Saturday, December 13, 2008

Win32.VB.kz Trojan

Removing Win32.VB.kz
Categories: Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Win32.VB.kz Also known as:

[Panda]Spyware/Adclicker,Trojan Horse

Visible Symptoms:
Files in system folders:
[%WINDOWS%]\dsicu.exe
[%WINDOWS%]\hevnmtydc.exe
[%WINDOWS%]\ivvygk.exe
[%WINDOWS%]\lsmbonvy.exe
[%WINDOWS%]\lyyameg.exe
[%WINDOWS%]\macn.exe
[%WINDOWS%]\mbyfqumlk.exe
[%WINDOWS%]\mqjln.exe
[%WINDOWS%]\oaqkghvze.exe
[%WINDOWS%]\oxewkfusa.exe
[%WINDOWS%]\pzjggj.exe
[%WINDOWS%]\qyblxw.exe
[%WINDOWS%]\rcwinf.exe
[%WINDOWS%]\snculk.exe
[%WINDOWS%]\vgnvqfqpy.exe
[%WINDOWS%]\vnyzy.exe
[%WINDOWS%]\vzdumlu.exe
[%WINDOWS%]\dsicu.exe
[%WINDOWS%]\hevnmtydc.exe
[%WINDOWS%]\ivvygk.exe
[%WINDOWS%]\lsmbonvy.exe
[%WINDOWS%]\lyyameg.exe
[%WINDOWS%]\macn.exe
[%WINDOWS%]\mbyfqumlk.exe
[%WINDOWS%]\mqjln.exe
[%WINDOWS%]\oaqkghvze.exe
[%WINDOWS%]\oxewkfusa.exe
[%WINDOWS%]\pzjggj.exe
[%WINDOWS%]\qyblxw.exe
[%WINDOWS%]\rcwinf.exe
[%WINDOWS%]\snculk.exe
[%WINDOWS%]\vgnvqfqpy.exe
[%WINDOWS%]\vnyzy.exe
[%WINDOWS%]\vzdumlu.exe

How to detect Win32.VB.kz:

Files:
[%WINDOWS%]\dsicu.exe
[%WINDOWS%]\hevnmtydc.exe
[%WINDOWS%]\ivvygk.exe
[%WINDOWS%]\lsmbonvy.exe
[%WINDOWS%]\lyyameg.exe
[%WINDOWS%]\macn.exe
[%WINDOWS%]\mbyfqumlk.exe
[%WINDOWS%]\mqjln.exe
[%WINDOWS%]\oaqkghvze.exe
[%WINDOWS%]\oxewkfusa.exe
[%WINDOWS%]\pzjggj.exe
[%WINDOWS%]\qyblxw.exe
[%WINDOWS%]\rcwinf.exe
[%WINDOWS%]\snculk.exe
[%WINDOWS%]\vgnvqfqpy.exe
[%WINDOWS%]\vnyzy.exe
[%WINDOWS%]\vzdumlu.exe
[%WINDOWS%]\dsicu.exe
[%WINDOWS%]\hevnmtydc.exe
[%WINDOWS%]\ivvygk.exe
[%WINDOWS%]\lsmbonvy.exe
[%WINDOWS%]\lyyameg.exe
[%WINDOWS%]\macn.exe
[%WINDOWS%]\mbyfqumlk.exe
[%WINDOWS%]\mqjln.exe
[%WINDOWS%]\oaqkghvze.exe
[%WINDOWS%]\oxewkfusa.exe
[%WINDOWS%]\pzjggj.exe
[%WINDOWS%]\qyblxw.exe
[%WINDOWS%]\rcwinf.exe
[%WINDOWS%]\snculk.exe
[%WINDOWS%]\vgnvqfqpy.exe
[%WINDOWS%]\vnyzy.exe
[%WINDOWS%]\vzdumlu.exe

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Win32.VB.kz:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Removing Win32.BO2K.Plugin.Aes Trojan

No comments: