Friday, January 23, 2009

Look2Me.ab Adware

Removing Look2Me.ab
Categories: Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\ALKRNL32.DLL
[%SYSTEM%]\ALKRNL32.DLL

How to detect Look2Me.ab:

Files:
[%SYSTEM%]\ALKRNL32.DLL
[%SYSTEM%]\ALKRNL32.DLL

Removing Look2Me.ab:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
INetBar Adware Symptoms
Pigeon.AUP Trojan Cleaner

Huplu Trojan

Removing Huplu
Categories: Trojan
This loose category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.

Multi-purpose Trojans are also included in this group, as some virus writers
create multi-functional Trojans rather than Trojan packs.

Huplu Also known as:

[Kaspersky]Backdoor.Win32.Hupigon.dfv;
[McAfee]BackDoor-AWQ.b;
[Other]Win32/Huplu.C

Visible Symptoms:
Files in system folders:
[%PROGRAM_FILES_COMMON%]\Microsoft Shared\MSInfo\realetin.exe
[%PROGRAM_FILES_COMMON%]\Microsoft Shared\MSInfo\realetin.exe

How to detect Huplu:

Files:
[%PROGRAM_FILES_COMMON%]\Microsoft Shared\MSInfo\realetin.exe
[%PROGRAM_FILES_COMMON%]\Microsoft Shared\MSInfo\realetin.exe

Registry Keys:
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_java_inetice
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\java inetice

Removing Huplu:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
WM.Nightmare Trojan Cleaner
Pigeon.EVC Trojan Cleaner

SillyDl.BYG Downloader

Removing SillyDl.BYG
Categories: Downloader
The downloader either launches the new malware or registers it to enable autorun
according to the local operating system requirements.

SillyDl.BYG Also known as:

[Kaspersky]Trojan-Downloader.Win32.Banload.yo;
[Other]Win32/SillyDl.BYG,Trojan.PWS.QQPass

Visible Symptoms:
Files in system folders:
[%WINDOWS%]\systemupd.exe
[%WINDOWS%]\systemupd.exe

How to detect SillyDl.BYG:

Files:
[%WINDOWS%]\systemupd.exe
[%WINDOWS%]\systemupd.exe

Removing SillyDl.BYG:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
AdServer.News.com Tracking Cookie Removal instruction
Engage.Everyone Tracking Cookie Information
hitvirus Ransomware Information
Removing Bancos.CVD Trojan
ht Adware Cleaner

PAL.PCSpy Spyware

Removing PAL.PCSpy
Categories: Spyware
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.

Visible Symptoms:
Files in system folders:
[%DESKTOP%]\pal - pc spy.lnk
[%PROGRAM_FILES%]\pcs\cpu.exe
[%PROGRAM_FILES%]\pcs\explorer.exe
[%PROGRAM_FILES%]\pcs\ieguard.dll
[%PROGRAM_FILES%]\pcs\klpf.exe
[%PROGRAM_FILES%]\pcs\pc spy - shareware license.txt
[%PROGRAM_FILES%]\pcs\readme!!!.txt
[%PROGRAM_FILES%]\pcs\thehook.dll
[%PROGRAM_FILES%]\pcs\thehookxp.dll
[%PROGRAM_FILES%]\pcs\uninstall.exe
[%PROGRAM_FILES%]\pcs\uninstall_95.bat
[%PROGRAM_FILES%]\pcs\uninstall_nt.bat
[%DESKTOP%]\pal - pc spy.lnk
[%PROGRAM_FILES%]\pcs\cpu.exe
[%PROGRAM_FILES%]\pcs\explorer.exe
[%PROGRAM_FILES%]\pcs\ieguard.dll
[%PROGRAM_FILES%]\pcs\klpf.exe
[%PROGRAM_FILES%]\pcs\pc spy - shareware license.txt
[%PROGRAM_FILES%]\pcs\readme!!!.txt
[%PROGRAM_FILES%]\pcs\thehook.dll
[%PROGRAM_FILES%]\pcs\thehookxp.dll
[%PROGRAM_FILES%]\pcs\uninstall.exe
[%PROGRAM_FILES%]\pcs\uninstall_95.bat
[%PROGRAM_FILES%]\pcs\uninstall_nt.bat

How to detect PAL.PCSpy:

Files:
[%DESKTOP%]\pal - pc spy.lnk
[%PROGRAM_FILES%]\pcs\cpu.exe
[%PROGRAM_FILES%]\pcs\explorer.exe
[%PROGRAM_FILES%]\pcs\ieguard.dll
[%PROGRAM_FILES%]\pcs\klpf.exe
[%PROGRAM_FILES%]\pcs\pc spy - shareware license.txt
[%PROGRAM_FILES%]\pcs\readme!!!.txt
[%PROGRAM_FILES%]\pcs\thehook.dll
[%PROGRAM_FILES%]\pcs\thehookxp.dll
[%PROGRAM_FILES%]\pcs\uninstall.exe
[%PROGRAM_FILES%]\pcs\uninstall_95.bat
[%PROGRAM_FILES%]\pcs\uninstall_nt.bat
[%DESKTOP%]\pal - pc spy.lnk
[%PROGRAM_FILES%]\pcs\cpu.exe
[%PROGRAM_FILES%]\pcs\explorer.exe
[%PROGRAM_FILES%]\pcs\ieguard.dll
[%PROGRAM_FILES%]\pcs\klpf.exe
[%PROGRAM_FILES%]\pcs\pc spy - shareware license.txt
[%PROGRAM_FILES%]\pcs\readme!!!.txt
[%PROGRAM_FILES%]\pcs\thehook.dll
[%PROGRAM_FILES%]\pcs\thehookxp.dll
[%PROGRAM_FILES%]\pcs\uninstall.exe
[%PROGRAM_FILES%]\pcs\uninstall_95.bat
[%PROGRAM_FILES%]\pcs\uninstall_nt.bat

Removing PAL.PCSpy:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Remove Lookup Adware
SysProtect Adware Symptoms

Busted Spyware

Removing Busted
Categories: Spyware
Spyware is computer software that is installed surreptitiously on a personal computer
to with the computer, without the user's informed consent.

Visible Symptoms:
Files in system folders:
[%DESKTOP%]\Busted!.lnk
[%DESKTOP%]\Busted!.lnk

How to detect Busted:

Files:
[%DESKTOP%]\Busted!.lnk
[%DESKTOP%]\Busted!.lnk

Folders:
[%PROGRAMS%]\PCSentinel's Busted!

Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\busted.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\pcsentinel's busted!
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\eventlog\application\sentinellistener

Removing Busted:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Remove Bancos.BZN Trojan
Win32.StartPage.it Trojan Information
Removing Declten Trojan
Bancos.GAU Trojan Symptoms

ReFog.KGBSpy Spyware

Removing ReFog.KGBSpy
Categories: Spyware
Spyware is computer software that is installed surreptitiously on a personal computer
to intercept or take partial control over the user's interaction
with the computer, without the user's informed consent.

While the term spyware suggests software that secretly monitors the user's behavior,
the functions of spyware extend well beyond simple monitoring.

Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Visible Symptoms:
Files in system folders:
[%PROGRAMS%]\netchatspy\netchatspy.lnk
[%PROGRAMS%]\netchatspy\netchatspyhelp.lnk
[%PROGRAMS%]\netchatspy\read me.lnk
[%PROGRAMS%]\netchatspy\netchatspy.lnk
[%PROGRAMS%]\netchatspy\netchatspyhelp.lnk
[%PROGRAMS%]\netchatspy\read me.lnk

How to detect ReFog.KGBSpy:

Files:
[%PROGRAMS%]\netchatspy\netchatspy.lnk
[%PROGRAMS%]\netchatspy\netchatspyhelp.lnk
[%PROGRAMS%]\netchatspy\read me.lnk
[%PROGRAMS%]\netchatspy\netchatspy.lnk
[%PROGRAMS%]\netchatspy\netchatspyhelp.lnk
[%PROGRAMS%]\netchatspy\read me.lnk

Folders:
[%PROGRAM_FILES%]\netchatspy

Registry Keys:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\netchatspy

Removing ReFog.KGBSpy:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
ControlTotal.k[2] Backdoor Removal
Remove Vxidl.ADM Trojan
Atmader Trojan Cleaner
Bancos.GLU Trojan Removal

Win32.Agent.ir Trojan

Removing Win32.Agent.ir
Categories: Trojan,Spyware,BHO
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.
BHO (Browser Helper Object) Trojan.
The BHO waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
The method of network transport used by the attacker makes this Trojan unique.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.
Instead, this Trojan encodes the data with a simple XOR algorithm before placing it into
the data section of an ICMP ping packet." explained the company.

Visible Symptoms:
Files in system folders:
[%WINDOWS%]\system\btlmct32.dll
[%WINDOWS%]\system\btlmct32.dll

How to detect Win32.Agent.ir:

Files:
[%WINDOWS%]\system\btlmct32.dll
[%WINDOWS%]\system\btlmct32.dll

Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{626482AF-17D0-5DFC-C12D-32A58E631863}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{626482AF-17D0-5DFC-C12D-32A58E631863}

Removing Win32.Agent.ir:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Remove Vxidl.ATZ Trojan