Monday, January 26, 2009

Xuhuan Trojan

Removing Xuhuan
Categories: Trojan
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Xuhuan Also known as:

[Kaspersky]Backdoor.Win32.Small.mw;
[McAfee]DDos-Xuhuan;
[Other]Win32/Xuhuan.5yk!Trojan,W32/Smalldoor.LQH

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\del.bat
[%SYSTEM%]\SAM.dat
[%SYSTEM%]\smrss.dll
[%SYSTEM%]\del.bat
[%SYSTEM%]\SAM.dat
[%SYSTEM%]\smrss.dll

How to detect Xuhuan:

Files:
[%SYSTEM%]\del.bat
[%SYSTEM%]\SAM.dat
[%SYSTEM%]\smrss.dll
[%SYSTEM%]\del.bat
[%SYSTEM%]\SAM.dat
[%SYSTEM%]\smrss.dll

Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\microqc

Removing Xuhuan:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Remove Bancos.HTB Trojan
SillyDl.CJY Trojan Symptoms

No comments: