Thursday, December 11, 2008

AdultId Adware

Removing AdultId
Categories: Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.


AdultId Also known as:

[Kaspersky]AdWare.Win32.AdultIt.a,AdWare.Win32.AdultId.a;
[McAfee]Adware-AdultId,Adware-Adultid;
[Other]Adware:Win32/AdultId

Visible Symptoms:
Files in system folders:
[%PROGRAM_FILES%]\FileSubmit\stoichkovwpv01.zip\NNWDAC638.EXE
[%PROGRAM_FILES%]\filesubmit\strobelight3dcursors.zip\NNWDAC638.EXE
[%PROGRAM_FILES%]\QuickSearch\QuickSearchBar3_28.dll
[%PROGRAM_FILES%]\FileSubmit\stoichkovwpv01.zip\NNWDAC638.EXE
[%PROGRAM_FILES%]\filesubmit\strobelight3dcursors.zip\NNWDAC638.EXE
[%PROGRAM_FILES%]\QuickSearch\QuickSearchBar3_28.dll

How to detect AdultId:

Files:
[%PROGRAM_FILES%]\FileSubmit\stoichkovwpv01.zip\NNWDAC638.EXE
[%PROGRAM_FILES%]\filesubmit\strobelight3dcursors.zip\NNWDAC638.EXE
[%PROGRAM_FILES%]\QuickSearch\QuickSearchBar3_28.dll
[%PROGRAM_FILES%]\FileSubmit\stoichkovwpv01.zip\NNWDAC638.EXE
[%PROGRAM_FILES%]\filesubmit\strobelight3dcursors.zip\NNWDAC638.EXE
[%PROGRAM_FILES%]\QuickSearch\QuickSearchBar3_28.dll

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{3c368c4a-827f-4f25-9c52-371bdf049912}
HKEY_CLASSES_ROOT\CLSID\{82315A18-6CFB-44a7-BDFD-90E36537C252}
HKEY_CLASSES_ROOT\interface\{141a9a62-342f-4154-a456-d29917e80b45}
HKEY_CLASSES_ROOT\interface\{d9855da1-8ba7-4f08-b138-874ae7a2d2d2}
HKEY_CLASSES_ROOT\quicksearch.desksearchband
HKEY_CLASSES_ROOT\quicksearch.desksearchband.1
HKEY_CLASSES_ROOT\quicksearch.searchband
HKEY_CLASSES_ROOT\quicksearch.searchband.1
HKEY_CLASSES_ROOT\software\classes\quicksearch.searchband
HKEY_CLASSES_ROOT\typelib\{b7620af8-b460-455a-946f-16f8bf52a9ad}
HKEY_CURRENT_USER\software\quicksearch
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82315A18-6CFB-44a7-BDFD-90E36537C252}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\quicksearch toolbar
HKEY_LOCAL_MACHINE\software\quicksearch
HKEY_CLASSES_ROOT\clsid\{613efcd9-1b40-7dd7-cdf5-a6b3cf264e9f}
HKEY_CLASSES_ROOT\clsid\{bef77502-f00b-55e5-0cf7-b6db1af32a15}
HKEY_CLASSES_ROOT\clsid\{c172bb81-b169-37d3-6772-ed188b14fd52}
HKEY_CLASSES_ROOT\interface\{c848d4be-a391-4456-abaa-81e834c77700}
HKEY_CLASSES_ROOT\typelib\{373e0369-863a-4345-bd57-f46dd9a0c4f2}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{613efcd9-1b40-7dd7-cdf5-a6b3cf264e9f}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{bef77502-f00b-55e5-0cf7-b6db1af32a15}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{c172bb81-b169-37d3-6772-ed188b14fd52}

Removing AdultId:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Removing CWS.conyc Hijacker
Gnayum!PWS!Trojan Trojan Removal instruction

No comments: