F-5F75-41ef-9F14-A1D5085B3CD8}.gam
[%APPDATA%]\ZapSpot\System\Etc\P3OfrMgr.exe
[%APPDATA%]\ZapSpot\System\Skins\default.skn
[%APPDATA%]\ZapSpot\ZapSpot.exe
[%PROGRAMS%]\accessories\games\zapspot.lnk
[%PROGRAMS%]\zapspot.lnk

How to detect ZapSpot:

Files:
[%APPDATA%]\ZapSpot\Games\{1DCE3B3F-5F75-41ef-9F14-A1D5085B3CD8}\{1DCE3B3F-5F75-41ef-9F14-A1D5085B3CD8}.gam
[%APPDATA%]\ZapSpot\System\Etc\P3OfrMgr.exe
[%APPDATA%]\ZapSpot\System\Skins\default.skn
[%APPDATA%]\ZapSpot\ZapSpot.exe
[%PROGRAMS%]\accessories\games\zapspot.lnk
[%PROGRAMS%]\zapspot.lnk
[%APPDATA%]\ZapSpot\Games\{1DCE3B3F-5F75-41ef-9F14-A1D5085B3CD8}\{1DCE3B3F-5F75-41ef-9F14-A1D5085B3CD8}.gam
[%APPDATA%]\ZapSpot\System\Etc\P3OfrMgr.exe
[%APPDATA%]\ZapSpot\System\Skins\default.skn
[%APPDATA%]\ZapSpot\ZapSpot.exe
[%PROGRAMS%]\accessories\games\zapspot.lnk
[%PROGRAMS%]\zapspot.lnk

Folders:
[%APPDATA%]\zapspot
[%PROFILE%]\my documents\my zapspot
[%DESKTOP%]\zapspot.lnk
[%WINDOWS%]\application data\zapspot

Registry Keys:
HKEY_CLASSES_ROOT\zapspot.zml.1

Removing ZapSpot:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
YahooAssistant Toolbar Removal instruction
Visel Trojan Information

No comments: