Wednesday, December 3, 2008

Windows.Remote RAT

Removing Windows.Remote
Categories: RAT
Some RAT trojans are pranks that are most likely being controlled by a friend or enemy on
April Fool's day or a holiday. Prank RATS are generally not harmful, and won't log keystrokes or hack.


Visible Symptoms:
Files in system folders:
[%PROGRAMS%]\winfingerprint\uninstall winfingerprint.lnk
[%PROGRAMS%]\winfingerprint\winfingerprint.lnk
[%PROGRAMS%]\winfingerprint\uninstall winfingerprint.lnk
[%PROGRAMS%]\winfingerprint\winfingerprint.lnk

How to detect Windows.Remote:

Files:
[%PROGRAMS%]\winfingerprint\uninstall winfingerprint.lnk
[%PROGRAMS%]\winfingerprint\winfingerprint.lnk
[%PROGRAMS%]\winfingerprint\uninstall winfingerprint.lnk
[%PROGRAMS%]\winfingerprint\winfingerprint.lnk

Folders:
[%PROGRAMS%]\all users\start menu\programs\windows remote client
[%PROGRAMS%]\windows remote client
[%PROGRAM_FILES%]\windows remote client
[%PROGRAM_FILES%]\winfingerprint

Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\windows remote client
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\winfingerprint
HKEY_LOCAL_MACHINE\software\winfingerprint.sourceforge.net\winfingerprint

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\windowsremote.exe

Removing Windows.Remote:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Remove AntiPascal Trojan
BackDoor.AWQ Trojan Cleaner
AirBot Trojan Symptoms

No comments: