Monday, February 2, 2009

WinFetcher Adware

Removing WinFetcher
Categories: Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.


Visible Symptoms:
Files in system folders:
[%PROFILE_TEMP%]\WM_FUINS.bat
[%PROFILE_TEMP%]\update_1.exe
[%WINDOWS%]\temp\nr1beo9r.dll
[%WINDOWS%]\temp\nr1beo9r.exe
[%WINDOWS%]\temp\winwildapp.exe
[%WINDOWS%]\temp\_istmp4.dir\_istmp0.dir\29389bdd.dll
[%PROFILE_TEMP%]\WM_FUINS.bat
[%PROFILE_TEMP%]\update_1.exe
[%WINDOWS%]\temp\nr1beo9r.dll
[%WINDOWS%]\temp\nr1beo9r.exe
[%WINDOWS%]\temp\winwildapp.exe
[%WINDOWS%]\temp\_istmp4.dir\_istmp0.dir\29389bdd.dll

How to detect WinFetcher:

Files:
[%PROFILE_TEMP%]\WM_FUINS.bat
[%PROFILE_TEMP%]\update_1.exe
[%WINDOWS%]\temp\nr1beo9r.dll
[%WINDOWS%]\temp\nr1beo9r.exe
[%WINDOWS%]\temp\winwildapp.exe
[%WINDOWS%]\temp\_istmp4.dir\_istmp0.dir\29389bdd.dll
[%PROFILE_TEMP%]\WM_FUINS.bat
[%PROFILE_TEMP%]\update_1.exe
[%WINDOWS%]\temp\nr1beo9r.dll
[%WINDOWS%]\temp\nr1beo9r.exe
[%WINDOWS%]\temp\winwildapp.exe
[%WINDOWS%]\temp\_istmp4.dir\_istmp0.dir\29389bdd.dll

Folders:
[%PROFILE_TEMP%]\winwildapp.exe

Registry Keys:
HKEY_LOCAL_MACHINE\software\wildmedia

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing WinFetcher:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Vxidl.BFN Trojan Removal instruction
Removing Agobot.az Trojan

No comments: