Tuesday, January 27, 2009

TrojanDownloader.Win32.PurityScan Downloader

Removing TrojanDownloader.Win32.PurityScan
Categories: Downloader
Trojans-downloaders downloads and installs new malware or adware on the computer.


TrojanDownloader.Win32.PurityScan Also known as:

[Panda]Adware/BuddyLinks,Adware/PurityScan

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\lib.dll
[%SYSTEM%]\wdm.dll
[%APPDATA%]\edtc.exe
[%APPDATA%]\lmur.exe
[%APPDATA%]\saei.exe
[%APPDATA%]\ttuh.exe
[%SYSTEM%]\bgurfny.dll
[%SYSTEM%]\clxyf.exe
[%SYSTEM%]\djnzgde.dll
[%SYSTEM%]\ekdcxir.dll
[%SYSTEM%]\eqlv.dll
[%SYSTEM%]\imjhv.dll
[%SYSTEM%]\lsi.dll
[%SYSTEM%]\ltjouq.dll
[%SYSTEM%]\nbgs.dll
[%SYSTEM%]\oozdaqbc.exe
[%SYSTEM%]\ownrggx.dll
[%SYSTEM%]\qdg.dll
[%SYSTEM%]\rass.exe
[%SYSTEM%]\rvlyklrt.exe
[%SYSTEM%]\spqh.exe
[%SYSTEM%]\svpyq.dll
[%SYSTEM%]\tmno.exe
[%SYSTEM%]\umnt.exe
[%SYSTEM%]\vbcj.dll
[%SYSTEM%]\viav.dll
[%SYSTEM%]\vylod.exe
[%SYSTEM%]\xlkpncbm.dll
[%WINDOWS%]\application data\ssme.exe
[%WINDOWS%]\system\exaz.dll
[%WINDOWS%]\system\mvfpecjl.exe
[%WINDOWS%]\system\vnkjipfc.dll
[%SYSTEM%]\lib.dll
[%SYSTEM%]\wdm.dll
[%APPDATA%]\edtc.exe
[%APPDATA%]\lmur.exe
[%APPDATA%]\saei.exe
[%APPDATA%]\ttuh.exe
[%SYSTEM%]\bgurfny.dll
[%SYSTEM%]\clxyf.exe
[%SYSTEM%]\djnzgde.dll
[%SYSTEM%]\ekdcxir.dll
[%SYSTEM%]\eqlv.dll
[%SYSTEM%]\imjhv.dll
[%SYSTEM%]\lsi.dll
[%SYSTEM%]\ltjouq.dll
[%SYSTEM%]\nbgs.dll
[%SYSTEM%]\oozdaqbc.exe
[%SYSTEM%]\ownrggx.dll
[%SYSTEM%]\qdg.dll
[%SYSTEM%]\rass.exe
[%SYSTEM%]\rvlyklrt.exe
[%SYSTEM%]\spqh.exe
[%SYSTEM%]\svpyq.dll
[%SYSTEM%]\tmno.exe
[%SYSTEM%]\umnt.exe
[%SYSTEM%]\vbcj.dll
[%SYSTEM%]\viav.dll
[%SYSTEM%]\vylod.exe
[%SYSTEM%]\xlkpncbm.dll
[%WINDOWS%]\application data\ssme.exe
[%WINDOWS%]\system\exaz.dll
[%WINDOWS%]\system\mvfpecjl.exe
[%WINDOWS%]\system\vnkjipfc.dll

How to detect TrojanDownloader.Win32.PurityScan:

Files:
[%SYSTEM%]\lib.dll
[%SYSTEM%]\wdm.dll
[%APPDATA%]\edtc.exe
[%APPDATA%]\lmur.exe
[%APPDATA%]\saei.exe
[%APPDATA%]\ttuh.exe
[%SYSTEM%]\bgurfny.dll
[%SYSTEM%]\clxyf.exe
[%SYSTEM%]\djnzgde.dll
[%SYSTEM%]\ekdcxir.dll
[%SYSTEM%]\eqlv.dll
[%SYSTEM%]\imjhv.dll
[%SYSTEM%]\lsi.dll
[%SYSTEM%]\ltjouq.dll
[%SYSTEM%]\nbgs.dll
[%SYSTEM%]\oozdaqbc.exe
[%SYSTEM%]\ownrggx.dll
[%SYSTEM%]\qdg.dll
[%SYSTEM%]\rass.exe
[%SYSTEM%]\rvlyklrt.exe
[%SYSTEM%]\spqh.exe
[%SYSTEM%]\svpyq.dll
[%SYSTEM%]\tmno.exe
[%SYSTEM%]\umnt.exe
[%SYSTEM%]\vbcj.dll
[%SYSTEM%]\viav.dll
[%SYSTEM%]\vylod.exe
[%SYSTEM%]\xlkpncbm.dll
[%WINDOWS%]\application data\ssme.exe
[%WINDOWS%]\system\exaz.dll
[%WINDOWS%]\system\mvfpecjl.exe
[%WINDOWS%]\system\vnkjipfc.dll
[%SYSTEM%]\lib.dll
[%SYSTEM%]\wdm.dll
[%APPDATA%]\edtc.exe
[%APPDATA%]\lmur.exe
[%APPDATA%]\saei.exe
[%APPDATA%]\ttuh.exe
[%SYSTEM%]\bgurfny.dll
[%SYSTEM%]\clxyf.exe
[%SYSTEM%]\djnzgde.dll
[%SYSTEM%]\ekdcxir.dll
[%SYSTEM%]\eqlv.dll
[%SYSTEM%]\imjhv.dll
[%SYSTEM%]\lsi.dll
[%SYSTEM%]\ltjouq.dll
[%SYSTEM%]\nbgs.dll
[%SYSTEM%]\oozdaqbc.exe
[%SYSTEM%]\ownrggx.dll
[%SYSTEM%]\qdg.dll
[%SYSTEM%]\rass.exe
[%SYSTEM%]\rvlyklrt.exe
[%SYSTEM%]\spqh.exe
[%SYSTEM%]\svpyq.dll
[%SYSTEM%]\tmno.exe
[%SYSTEM%]\umnt.exe
[%SYSTEM%]\vbcj.dll
[%SYSTEM%]\viav.dll
[%SYSTEM%]\vylod.exe
[%SYSTEM%]\xlkpncbm.dll
[%WINDOWS%]\application data\ssme.exe
[%WINDOWS%]\system\exaz.dll
[%WINDOWS%]\system\mvfpecjl.exe
[%WINDOWS%]\system\vnkjipfc.dll

Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run

Removing TrojanDownloader.Win32.PurityScan:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Bancos.GMY Trojan Removal instruction
For.Guest Trojan Information
Bancos.HCC Trojan Cleaner

No comments: