Wednesday, December 10, 2008

Derowarb Trojan

Removing Derowarb
Categories: Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Derowarb Also known as:

[Kaspersky]Trojan-Downloader.Win32.Agent.brq;
[Other]Win32/Derowarb.N

Visible Symptoms:
Files in system folders:
[%PROFILE_TEMP%]\xrun.exe
[%PROFILE_TEMP%]\xrun.exe

How to detect Derowarb:

Files:
[%PROFILE_TEMP%]\xrun.exe
[%PROFILE_TEMP%]\xrun.exe

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Derowarb:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Remove Tillusion Trojan
Removing CWS.Keymgrldr Hijacker

No comments: