Tuesday, October 14, 2008

TrojanDownloader.Win32.Rameh Trojan

Removing TrojanDownloader.Win32.Rameh
Categories: Trojan,Downloader
This loose category includes a variety of Trojans that damage victim machines or threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers create multi-functional Trojans rather than Trojan packs.
This family of Trojans downloads and installs new malware or adware on the computer. The downloader then either launches the new malware or registers it to enable autorun according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the Trojan or downloaded from a specified website.

TrojanDownloader.Win32.Rameh Also known as:

[Panda]Trj/Rameh.A

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\arb1tal.dll
[%SYSTEM%]\arb1tal.dll

How to detect TrojanDownloader.Win32.Rameh:

Files:
[%SYSTEM%]\arb1tal.dll
[%SYSTEM%]\arb1tal.dll

Removing TrojanDownloader.Win32.Rameh:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Reztuto Trojan Symptoms
Removing Downloader.ACV Adware
DomainHelper Adware Symptoms
Removing All.in.One Spyware
Push Trojan Removal

ShareAll Trojan

Removing ShareAll
Categories: Trojan,Spyware
This loose category includes a variety of Trojans that damage victim machines or threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers create multi-functional Trojans rather than Trojan packs.
Spyware is computer software that is installed surreptitiously on a personal computer to intercept or take partial control over the user's interaction with the computer, without the user's informed consent.

While the term spyware suggests software that secretly monitors the user's behavior, the functions of spyware extend well beyond simple monitoring.

Spyware programs can collect various types of personal information, such as Internet surfing habit, sites that have been visited, but can also interfere with user control of the computer in other ways, such as installing additional software, redirecting Web browser activity, accessing websites blindly that will cause more harmful viruses, or diverting advertising revenue to a third party.

Spyware can even change computer settings, resulting in slow connection speeds, different home pages, and loss of Internet or other programs. In an attempt to increase the understanding of spyware, a more formal classification of its included software types is captured under the term privacy-invasive software.

ShareAll Also known as:

[Kaspersky]Trojan.Win32.ShareAll.a,Trojan.Win32.ShareAll.c,Trojan.Win32.ShareAll.d;
[McAfee]ShareAll;
[F-Prot]destructive program;
[Panda]Trj/W32.ShareAll.A,Trj/Hacked.A,Trojan Horse;
[Computer Associates]Win32.ShareAll,Win32/ShareAll!Trojan,Win32/ShareAll.b!Trojan

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\optsvc.exe
[%SYSTEM%]\optsvc.exe

How to detect ShareAll:

Files:
[%SYSTEM%]\optsvc.exe
[%SYSTEM%]\optsvc.exe

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing ShareAll:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
DomainHelper Adware Information
Klemfor Trojan Cleaner
Removing Meplex Adware
Removing Badmin Trojan
EvilLife Trojan Removal instruction

Other Downloader

Removing Other
Categories: Downloader,Hacker Tool
This family of Trojans downloads and installs new malware or adware on the computer. The downloader then either launches the new malware or registers it to enable autorun according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the Trojan or downloaded from a specified website.
These utilities are designed to penetrate remote computers in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Other Also known as:

[Kaspersky]HackTool.Win32.IpcScan.160;
[Panda]Application/Serv-U-Based.A,HackTool/IPCScan.B

Visible Symptoms:
Files in system folders:
[%DESKTOP%]\free screensavers.lnk
[%DESKTOP%]\old port casino.lnk
[%WINDOWS%]\zahov.exe
[%DESKTOP%]\free screensavers.lnk
[%DESKTOP%]\old port casino.lnk
[%WINDOWS%]\zahov.exe

How to detect Other:

Files:
[%DESKTOP%]\free screensavers.lnk
[%DESKTOP%]\old port casino.lnk
[%WINDOWS%]\zahov.exe
[%DESKTOP%]\free screensavers.lnk
[%DESKTOP%]\old port casino.lnk
[%WINDOWS%]\zahov.exe

Registry Keys:
HKEY_CLASSES_ROOT\favorite.favoriteman
HKEY_CLASSES_ROOT\favorite.favoriteman.1
HKEY_CLASSES_ROOT\bho42602.clsdockwindow
HKEY_CLASSES_ROOT\bho426022
HKEY_CLASSES_ROOT\clsid\{4cf5275b-cdbc-11d3-a8af-0090279a5978}
HKEY_CLASSES_ROOT\interface\{072d14ef-99b6-49dd-9be5-76142727b7ac}
HKEY_CURRENT_USER\software\inetcash
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\inetbar v1.1 r2_is1

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Other:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
ZSearch BHO Removal
Small.B Trojan Symptoms
Remove DlToon Trojan
Zlob.Fam.Internet Explorer Secure Plug-in Trojan Removal instruction
Essgol Trojan Cleaner

TrojanDownloader.Win32.Small.nu Trojan

Removing TrojanDownloader.Win32.Small.nu
Categories: Trojan,Downloader
This loose category includes a variety of Trojans that damage victim machines or threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers create multi-functional Trojans rather than Trojan packs.
This family of Trojans downloads and installs new malware or adware on the computer. The downloader then either launches the new malware or registers it to enable autorun according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the Trojan or downloaded from a specified website.

TrojanDownloader.Win32.Small.nu Also known as:

[Panda]Trj/Downloader.HZ

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\vnmispoisn_downloader.exe
[%SYSTEM%]\vnmispoisn_downloader.exe

How to detect TrojanDownloader.Win32.Small.nu:

Files:
[%SYSTEM%]\vnmispoisn_downloader.exe
[%SYSTEM%]\vnmispoisn_downloader.exe

Removing TrojanDownloader.Win32.Small.nu:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
ClickTheButton Adware Removal
Klemfor Trojan Cleaner
GhostKeyLogger Spyware Removal
EvilLife Trojan Symptoms
DomainHelper Adware Removal

TrojanDownloader.Win32.Small.fi Trojan

Removing TrojanDownloader.Win32.Small.fi
Categories: Trojan,Downloader
This loose category includes a variety of Trojans that damage victim machines or threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers create multi-functional Trojans rather than Trojan packs.
This family of Trojans downloads and installs new malware or adware on the computer. The downloader then either launches the new malware or registers it to enable autorun according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the Trojan or downloaded from a specified website.

TrojanDownloader.Win32.Small.fi Also known as:

[Panda]Trojan Horse

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\manage.exe
[%SYSTEM%]\manage.exe

How to detect TrojanDownloader.Win32.Small.fi:

Files:
[%SYSTEM%]\manage.exe
[%SYSTEM%]\manage.exe

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing TrojanDownloader.Win32.Small.fi:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Removing Badmin Trojan
Meplex Adware Information
Chimo Backdoor Symptoms
Remove GhostKeyLogger Spyware
Essgol Trojan Symptoms

Essgol Trojan

Removing Essgol
Categories: Trojan
This loose category includes a variety of Trojans that damage victim machines or threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers create multi-functional Trojans rather than Trojan packs.

Essgol Also known as:

[Kaspersky]Trojan-Dropper.Win32.Small.ard,Trojan-Spy.Win32.Goldun.s;
[McAfee]PWS-Goldun.dldr;
[Other]Troj/Goldun-DJ,Win32/Essgol.AN,Trojan.Goldin,Win32/Essgol.AO,TrojanSpy:Win32/Goldun.AE,Troj/Goldun-L,W32/Goldun.S

Visible Symptoms:
Files in system folders:
[%PROFILE_TEMP%]\check.bmp
[%SYSTEM%]\msmail.dll
[%SYSTEM%]\msqzwqz.dll
[%PROFILE_TEMP%]\check.bmp
[%SYSTEM%]\msmail.dll
[%SYSTEM%]\msqzwqz.dll

How to detect Essgol:

Files:
[%PROFILE_TEMP%]\check.bmp
[%SYSTEM%]\msmail.dll
[%SYSTEM%]\msqzwqz.dll
[%PROFILE_TEMP%]\check.bmp
[%SYSTEM%]\msmail.dll
[%SYSTEM%]\msqzwqz.dll

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{bfd2af6e-4271-6572-6429-a63f26792311}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{bfd2af6e-4271-6572-6429-a63f26792311}

Removing Essgol:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Surila Trojan Removal
Zlob.Fam.Protection Tools Trojan Information
IGetNet.Keywords BHO Removal instruction
Remove Bancos.INK Trojan
Removing Win32.Qoologic Trojan

Joiner Trojan

Removing Joiner
Categories: Trojan,Hacker Tool
This loose category includes a variety of Trojans that damage victim machines or threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers create multi-functional Trojans rather than Trojan packs.
These utilities are designed to penetrate remote computers in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Joiner Also known as:

[Kaspersky]TrojanDropper.Win32.FC.a;
[F-Prot]security risk or a "backdoor" program;
[Panda]Trojan Horse.LC,Trj/Joiner.P;
[Computer Associates]Win32.Joiner.AA,Win32/MultiDropper.AF-0!Dropper,Win32.Joiner.Z,Win32/Joiner.Z!Joiner,Win32.Joiner.P,Win32/Joiner.P!Trojan,Win32.Joiner.R,Win32/Joiner.R!Dropper

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\Shex.exe
[%SYSTEM%]\Shex.exe

How to detect Joiner:

Files:
[%SYSTEM%]\Shex.exe
[%SYSTEM%]\Shex.exe

Removing Joiner:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Remove soft.stop Trojan
Small.B Trojan Symptoms
Push Trojan Cleaner
Remove Bopninja Trojan
Removing IBar.cn Toolbar